last executing test programs:

4m55.481079458s ago: executing program 2 (id=158):
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449})
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0x0, 0x0, 0x3})
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r7 = socket(0x1e, 0x4, 0x0)
connect$tipc(r7, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)
sendmmsg$unix(r7, &(0x7f0000004400), 0x400000000000203, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0030000000200000800001018230000", @ANYRESHEX=r8, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe, 0x42b81b7, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000080)={@rand_addr=0x64010102, @local, @private=0xa010101}, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

4m54.571371448s ago: executing program 2 (id=161):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

4m54.569454866s ago: executing program 2 (id=163):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000200000095000000000000000000000000000000000056e784466031bc42d4586856fea8a5422128758d88b5f43ee3b332a35c3b4f0f8ff47260ea62853d6c32da7ab47bd1882e8a755a611da46443841e0d79fe0330b57fbc5ac7d4ca19fff93c4d5651a0958d43b5782b0bac60"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4004, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
openat$drirender128(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$rxrpc(0x21, 0x2, 0xa)
poll(&(0x7f00000000c0)=[{r3, 0x1000}], 0x1, 0xf45)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000300), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[]}, 0x50)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)})
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000180)=0x6)
write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/106, 0x6a)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

4m51.461674641s ago: executing program 2 (id=175):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80045b10, 0x0)

4m48.451294797s ago: executing program 2 (id=198):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'vlan1\x00'})
syz_open_procfs(0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r3, 0xffff)
fcntl$addseals(r3, 0x409, 0x7)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x40, 0x3a}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_FLAGS_EXT={0x8}]}, 0x30}}, 0x0)
r8 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000})
r9 = fcntl$dupfd(r8, 0x0, r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r11 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x40049366, 0x0)

4m48.211763084s ago: executing program 2 (id=199):
setrlimit(0xf, &(0x7f0000000040)={0x0, 0x5})
timer_create(0x3, 0x0, &(0x7f0000000200))
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x0, 0x7}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x20004808)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080)=0x4, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5)
mount(&(0x7f0000000040)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hpfs\x00', 0x808001, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

4m38.37191217s ago: executing program 1 (id=266):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept4$tipc(r0, 0x0, &(0x7f0000000040), 0x80000)
munlock(&(0x7f00006ea000/0x2000)=nil, 0x2000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1)

4m38.209389671s ago: executing program 1 (id=267):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154cffff8000006113300000000000bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c0700000000000000b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566fffffffffc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aaca63dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d8553cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2a059689dcfb030dd4ac0fe54db67510d3e9a5d36b900000000000000000000000000000000c9e484cf5f8c0955c11b285de46871d62f9d986e73658d228225b21f694dd2dc80e96ce476496973ee14e3d4fd03507c6f7c0c8ae809ddc9a36b4f30d15d08cc8e72d750f5e529cf4cec823b923d382f3f2c42dcb4b316eba77e7f767ae17d4d3427c9379eadbd040fbbe0c6dd8100f1558354bdd35626052c2e66cc34f4e266cc04218764824533cac2736e236b50ae4d800565910200af9cb11002791a91d834ffcc65a6226ecafe0372e3ace29c2441eca24371857aa9eb9b3910a2eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

4m38.206207513s ago: executing program 1 (id=268):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="dca247ff2efd3f707853319c1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), 0x0}, 0x20)
open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000240)='minix\x00', 0x0, 0x0)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r3=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x9)
sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb186dd84d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14)
recvmmsg(r1, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/209, 0xd1}], 0x1}, 0x5}], 0x1, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480), 0x20008, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x40}}], [{@measure}, {@smackfsdef={'smackfsdef', 0x3d, '[-./\\.:\xc6[\xf2^'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@subj_type={'subj_type', 0x3d, '('}}, {@hash}, {@euid_lt={'euid<', 0xee00}}, {@fowner_eq}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}})
openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x490940, 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)

4m37.341345243s ago: executing program 1 (id=272):
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2)
openat2$dir(0xffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x20200, 0x42}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="e8ffffffffffffff"], 0x28}}, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x0, 0x77, 0xc0020}, 0x20)
lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000})
lseek(r5, 0xfffffffffffff7f8, 0x2)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r6, @ANYRESOCT, @ANYRES32, @ANYBLOB="2c04000000f40000003d"])
pipe2(&(0x7f0000000440)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x180000)
write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x29, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x4}}, 0x50)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000190a7e780102000000000000007a3000000000"], 0x20}}, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)="fce0952629e053a8b691e621374536b2c0128445adcddeb42fc3a0061e577f38ed95c3fe3fe694fc3de01843e21a2606dae2cbaa4def95e6208b3c923ca26cc27ff6815ac8fc7c5eecabb819411dc2246f47e1c720e11311e52046240c0171c3941359372f8ee10e71dde19d58bbf286f12f526dcdb2d71b12688eadaf5268112c127149bda662ab2e6ee404a7aba1c95685ccdad4083b54ac34ca53ef1b248fff2cc156de5cc39b318878cbd93ccf")
r8 = getgid()
lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, r8)
socket$netlink(0x10, 0x3, 0x0)

4m37.281216892s ago: executing program 1 (id=273):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400b091}, 0x3000c81c)
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000040)='./file1\x00', 0x200, 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], 0x24)
lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18)
syz_emit_ethernet(0xc4, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @multicast1, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x5, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x2, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}, "000657a2b4d0"}}}}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind$unix(r4, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
dup3(r1, r0, 0x0)
finit_module(r1, 0x0, 0x100000000000000)

4m37.271794242s ago: executing program 1 (id=274):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r1, 0x329, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xff}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x58, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "f0f058a78d5cc668"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x4}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xf}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xe}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x3}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "70be2fb2ad829233"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "9cf321920358f496"}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x10000}]}, 0x88}}, 0x40010)
socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8)
bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='oom_score_adj_update\x00', r3}, 0x11)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8)
sendto$inet(r2, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
clock_gettime(0x0, &(0x7f0000000480)={<r5=>0x0, <r6=>0x0})
mq_timedsend(r4, &(0x7f0000000400)="4178cb9bf9c1254685e0ac68528f6b00c3312bda9e145f01cc9f91e25a71bde9648e34005a8d7093438b6748a12e0e94abff30b7b34cf3240bcecc4d07f7d814bad0ca4e98", 0x45, 0x4, &(0x7f00000004c0)={r5, r6+60000000})
sendto$inet(r2, &(0x7f0000000540)='Q\x00', 0x2, 0xc840, 0x0, 0x0)
close(r2)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r1, @ANYRES8=r2, @ANYBLOB="4c2eb10d489153fb"], 0x5c}}, 0x4000010)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000500)={0x1, 0x0, 0x102, 0x3, {0x6, 0xb89, 0x7fff, 0x6}})

4m32.544372531s ago: executing program 32 (id=199):
setrlimit(0xf, &(0x7f0000000040)={0x0, 0x5})
timer_create(0x3, 0x0, &(0x7f0000000200))
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x0, 0x7}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x20004808)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080)=0x4, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5)
mount(&(0x7f0000000040)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hpfs\x00', 0x808001, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

4m21.941116309s ago: executing program 33 (id=274):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r1, 0x329, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xff}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x58, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "f0f058a78d5cc668"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x4}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xf}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xe}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x3}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "70be2fb2ad829233"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "9cf321920358f496"}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x10000}]}, 0x88}}, 0x40010)
socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8)
bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='oom_score_adj_update\x00', r3}, 0x11)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8)
sendto$inet(r2, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
clock_gettime(0x0, &(0x7f0000000480)={<r5=>0x0, <r6=>0x0})
mq_timedsend(r4, &(0x7f0000000400)="4178cb9bf9c1254685e0ac68528f6b00c3312bda9e145f01cc9f91e25a71bde9648e34005a8d7093438b6748a12e0e94abff30b7b34cf3240bcecc4d07f7d814bad0ca4e98", 0x45, 0x4, &(0x7f00000004c0)={r5, r6+60000000})
sendto$inet(r2, &(0x7f0000000540)='Q\x00', 0x2, 0xc840, 0x0, 0x0)
close(r2)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r1, @ANYRES8=r2, @ANYBLOB="4c2eb10d489153fb"], 0x5c}}, 0x4000010)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000500)={0x1, 0x0, 0x102, 0x3, {0x6, 0xb89, 0x7fff, 0x6}})

1m47.639296983s ago: executing program 3 (id=1336):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x28, 0x2, 0x1)
r1 = openat$ttyprintk(0xffffff9c, &(0x7f00000000c0), 0x220082, 0x0)
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1d)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130001000000000000000000000000000000000000000000000000002001000000000000000000000000000000000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ff9c74a199c801e4ade59000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000001000000"], 0xb8}}, 0x0)

1m47.514786883s ago: executing program 3 (id=1337):
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\xf4\xb5\xb2\xed\xc6;\xc7,4\\xev/bus/us\xae\xd1\x93\xc1\bm\xe9\xf3#\x00:\xbem\x02H;\x90\xa5\x1f\x8d\xc6\xae\xcc\x95a7\xc3\x168%\xc3\xc6\n\x8d\xbc\x81\x1a\x80\x16jY\x9f~\x12\x94]\x1e\x8c\x1d\xe7\xfe\"y\xa6O\xf5\xa2\xb6\xe7\xe3]%)l\x90\xe9\x026\xe4\xabX\xa0+\x86\nB&\xab\xef\xea\xa3\tUc\xc3\xad\x84\xa3vK{\xb2\xa3\xfc\x1f', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0xaf)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002802c00018014000300fe8000000000000000000000060000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000009180006801400040020010000000000000000000000000001"], 0xac}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xa4}}, 0x0)
preadv(r0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000500)=""/97, 0x61}], 0x2, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

1m46.59073071s ago: executing program 3 (id=1342):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0)
socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000680)="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", 0x2000, &(0x7f0000007e80)={&(0x7f00000002c0)={0x50, 0x0, 0x3, {0x7, 0x29, 0x757f, 0x808000, 0xfd88, 0x7, 0x9, 0x63, 0x0, 0x0, 0x2, 0xfffffff7}}, &(0x7f0000000340)={0x18, 0x0, 0x10001, {0x5}}, &(0x7f00000004c0)={0x18, 0x0, 0x8, {0xfdc}}, &(0x7f0000000500)={0x18, 0x0, 0x0, {0x2}}, &(0x7f0000000540)={0x18, 0x0, 0x7, {0x5}}, &(0x7f0000000580)={0x28, 0x0, 0xff, {{0x100000000, 0x9}}}, &(0x7f00000005c0)={0x60, 0x0, 0x80000000, {{0x3a38, 0x7, 0xf541, 0xa4f, 0xffff, 0x4a6, 0x8, 0xbb}}}, &(0x7f0000002680)={0x18, 0x0, 0x200, {0x4}}, &(0x7f00000026c0)={0x1a, 0x0, 0x200, {'(%$//^($L\x00'}}, &(0x7f0000002700)={0x20, 0x0, 0x9}, &(0x7f0000002940)={0x78, 0x0, 0x9, {0x100000000, 0xb5d, 0x0, {0x0, 0xfffffffffffffffd, 0x894, 0x9, 0x80000000, 0x0, 0xfffffffd, 0x4, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x9}}}, &(0x7f0000002b00)={0x90, 0x0, 0x5, {0x5, 0x2, 0x318f, 0x8, 0x80000001, 0x8, {0x6, 0xd, 0x0, 0x3, 0x1, 0x9, 0xce, 0x9a9, 0x1, 0xa000, 0x2, 0x0, 0x0, 0x3, 0x3eb}}}, &(0x7f0000002bc0)={0x70, 0x0, 0x1, [{0xffffffffffffffff, 0x10, 0x2, 0xfffffff8, ')-'}, {0x5, 0x6, 0xc, 0xc0, '/dev/video#\x00'}, {0x2, 0x6, 0x0, 0x80000000}]}, &(0x7f0000005400)={0x4f0, 0x0, 0x8, [{{0x1, 0x3, 0x100, 0x80, 0x7, 0x8, {0x2, 0x0, 0x8, 0xe, 0xff, 0x6, 0x8, 0x0, 0x5, 0xc000, 0x10000, 0x0, 0x0, 0x1000}}, {0x2, 0x80000000, 0x1, 0x81, '\x00'}}, {{0x5, 0x2, 0x7f24, 0x0, 0x1ff, 0x9, {0x2, 0x7, 0x2, 0x4, 0x7, 0xffffffffffffffff, 0x4, 0x7, 0x9, 0x1000, 0x40, 0xee00, 0x0, 0x4, 0x17}}, {0x1, 0x101, 0xc, 0x2, '/dev/video#\x00'}}, {{0x2, 0x3, 0x4, 0x78, 0x80000000, 0x6, {0x6, 0x81, 0x10001, 0xfca3, 0x80, 0x5, 0x0, 0x2, 0x4, 0x6000, 0x9b, 0x0, 0x0, 0x70, 0x9}}, {0x3, 0x4, 0x30, 0x40, '/proc/sys/net/ipv4/vs/expire_quiescent_template\x00'}}, {{0x1, 0x3, 0x4, 0x2, 0x0, 0x4f0e, {0x2, 0x0, 0x3, 0xbe8, 0x5, 0x0, 0xc9, 0x7, 0x9, 0xc000, 0x7, 0x0, 0x0, 0x5, 0xffff}}, {0x1, 0x5, 0x30, 0x59b, '/proc/sys/net/ipv4/vs/expire_quiescent_template\x00'}}, {{0x3, 0x3, 0x8, 0x3, 0x1, 0x7ff, {0x5, 0x101, 0xd4, 0x5, 0x1, 0x140000000000, 0x6, 0x4257, 0x0, 0x8000, 0x80000001, 0xee01, 0x0, 0x7, 0xb}}, {0x3, 0xffffffff, 0x30, 0x4f4, '/proc/sys/net/ipv4/vs/expire_quiescent_template\x00'}}, {{0x5, 0x1, 0x4, 0xf, 0x4, 0x9, {0x6, 0x2, 0x8, 0x5, 0x7, 0x2, 0x7fff, 0xfffffffc, 0x1, 0x4000, 0x4, 0x0, 0x0, 0x7, 0x1204}}, {0x6, 0xf9, 0x1, 0x9c, ':'}}, {{0x0, 0x1, 0xd4a, 0x3, 0xfffffff9, 0x5, {0x1, 0x3, 0xfff, 0x5, 0x5, 0x8, 0x8, 0x3, 0x7ff, 0x1000, 0x7, 0x0, 0x0, 0x21, 0x2}}, {0x6, 0x4, 0x6, 0x6, '&:&&%)'}}]}, &(0x7f0000007a40)={0xa0, 0xffffffffffffffda, 0x5, {{0x6, 0x0, 0xb, 0x2, 0x1, 0x1d9, {0x2, 0xc000, 0x0, 0x9, 0x48ac, 0x100000001, 0xc3, 0x5, 0x6, 0x8000, 0x7, 0x0, 0x0, 0x858, 0x3}}, {0x0, 0x2}}}, &(0x7f0000007b00)={0x20, 0x0, 0xfffffffffffffff7, {0x123, 0x0, 0x1, 0xb23}}, 0x0})
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001000a00000800040001000000", 0x24)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r8=>r3}, './file0\x00'})
read$msr(r8, &(0x7f0000002740)=""/251, 0xfb)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1m45.612986527s ago: executing program 3 (id=1353):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02b159f9", @ANYRES16=r2, @ANYBLOB="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"], 0x424}, 0x1, 0x0, 0x0, 0x8800}, 0x20040080)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000200)={@val={0x2000, 0x88fb}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2000, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x600, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x3, "c488735ac07a6d1f9bc799cd6cabd45215a887ee44043a0643add273053bab27", "4774f150b62699b8e48d7fef91d1cb88", {"1aeda3eb78e3543f71dfc27620e73f96", "a90074a4485931fe5917f90806b380f3"}}}}}}}}, 0x8a)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000033c3f00e000000000000009500000000000000ab96e772ac2fadaf7d999ded56f5fdefc1b6fca30457134e83e12871e8"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @broadcast}})
r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@noswap}]})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2100)
writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)='0', 0x1}], 0x2000000000000123)

1m45.194199734s ago: executing program 3 (id=1357):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x10237, &(0x7f0000000400)={0x0, 0xf475, 0x400, 0x1, 0x26, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000240), 0x202040, 0x0)
flock(0xffffffffffffffff, 0x1)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r5)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r6 = syz_open_procfs(r4, &(0x7f0000000240)='syscall\x00')
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0xd, 0x0, 0x0, 0x0, 0x2})
r7 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0)
connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x500000, @remote, 0xfffffffd}, 0x1c)
pread64(r6, &(0x7f0000011940)=""/4096, 0x1000, 0x6)
io_pgetevents(0x0, 0x2, 0x0, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000780)={0x0})
mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x2515c82, 0x0)
chdir(0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r9 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x4}, 0x10)
sendmsg$tipc(r8, &(0x7f0000000480)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, 0x0}, 0x4010)
openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)

1m44.642249397s ago: executing program 3 (id=1360):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x402, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004841}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
keyctl$join(0x1, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r7=>0x0})
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r7, 0x25, 0x0, @void}, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r8, r9}, 0x5)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047440, 0x20000000)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@deltfilter={0x5c, 0x2d, 0x8, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9, 0xfff3}, {0xb, 0x10}, {0x5, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x30, 0x2, [@TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x20000000000005f}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x1, 0x3, 0x4, 0x3ff}]}}]}}]}, 0x5c}}, 0x20004894)
migrate_pages(r1, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x100000001)

1m44.545356978s ago: executing program 34 (id=1360):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x402, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004841}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
keyctl$join(0x1, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r7=>0x0})
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r7, 0x25, 0x0, @void}, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r8, r9}, 0x5)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047440, 0x20000000)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@deltfilter={0x5c, 0x2d, 0x8, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9, 0xfff3}, {0xb, 0x10}, {0x5, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x30, 0x2, [@TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x20000000000005f}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x1, 0x3, 0x4, 0x3ff}]}}]}}]}, 0x5c}}, 0x20004894)
migrate_pages(r1, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x100000001)

1m30.370421274s ago: executing program 4 (id=1473):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x402, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004841}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
keyctl$join(0x1, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r7=>0x0})
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r7, 0x25, 0x0, @void}, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r8, r9}, 0x5)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r11, 0x40047440, 0x20000000)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@deltfilter={0x5c, 0x2d, 0x8, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9, 0xfff3}, {0xb, 0x10}, {0x5, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x30, 0x2, [@TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x20000000000005f}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x1, 0x3, 0x4, 0x3ff}]}}]}}]}, 0x5c}}, 0x20004894)
migrate_pages(r1, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x100000001)

1m29.493481937s ago: executing program 4 (id=1476):
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
rseq(0x0, 0x0, 0x1, 0x0) (fail_nth: 1)

1m29.151013055s ago: executing program 4 (id=1478):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x28, 0x2})
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000040))
timer_settime(r1, 0x1, &(0x7f0000000500), 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
rseq(0x0, 0x0, 0x1, 0x0)

1m29.026500677s ago: executing program 4 (id=1480):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x4b0}}, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$inet(0x2, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x10001)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r4, 0x3)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
personality(0x400000)
r6 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000007940), 0x55, 0x0, 0x0)
sendmmsg(r6, &(0x7f0000001500), 0x588, 0x3000000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc050005000200000005000100060000001100030068"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000306010100003a66c5890000000000000500010007000000"], 0x1c}}, 0x0)

1m28.299169219s ago: executing program 4 (id=1487):
r0 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000020000080000002000000000000000baf0ba5aa37397da474b20d7b8737ed93bc5f66b22b3ba4253e7ec97ec17cfd8fde213bea6f10e71d83cf85f6ba2d470e6de0c48a3ad52db51799da3020532bacfa2c8ba440e7b01fe579d7ee4e8996c0d2f5d341303b8b483b9fac756560f778d04e7c8b60284d3db98e32b4634de3f34f0e9219ba2c8ea5fc8ae3f65d3"], 0x14}, 0x1, 0x0, 0x0, 0x24044045}, 0x4008004)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095", @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
write$char_usb(r3, &(0x7f00000008c0)='-', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20)
mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r4, 0x6f000)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000700)={0x0, 0x0, 0x5, &(0x7f0000000380)={0x10, "46311c78665243c9f191af534bfff39a349210fb453378ce73a150d3d53a967c96"}})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000002c0)={0xf, 0x0, 'client0\x00', 0x4, "f788cd968c4fcfad", "15e40af34823d80ed838e2bd400ce4280a597ac3ce958cb77ab20a59f18b4efc", 0x4})
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="051800000000000073114100000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl2\x00', <r6=>0x0, 0x4, 0x4, 0x8, 0x4, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x31}, 0x8, 0x7800, 0x4, 0x65e658de}})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000501}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)={0xa4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x1)

1m28.127683146s ago: executing program 4 (id=1490):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffffd, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0})
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="7750aad2489fec8822e17b2dd7d56eb21e7fdc102b17255c92cc00dfadb8aaf2bff7672ced2ff928529a4623ddb993ee99eaf543a7a1bf90b172e32f6f1352cbb7cae729bc9b5f5a926d47df2805c8204ba5f127068e9213003fdd7a6667e9fe553c12ea724d630121c4eb7863e754c7fc69bf5eaaf5d7cc98089a084f", 0x7d}], 0x1)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare(0x44040000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=<r3=>0x0, @ANYBLOB='\x00'/28], 0x48)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYRESDEC=r3])
r4 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x40045731, &(0x7f0000000180))
r5 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
ftruncate(r5, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0)
lseek(r5, 0x1003ff, 0x4)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r6, 0x0, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000f0c4f29ebc1fe99503c002b7e5303d001000010000000000000000000000000a34003a04c693d21e9b860000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000080009400000000114000000110001"], 0x5c}}, 0x0)

1m13.794367079s ago: executing program 35 (id=1490):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffffd, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0})
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="7750aad2489fec8822e17b2dd7d56eb21e7fdc102b17255c92cc00dfadb8aaf2bff7672ced2ff928529a4623ddb993ee99eaf543a7a1bf90b172e32f6f1352cbb7cae729bc9b5f5a926d47df2805c8204ba5f127068e9213003fdd7a6667e9fe553c12ea724d630121c4eb7863e754c7fc69bf5eaaf5d7cc98089a084f", 0x7d}], 0x1)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare(0x44040000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=<r3=>0x0, @ANYBLOB='\x00'/28], 0x48)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYRESDEC=r3])
r4 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x40045731, &(0x7f0000000180))
r5 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
ftruncate(r5, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0)
lseek(r5, 0x1003ff, 0x4)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r6, 0x0, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000f0c4f29ebc1fe99503c002b7e5303d001000010000000000000000000000000a34003a04c693d21e9b860000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000080009400000000114000000110001"], 0x5c}}, 0x0)

43.473191155s ago: executing program 7 (id=1849):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0)
creat(0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000005ec0))
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x85, &(0x7f0000005f40)={0x0, 0x0, 0xffffffff, 0x8}, &(0x7f0000005e80)=0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f0016040000", 0x24)
readv(r3, &(0x7f0000000680)=[{&(0x7f0000000100)=""/215, 0xd7}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x48004)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000))
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES16], 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)

36.040912573s ago: executing program 7 (id=1849):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0)
creat(0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000005ec0))
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x85, &(0x7f0000005f40)={0x0, 0x0, 0xffffffff, 0x8}, &(0x7f0000005e80)=0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f0016040000", 0x24)
readv(r3, &(0x7f0000000680)=[{&(0x7f0000000100)=""/215, 0xd7}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x48004)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000))
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES16], 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)

26.136020942s ago: executing program 7 (id=1849):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0)
creat(0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000005ec0))
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x85, &(0x7f0000005f40)={0x0, 0x0, 0xffffffff, 0x8}, &(0x7f0000005e80)=0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f0016040000", 0x24)
readv(r3, &(0x7f0000000680)=[{&(0x7f0000000100)=""/215, 0xd7}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x48004)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000))
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES16], 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)

16.981478222s ago: executing program 7 (id=1849):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0)
creat(0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000005ec0))
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x85, &(0x7f0000005f40)={0x0, 0x0, 0xffffffff, 0x8}, &(0x7f0000005e80)=0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f0016040000", 0x24)
readv(r3, &(0x7f0000000680)=[{&(0x7f0000000100)=""/215, 0xd7}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x48004)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000))
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES16], 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)

8.06727786s ago: executing program 7 (id=1849):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0)
creat(0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000005ec0))
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x85, &(0x7f0000005f40)={0x0, 0x0, 0xffffffff, 0x8}, &(0x7f0000005e80)=0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f0016040000", 0x24)
readv(r3, &(0x7f0000000680)=[{&(0x7f0000000100)=""/215, 0xd7}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x48004)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000))
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES16], 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)

3.209253507s ago: executing program 5 (id=2050):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1230023, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x6d]}}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r2, @ANYBLOB="0101000000000000000001000000c00008806800008024000200334ea8f29e1930090f3191caf613498c95654a654656972dc238b58de30e8c8624000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c14000400020000007f000001000000000000000008000300020000005400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b08000300fef0d3d9240002001e5961ebca53cbc760a128d3a6351cb5688f6df4debcc9d05d306216e1cb01db08000100", @ANYRES32=r3], 0xdc}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@ifindex, 0x32, 0x4bb11a8cf0efaf80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

2.342554378s ago: executing program 5 (id=2051):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000006c0)={@void, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"a0"}}}}}}}, 0x3b)

2.265323758s ago: executing program 0 (id=2052):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r0, 0x1)
r1 = syz_open_dev$audion(&(0x7f0000000040), 0x8, 0x111000)
fcntl$getown(r1, 0x9)
poll(&(0x7f00000031c0)=[{r0}], 0x1, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg(r2, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=ANY=[], 0xc}}], 0x2, 0x40002)

2.264991807s ago: executing program 5 (id=2053):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3fffff})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x7)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000001c0))
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
r10 = timerfd_create(0x1, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000d060300000000070000090500050002000000050001000700000014000300686173683a69702c706f72742c697000"], 0x38}, 0x1, 0x0, 0x0, 0x40094}, 0x0)
timerfd_settime(r10, 0x3, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

2.264708264s ago: executing program 0 (id=2054):
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x4, '\x00', 0x4})
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r0], &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x1, 0xb, 0x8}, {0x3, 0x5, 0xe, 0xa}, {0x5, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0xfffffffb, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x3})
bind$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @private=0xa010100}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xfffffffc})
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.447144612s ago: executing program 5 (id=2056):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0180000000000000140012800b000100ffffffffffffffff040042800a000100bbbbbbbbbbbb0000", @ANYBLOB="aa1cae18ce91a35ed9c10d6a59003bda3112be998c292282e3c2ef50b346fac8ad8b1c2148c8a346549bfe3e946a002a32e43f83580c1e2227abb7aae8e7d0caac11ea728f04a252b059676d9035482f8dc016066b3aaedc8289a15aaeed0516aa24040129868884739e97af2840529cc2a21c7312fc5f803107ef11675919a31e9f4a3ca21ccefd37138e1544"], 0x40}}, 0x4040000)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$lock(r5, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x2})
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000080000008affffff66d74e76695e920c0cb0f03246904e20e8aca1c8fe4eae4a83f56a3598060ec9b9f1787a971d04a5e7fd1ef2fc40f76b12822e3ff26637b6570ffc1ce0fe8d01e40044d74ea2e2d1f217cf4d2dee6f2ec0f8304fcffa095db4fef0825de2a31aebaf03b21a8aaa1b588792338f34d563ad15f7823b1e6806df8bd922c7ebdc0000800000a544b99171832bcc41398666a99c25a299e83a0ccf3f75094266a0693fdc7902690e8f92eb8c9c467a56ad6611a2db18ff1abdb0298b5bedcd9646f80a000000000000000000"])
fcntl$lock(r5, 0x26, &(0x7f0000000080))
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20008011)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000fcffffff00000000", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030010000300000004000000003d0100"/28], 0x50)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0x40186f40, 0x20000502)
r8 = getpid()
process_vm_readv(r8, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r10}, 0x10)
sigaltstack(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='xen_cpu_write_idt_entry\x00', r9}, 0x18)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f00000018c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])

1.323268031s ago: executing program 0 (id=2057):
memfd_create(&(0x7f00000002c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea\x19\x82\x96v\xde\xcd\x04\xc4\xb3\x17\x8dA\x95D\xdb1\xec\x85\xebur\xfe\x89Y\xcb\x80~\xc4\xea\x80N\xad^\xfb\x05\n\xd3\xa5n1\xee$9v\xae\x0f\xfe\x99)(+ts\x90\xd4?\x93\x94\xff\xbb\xfb\xfd)0\'`\xe8\x00\xd7*E\xb5b\xab\xb5\xb77\x87\xe3\xf6\x7f\xce\xcf\x17^&\xa7-\xed\xecS\xa9I\x16n$\x8b\xf5_\xec\xfd\xdb\x01\xe9\xb0\xe4\xf3\xd8\x83\xf5>Hm\xc5\xd9v\xf2\x9f\x8b\xe4\xc4>\xfc\rN\xdde\x02\x1d]io\xa8}Q\xf1\xa8\xc7)\\\xc1.\xc7\xd3v,', 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000001c0000000a68000000060a01040000000000000000000000003c000480"], 0x90}, 0x1, 0x0, 0x0, 0x3000c800}, 0x4004041)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a20014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0417"], 0x528}}, 0xc000)

1.32187725s ago: executing program 0 (id=2058):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async)
r7 = socket(0x40000000015, 0x5, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50}, 0x50)
r10 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r10, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) (async)
sendmmsg(r10, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) (async)
recvmmsg(r10, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) (async)
syz_usb_connect(0x0, 0xe, 0x0, 0x0) (async)
ioctl$KVM_CAP_DISABLE_QUIRKS(r9, 0xc040aed4, &(0x7f00000000c0))
connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0xf) (async)
recvfrom$rose(r7, 0x0, 0x0, 0x10000, 0x0, 0x0) (async)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async)
sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) (async)
openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r12 = accept4(r11, 0x0, 0x0, 0x800)
recvmmsg$unix(r12, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

1.247070087s ago: executing program 0 (id=2059):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x341003, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
fsopen(0x0, 0x0)
r2 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
r3 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
creat(0x0, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
recvmmsg$unix(r6, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000000)={0xa0000001})
epoll_wait(r7, &(0x7f0000000340)=[{}], 0x1, 0x1000)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket(0x15, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000))
r9 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7)
fcntl$addseals(r9, 0x409, 0x8)
ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000})
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x5, 0x4, 0x5})

1.150554088s ago: executing program 6 (id=2060):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

999.301859ms ago: executing program 6 (id=2061):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

951.0384ms ago: executing program 6 (id=2062):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18cfb10000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="a7870089210653e48c1f1f"], 0x14}}, 0x0) (async, rerun: 32)
r3 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) (async)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r5=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async, rerun: 64)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (rerun: 64)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@mcast2, <r6=>0x0}, &(0x7f0000000080)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000280)={0x78c, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x194, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa, 0x4, "dbad1fe366c6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x28, 0x5, "6a81d5cbcfd628d7bb3093eb30e0cf2688a3f20bd007552187f666a67db1851f4a17af36"}, @ETHTOOL_A_BITSET_MASK={0xa5, 0x5, "e9a73a9652d76d5e8eaa1fdac72bb4735c1348c73e44f30756ba4ff158906f5e31eae05f2a635bfb6eedb5652de975e8438590908cb88dd20e2e7d7a1231d077816f061fddde77c5e0fbfaadfcbbb09b3675342b86c2b7a3cef7208deeea7fcfcbd29a48b3fd525fffdcb7f0b18820f3ca883e945a18000b58c793a1c1769dae78fc1a9efb8f82fa0e83eb07ce125811041fd7ac6eb9250400c05c4b392a521d4f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_VALUE={0x7b, 0x4, "ed989fcd372ee96ac296b84aa46f74f526668db903ebaa17397c7e88bf3e2e640f5b1140ec6d1444d9a606e498d9497e57b9a26011b326e958ac072036f852651d9854dd4c8daac72abf35d7b2f627dc1d1b5c937c48022c729049e57416b9577668093419ee15530598a78f9a80e2e0120aff2d59fdea"}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xb7\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xdc}\x00'}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_WOL_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_MODES={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6a, 0x5, "7a4577032137fd662304b0ccd86e334316a6ca3a70e842a961713785ca6de32a7cedb337b21655645d347808177e5dc66e22bb3af94f356c4886933f5e97871b2f534cf28123680d0491b78d4ad737ac1633449768f639e1cb1c249b203e710da7379be46b0a"}]}, @ETHTOOL_A_WOL_MODES={0xe8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '^*#{%/$\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x134}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '!.\bi^%\xe7\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_VALUE={0x16, 0x4, "f493c3f29d107184324a974c857be953b3bd"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x86a9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_WOL_MODES={0x1e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x430e}, @ETHTOOL_A_BITSET_VALUE={0x62, 0x4, "f2cd9c92ab8b42eb59cc9f18cc56a74941623d72bc4f73edb21e275d696ac0fe8b3fa31707755c2df5c8d98a9a3d41ff51d4ecfd221a4c774e4be0c8eb9e98298982e33286806f8feb72effbece011741a634e18237c3e0861157c27c494"}, @ETHTOOL_A_BITSET_MASK={0x8d, 0x5, "6075a65e6e6f54edcd67884a237a2b7d68e6bec1452f49038dbc0446302576355aecdda8230c3ad9c14658300563052e9fae921a5f2cce74d11758d0c513df3a55d635e9b90f7478d7ee0c3e53b9bfd4ab383fac6dd03a2d526e0923215bf0baadbd1ef8f0de58b110a73e7756d04b7466cb48bd0af49b0120fdcffe9bd14db1e735dc98aaae097a84"}, @ETHTOOL_A_BITSET_VALUE={0xe, 0x4, "a2dec20e36240e404df6"}, @ETHTOOL_A_BITSET_VALUE={0xd2, 0x4, "a45f04fcf90e240ae7ee8b85f1552caf67aed026632acad9464f683b135480e18c4be823a5e613e596792c958380e87a0b9063c4fa18689daec1600d4aafa73f68acae51bc3723bc07a880147a54678b44723437f4edbaf982c20f2a1c62cc720cf22246a6a537409373555e914a64e973bf0d0a21338a401edfe96cc96b780c4fbdc11151c718a566eb966046503f2da71cc48b3c483de39f2ed92e04ea71e6c8db5bb17d25089de6b71888e21fcd7ad9ce9ee819521024918873baf288575bd7b7faa6cbbf53457ad20f1b1f74"}]}, @ETHTOOL_A_WOL_MODES={0xcc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ',%-\x9d-*.\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/[\'[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0x2b, 0x3, "866e2c4a157192dcac19ca5e475a14786b74534b96b0697a6c9c9a9193e0f4435d55850f0c58e0"}, @ETHTOOL_A_WOL_MODES={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x70, 0x5, "a55d1bcdbd295b049915777686675b9e8e296e51e4dedc870e735f782c70b01e21ad9a89874b581bd43c64bf23f36cf944083ba2552c7d1e6ce9a0155a5f8301d6c2a04fffdaf4d691d455f56224f0cb8f7b223433f758a808f6184a5c9ad4232e147daeec602c89177f0bf6"}, @ETHTOOL_A_BITSET_VALUE={0x98, 0x4, "b8d4d24bf90d53ad16536886bbd63a696c9965ddbf22dcbbc6718259af891119fe15515478e4e85f804232a9bbfcdfaa5cb015da457c2b8bc00949d336a3b6d822c17700d117e8599630e1cac5dddb66da295579039286cec88203a06f4269971da58b7393e6589964cfac0fea444bc1e0978bb02622b6c6f6907cf1314ec9f15d8b6a156a627edd5daf66a9a194cb9abffb92f2"}]}, @ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x78c}, 0x1, 0x0, 0x0, 0x4}, 0x90)

945.805642ms ago: executing program 5 (id=2063):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
keyctl$search(0xa, 0x0, &(0x7f0000000380)='encrypted\x00', &(0x7f0000000580)={'syz', 0x1}, 0x0)
sendto$inet6(r0, &(0x7f0000000280)="f9", 0x1, 0x0, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x231, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x2, 0x300)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES64=r4], 0x20}}, 0x0)

945.731525ms ago: executing program 6 (id=2064):
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x20, &(0x7f0000000100)={0xb6, 0x1, 0x9, 0xfffffffffffffffa})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x20100000, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0xb468, 0x2})
mq_timedreceive(r0, &(0x7f0000000340)=""/221, 0xdd, 0x0, 0x0)

864.043988ms ago: executing program 6 (id=2065):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000f30000008500000085000000b7000000000000009500000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4)
r4 = getpid()
syz_pidfd_open(r4, 0x0)
r5 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000200)={<r6=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x24, r6})
getegid()
r8 = socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl(r7, 0x8916, &(0x7f0000000000))
ioctl(r8, 0x8936, &(0x7f0000000000))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, r3, 0x0, 0x3, &(0x7f0000000000)='/.\x00'}, 0x30)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r9, 0x0, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

720.557401ms ago: executing program 7 (id=1849):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0)
creat(0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000005ec0))
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x85, &(0x7f0000005f40)={0x0, 0x0, 0xffffffff, 0x8}, &(0x7f0000005e80)=0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f0016040000", 0x24)
readv(r3, &(0x7f0000000680)=[{&(0x7f0000000100)=""/215, 0xd7}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x48004)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000))
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES16], 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)

5.306264ms ago: executing program 0 (id=2066):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
socket$xdp(0x2c, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
keyctl$set_reqkey_keyring(0xe, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r3 = getpid()
r4 = epoll_create1(0x0)
r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, r5, 0x0, 0x0, 0x0}, 0x30)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
sendmmsg$sock(r7, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)

881.326µs ago: executing program 5 (id=2067):
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0})
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300020c0000000000000000000000020008000c000000ca0000000000000003000600000000000200000000000000001230c5cb9dcd36000000000000000200619f2f83975757a9000000000000030007000000000002000000e00000010000000000000000"], 0x60}, 0x1, 0x7}, 0x40000)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0}) (async)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300020c0000000000000000000000020008000c000000ca0000000000000003000600000000000200000000000000001230c5cb9dcd36000000000000000200619f2f83975757a9000000000000030007000000000002000000e00000010000000000000000"], 0x60}, 0x1, 0x7}, 0x40000) (async)

0s ago: executing program 6 (id=2068):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000200080000000600000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000380)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$uhid(0xffffff9c, &(0x7f0000000140), 0x802, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x169)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xa)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c83014001000010000020006"], 0x19)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x9, 0x0, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x9)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r6, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
sync()
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
dup(0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19)
syz_open_procfs(0x0, 0x0)

kernel console output (not intermixed with test programs):

s 0x0 phys_seg 1 prio class 2
[  256.805618][T11777] Buffer I/O error on dev nbd0, logical block 0, async page read
[  256.809983][T11777] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  256.812679][T11777] Buffer I/O error on dev nbd0, logical block 0, async page read
[  256.815037][T11777] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  256.818171][T11777] Buffer I/O error on dev nbd0, logical block 0, async page read
[  256.822192][T11777] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  256.826012][T11777] Buffer I/O error on dev nbd0, logical block 0, async page read
[  256.829897][T11777] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  256.836789][T11777] Buffer I/O error on dev nbd0, logical block 0, async page read
[  256.846522][T11777] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  256.854999][T11777] Buffer I/O error on dev nbd0, logical block 0, async page read
[  256.858798][T11777] ldm_validate_partition_table(): Disk read failed.
[  256.864783][T11777] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  256.868817][T11777] Buffer I/O error on dev nbd0, logical block 0, async page read
[  256.874305][T11777] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  256.878220][T11777] Buffer I/O error on dev nbd0, logical block 0, async page read
[  256.886351][T11777] Dev nbd0: unable to read RDB block 0
[  256.891113][T11777]  nbd0: unable to read partition table
[  256.928410][T11777] ldm_validate_partition_table(): Disk read failed.
[  256.932995][T11777] Dev nbd0: unable to read RDB block 0
[  256.937735][T11777]  nbd0: unable to read partition table
[  256.948925][T11777] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  256.955142][T11777] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  257.877751][T11790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.008392][T11794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.831136][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'.
[  259.189517][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1338'.
[  259.516666][T11825] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.406219][T11853] loop6: detected capacity change from 0 to 524287999
[  260.419426][T11853] ldm_validate_partition_table(): Disk read failed.
[  260.423017][T11853] Dev loop6: unable to read RDB block 0
[  260.425945][T11853]  loop6: unable to read partition table
[  260.427827][T11853] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  260.494183][T11853] loop6: detected capacity change from 524287999 to 524287952
[  260.624755][T11858] fuse: Bad value for 'fd'
[  260.955886][T11873] netlink: 'syz.4.1352': attribute type 10 has an invalid length.
[  260.974964][T11873] team0: Device veth0_macvtap failed to register rx_handler
[  261.690498][T11749] bond0: (slave syz_tun): Releasing backup interface
[  262.269823][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  262.386304][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  262.406161][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  262.411779][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  262.415082][ T5940] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  262.417513][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  262.532552][T11901] chnl_net:caif_netlink_parms(): no params data found
[  262.594494][T11901] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.597650][T11901] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.600952][T11901] bridge_slave_0: entered allmulticast mode
[  262.604163][T11901] bridge_slave_0: entered promiscuous mode
[  262.611669][T11901] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.613966][T11901] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.616109][T11901] bridge_slave_1: entered allmulticast mode
[  262.619719][T11901] bridge_slave_1: entered promiscuous mode
[  262.654516][T11901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  262.658624][T11901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.686918][T11917] blk_print_req_error: 39 callbacks suppressed
[  262.686929][T11917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.693198][T11917] buffer_io_error: 39 callbacks suppressed
[  262.693207][T11917] Buffer I/O error on dev nbd0, logical block 0, async page read
[  262.698214][T11917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.701834][T11917] Buffer I/O error on dev nbd0, logical block 0, async page read
[  262.706284][T11917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.709930][T11917] Buffer I/O error on dev nbd0, logical block 0, async page read
[  262.713109][T11917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.716908][T11917] Buffer I/O error on dev nbd0, logical block 0, async page read
[  262.718817][T11901] team0: Port device team_slave_0 added
[  262.720167][T11917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.726517][T11917] Buffer I/O error on dev nbd0, logical block 0, async page read
[  262.729680][T11917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.730820][T11901] team0: Port device team_slave_1 added
[  262.733491][T11917] Buffer I/O error on dev nbd0, logical block 0, async page read
[  262.741052][T11917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.748148][T11917] Buffer I/O error on dev nbd0, logical block 0, async page read
[  262.751737][T11917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.755559][T11917] Buffer I/O error on dev nbd0, logical block 0, async page read
[  262.758800][T11917] ldm_validate_partition_table(): Disk read failed.
[  262.763115][T11917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.766989][T11917] Buffer I/O error on dev nbd0, logical block 0, async page read
[  262.770272][T11917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  262.773975][T11917] Buffer I/O error on dev nbd0, logical block 0, async page read
[  262.777261][T11917] Dev nbd0: unable to read RDB block 0
[  262.780598][T11917]  nbd0: unable to read partition table
[  262.785198][T11922] erofs (device nbd4): cannot find valid erofs superblock
[  262.803960][T11901] batman_adv: batadv0: Adding interface: batadv_slave_0
[  262.806817][T11901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.817951][T11901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  262.822603][T11901] batman_adv: batadv0: Adding interface: batadv_slave_1
[  262.824760][T11901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.830474][T11924] Bluetooth: MGMT ver 1.23
[  262.833352][T11901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  262.886321][T11901] hsr_slave_0: entered promiscuous mode
[  262.891912][T11901] hsr_slave_1: entered promiscuous mode
[  262.896512][T11901] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  262.898540][T11933] random: crng reseeded on system resumption
[  262.898916][T11901] Cannot create hsr debugfs directory
[  263.030726][T11901] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  263.035476][T11901] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  263.049282][T11901] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  263.060725][T11901] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  263.120699][T11901] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.140395][T11901] 8021q: adding VLAN 0 to HW filter on device team0
[  263.150161][T10982] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.152408][T10982] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.163608][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.166205][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.198293][T11901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  263.206843][T11901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  263.330814][T11901] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.538101][T11901] veth0_vlan: entered promiscuous mode
[  263.568821][T11901] veth1_vlan: entered promiscuous mode
[  263.609120][T11901] veth0_macvtap: entered promiscuous mode
[  263.614747][T11901] veth1_macvtap: entered promiscuous mode
[  263.660689][T11901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.663898][T11901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.670517][T11901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.682566][T11901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.689087][T11901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.694579][T11901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.698266][T11901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.702438][T11901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.706376][T11901] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.709481][T11901] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.712549][T11901] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.715772][T11901] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.755016][T10981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.758667][T10981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.772281][T10981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.774905][T10981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.039428][T11977] netlink: 'syz.0.1380': attribute type 4 has an invalid length.
[  264.154555][T11984] futex_wake_op: syz.4.1382 tries to shift op by -1; fix this program
[  264.209066][ T7315] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  264.291828][ T5293] Bluetooth: hci2: unexpected event for opcode 0x6503
[  264.376238][T12000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.384902][ T7315] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  264.387421][ T7315] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  264.391850][ T7315] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66
[  264.395547][ T7315] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  264.398998][ T7315] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  264.403753][ T7315] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  264.406399][ T7315] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  264.408992][ T5293] Bluetooth: hci0: command tx timeout
[  264.411558][ T7315] usb 11-1: Product: syz
[  264.412835][ T7315] usb 11-1: Manufacturer: syz
[  264.416952][ T7315] cdc_wdm 11-1:1.0: skipping garbage
[  264.420061][ T7315] cdc_wdm 11-1:1.0: skipping garbage
[  264.422438][ T7315] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device
[  264.424264][ T7315] cdc_wdm 11-1:1.0: Unknown control protocol
[  264.545784][T12006] program syz.5.1389 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  264.548741][T12006] ata1.00: invalid service action 31
[  264.618616][ T5994] usb 11-1: USB disconnect, device number 2
[  264.693946][T12015] bridge_slave_0: left allmulticast mode
[  264.695939][T12015] bridge_slave_0: left promiscuous mode
[  264.697761][T12015] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.710538][T12015] bridge_slave_1: left allmulticast mode
[  264.712342][T12015] bridge_slave_1: left promiscuous mode
[  264.716976][T12015] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.721916][T12015] bond0: (slave bond_slave_0): Releasing backup interface
[  264.739793][T12017] netlink: 'syz.6.1391': attribute type 10 has an invalid length.
[  264.749470][T12015] bond0: (slave bond_slave_1): Releasing backup interface
[  264.778879][T12015] team0: Port device team_slave_0 removed
[  264.789000][T12020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.799855][T12015] team0: Port device team_slave_1 removed
[  264.809725][T12015] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.812216][T12015] batman_adv: batadv0: Removing interface: batadv_slave_0
[  264.822565][T12015] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.824870][T12015] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.875067][T12017] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.887232][T12017] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  265.030129][T12026] Process accounting resumed
[  265.031776][T12026] kernel write not supported for file /asound/timers (pid: 12026 comm: syz.0.1393)
[  265.227798][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1395'.
[  265.315535][T12044] tipc: Started in network mode
[  265.317091][T12044] tipc: Node identity aaaaaaaaaa3b, cluster identity 4711
[  265.319397][T12044] tipc: Enabled bearer <eth:macsec0>, priority 0
[  265.624752][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1396'.
[  265.766946][T12052] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10)
[  265.769304][T12052] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  265.772140][T12052] vhci_hcd vhci_hcd.0: Device attached
[  265.887408][T12067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1400'.
[  266.047498][ T5994] usb 50-1: SetAddress Request (2) to port 0
[  266.050981][ T5994] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd
[  266.253359][T12060] vhci_hcd: connection reset by peer
[  266.269580][T10982] vhci_hcd: stop threads
[  266.271209][T10982] vhci_hcd: release socket
[  266.272769][T10982] vhci_hcd: disconnect device
[  266.287080][ T5943] tipc: Node number set to 9546410
[  266.380597][ T5293] Bluetooth: hci0: command tx timeout
[  266.647668][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'.
[  266.663145][T12090] sctp: [Deprecated]: syz.4.1409 (pid 12090) Use of struct sctp_assoc_value in delayed_ack socket option.
[  266.663145][T12090] Use struct sctp_sack_info instead
[  266.791601][T12104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1413'.
[  266.802880][T12104] lo speed is unknown, defaulting to 1000
[  266.804843][T12104] lo speed is unknown, defaulting to 1000
[  266.820889][T12104] lo speed is unknown, defaulting to 1000
[  266.845460][T12104] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  266.860243][T12104] lo speed is unknown, defaulting to 1000
[  266.866148][T12104] lo speed is unknown, defaulting to 1000
[  266.871017][T12104] lo speed is unknown, defaulting to 1000
[  266.873629][T12105] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1410'.
[  266.876141][T12104] lo speed is unknown, defaulting to 1000
[  266.885098][T12104] lo speed is unknown, defaulting to 1000
[  266.889119][T12104] lo speed is unknown, defaulting to 1000
[  267.149534][   T39] kauditd_printk_skb: 669 callbacks suppressed
[  267.149544][   T39] audit: type=1326 audit(2000000148.494:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.0.1416" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  267.160929][   T39] audit: type=1326 audit(2000000148.504:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.0.1416" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  267.169833][   T39] audit: type=1326 audit(2000000148.504:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.0.1416" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  267.178163][   T39] audit: type=1326 audit(2000000148.504:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.0.1416" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  267.185281][   T39] audit: type=1326 audit(2000000148.504:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.0.1416" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  267.208261][   T39] audit: type=1326 audit(2000000148.515:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.0.1416" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  267.225455][   T39] audit: type=1326 audit(2000000148.546:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.0.1416" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  267.257245][   T39] audit: type=1326 audit(2000000148.546:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.0.1416" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  267.264622][   T39] audit: type=1326 audit(2000000148.546:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.0.1416" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  267.272642][   T39] audit: type=1326 audit(2000000148.546:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.0.1416" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  268.145099][ T5293] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  268.148657][ T5293] Bluetooth: hci2: Injecting HCI hardware error event
[  268.154637][ T5940] Bluetooth: hci2: hardware error 0x00
[  268.362185][ T5293] Bluetooth: hci0: command tx timeout
[  268.472342][T12148] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1425'.
[  268.475196][T12148] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1425'.
[  269.299643][T12172] 9pnet_fd: Insufficient options for proto=fd
[  269.838730][T12194] blk_print_req_error: 6 callbacks suppressed
[  269.838741][T12194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  269.843542][T12194] buffer_io_error: 6 callbacks suppressed
[  269.843550][T12194] Buffer I/O error on dev nbd0, logical block 0, async page read
[  269.848348][T12194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  269.851204][T12194] Buffer I/O error on dev nbd0, logical block 0, async page read
[  269.853852][T12194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  269.856681][T12194] Buffer I/O error on dev nbd0, logical block 0, async page read
[  269.862235][T12194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  269.865114][T12194] Buffer I/O error on dev nbd0, logical block 0, async page read
[  269.870217][T12194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  269.873183][T12194] Buffer I/O error on dev nbd0, logical block 0, async page read
[  269.878689][T12194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  269.882598][T12194] Buffer I/O error on dev nbd0, logical block 0, async page read
[  269.890292][T12194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  269.894124][T12194] Buffer I/O error on dev nbd0, logical block 0, async page read
[  269.897650][T12194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  269.901299][T12194] Buffer I/O error on dev nbd0, logical block 0, async page read
[  269.904472][T12194] ldm_validate_partition_table(): Disk read failed.
[  269.910052][T12194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  269.914136][T12194] Buffer I/O error on dev nbd0, logical block 0, async page read
[  269.924429][T12194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  269.928653][T12194] Buffer I/O error on dev nbd0, logical block 0, async page read
[  269.935017][T12194] Dev nbd0: unable to read RDB block 0
[  269.938103][T12194]  nbd0: unable to read partition table
[  270.082954][T12198] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  270.095606][T12198] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  270.098576][T12198] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  270.101081][T12198] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  270.114514][ T5940] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  270.115515][T12198] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  270.133760][T12198] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  270.137317][T12198] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  270.147494][T12198] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  270.153333][T12198] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  270.160435][T12198] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  270.168570][T12198] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  270.343156][ T5940] Bluetooth: hci0: command tx timeout
[  270.476522][  T833] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  270.622474][  T833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.625949][  T833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.629172][  T833] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  270.632065][  T833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.649672][  T833] usb 9-1: config 0 descriptor??
[  270.877042][ T5994] usb 50-1: device descriptor read/8, error -110
[  271.127377][  T833] usbhid 9-1:0.0: can't add hid device: -71
[  271.129295][  T833] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  271.136419][  T833] usb 9-1: USB disconnect, device number 20
[  271.278241][ T5994] usb usb50-port1: attempt power cycle
[  271.307061][T12198] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  271.836927][T12259] lo speed is unknown, defaulting to 1000
[  271.839449][ T5994] usb usb50-port1: unable to enumerate USB device
[  272.120008][T12269] bridge_slave_0: left allmulticast mode
[  272.122548][T12269] bridge_slave_0: left promiscuous mode
[  272.125148][T12269] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.156482][T12269] bridge_slave_1: left allmulticast mode
[  272.158111][T12269] bridge_slave_1: left promiscuous mode
[  272.159845][T12269] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.171455][T12269] bond0: (slave bond_slave_0): Releasing backup interface
[  272.180388][T12269] bond0: (slave bond_slave_1): Releasing backup interface
[  272.193196][T12269] team0: Port device team_slave_0 removed
[  272.200155][T12269] team0: Port device team_slave_1 removed
[  272.202906][T12269] batman_adv: batadv0: Removing interface: batadv_slave_0
[  272.205842][T12269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  272.208295][T12269] batman_adv: batadv0: Removing interface: batadv_slave_1
[  272.217022][T12269] bond1: (slave batadv1): Releasing active interface
[  272.250805][T12270] geneve2: entered promiscuous mode
[  272.252473][T12270] geneve2: entered allmulticast mode
[  272.255116][T12270] batman_adv: batadv0: Adding interface: geneve2
[  272.257526][T12270] batman_adv: batadv0: Interface activated: geneve2
[  274.868918][T12333] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  275.090255][   T39] audit: type=1326 audit(2000000412.844:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.4.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000
[  275.096934][   T39] audit: type=1326 audit(2000000412.844:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.4.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000
[  275.103422][   T39] audit: type=1326 audit(2000000412.844:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.4.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7fb6579 code=0x7ffc0000
[  275.109968][   T39] audit: type=1326 audit(2000000412.844:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.4.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000
[  275.117008][   T39] audit: type=1326 audit(2000000412.844:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.4.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000
[  275.124725][   T39] audit: type=1326 audit(2000000412.844:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.4.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fb6579 code=0x7ffc0000
[  275.154166][   T39] audit: type=1326 audit(2000000412.844:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.4.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000
[  275.160770][   T39] audit: type=1326 audit(2000000412.844:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.4.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000
[  275.168534][   T39] audit: type=1326 audit(2000000412.844:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.4.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb6579 code=0x7ffc0000
[  275.175259][   T39] audit: type=1326 audit(2000000412.844:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12334 comm="syz.4.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000
[  275.262621][T12339] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1465'.
[  277.167045][T12378] FAULT_INJECTION: forcing a failure.
[  277.167045][T12378] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  277.171026][T12378] CPU: 2 UID: 0 PID: 12378 Comm: syz.4.1476 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0
[  277.174271][T12378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  277.177150][T12378] Call Trace:
[  277.178152][T12378]  <TASK>
[  277.179059][T12378]  dump_stack_lvl+0x16c/0x1f0
[  277.180479][T12378]  should_fail_ex+0x497/0x5b0
[  277.181908][T12378]  _copy_to_user+0x32/0xd0
[  277.183258][T12378]  simple_read_from_buffer+0xd0/0x160
[  277.184870][T12378]  proc_fail_nth_read+0x198/0x270
[  277.186380][T12378]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  277.188030][T12378]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  277.189712][T12378]  vfs_read+0x1df/0xbe0
[  277.190980][T12378]  ? __fget_files+0x1fc/0x3a0
[  277.192401][T12378]  ? __pfx___mutex_lock+0x10/0x10
[  277.193966][T12378]  ? __pfx_vfs_read+0x10/0x10
[  277.195385][T12378]  ? __fget_files+0x206/0x3a0
[  277.196816][T12378]  ksys_read+0x12b/0x250
[  277.198090][T12378]  ? __pfx_ksys_read+0x10/0x10
[  277.199544][T12378]  __do_fast_syscall_32+0x73/0x120
[  277.201089][T12378]  do_fast_syscall_32+0x32/0x80
[  277.202557][T12378]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  277.204449][T12378] RIP: 0023:0xf7fb6579
[  277.205708][T12378] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  277.211433][T12378] RSP: 002b:00000000f50e5590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  277.213970][T12378] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50e5620
[  277.216317][T12378] RDX: 000000000000000f RSI: 00000000f7443ff4 RDI: 0000000000000000
[  277.218678][T12378] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  277.221063][T12378] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  277.223431][T12378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  277.225696][T12378]  </TASK>
[  278.038595][T12410] netlink: 'syz.0.1482': attribute type 18 has an invalid length.
[  278.168825][T12417] bio_check_eod: 2 callbacks suppressed
[  278.168841][T12417] syz.4.1487: attempt to access beyond end of device
[  278.168841][T12417] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  278.176169][T12417] efs: cannot read volume header
[  278.217239][T12419] affs: No valid root block on device nbd6
[  278.227769][T12419] vti0: entered promiscuous mode
[  278.319740][T12422] netfs: Duplicate cookie detected
[  278.322055][T12422] netfs: O-cookie c=00000008 [fl=5088 na=1 nA=0 s=-]
[  278.324796][T12422] netfs: O-cookie V=00000007 [9p,syz,]
[  278.327195][T12422] netfs: O-key=[8] 'cb15360200000000'
[  278.329358][T12422] netfs: N-cookie c=00000009 [fl=8 na=0 nA=0 s=-]
[  278.332034][T12422] netfs: N-cookie V=00000007 [9p,syz,]
[  278.334439][T12422] netfs: N-key=[8] 'cb15360200000000'
[  280.342592][T12442] random: crng reseeded on system resumption
[  280.484890][T12452] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  281.053001][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1500'.
[  281.055717][T12462] netlink: 'syz.5.1500': attribute type 1 has an invalid length.
[  281.132675][T12470] sp0: Synchronizing with TNC
[  281.206794][   T39] kauditd_printk_skb: 46 callbacks suppressed
[  281.206805][   T39] audit: type=1326 audit(2000000419.247:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.5.1505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[  281.215480][   T39] audit: type=1326 audit(2000000419.247:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.5.1505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[  281.222780][   T39] audit: type=1326 audit(2000000419.247:5871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.5.1505" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e579 code=0x7ffc0000
[  281.229386][   T39] audit: type=1326 audit(2000000419.247:5872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.5.1505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[  281.241126][   T39] audit: type=1326 audit(2000000419.247:5873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.5.1505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[  281.247609][   T39] audit: type=1326 audit(2000000419.247:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.5.1505" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e579 code=0x7ffc0000
[  281.254171][   T39] audit: type=1326 audit(2000000419.247:5875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.5.1505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[  281.261164][   T39] audit: type=1326 audit(2000000419.247:5876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.5.1505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[  281.267962][   T39] audit: type=1326 audit(2000000419.247:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.5.1505" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf708e579 code=0x7ffc0000
[  281.274574][   T39] audit: type=1326 audit(2000000419.247:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.5.1505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[  281.320531][T12488] misc userio: The device must be registered before sending interrupts
[  281.909583][T12500] overlayfs: failed to resolve './file1': -2
[  282.057965][T12503] dlm: non-version read from control device 213
[  282.112848][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1512'.
[  282.133307][T12509] bond9: entered promiscuous mode
[  282.167296][T12509] gretap1: entered promiscuous mode
[  282.174911][T12509] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  282.188548][T12505] bond9 (unregistering): (slave gretap1): Releasing backup interface
[  282.194304][T12505] gretap1: left promiscuous mode
[  282.207595][T12505] bond9 (unregistering): Released all slaves
[  282.414410][T12522] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  282.763865][T12531] lo speed is unknown, defaulting to 1000
[  282.771112][T12529] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff'
[  282.913848][T12529] block device autoloading is deprecated and will be removed.
[  282.917993][T12529] syz.5.1516: attempt to access beyond end of device
[  282.917993][T12529] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  283.648186][T12548] netlink: 'syz.5.1523': attribute type 1 has an invalid length.
[  283.660876][ T5940] Bluetooth: hci1: unexpected event for opcode 0x2036
[  283.669079][T12548] 8021q: adding VLAN 0 to HW filter on device bond9
[  283.702801][T12548] 8021q: adding VLAN 0 to HW filter on device batadv9
[  283.707093][T12548] bond9: (slave batadv9): making interface the new active one
[  283.711525][T12548] bond9: (slave batadv9): Enslaving as an active interface with an up link
[  283.734608][T12548] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1523'.
[  283.840880][T12556] input: syz1 as /devices/virtual/input/input22
[  283.878435][T12556] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1525'.
[  285.732799][T12611] overlayfs: missing 'lowerdir'
[  285.735480][T12610] tipc: Can't bind to reserved service type 2
[  286.751286][   T39] kauditd_printk_skb: 17 callbacks suppressed
[  286.751297][   T39] audit: type=1326 audit(2000000425.084:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.5.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[  286.762989][   T39] audit: type=1326 audit(2000000425.095:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.5.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[  286.908799][   T39] audit: type=1326 audit(2000000425.105:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.5.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708e579 code=0x7ffc0000
[  286.922731][   T39] audit: type=1326 audit(2000000425.105:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.5.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000
[  286.942635][   T39] audit: type=1326 audit(2000000425.105:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.5.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf708e579 code=0x7ffc0000
[  286.963332][   T39] audit: type=1326 audit(2000000425.105:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.5.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf708e579 code=0x7ffc0000
[  286.985620][   T39] audit: type=1326 audit(2000000425.105:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.5.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf708e579 code=0x7ffc0000
[  287.002637][   T39] audit: type=1326 audit(2000000425.105:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.5.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf708e579 code=0x7ffc0000
[  287.023597][   T39] audit: type=1326 audit(2000000425.105:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.5.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf708e579 code=0x7ffc0000
[  287.044593][   T39] audit: type=1326 audit(2000000425.116:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.5.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf708e579 code=0x7ffc0000
[  289.123460][T12668] lo speed is unknown, defaulting to 1000
[  289.467098][T12675] 9pnet: Could not find request transport: virdio
[  290.021285][T12705] netlink: 'syz.0.1559': attribute type 1 has an invalid length.
[  290.032744][T12706] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[  290.035395][T12706] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  290.042879][T12706] vhci_hcd vhci_hcd.0: Device attached
[  290.213907][   T30] vhci_hcd: vhci_device speed not set
[  290.270801][   T30] usb 49-1: new full-speed USB device number 2 using vhci_hcd
[  290.499719][T12705] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1559'.
[  290.621168][T12708] vhci_hcd: connection reset by peer
[  290.629451][ T1146] vhci_hcd: stop threads
[  290.630774][ T1146] vhci_hcd: release socket
[  290.632236][ T1146] vhci_hcd: disconnect device
[  291.043115][T12717] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1565'.
[  292.216913][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1569'.
[  292.224109][T12733] netlink: 'syz.5.1569': attribute type 4 has an invalid length.
[  292.812332][ T5940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  292.816738][ T5940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  292.819620][ T5940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  292.823082][ T5940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  292.826248][ T5940] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  292.829950][ T5940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  292.869858][T12746] lo speed is unknown, defaulting to 1000
[  292.905082][T12745] netfs: Couldn't get user pages (rc=-14)
[  293.006047][T12754] lo speed is unknown, defaulting to 1000
[  293.169675][T12746] chnl_net:caif_netlink_parms(): no params data found
[  293.333509][T12778] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  293.335863][T12778] overlayfs: failed to set xattr on upper
[  293.338622][T12778] overlayfs: ...falling back to redirect_dir=nofollow.
[  293.340834][T12778] overlayfs: ...falling back to index=off.
[  293.342624][T12778] overlayfs: ...falling back to uuid=null.
[  293.349620][T12745] mkiss: ax0: crc mode is auto.
[  293.353212][T12778] fuse: Bad value for 'fd'
[  293.385380][T12746] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.388941][T12746] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.391267][T12746] bridge_slave_0: entered allmulticast mode
[  293.393627][T12746] bridge_slave_0: entered promiscuous mode
[  293.398562][T12746] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.400917][T12746] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.403232][T12746] bridge_slave_1: entered allmulticast mode
[  293.407449][T12746] bridge_slave_1: entered promiscuous mode
[  293.479819][T12746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.503265][T12746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.531273][T12784] 9pnet_virtio: no channels available for device syz
[  293.537949][T12784] overlayfs: conflicting lowerdir path
[  293.557896][T12746] team0: Port device team_slave_0 added
[  293.561969][T12746] team0: Port device team_slave_1 added
[  293.625620][T12746] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.628046][T12746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.640133][T12746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.647878][T12746] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.651216][T12746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.659318][T12746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.703334][T12746] hsr_slave_0: entered promiscuous mode
[  293.705530][T12746] hsr_slave_1: entered promiscuous mode
[  293.707593][T12746] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  293.710633][T12746] Cannot create hsr debugfs directory
[  293.850524][T12746] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  293.877970][T12746] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  293.882842][T12746] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  293.886489][T12746] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  293.899350][T12746] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.901597][T12746] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.903857][T12746] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.906019][T12746] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.954181][T12746] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.970625][T10982] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.977626][T10982] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.001134][T12746] 8021q: adding VLAN 0 to HW filter on device team0
[  294.006648][T12796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  294.009241][T12796] IPv6: NLM_F_CREATE should be set when creating new route
[  294.011416][T12796] IPv6: NLM_F_CREATE should be set when creating new route
[  294.016212][T10982] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.018418][T10982] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.025539][T10983] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.027704][T10983] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.115697][T12812] netlink: 'syz.0.1586': attribute type 10 has an invalid length.
[  294.122905][T12812] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  294.128499][T12746] 8021q: adding VLAN 0 to HW filter on device batadv0
[  294.131162][T12818] fuse: Bad value for 'user_id'
[  294.132696][T12818] fuse: Bad value for 'user_id'
[  294.139649][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1587'.
[  294.174743][T12812] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1586'.
[  294.259134][T12746] veth0_vlan: entered promiscuous mode
[  294.265476][T12746] veth1_vlan: entered promiscuous mode
[  294.276525][T12835] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0
[  294.280452][T12835] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0
[  294.286839][T12835] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0
[  294.289538][T12835] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0
[  294.298167][T12746] veth0_macvtap: entered promiscuous mode
[  294.308312][T12746] veth1_macvtap: entered promiscuous mode
[  294.316811][T12746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.321191][T12746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.324706][T12746] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.329643][T12746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.332786][T12746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.336182][T12746] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.340914][T12746] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.343602][T12746] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.346185][T12746] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.349291][T12746] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.499374][T10982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.503142][T10982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.518572][T10983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.522162][T10983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.814547][ T5293] Bluetooth: hci4: command tx timeout
[  294.826507][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'.
[  294.829761][T12855] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1594'.
[  294.832599][T12855] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1594'.
[  295.054878][T12862] lo speed is unknown, defaulting to 1000
[  295.186321][   T30] vhci_hcd: vhci_device speed not set
[  295.899191][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1600'.
[  295.937960][T12886] Unsupported ieee802154 address type: 0
[  296.056725][T12888] program syz.0.1603 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  296.796385][ T5293] Bluetooth: hci4: command tx timeout
[  297.129629][ T5977] usb 11-1: new low-speed USB device number 3 using dummy_hcd
[  297.285629][ T5977] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  297.288808][ T5977] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2
[  297.296063][ T5977] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  297.299563][ T5977] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  297.303548][ T5977] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.312873][T12899] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  297.317027][ T5977] hub 11-1:1.0: bad descriptor, ignoring hub
[  297.319049][ T5977] hub 11-1:1.0: probe with driver hub failed with error -5
[  297.322958][ T5977] cdc_wdm 11-1:1.0: skipping garbage
[  297.324771][ T5977] cdc_wdm 11-1:1.0: skipping garbage
[  297.326991][ T5977] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device
[  297.329481][ T5977] cdc_wdm 11-1:1.0: Unknown control protocol
[  297.612321][    C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71
[  297.614501][    C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes
[  297.617024][    C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71
[  297.619080][    C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes
[  297.621247][    C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71
[  297.623311][    C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes
[  297.625264][    C3] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  297.713438][    C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71
[  297.715489][    C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes
[  297.733163][T12899] netlink: 'syz.6.1606': attribute type 5 has an invalid length.
[  297.967621][   T39] kauditd_printk_skb: 597 callbacks suppressed
[  297.967632][   T39] audit: type=1800 audit(2000000436.863:6503): pid=12921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1613" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
[  298.007076][ T1141] wlan1: Trigger new scan to find an IBSS to join
[  298.225187][ T5943] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  298.447619][ T5943] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  298.451361][ T5943] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.455085][ T5943] usb 12-1: Product: syz
[  298.481987][ T5943] usb 12-1: Manufacturer: syz
[  298.483396][ T5943] usb 12-1: SerialNumber: syz
[  298.491707][ T5943] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  298.515743][ T5943] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  298.749045][    T9] usb 12-1: USB disconnect, device number 2
[  298.777159][ T5293] Bluetooth: hci4: command tx timeout
[  299.291821][ T7315] usb 10-1: new low-speed USB device number 13 using dummy_hcd
[  299.436611][ T7315] usb 10-1: No LPM exit latency info found, disabling LPM.
[  299.444421][ T7315] usb 10-1: config 1 interface 0 altsetting 12 endpoint 0x1 is Bulk; changing to Interrupt
[  299.448307][ T7315] usb 10-1: config 1 interface 0 altsetting 12 endpoint 0x82 is Bulk; changing to Interrupt
[  299.452265][ T7315] usb 10-1: config 1 interface 0 has no altsetting 0
[  299.530190][ T5943] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive
[  299.532277][ T5943] ath9k_htc: Failed to initialize the device
[  299.536030][    T9] usb 12-1: ath9k_htc: USB layer deinitialized
[  299.667163][T12978] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1630'.
[  299.760137][  T832] usb 11-1: USB disconnect, device number 3
[  299.939335][    T9] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  300.072658][    T9] usb 12-1: device descriptor read/64, error -71
[  300.137146][T12992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1634'.
[  300.311111][    T9] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  300.434541][    T9] usb 12-1: device descriptor read/64, error -71
[  300.553692][    T9] usb usb12-port1: attempt power cycle
[  300.758458][ T5293] Bluetooth: hci4: command tx timeout
[  300.835860][T10982] wlan1: Creating new IBSS network, BSSID 2e:5f:38:30:98:4a
[  300.838267][T10982] wlan1: Failed to join IBSS, no channel context
[  300.892279][    T9] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  300.912049][    T9] usb 12-1: device descriptor read/8, error -71
[  301.148978][    T9] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  301.177919][    T9] usb 12-1: device descriptor read/8, error -71
[  301.293674][    T9] usb usb12-port1: unable to enumerate USB device
[  301.651263][T13012] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1640'.
[  301.891208][ T7315] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  301.894331][ T7315] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.898260][ T7315] usb 10-1: can't set config #1, error -71
[  301.904866][ T7315] usb 10-1: USB disconnect, device number 13
[  302.463265][T13011] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  302.475609][T13011] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  302.770509][T13011] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  302.772988][T13011] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  302.809048][T13011] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  302.811132][T13011] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  302.927238][T13011] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  302.936146][T13011] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  303.371834][T13062] netlink: 'syz.0.1652': attribute type 1 has an invalid length.
[  303.402336][T13062] 8021q: adding VLAN 0 to HW filter on device bond15
[  303.451010][T13062] bond15: (slave veth5): Enslaving as an active interface with a down link
[  304.147380][T13090] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1663'.
[  304.206274][T13093] mkiss: ax0: crc mode is auto.
[  304.436569][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'.
[  305.007682][   T39] audit: type=1326 audit(2000000444.254:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13134 comm="syz.0.1676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  305.026625][   T39] audit: type=1326 audit(2000000444.254:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13134 comm="syz.0.1676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  305.057415][   T39] audit: type=1326 audit(2000000444.296:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13134 comm="syz.0.1676" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  305.068608][   T39] audit: type=1326 audit(2000000444.296:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13134 comm="syz.0.1676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  305.087504][   T39] audit: type=1326 audit(2000000444.296:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13134 comm="syz.0.1676" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  305.111903][   T39] audit: type=1326 audit(2000000444.296:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13134 comm="syz.0.1676" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  305.121538][   T39] audit: type=1326 audit(2000000444.296:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13134 comm="syz.0.1676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  305.128770][   T39] audit: type=1326 audit(2000000444.296:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13134 comm="syz.0.1676" exe="/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  305.149880][   T39] audit: type=1326 audit(2000000444.296:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13134 comm="syz.0.1676" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  305.166988][   T39] audit: type=1326 audit(2000000444.296:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13134 comm="syz.0.1676" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  305.687779][T13171] lo speed is unknown, defaulting to 1000
[  305.706909][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.710354][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.713524][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.716745][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.486983][T13206] lo speed is unknown, defaulting to 1000
[  306.848654][ T1412] ieee802154 phy0 wpan0: encryption failed: -22
[  306.894644][T13222] loop9: detected capacity change from 0 to 7
[  306.902409][T13222] Dev loop9: unable to read RDB block 7
[  306.904492][T13222]  loop9: unable to read partition table
[  306.906532][T13222] loop9: partition table beyond EOD, truncated
[  306.908434][T13222] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  307.072820][T13226] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117
[  307.079064][T13226] PKCS7: Only support pkcs7_signedData type
[  307.422622][T13230] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  307.424910][T13230] overlayfs: failed to set xattr on upper
[  307.427173][T13230] overlayfs: ...falling back to redirect_dir=nofollow.
[  307.429334][T13230] overlayfs: ...falling back to index=off.
[  307.431618][T13230] overlayfs: ...falling back to uuid=null.
[  307.794905][T13256] lo speed is unknown, defaulting to 1000
[  307.935746][T13267] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1706'.
[  308.030924][T13256] veth0_vlan: left promiscuous mode
[  308.033863][T13256] veth0_vlan: entered promiscuous mode
[  308.096374][T13269] wg2: entered promiscuous mode
[  308.097918][T13269] wg2: entered allmulticast mode
[  308.323852][T13284] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1709'.
[  308.797377][T13320] netlink: 'syz.5.1721': attribute type 1 has an invalid length.
[  308.800398][T13320] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1721'.
[  308.846884][T13324] syz.5.1721 (13324): /proc/13318/oom_adj is deprecated, please use /proc/13318/oom_score_adj instead.
[  308.874525][T13324] hfs: can't find a HFS filesystem on dev sr0
[  309.308048][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'.
[  309.823231][T13340] Set syz1 is full, maxelem 65536 reached
[  309.986199][   T39] kauditd_printk_skb: 32 callbacks suppressed
[  309.986210][   T39] audit: type=1326 audit(2000000449.471:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.0.1733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  309.996317][   T39] audit: type=1326 audit(2000000449.471:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.0.1733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  310.019058][   T39] audit: type=1326 audit(2000000449.482:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.0.1733" exe="/syz-executor" sig=0 arch=40000003 syscall=176 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  310.026709][   T39] audit: type=1326 audit(2000000449.482:6549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.0.1733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  310.046336][   T39] audit: type=1326 audit(2000000449.482:6550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.0.1733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  310.052743][   T39] audit: type=1326 audit(2000000449.482:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.0.1733" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  310.064691][   T39] audit: type=1326 audit(2000000449.482:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.0.1733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  310.071642][   T39] audit: type=1326 audit(2000000449.482:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.0.1733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  310.078265][   T39] audit: type=1326 audit(2000000449.492:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.0.1733" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  310.093774][   T39] audit: type=1326 audit(2000000449.492:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13375 comm="syz.0.1733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000
[  310.317061][T13404] lo speed is unknown, defaulting to 1000
[  310.517517][T13411] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[  311.065071][T13441] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  311.079575][T13441] overlayfs: failed to set xattr on upper
[  311.083270][T13441] overlayfs: ...falling back to redirect_dir=nofollow.
[  311.085990][T13441] overlayfs: ...falling back to index=off.
[  311.087783][T13441] overlayfs: ...falling back to uuid=null.
[  311.408088][  T104] usb 12-1: new high-speed USB device number 7 using dummy_hcd
[  311.532114][  T104] usb 12-1: device descriptor read/64, error -71
[  311.568519][T13457] affs: No valid root block on device nbd6
[  311.760891][  T104] usb 12-1: new high-speed USB device number 8 using dummy_hcd
[  311.779730][T13465] netlink: 'syz.5.1754': attribute type 10 has an invalid length.
[  311.788529][T13465] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  311.884507][  T104] usb 12-1: device descriptor read/64, error -71
[  311.989773][  T104] usb usb12-port1: attempt power cycle
[  312.163292][T13482] /dev/nullb0: Can't open blockdev
[  312.312939][  T104] usb 12-1: new high-speed USB device number 9 using dummy_hcd
[  312.332788][  T104] usb 12-1: device descriptor read/8, error -71
[  312.570210][  T104] usb 12-1: new high-speed USB device number 10 using dummy_hcd
[  312.590186][  T104] usb 12-1: device descriptor read/8, error -71
[  312.594993][T13495] netlink: 'syz.6.1763': attribute type 1 has an invalid length.
[  312.597355][T13495] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1763'.
[  312.697162][  T104] usb usb12-port1: unable to enumerate USB device
[  312.821137][T13507] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  312.823452][T13507] overlayfs: failed to set xattr on upper
[  312.825236][T13507] overlayfs: ...falling back to redirect_dir=nofollow.
[  312.828151][T13507] overlayfs: ...falling back to index=off.
[  312.829966][T13507] overlayfs: ...falling back to uuid=null.
[  313.114281][T13523] bridge_slave_0: entered promiscuous mode
[  313.116154][T13523] bridge_slave_0: entered allmulticast mode
[  314.120451][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1775'.
[  314.185770][T13549] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  314.188030][T13549] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  314.257997][T13558] netlink: 'syz.6.1780': attribute type 5 has an invalid length.
[  314.477041][T13555] lo speed is unknown, defaulting to 1000
[  314.695904][T13590] 9pnet: bogus RWRITE count (512 > 41)
[  314.856560][ T7314] usb 12-1: new high-speed USB device number 11 using dummy_hcd
[  314.973958][T13609] netlink: 'syz.6.1795': attribute type 1 has an invalid length.
[  314.987639][T13609] 8021q: adding VLAN 0 to HW filter on device bond1
[  315.000343][ T7314] usb 12-1: device descriptor read/64, error -71
[  315.139149][T13609] bond1: (slave gretap1): making interface the new active one
[  315.142063][T13609] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  315.275825][    C0] vkms_vblank_simulate: vblank timer overrun
[  315.313918][    C0] vkms_vblank_simulate: vblank timer overrun
[  315.324620][ T7314] usb 12-1: new high-speed USB device number 12 using dummy_hcd
[  315.619050][ T7314] usb 12-1: device descriptor read/64, error -71
[  315.723645][ T7314] usb usb12-port1: attempt power cycle
[  315.875246][T13635] overlayfs: overlapping lowerdir path
[  315.965203][T13648] netlink: 'syz.0.1805': attribute type 4 has an invalid length.
[  316.056603][ T7314] usb 12-1: new high-speed USB device number 13 using dummy_hcd
[  316.094408][ T7314] usb 12-1: device descriptor read/8, error -71
[  316.334235][ T7314] usb 12-1: new high-speed USB device number 14 using dummy_hcd
[  316.352580][ T7314] usb 12-1: device descriptor read/8, error -71
[  316.458473][ T7314] usb usb12-port1: unable to enumerate USB device
[  317.200169][ T7314] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  317.302747][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1814'.
[  317.560242][   T35] usb 11-1: new low-speed USB device number 4 using dummy_hcd
[  317.685955][   T35] usb 11-1: device descriptor read/64, error -71
[  317.758466][T13694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1816'.
[  317.836978][T13695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1816'.
[  317.942769][   T35] usb 11-1: new low-speed USB device number 5 using dummy_hcd
[  318.066534][   T35] usb 11-1: device descriptor read/64, error -71
[  318.099003][T13699] tmpfs: Bad value for 'size'
[  318.179677][   T35] usb usb11-port1: attempt power cycle
[  318.391519][T13705] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1820'.
[  318.799887][   T35] usb 11-1: new low-speed USB device number 6 using dummy_hcd
[  318.821154][   T35] usb 11-1: device descriptor read/8, error -71
[  319.057687][   T35] usb 11-1: new low-speed USB device number 7 using dummy_hcd
[  319.077305][   T35] usb 11-1: device descriptor read/8, error -71
[  319.191360][   T35] usb usb11-port1: unable to enumerate USB device
[  319.362351][ T7562] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  319.495523][ T7562] usb 10-1: device descriptor read/64, error -71
[  319.643248][T13727] netlink: 'syz.0.1826': attribute type 10 has an invalid length.
[  319.662638][T13727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'.
[  319.665808][T13727] bridge_slave_1: left allmulticast mode
[  319.668111][T13727] bridge_slave_1: left promiscuous mode
[  319.670035][T13727] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.689236][T13727] bond0: (slave bridge0): Releasing backup interface
[  319.752565][ T7562] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  319.911188][ T7562] usb 10-1: device descriptor read/64, error -71
[  320.010312][ T7562] usb usb10-port1: attempt power cycle
[  320.188220][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1828'.
[  320.334321][ T7562] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  320.353389][ T7562] usb 10-1: device descriptor read/8, error -71
[  320.546191][   T39] kauditd_printk_skb: 5 callbacks suppressed
[  320.546204][   T39] audit: type=1804 audit(2000000460.557:6561): pid=13751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1830" name="/newroot/493/bus/file1" dev="overlay" ino=2657 res=1 errno=0
[  320.600252][ T7562] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  320.629214][ T7562] usb 10-1: device descriptor read/8, error -71
[  320.734177][ T7562] usb usb10-port1: unable to enumerate USB device
[  320.923585][T13754] lo speed is unknown, defaulting to 1000
[  322.277229][  T833] usb 5-1: new low-speed USB device number 37 using dummy_hcd
[  322.422919][  T833] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  322.426867][  T833] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  322.431099][  T833] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  322.435312][  T833] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  322.438886][  T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.446506][T13792] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  322.451992][  T833] hub 5-1:1.0: bad descriptor, ignoring hub
[  322.454583][  T833] hub 5-1:1.0: probe with driver hub failed with error -5
[  322.458894][  T833] cdc_wdm 5-1:1.0: skipping garbage
[  322.460743][  T833] cdc_wdm 5-1:1.0: skipping garbage
[  322.464530][  T833] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  322.466354][  T833] cdc_wdm 5-1:1.0: Unknown control protocol
[  322.531417][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1844'.
[  322.598348][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1844'.
[  322.944370][ T5306] usb 5-1: USB disconnect, device number 37
[  322.996448][T13365] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.062993][T13365] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.098442][T13823] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1852'.
[  323.258874][T13365] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.268859][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  323.273762][ T5940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  323.277945][ T5940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  323.280824][ T5940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  323.283481][ T5940] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  323.285837][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  323.307681][ T5293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  323.312299][ T5293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  323.319883][ T5293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  323.324596][ T5293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  323.328939][ T5293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  323.332666][ T5293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  323.370768][T13365] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.395745][T13828] lo speed is unknown, defaulting to 1000
[  323.562397][T13828] chnl_net:caif_netlink_parms(): no params data found
[  323.653641][T13365] bridge_slave_1: left allmulticast mode
[  323.655456][T13365] bridge_slave_1: left promiscuous mode
[  323.658396][T13365] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.668207][T13365] bridge_slave_0: left allmulticast mode
[  323.670899][T13365] bridge_slave_0: left promiscuous mode
[  323.687205][T13365] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.161126][T13365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  324.166559][T13365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.171958][T13365] bond0 (unregistering): Released all slaves
[  324.241221][T13828] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.243413][T13828] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.245631][T13828] bridge_slave_0: entered allmulticast mode
[  324.248271][T13828] bridge_slave_0: entered promiscuous mode
[  324.259055][T13828] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.261390][T13828] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.263652][T13828] bridge_slave_1: entered allmulticast mode
[  324.267007][T13828] bridge_slave_1: entered promiscuous mode
[  324.339894][T13828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.343858][T13828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.403084][T13828] team0: Port device team_slave_0 added
[  324.418334][T13828] team0: Port device team_slave_1 added
[  324.543121][T13828] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.549297][T13828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.563115][T13828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.567297][T13828] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.569429][T13828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.577600][T13828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.614482][T13365] hsr_slave_0: left promiscuous mode
[  324.619472][T13365] hsr_slave_1: left promiscuous mode
[  324.624862][T13365] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.630447][T13365] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.637581][T13365] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.644030][T13365] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.658466][  T832] usb 10-1: new low-speed USB device number 19 using dummy_hcd
[  324.682757][T13365] veth1_macvtap: left promiscuous mode
[  324.684470][T13365] veth0_macvtap: left promiscuous mode
[  324.686149][T13365] veth1_vlan: left promiscuous mode
[  324.688115][T13365] veth0_vlan: left promiscuous mode
[  324.768270][ T5943] usb 5-1: new low-speed USB device number 38 using dummy_hcd
[  324.814976][  T832] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  324.819476][  T832] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  324.832233][  T832] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  324.836654][  T832] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  324.840980][  T832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.863376][T13867] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  324.866845][  T832] hub 10-1:1.0: bad descriptor, ignoring hub
[  324.868924][  T832] hub 10-1:1.0: probe with driver hub failed with error -5
[  324.871278][  T832] cdc_wdm 10-1:1.0: skipping garbage
[  324.872893][  T832] cdc_wdm 10-1:1.0: skipping garbage
[  324.875451][  T832] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  324.877277][  T832] cdc_wdm 10-1:1.0: Unknown control protocol
[  325.287352][ T5293] Bluetooth: hci2: command tx timeout
[  325.746772][T13365] team0 (unregistering): Port device team_slave_1 removed
[  325.859344][T13365] team0 (unregistering): Port device team_slave_0 removed
[  326.678828][T13828] hsr_slave_0: entered promiscuous mode
[  326.682658][T13828] hsr_slave_1: entered promiscuous mode
[  326.685958][T13828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  326.692221][T13828] Cannot create hsr debugfs directory
[  326.717089][T13886] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  327.033141][T13896] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  327.118680][T13898] Process accounting resumed
[  327.259370][  T833] usb 10-1: USB disconnect, device number 19
[  327.268187][ T5293] Bluetooth: hci2: command tx timeout
[  327.432295][T13920] netlink: 'syz.6.1864': attribute type 10 has an invalid length.
[  327.443979][T13920] netlink: 'syz.6.1864': attribute type 10 has an invalid length.
[  327.446628][T13920] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1864'.
[  327.648618][T13828] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  327.696117][T13828] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  327.745051][T13828] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  327.796112][T13828] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  327.932535][T13828] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.955398][T13828] 8021q: adding VLAN 0 to HW filter on device team0
[  327.961720][T13366] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.964026][T13366] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.986783][T13366] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.989009][T13366] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.251778][T13828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.437643][T13961] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  328.439775][T13961] overlayfs: failed to set xattr on upper
[  328.444159][T13961] overlayfs: ...falling back to redirect_dir=nofollow.
[  328.446213][T13961] overlayfs: ...falling back to index=off.
[  328.447950][T13961] overlayfs: ...falling back to uuid=null.
[  328.466465][T13828] veth0_vlan: entered promiscuous mode
[  328.482713][T13828] veth1_vlan: entered promiscuous mode
[  328.521847][T13828] veth0_macvtap: entered promiscuous mode
[  328.532774][T13828] veth1_macvtap: entered promiscuous mode
[  328.543037][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.564874][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.569200][T13828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  328.575128][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.578302][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.582014][T13828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  328.593896][T13828] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.596522][T13828] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.599127][T13828] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.603179][T13828] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.667526][T13366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.671886][T13366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.700252][T13365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.704778][T13365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.772462][T13966] input: syz0 as /devices/virtual/input/input25
[  329.652229][ T5943] usb 5-1: new low-speed USB device number 39 using dummy_hcd
[  330.038113][ T5943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.045798][ T5943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  330.049413][ T5943] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  330.106918][ T5943] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  330.110272][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.121530][T13976] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  330.124670][ T5943] hub 5-1:1.0: bad descriptor, ignoring hub
[  330.126722][ T5943] hub 5-1:1.0: probe with driver hub failed with error -5
[  330.129689][ T5943] cdc_wdm 5-1:1.0: skipping garbage
[  330.131560][ T5943] cdc_wdm 5-1:1.0: skipping garbage
[  330.164504][ T5943] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  330.166594][ T5943] cdc_wdm 5-1:1.0: Unknown control protocol
[  330.385543][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  330.388174][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  330.464513][ T1146] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.523251][T13976] netlink: 'syz.0.1873': attribute type 5 has an invalid length.
[  330.651418][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  330.656105][ T5940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  330.659090][ T5940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  330.663856][ T5940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  330.666675][ T5940] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  330.669507][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  330.704800][T13998] lo speed is unknown, defaulting to 1000
[  330.813148][T14002] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  330.816003][T14002] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  330.820474][T14002] vhci_hcd vhci_hcd.0: Device attached
[  330.838757][T14002] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  330.841986][T14002] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received
[  330.849423][T13998] chnl_net:caif_netlink_parms(): no params data found
[  330.926425][T13998] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.929449][T13998] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.932541][T13998] bridge_slave_0: entered allmulticast mode
[  330.936505][T13998] bridge_slave_0: entered promiscuous mode
[  330.938625][T14004] vhci_hcd: connection closed
[  330.939966][T13369] vhci_hcd: stop threads
[  330.940553][T13998] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.941416][T13369] vhci_hcd: release socket
[  330.943276][T13998] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.945922][T13369] vhci_hcd: disconnect device
[  330.947301][T13998] bridge_slave_1: entered allmulticast mode
[  330.955523][T13998] bridge_slave_1: entered promiscuous mode
[  330.983492][ T7314] vhci_hcd: vhci_device speed not set
[  330.990940][T13998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.996370][T13998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.020156][T13998] team0: Port device team_slave_0 added
[  331.023589][T13998] team0: Port device team_slave_1 added
[  331.041192][T13998] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.043247][T13998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.052324][T13998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.057416][T13998] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.059493][T13998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.067074][T13998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.095887][T13998] hsr_slave_0: entered promiscuous mode
[  331.098606][T13998] hsr_slave_1: entered promiscuous mode
[  331.101607][T13998] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  331.104927][T13998] Cannot create hsr debugfs directory
[  331.644495][T14030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1884'.
[  331.974275][  T833] usb 5-1: USB disconnect, device number 39
[  332.438417][ T1146] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.572913][ T1146] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.613149][ T5293] Bluetooth: hci2: command tx timeout
[  332.676650][ T1146] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.803008][   T56] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  332.867146][ T1146] bridge_slave_1: left allmulticast mode
[  332.869956][ T1146] bridge_slave_1: left promiscuous mode
[  332.871983][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.877892][ T1146] bridge_slave_0: left allmulticast mode
[  332.879928][ T1146] bridge_slave_0: left promiscuous mode
[  332.881694][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.974348][   T56] usb 11-1: Using ep0 maxpacket: 16
[  332.979772][   T56] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  333.020762][   T56] usb 11-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  333.028241][   T56] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.036550][   T56] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/input/input26
[  333.058793][T14063] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  333.060867][T14063] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  333.063336][T14063] vhci_hcd vhci_hcd.0: Device attached
[  333.120671][T14077] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  333.123463][T14077] overlayfs: failed to set xattr on upper
[  333.125750][T14077] overlayfs: ...falling back to redirect_dir=nofollow.
[  333.131022][T14077] overlayfs: ...falling back to index=off.
[  333.133413][T14077] overlayfs: ...falling back to uuid=null.
[  333.235337][ T5340] bcm5974 11-1:1.0: could not read from device
[  333.259990][ T5340] bcm5974 11-1:1.0: could not read from device
[  333.267943][   T56] usb 11-1: USB disconnect, device number 8
[  333.289851][ T5340] bcm5974 11-1:1.0: could not read from device
[  333.410196][  T832] vhci_hcd: vhci_device speed not set
[  333.480984][  T832] usb 47-1: new full-speed USB device number 3 using vhci_hcd
[  333.491839][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  333.503684][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  333.511467][ T1146] bond0 (unregistering): Released all slaves
[  333.821578][T14097] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1897'.
[  333.826442][T14096] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1897'.
[  334.055553][ T1146] hsr_slave_0: left promiscuous mode
[  334.061876][ T1146] hsr_slave_1: left promiscuous mode
[  334.066698][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  334.078483][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0
[  334.082949][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  334.086114][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1
[  334.097671][T14073] vhci_hcd: connection reset by peer
[  334.108040][T13365] vhci_hcd: stop threads
[  334.109865][T13365] vhci_hcd: release socket
[  334.111289][T13365] vhci_hcd: disconnect device
[  334.159978][ T1146] veth1_macvtap: left promiscuous mode
[  334.161777][ T1146] veth0_macvtap: left promiscuous mode
[  334.163774][ T1146] veth1_vlan: left promiscuous mode
[  334.167536][ T1146] veth0_vlan: left promiscuous mode
[  334.584265][ T5293] Bluetooth: hci2: command tx timeout
[  335.129244][T14118] ntfs3(sr0): Primary boot signature is not NTFS.
[  335.133071][T14118] ntfs3(sr0): try to read out of volume at offset 0xf800
[  335.454026][T14122] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  335.462584][T14122] overlayfs: failed to set xattr on upper
[  335.464331][T14122] overlayfs: ...falling back to redirect_dir=nofollow.
[  335.477099][T14122] overlayfs: ...falling back to index=off.
[  335.478924][T14122] overlayfs: ...falling back to uuid=null.
[  335.538560][ T1146] team0 (unregistering): Port device team_slave_1 removed
[  335.792794][ T1146] team0 (unregistering): Port device team_slave_0 removed
[  336.565703][ T5293] Bluetooth: hci2: command tx timeout
[  336.626710][T14127] lo speed is unknown, defaulting to 1000
[  336.787778][T13998] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  336.811466][T13998] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  336.834505][T13998] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  336.846090][T13998] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  336.937735][T13998] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.944555][T13998] 8021q: adding VLAN 0 to HW filter on device team0
[  336.958086][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.960258][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.967368][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.969580][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  337.121383][T13998] 8021q: adding VLAN 0 to HW filter on device batadv0
[  337.523520][T13998] veth0_vlan: entered promiscuous mode
[  337.529222][T13998] veth1_vlan: entered promiscuous mode
[  337.549254][T13998] veth0_macvtap: entered promiscuous mode
[  337.556064][T13998] veth1_macvtap: entered promiscuous mode
[  337.575421][T13998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.578628][T13998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.582390][T13998] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.594753][T13998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.597873][T13998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.601446][T13998] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.607251][T13998] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.610108][T13998] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.612827][T13998] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.616877][T13998] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.701939][T14166] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  337.703212][T13364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.704850][T14166] overlayfs: failed to set xattr on upper
[  337.704860][T14166] overlayfs: ...falling back to redirect_dir=nofollow.
[  337.704868][T14166] overlayfs: ...falling back to index=off.
[  337.704875][T14166] overlayfs: ...falling back to uuid=null.
[  337.716281][T13364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.731403][T13369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.734348][T13369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.849062][T14172] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  337.851241][T14172] overlayfs: failed to set xattr on upper
[  337.855163][T14172] overlayfs: ...falling back to redirect_dir=nofollow.
[  337.857701][T14172] overlayfs: ...falling back to index=off.
[  337.859489][T14172] overlayfs: ...falling back to uuid=null.
[  337.928702][T14174] bond2: entered promiscuous mode
[  337.930891][T14174] bond2: entered allmulticast mode
[  337.933355][T14174] 8021q: adding VLAN 0 to HW filter on device bond2
[  338.118459][ T5306] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  338.212418][T14188] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  338.285011][ T5306] usb 10-1: config index 0 descriptor too short (expected 23569, got 27)
[  338.287651][ T5306] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.295383][ T5306] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  338.298168][ T5306] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  338.300779][ T5306] usb 10-1: Manufacturer: syz
[  338.308239][ T5306] usb 10-1: config 0 descriptor??
[  338.365582][ T5306] rc_core: IR keymap rc-hauppauge not found
[  338.367453][ T5306] Registered IR keymap rc-empty
[  338.371986][ T5306] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0
[  338.377786][ T5306] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input27
[  338.422810][  T832] vhci_hcd: vhci_device speed not set
[  340.166168][ T7315] usb 11-1: new full-speed USB device number 9 using dummy_hcd
[  340.320561][ T7315] usb 11-1: config 0 has an invalid interface number: 55 but max is 0
[  340.323435][ T7315] usb 11-1: config 0 has no interface number 0
[  340.325329][ T7315] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  340.346833][ T7315] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  340.351490][ T7315] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  340.354815][ T7315] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[  340.359405][ T7315] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  340.363525][ T7315] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  340.372571][T13356] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.375406][ T7315] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.382605][ T7315] usb 11-1: config 0 descriptor??
[  340.384710][T14215] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  340.390696][ T7315] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  340.584096][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  340.592065][ T5940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  340.600337][ T7315] usb 11-1: USB disconnect, device number 9
[  340.603053][ T7315] ldusb 11-1:0.55: LD USB Device #0 now disconnected
[  340.604804][ T5940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  340.611626][ T5940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  340.619662][ T5940] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  340.622671][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  340.638651][T14224] lo speed is unknown, defaulting to 1000
[  340.669364][ T7314] usb 10-1: USB disconnect, device number 20
[  340.713675][T14224] chnl_net:caif_netlink_parms(): no params data found
[  340.727518][T14230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1926'.
[  340.744696][T14230] 8021q: adding VLAN 0 to HW filter on device bond10
[  340.810067][T14230] 8021q: adding VLAN 0 to HW filter on device bond10
[  340.812577][T14230] bond10: (slave vcan1): The slave device specified does not support setting the MAC address
[  340.816717][T14230] bond10: (slave vcan1): Error -95 calling set_mac_address
[  340.824419][T14224] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.827396][T14224] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.831352][T14224] bridge_slave_0: entered allmulticast mode
[  340.837134][T14224] bridge_slave_0: entered promiscuous mode
[  340.841709][T14224] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.844823][T14224] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.847541][T14224] bridge_slave_1: entered allmulticast mode
[  340.850924][T14224] bridge_slave_1: entered promiscuous mode
[  340.883901][T14224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.888858][T14224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.932065][T14224] team0: Port device team_slave_0 added
[  340.935348][T14224] team0: Port device team_slave_1 added
[  340.953217][T14224] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.955207][T14224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.963567][T14224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.967726][T14224] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.969844][T14224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.982627][T14238] netlink: 'syz.5.1928': attribute type 9 has an invalid length.
[  340.986311][T14224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.987025][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1928'.
[  341.031253][T14224] hsr_slave_0: entered promiscuous mode
[  341.033749][T14224] hsr_slave_1: entered promiscuous mode
[  341.035908][T14224] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  341.042857][T14224] Cannot create hsr debugfs directory
[  341.595533][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1934'.
[  342.033373][T14266] binder: BINDER_SET_CONTEXT_MGR already set
[  342.038196][T14266] binder: 14265:14266 ioctl 4018620d 20000100 returned -16
[  342.049779][T14266] binder: BINDER_SET_CONTEXT_MGR already set
[  342.051606][T14266] binder: 14265:14266 ioctl 4018620d 20000100 returned -16
[  342.092419][T13356] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.226155][T13356] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.330712][T13356] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.633035][ T5940] Bluetooth: hci2: command tx timeout
[  343.098197][T13356] bridge_slave_1: left allmulticast mode
[  343.100882][T13356] bridge_slave_1: left promiscuous mode
[  343.103149][T13356] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.111474][T13356] bridge_slave_0: left allmulticast mode
[  343.113465][T13356] bridge_slave_0: left promiscuous mode
[  343.115293][T13356] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.436381][T14290] ceph: No mds server is up or the cluster is laggy
[  343.826784][T13356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  343.855182][T13356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  343.867949][T13356] bond0 (unregistering): Released all slaves
[  344.287675][T13356] hsr_slave_0: left promiscuous mode
[  344.291192][T13356] hsr_slave_1: left promiscuous mode
[  344.293817][T13356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.296237][T13356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  344.301337][T13356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  344.303588][T13356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  344.345179][T13356] veth1_macvtap: left promiscuous mode
[  344.347013][T13356] veth0_macvtap: left promiscuous mode
[  344.349041][T13356] veth1_vlan: left promiscuous mode
[  344.350672][T13356] veth0_vlan: left promiscuous mode
[  344.587407][ T5940] Bluetooth: hci2: command tx timeout
[  345.211062][T14348] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  345.213657][T14348] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  345.216780][T14348] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  345.825302][T13356] team0 (unregistering): Port device team_slave_1 removed
[  345.931972][T13356] team0 (unregistering): Port device team_slave_0 removed
[  345.991353][T14354] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1958'.
[  346.042789][T14356] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1959'.
[  346.548435][ T5940] Bluetooth: hci2: command tx timeout
[  346.704787][T14358] lo speed is unknown, defaulting to 1000
[  346.734941][T14224] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  346.738333][T14224] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  346.743413][T14224] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  346.752219][T14224] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  346.874506][T14224] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.890034][T14224] 8021q: adding VLAN 0 to HW filter on device team0
[  346.896078][T13358] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.899013][T13358] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.915032][T13369] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.917202][T13369] bridge0: port 2(bridge_slave_1) entered forwarding state
[  346.946947][T14371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1964'.
[  347.051517][T14224] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.055949][T14379] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1965'.
[  347.085430][T14379] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1965'.
[  347.090598][T14379] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1965'.
[  347.189575][T14224] veth0_vlan: entered promiscuous mode
[  347.194128][T14224] veth1_vlan: entered promiscuous mode
[  347.218128][T14224] veth0_macvtap: entered promiscuous mode
[  347.225428][T14224] veth1_macvtap: entered promiscuous mode
[  347.247095][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.253915][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.257646][T14224] batman_adv: batadv0: Interface activated: batadv_slave_0
[  347.272946][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.276080][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.279445][T14224] batman_adv: batadv0: Interface activated: batadv_slave_1
[  347.285064][T14224] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.288501][T14224] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.291177][T14224] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.293265][T14392] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1967'.
[  347.294028][T14224] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.348764][T13369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.351154][T13369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.351894][T14393] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  347.361618][T13360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.367278][T13360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.445136][T14397] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1967'.
[  347.882803][T14408] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  347.995976][ T5976] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  348.002180][T14419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1973'.
[  348.461957][T14434] lo speed is unknown, defaulting to 1000
[  349.060593][T14449] fuse: Unknown parameter 'appraise'
[  349.355470][T14466] Bluetooth: (null): Out-of-order packet arrived (7 != 0)
[  349.361900][T13369] Bluetooth: (null): Invalid header checksum
[  349.465933][T13369] Bluetooth: (null): Invalid header checksum
[  349.550902][T14466] ceph: No mds server is up or the cluster is laggy
[  349.564173][ T1141] Bluetooth: (null): Invalid header checksum
[  349.593056][T10981] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.663241][T13369] Bluetooth: (null): Invalid header checksum
[  349.768246][T13367] Bluetooth: (null): Invalid header checksum
[  349.873154][ T1141] Bluetooth: (null): Invalid header checksum
[  350.111420][ T5293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  350.116311][ T5293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  350.119274][ T5293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  350.126841][ T5293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  350.129411][ T5293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  350.132252][ T5293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  350.148733][T14484] lo speed is unknown, defaulting to 1000
[  350.168947][T14490] netlink: 'syz.6.1990': attribute type 1 has an invalid length.
[  350.171584][T14491] netlink: 'syz.6.1990': attribute type 1 has an invalid length.
[  350.246783][T14484] chnl_net:caif_netlink_parms(): no params data found
[  350.315344][T14484] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.317546][T14484] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.320346][T14484] bridge_slave_0: entered allmulticast mode
[  350.323834][T14484] bridge_slave_0: entered promiscuous mode
[  350.331719][T14510] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = -2, id = 0
[  350.334882][T14511] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = -2, id = 1
[  350.350127][T14512] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = -2, id = 2
[  350.355056][T14513] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = -2, id = 3
[  350.362638][T14484] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.364924][T14484] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.366920][T14509] IPVS: stopping backup sync thread 14513 ...
[  350.367328][T14484] bridge_slave_1: entered allmulticast mode
[  350.371432][T14484] bridge_slave_1: entered promiscuous mode
[  350.373921][T14509] IPVS: stopping backup sync thread 14512 ...
[  350.378588][T14509] IPVS: stopping backup sync thread 14511 ...
[  350.387530][T14509] IPVS: stopping backup sync thread 14510 ...
[  350.408584][T14484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  350.412408][T14484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  350.443511][T14484] team0: Port device team_slave_0 added
[  350.447736][T14484] team0: Port device team_slave_1 added
[  350.457366][T14515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.552494][T14484] batman_adv: batadv0: Adding interface: batadv_slave_0
[  350.554753][T14484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.570047][T14484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  350.578745][T14484] batman_adv: batadv0: Adding interface: batadv_slave_1
[  350.580852][T14484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.599098][T14484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  350.657848][T14525] overlayfs: failed to resolve './file1': -2
[  350.661547][T14517] tmpfs: Unknown parameter 'usrquota
'
[  350.776276][T14484] hsr_slave_0: entered promiscuous mode
[  350.781276][T14484] hsr_slave_1: entered promiscuous mode
[  350.784668][T14484] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  350.788001][T14484] Cannot create hsr debugfs directory
[  350.866360][T14527] capability: warning: `syz.0.1997' uses 32-bit capabilities (legacy support in use)
[  351.420085][T14545] netlink: 596 bytes leftover after parsing attributes in process `syz.6.2002'.
[  351.434885][  T104] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  351.571510][T10981] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.579217][  T104] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  351.582525][  T104] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  351.585442][  T104] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  351.589444][  T104] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  351.592175][  T104] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.595330][  T104] usb 10-1: config 0 descriptor??
[  351.640905][T10981] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.723239][T10981] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.857597][T10981] bridge_slave_1: left allmulticast mode
[  351.860120][T10981] bridge_slave_1: left promiscuous mode
[  351.862495][T10981] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.885683][   T39] audit: type=1326 audit(2000000493.458:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14552 comm="syz.6.2005" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x0
[  351.944702][T10981] bridge_slave_0: left allmulticast mode
[  351.960098][T10981] bridge_slave_0: left promiscuous mode
[  351.961952][T10981] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.112331][ T5940] Bluetooth: hci2: command tx timeout
[  352.190706][  T104] usbhid 10-1:0.0: can't add hid device: -71
[  352.192592][  T104] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  352.195513][  T104] usb 10-1: USB disconnect, device number 21
[  352.479387][T10981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  352.483964][T10981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  352.487940][T10981] bond0 (unregistering): Released all slaves
[  352.786837][T10981] hsr_slave_0: left promiscuous mode
[  352.789820][T10981] hsr_slave_1: left promiscuous mode
[  352.793143][T10981] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.796037][T10981] batman_adv: batadv0: Removing interface: batadv_slave_0
[  352.800827][T10981] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.803258][T10981] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.843663][T10981] veth1_macvtap: left promiscuous mode
[  352.845538][T10981] veth0_macvtap: left promiscuous mode
[  352.847807][T10981] veth1_vlan: left promiscuous mode
[  352.849489][T10981] veth0_vlan: left promiscuous mode
[  352.932832][T14577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2012'.
[  354.092794][ T5940] Bluetooth: hci2: command tx timeout
[  354.732588][T10981] team0 (unregistering): Port device team_slave_1 removed
[  354.864197][T10981] team0 (unregistering): Port device team_slave_0 removed
[  355.096298][T14605] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  355.098455][T14605] overlayfs: failed to set xattr on upper
[  355.100216][T14605] overlayfs: ...falling back to redirect_dir=nofollow.
[  355.103343][T14605] overlayfs: ...falling back to index=off.
[  355.105608][T14605] overlayfs: ...falling back to uuid=null.
[  356.083751][ T5940] Bluetooth: hci2: command tx timeout
[  356.092435][T14484] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  356.101274][T14484] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  356.109067][T14484] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  356.115804][T14484] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  356.204555][T14484] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.248328][T14484] 8021q: adding VLAN 0 to HW filter on device team0
[  356.258553][T13360] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.260752][T13360] bridge0: port 1(bridge_slave_0) entered forwarding state
[  356.271948][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.274092][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  356.284384][T14614] lo speed is unknown, defaulting to 1000
[  356.301671][T14484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  356.305205][T14484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  356.396662][T14630] 9pnet_fd: Insufficient options for proto=fd
[  356.402899][   T39] audit: type=1326 audit(2000000498.203:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.6.2023" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ae579 code=0x0
[  356.414981][T14484] 8021q: adding VLAN 0 to HW filter on device batadv0
[  356.432988][T14623] /dev/sr0: Can't open blockdev
[  356.445659][ T7314] usb 5-1: new low-speed USB device number 41 using dummy_hcd
[  356.451712][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'.
[  356.455664][T14623] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2023'.
[  356.546743][T14484] veth0_vlan: entered promiscuous mode
[  356.553802][T14627] /dev/sr0: Can't open blockdev
[  356.556162][T14484] veth1_vlan: entered promiscuous mode
[  356.584950][T14484] veth0_macvtap: entered promiscuous mode
[  356.599110][ T7314] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  356.602380][ T7314] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  356.605421][ T7314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  356.610219][ T7314] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  356.613143][ T7314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.616811][T14620] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  356.619125][T14484] veth1_macvtap: entered promiscuous mode
[  356.622807][ T7314] hub 5-1:1.0: bad descriptor, ignoring hub
[  356.625090][ T7314] hub 5-1:1.0: probe with driver hub failed with error -5
[  356.631092][T14484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  356.632986][ T7314] cdc_wdm 5-1:1.0: skipping garbage
[  356.634970][T14484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  356.635521][T14484] batman_adv: batadv0: Interface activated: batadv_slave_0
[  356.645047][T14484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  356.650210][T14484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  356.654039][ T7314] cdc_wdm 5-1:1.0: skipping garbage
[  356.655316][T14484] batman_adv: batadv0: Interface activated: batadv_slave_1
[  356.657826][ T7314] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  356.661666][ T7314] cdc_wdm 5-1:1.0: Unknown control protocol
[  356.661926][T14484] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  356.668663][T14484] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  356.672059][T14484] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  356.675773][T14484] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.823514][T13356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.826162][T13356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.841156][T10981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.843494][T10981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.867936][T14620] netlink: 'syz.0.2022': attribute type 5 has an invalid length.
[  358.450781][T13364] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.067618][T14666] tipc: Started in network mode
[  359.069161][T14666] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  359.071322][T14666] tipc: Enabled bearer <eth:team0>, priority 30
[  359.097787][ T5293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  359.110384][ T5293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  359.115807][ T5293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  359.131533][ T5293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  359.133546][ T5943] usb 5-1: USB disconnect, device number 41
[  359.140167][ T5293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  359.143884][ T5293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  359.169001][T14674] lo speed is unknown, defaulting to 1000
[  359.222273][T14680] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  359.328694][T14674] chnl_net:caif_netlink_parms(): no params data found
[  359.451425][T14674] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.456042][T14674] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.458246][T14674] bridge_slave_0: entered allmulticast mode
[  359.460489][T14674] bridge_slave_0: entered promiscuous mode
[  359.491555][T14674] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.494565][T14674] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.497362][T14674] bridge_slave_1: entered allmulticast mode
[  359.500499][T14674] bridge_slave_1: entered promiscuous mode
[  359.532509][T14674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.539630][T14674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.593962][T14674] team0: Port device team_slave_0 added
[  359.600087][T14674] team0: Port device team_slave_1 added
[  359.620793][T14674] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.622978][T14674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.630753][T14674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.634726][T14674] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.636937][T14674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.644480][T14674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.670943][T14674] hsr_slave_0: entered promiscuous mode
[  359.673240][T14674] hsr_slave_1: entered promiscuous mode
[  359.676182][T14674] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  359.678569][T14674] Cannot create hsr debugfs directory
[  359.935434][T13364] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.004374][T13364] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.081734][T13364] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.143106][  T833] tipc: Node number set to 11578026
[  360.160513][T13364] bridge_slave_1: left allmulticast mode
[  360.162282][T13364] bridge_slave_1: left promiscuous mode
[  360.164006][T13364] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.167012][T13364] bridge_slave_0: left allmulticast mode
[  360.168741][T13364] bridge_slave_0: left promiscuous mode
[  360.171027][T13364] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.495949][T13364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  360.506216][T13364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  360.510885][T13364] bond0 (unregistering): Released all slaves
[  360.800982][T14721] program syz.6.2038 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  360.866834][T13364] hsr_slave_0: left promiscuous mode
[  360.868976][T13364] hsr_slave_1: left promiscuous mode
[  360.872031][T13364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  360.874314][T13364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  360.879036][T13364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  360.881261][T13364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  360.962232][T13364] veth1_macvtap: left promiscuous mode
[  360.965617][T13364] veth0_macvtap: left promiscuous mode
[  360.968331][T14721] ceph: No mds server is up or the cluster is laggy
[  360.969026][T13364] veth1_vlan: left promiscuous mode
[  360.975958][T13364] veth0_vlan: left promiscuous mode
[  360.989141][ T5943] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  361.106782][ T5940] Bluetooth: hci2: command tx timeout
[  361.151989][ T5943] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.155399][ T5943] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.158447][ T5943] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  361.164300][ T5943] usb 10-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[  361.167147][ T5943] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.170703][ T5943] usb 10-1: config 0 descriptor??
[  361.584227][ T5306] usb 5-1: new low-speed USB device number 42 using dummy_hcd
[  361.625777][ T5943] usbhid 10-1:0.0: can't add hid device: -71
[  361.628041][ T5943] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  361.637041][ T5943] usb 10-1: USB disconnect, device number 22
[  361.733946][ T5306] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  361.737120][ T5306] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  361.739846][ T5306] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  361.743249][ T5306] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  361.746003][ T5306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.749948][T14735] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  361.769081][ T5306] hub 5-1:1.0: bad descriptor, ignoring hub
[  361.771078][ T5306] hub 5-1:1.0: probe with driver hub failed with error -5
[  361.773391][ T5306] cdc_wdm 5-1:1.0: skipping garbage
[  361.774952][ T5306] cdc_wdm 5-1:1.0: skipping garbage
[  361.784886][ T5306] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  361.786704][ T5306] cdc_wdm 5-1:1.0: Unknown control protocol
[  361.968851][T13364] team0 (unregistering): Port device team_slave_1 removed
[  362.076464][T13364] team0 (unregistering): Port device team_slave_0 removed
[  362.781861][T14735] netlink: 'syz.0.2041': attribute type 5 has an invalid length.
[  362.784380][T14744] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2043'.
[  362.941223][T14674] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  362.952675][T14674] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  362.956081][T14674] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  362.962084][T14674] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  363.008028][T14674] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.025664][T14674] 8021q: adding VLAN 0 to HW filter on device team0
[  363.039464][T13356] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.041667][T13356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.047258][T13367] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.049574][T13367] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.094426][ T5940] Bluetooth: hci2: command tx timeout
[  363.164615][T14674] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.317317][T14674] veth0_vlan: entered promiscuous mode
[  363.324398][T14674] veth1_vlan: entered promiscuous mode
[  363.334919][T14674] veth0_macvtap: entered promiscuous mode
[  363.337984][T14674] veth1_macvtap: entered promiscuous mode
[  363.344778][T14674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  363.347912][T14674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.351275][T14674] batman_adv: batadv0: Interface activated: batadv_slave_0
[  363.354544][T14674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  363.357675][T14674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.361159][T14674] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.364769][T14674] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.367330][T14674] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.369928][T14674] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.374586][T14674] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.410126][T13358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.413206][T13358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.423865][T13364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.426227][T13364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.305783][ T5977] usb 5-1: USB disconnect, device number 42
[  364.325788][T14792] netlink: 'syz.5.2053': attribute type 10 has an invalid length.
[  364.347568][T14790] binder: BINDER_SET_CONTEXT_MGR already set
[  364.349487][T14790] binder: 14786:14790 ioctl 4018620d 200001c0 returned -16
[  364.414546][T14792] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2053'.
[  365.065207][T14802] program syz.5.2056 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  365.078020][T14802] ubi: mtd0 is already attached to ubi0
[  365.110954][T14806] openvswitch: netlink: Message has 1275 unknown bytes.
[  365.112958][T14806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.346208][T14818] overlayfs: failed to resolve './file0': -2
[  365.385116][ T1412] ieee802154 phy0 wpan0: encryption failed: -22
[  365.510267][T14832] kernel read not supported for file /!selinuxselinux (pid: 14832 comm: syz.6.2064)
[  365.516696][   T39] audit: type=1800 audit(2000000507.767:6564): pid=14832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2064" name="!selinuxselinux" dev="mqueue" ino=58500 res=0 errno=0
[  365.576779][  T832] kernel read not supported for file /sysvipc/shm (pid: 832 comm: kworker/0:2)
[  365.746995][T14834] bond0: (slave bridge0): Releasing backup interface
[  365.840337][T13356] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.450314][ T5975] hid (null): report_id 4647 is invalid
[  366.457961][ T5975] hid-generic 0005:0400:08AE.0005: report_id 4647 is invalid
[  366.460471][ T5975] hid-generic 0005:0400:08AE.0005: item 0 2 1 8 parsing failed
[  366.463118][ T5975] hid-generic 0005:0400:08AE.0005: probe with driver hid-generic failed with error -22
[  366.472169][T14842] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2068'.
[  366.474957][T14842] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2068'.
[  366.477841][T14842] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2068'.
[  366.480556][T14842] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2068'.
[  366.491414][    C0] ==================================================================
[  366.493841][    C0] BUG: KASAN: slab-use-after-free in lock_timer_base+0x1d9/0x220
[  366.496192][    C0] Read of size 4 at addr ffff88804c251150 by task kworker/0:4/5994
[  366.499406][    C0] 
[  366.500718][    C0] CPU: 0 UID: 0 PID: 5994 Comm: kworker/0:4 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0
[  366.503926][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  366.507144][    C0] Workqueue: events mptcp_worker
[  366.508666][    C0] Call Trace:
[  366.509672][    C0]  <IRQ>
[  366.510557][    C0]  dump_stack_lvl+0x116/0x1f0
[  366.511982][    C0]  print_report+0xc3/0x620
[  366.513334][    C0]  ? __virt_addr_valid+0x5e/0x590
[  366.514857][    C0]  ? __phys_addr+0xc6/0x150
[  366.516247][    C0]  kasan_report+0xd9/0x110
[  366.517624][    C0]  ? lock_timer_base+0x1d9/0x220
[  366.519118][    C0]  ? lock_timer_base+0x1d9/0x220
[  366.520622][    C0]  lock_timer_base+0x1d9/0x220
[  366.522072][    C0]  __try_to_del_timer_sync+0x8d/0x170
[  366.523702][    C0]  ? __pfx___try_to_del_timer_sync+0x10/0x10
[  366.525476][    C0]  ? __timer_delete_sync+0x174/0x1b0
[  366.527089][    C0]  __timer_delete_sync+0xf4/0x1b0
[  366.528625][    C0]  sk_stop_timer_sync+0x1b/0x80
[  366.530095][    C0]  mptcp_pm_del_add_timer+0x1ae/0x320
[  366.531732][    C0]  mptcp_incoming_options+0x1f4d/0x26a0
[  366.533412][    C0]  ? __pfx_mptcp_incoming_options+0x10/0x10
[  366.535183][    C0]  ? tcp_parse_options+0x1f0/0x1380
[  366.536945][    C0]  tcp_data_queue+0x187e/0x4d80
[  366.538436][    C0]  ? tcp_urg+0x110/0xb80
[  366.539729][    C0]  ? __pfx_tcp_data_queue+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  366.541296][    C0]  ? tcp_send_dupack+0x7f0/0x810
[  366.542995][    C0]  ? read_tsc+0x9/0x20
[  366.544238][    C0]  ? ktime_get+0x1ac/0x300
[  366.545590][    C0]  tcp_rcv_established+0x7df/0x20d0
[  366.547163][    C0]  ? __pfx_tcp_rcv_established+0x10/0x10
[  366.548859][    C0]  ? do_raw_spin_lock+0x12d/0x2c0
[  366.550379][    C0]  ? __pfx_ipv4_dst_check+0x10/0x10
[  366.552070][    C0]  tcp_v4_do_rcv+0x5ca/0xa90
[  366.553464][    C0]  tcp_v4_rcv+0x33b4/0x43a0
[  366.554862][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  366.556363][    C0]  ? __pfx_raw_local_deliver+0x10/0x10
[  366.557985][    C0]  ? rcu_is_watching+0x12/0xc0
[  366.559444][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  366.560924][    C0]  ip_protocol_deliver_rcu+0xba/0x4c0
[  366.562542][    C0]  ip_local_deliver_finish+0x316/0x570
[  366.564184][    C0]  ip_local_deliver+0x18e/0x1f0
[  366.565653][    C0]  ? __pfx_ip_local_deliver+0x10/0x10
[  366.567272][    C0]  ip_rcv+0x2c3/0x5d0
[  366.568497][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  366.569867][    C0]  __netif_receive_skb_one_core+0x199/0x1e0
[  366.571652][    C0]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  366.573549][    C0]  ? rcu_is_watching+0x12/0xc0
[  366.574990][    C0]  ? process_backlog+0x3f1/0x15f0
[  366.576533][    C0]  ? process_backlog+0x3f1/0x15f0
[  366.578053][    C0]  __netif_receive_skb+0x1d/0x160
[  366.579582][    C0]  process_backlog+0x443/0x15f0
[  366.581063][    C0]  __napi_poll.constprop.0+0xb7/0x550
[  366.582689][    C0]  net_rx_action+0xa94/0x1010
[  366.584128][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  366.585672][    C0]  ? __pfx_mark_lock+0x10/0x10
[  366.587126][    C0]  ? trace_rcu_utilization+0x106/0x170
[  366.588856][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  366.590525][    C0]  ? sched_clock+0x38/0x60
[  366.591880][    C0]  ? sched_clock_cpu+0x6d/0x4d0
[  366.593336][    C0]  ? mark_held_locks+0x9f/0xe0
[  366.594778][    C0]  handle_softirqs+0x213/0x8f0
[  366.596233][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  366.597822][    C0]  ? __mptcp_pm_send_ack+0x1d3/0x1f0
[  366.599367][    C0]  do_softirq+0xb2/0xf0
[  366.600632][    C0]  </IRQ>
[  366.601520][    C0]  <TASK>
[  366.602413][    C0]  __local_bh_enable_ip+0x100/0x120
[  366.603999][    C0]  __mptcp_pm_send_ack+0x1d3/0x1f0
[  366.605548][    C0]  mptcp_pm_nl_addr_send_ack+0x422/0x4b0
[  366.607365][    C0]  ? __pfx_mptcp_pm_nl_addr_send_ack+0x10/0x10
[  366.609229][    C0]  ? mptcp_pm_nl_work+0xa7/0x4f0
[  366.610797][    C0]  mptcp_pm_nl_work+0x29e/0x4f0
[  366.612544][    C0]  mptcp_worker+0x15a/0x1240
[  366.614210][    C0]  ? rcu_is_watching+0x12/0xc0
[  366.616073][    C0]  ? __pfx_mptcp_worker+0x10/0x10
[  366.617599][    C0]  ? process_one_work+0x8bb/0x1b30
[  366.619125][    C0]  ? lock_acquire+0x2f/0xb0
[  366.620504][    C0]  ? process_one_work+0x8bb/0x1b30
[  366.622030][    C0]  process_one_work+0x958/0x1b30
[  366.623515][    C0]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  366.625229][    C0]  ? __pfx_process_one_work+0x10/0x10
[  366.626848][    C0]  ? rcu_is_watching+0x12/0xc0
[  366.628303][    C0]  ? assign_work+0x1a0/0x250
[  366.629694][    C0]  worker_thread+0x6c8/0xf00
[  366.631098][    C0]  ? __kthread_parkme+0x148/0x220
[  366.632648][    C0]  ? __pfx_worker_thread+0x10/0x10
[  366.634199][    C0]  kthread+0x2c1/0x3a0
[  366.635434][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  366.637017][    C0]  ? __pfx_kthread+0x10/0x10
[  366.638421][    C0]  ret_from_fork+0x45/0x80
[  366.639778][    C0]  ? __pfx_kthread+0x10/0x10
[  366.641174][    C0]  ret_from_fork_asm+0x1a/0x30
[  366.642620][    C0]  </TASK>
[  366.643737][    C0] 
[  366.644461][    C0] Allocated by task 14842:
[  366.645801][    C0]  kasan_save_stack+0x33/0x60
[  366.647222][    C0]  kasan_save_track+0x14/0x30
[  366.648642][    C0]  __kasan_kmalloc+0xaa/0xb0
[  366.650023][    C0]  mptcp_pm_alloc_anno_list+0x1cb/0x520
[  366.651683][    C0]  mptcp_pm_create_subflow_or_signal_addr+0x6c5/0x23a0
[  366.653754][    C0]  mptcp_pm_nl_add_addr_doit+0x68b/0xc80
[  366.655429][    C0]  genl_family_rcv_msg_doit+0x202/0x2f0
[  366.657142][    C0]  genl_rcv_msg+0x565/0x800
[  366.658692][    C0]  netlink_rcv_skb+0x165/0x410
[  366.660153][    C0]  genl_rcv+0x28/0x40
[  366.661361][    C0]  netlink_unicast+0x53c/0x7f0
[  366.662798][    C0]  netlink_sendmsg+0x8b8/0xd70
[  366.664534][    C0]  ____sys_sendmsg+0x9ae/0xb40
[  366.666331][    C0]  ___sys_sendmsg+0x135/0x1e0
[  366.667941][    C0]  __sys_sendmsg+0x16e/0x220
[  366.669402][    C0]  __do_fast_syscall_32+0x73/0x120
[  366.671050][    C0]  do_fast_syscall_32+0x32/0x80
[  366.672570][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  366.674752][    C0] 
[  366.675481][    C0] Freed by task 14842:
[  366.676740][    C0]  kasan_save_stack+0x33/0x60
[  366.678148][    C0]  kasan_save_track+0x14/0x30
[  366.679559][    C0]  kasan_save_free_info+0x3b/0x60
[  366.681080][    C0]  __kasan_slab_free+0x51/0x70
[  366.682520][    C0]  kfree+0x14f/0x4b0
[  366.683723][    C0]  mptcp_pm_nl_flush_addrs_doit+0x526/0xeb0
[  366.685485][    C0]  genl_family_rcv_msg_doit+0x202/0x2f0
[  366.687138][    C0]  genl_rcv_msg+0x565/0x800
[  366.688512][    C0]  netlink_rcv_skb+0x165/0x410
[  366.689948][    C0]  genl_rcv+0x28/0x40
[  366.691155][    C0]  netlink_unicast+0x53c/0x7f0
[  366.692658][    C0]  netlink_sendmsg+0x8b8/0xd70
[  366.694192][    C0]  ____sys_sendmsg+0x9ae/0xb40
[  366.695647][    C0]  ___sys_sendmsg+0x135/0x1e0
[  366.697097][    C0]  __sys_sendmsg+0x16e/0x220
[  366.698805][    C0]  __do_fast_syscall_32+0x73/0x120
[  366.700485][    C0]  do_fast_syscall_32+0x32/0x80
[  366.702366][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  366.704363][    C0] 
[  366.705339][    C0] The buggy address belongs to the object at ffff88804c251100
[  366.705339][    C0]  which belongs to the cache kmalloc-192 of size 192
[  366.710481][    C0] The buggy address is located 80 bytes inside of
[  366.710481][    C0]  freed 192-byte region [ffff88804c251100, ffff88804c2511c0)
[  366.715110][    C0] 
[  366.715935][    C0] The buggy address belongs to the physical page:
[  366.718332][    C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c251
[  366.721038][    C0] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[  366.723221][    C0] page_type: f5(slab)
[  366.724448][    C0] raw: 04fff00000000000 ffff88801ac423c0 dead000000000100 dead000000000122
[  366.727027][    C0] raw: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000
[  366.729638][    C0] page dumped because: kasan: bad access detected
[  366.731570][    C0] page_owner tracks the page as allocated
[  366.733286][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12746, tgid 12746 (syz-executor), ts 293886128856, free_ts 293881630196
[  366.739050][    C0]  post_alloc_hook+0x2d1/0x350
[  366.740492][    C0]  get_page_from_freelist+0xfce/0x2f80
[  366.742115][    C0]  __alloc_pages_noprof+0x223/0x25b0
[  366.743711][    C0]  alloc_pages_mpol_noprof+0x2c9/0x610
[  366.745354][    C0]  new_slab+0x2c9/0x410
[  366.746622][    C0]  ___slab_alloc+0xce2/0x1650
[  366.748049][    C0]  __slab_alloc.constprop.0+0x56/0xb0
[  366.749653][    C0]  __kmalloc_cache_noprof+0xf6/0x420
[  366.751240][    C0]  addr_event.part.0+0x7b/0x4f0
[  366.752704][    C0]  inet6addr_event+0x165/0x1e0
[  366.754315][    C0]  notifier_call_chain+0xb7/0x410
[  366.755839][    C0]  atomic_notifier_call_chain+0x71/0x1c0
[  366.757527][    C0]  ipv6_add_addr+0x13a2/0x2010
[  366.758963][    C0]  addrconf_add_linklocal+0x2a6/0x620
[  366.760582][    C0]  addrconf_addr_gen+0x37b/0x3d0
[  366.762108][    C0]  addrconf_init_auto_addrs+0x446/0x820
[  366.763760][    C0] page last free pid 11901 tgid 11901 stack trace:
[  366.765697][    C0]  free_unref_page+0x661/0x1080
[  366.767179][    C0]  vfree+0x174/0x950
[  366.768378][    C0]  xt_compat_flush_offsets+0x8f/0x160
[  366.769987][    C0]  translate_compat_table+0x128d/0x18e0
[  366.771966][    C0]  compat_do_replace+0x35d/0x500
[  366.773458][    C0]  do_ip6t_set_ctl+0x686/0xc20
[  366.774905][    C0]  nf_setsockopt+0x8a/0xf0
[  366.776274][    C0]  ipv6_setsockopt+0x135/0x170
[  366.777697][    C0]  tcp_setsockopt+0xa4/0x100
[  366.779092][    C0]  do_sock_setsockopt+0x222/0x480
[  366.780611][    C0]  __sys_setsockopt+0x1a0/0x230
[  366.782076][    C0]  __do_compat_sys_socketcall+0x51c/0x700
[  366.783845][    C0]  __do_fast_syscall_32+0x73/0x120
[  366.785380][    C0]  do_fast_syscall_32+0x32/0x80
[  366.786860][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  366.788775][    C0] 
[  366.789505][    C0] Memory state around the buggy address:
[  366.791181][    C0]  ffff88804c251000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  366.793842][    C0]  ffff88804c251080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  366.796255][    C0] >ffff88804c251100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  366.798638][    C0]                                                  ^
[  366.800630][    C0]  ffff88804c251180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  366.803012][    C0]  ffff88804c251200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  366.805405][    C0] ==================================================================
[  366.807871][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  366.810020][    C0] CPU: 0 UID: 0 PID: 5994 Comm: kworker/0:4 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0
[  366.813398][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  366.816669][    C0] Workqueue: events mptcp_worker
[  366.818170][    C0] Call Trace:
[  366.819242][    C0]  <IRQ>
[  366.820130][    C0]  dump_stack_lvl+0x3d/0x1f0
[  366.821529][    C0]  panic+0x71d/0x800
[  366.823027][    C0]  ? __pfx_panic+0x10/0x10
[  366.824657][    C0]  ? rcu_is_watching+0x12/0xc0
[  366.826540][    C0]  ? __pfx_lock_release+0x10/0x10
[  366.828446][    C0]  ? check_panic_on_warn+0x1f/0xb0
[  366.830433][    C0]  check_panic_on_warn+0xab/0xb0
[  366.832276][    C0]  end_report+0x117/0x180
[  366.833907][    C0]  kasan_report+0xe9/0x110
[  366.835659][    C0]  ? lock_timer_base+0x1d9/0x220
[  366.837289][    C0]  ? lock_timer_base+0x1d9/0x220
[  366.838821][    C0]  lock_timer_base+0x1d9/0x220
[  366.840325][    C0]  __try_to_del_timer_sync+0x8d/0x170
[  366.842020][    C0]  ? __pfx___try_to_del_timer_sync+0x10/0x10
[  366.844039][    C0]  ? __timer_delete_sync+0x174/0x1b0
[  366.846112][    C0]  __timer_delete_sync+0xf4/0x1b0
[  366.848118][    C0]  sk_stop_timer_sync+0x1b/0x80
[  366.850042][    C0]  mptcp_pm_del_add_timer+0x1ae/0x320
[  366.852029][    C0]  mptcp_incoming_options+0x1f4d/0x26a0
[  366.853981][    C0]  ? __pfx_mptcp_incoming_options+0x10/0x10
[  366.855634][    C0]  ? tcp_parse_options+0x1f0/0x1380
[  366.857150][    C0]  tcp_data_queue+0x187e/0x4d80
[  366.858997][    C0]  ? tcp_urg+0x110/0xb80
[  366.860622][    C0]  ? __pfx_tcp_data_queue+0x10/0x10
[  366.862418][    C0]  ? tcp_send_dupack+0x7f0/0x810
[  366.863976][    C0]  ? read_tsc+0x9/0x20
[  366.865199][    C0]  ? ktime_get+0x1ac/0x300
[  366.866557][    C0]  tcp_rcv_established+0x7df/0x20d0
[  366.868134][    C0]  ? __pfx_tcp_rcv_established+0x10/0x10
[  366.869988][    C0]  ? do_raw_spin_lock+0x12d/0x2c0
[  366.871503][    C0]  ? __pfx_ipv4_dst_check+0x10/0x10
[  366.872948][    C0]  tcp_v4_do_rcv+0x5ca/0xa90
[  366.874291][    C0]  tcp_v4_rcv+0x33b4/0x43a0
[  366.875668][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  366.877084][    C0]  ? __pfx_raw_local_deliver+0x10/0x10
[  366.878713][    C0]  ? rcu_is_watching+0x12/0xc0
[  366.880168][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  366.881651][    C0]  ip_protocol_deliver_rcu+0xba/0x4c0
[  366.883384][    C0]  ip_local_deliver_finish+0x316/0x570
[  366.885030][    C0]  ip_local_deliver+0x18e/0x1f0
[  366.886504][    C0]  ? __pfx_ip_local_deliver+0x10/0x10
[  366.888123][    C0]  ip_rcv+0x2c3/0x5d0
[  366.889330][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  366.890716][    C0]  __netif_receive_skb_one_core+0x199/0x1e0
[  366.892515][    C0]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  366.894429][    C0]  ? rcu_is_watching+0x12/0xc0
[  366.895886][    C0]  ? process_backlog+0x3f1/0x15f0
[  366.897414][    C0]  ? process_backlog+0x3f1/0x15f0
[  366.898936][    C0]  __netif_receive_skb+0x1d/0x160
[  366.900449][    C0]  process_backlog+0x443/0x15f0
[  366.901925][    C0]  __napi_poll.constprop.0+0xb7/0x550
[  366.903583][    C0]  net_rx_action+0xa94/0x1010
[  366.905394][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  366.907437][    C0]  ? __pfx_mark_lock+0x10/0x10
[  366.908973][    C0]  ? trace_rcu_utilization+0x106/0x170
[  366.910614][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  366.912183][    C0]  ? sched_clock+0x38/0x60
[  366.913526][    C0]  ? sched_clock_cpu+0x6d/0x4d0
[  366.914985][    C0]  ? mark_held_locks+0x9f/0xe0
[  366.916456][    C0]  handle_softirqs+0x213/0x8f0
[  366.917890][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  366.919474][    C0]  ? __mptcp_pm_send_ack+0x1d3/0x1f0
[  366.921060][    C0]  do_softirq+0xb2/0xf0
[  366.922350][    C0]  </IRQ>
[  366.923336][    C0]  <TASK>
[  366.924454][    C0]  __local_bh_enable_ip+0x100/0x120
[  366.926093][    C0]  __mptcp_pm_send_ack+0x1d3/0x1f0
[  366.927635][    C0]  mptcp_pm_nl_addr_send_ack+0x422/0x4b0
[  366.929488][    C0]  ? __pfx_mptcp_pm_nl_addr_send_ack+0x10/0x10
[  366.931328][    C0]  ? mptcp_pm_nl_work+0xa7/0x4f0
[  366.932830][    C0]  mptcp_pm_nl_work+0x29e/0x4f0
[  366.934286][    C0]  mptcp_worker+0x15a/0x1240
[  366.935676][    C0]  ? rcu_is_watching+0x12/0xc0
[  366.937139][    C0]  ? __pfx_mptcp_worker+0x10/0x10
[  366.938643][    C0]  ? process_one_work+0x8bb/0x1b30
[  366.940186][    C0]  ? lock_acquire+0x2f/0xb0
[  366.941545][    C0]  ? process_one_work+0x8bb/0x1b30
[  366.943414][    C0]  process_one_work+0x958/0x1b30
[  366.944961][    C0]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  366.946664][    C0]  ? __pfx_process_one_work+0x10/0x10
[  366.948450][    C0]  ? rcu_is_watching+0x12/0xc0
[  366.950345][    C0]  ? assign_work+0x1a0/0x250
[  366.952156][    C0]  worker_thread+0x6c8/0xf00
[  366.953595][    C0]  ? __kthread_parkme+0x148/0x220
[  366.955097][    C0]  ? __pfx_worker_thread+0x10/0x10
[  366.956648][    C0]  kthread+0x2c1/0x3a0
[  366.957868][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  366.959429][    C0]  ? __pfx_kthread+0x10/0x10
[  366.960829][    C0]  ret_from_fork+0x45/0x80
[  366.962162][    C0]  ? __pfx_kthread+0x10/0x10
[  366.963546][    C0]  ret_from_fork_asm+0x1a/0x30
[  366.964992][    C0]  </TASK>
[  368.026109][    C0] Shutting down cpus with NMI
[  368.028176][    C0] Kernel Offset: disabled
[  368.029480][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:45:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85143435 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc90000006dd0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666
R12=0000000000000000 R13=0000000000000072 R14=ffffffff851433d0 R15=0000000000000000
RIP=ffffffff8514345f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c25571d CR3=0000000049e34000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000732 RBX=0000000000000003 RCX=ffffc90028416000 RDX=0000000000080000
RSI=ffffffff81484a34 RDI=ffffffff8bb17100 RBP=ffff88807395c1c0 RSP=ffffc9000462f0b0
R8 =0000000000000001 R9 =fffffbfff2d36dad R10=ffffffff969b6d6f R11=0000000000000004
R12=0000000000000003 R13=0000000000000003 R14=ffff88802b53fc40 R15=ffffed100e72b838
RIP=ffffffff81484a36 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c2ac3ed CR3=0000000049e34000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000003 RBX=0000000000000000 RCX=ffff888069398ae0 RDX=dffffc0000000000
RSI=ffff888069398ac4 RDI=0000000000000004 RBP=dffffc0000000000 RSP=ffffc900076978d8
R8 =0000000000000002 R9 =fffffbfff2d36db6 R10=ffffffff969b6db7 R11=0000000000000002
R12=ffff888069398ad9 R13=ffff888069398000 R14=0000000000000007 R15=ffff888069398b30
RIP=ffffffff81761726 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005626c5c3f000 CR3=000000004c186000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=6c186a246c186a24 6c186a246c186a24 6c186a246c186a24 6c186a246c186a24 6c186a246c186a24 6c186a246c186a24 6c186a246c186a24 6c186a246c186a24
ZMM22=ed70471bed70471b ed70471bed70471b ed70471bed70471b ed70471bed70471b ed70471bed70471b ed70471bed70471b ed70471bed70471b ed70471bed70471b
ZMM23=4788a6fd4788a6fd 4788a6fd4788a6fd 4788a6fd4788a6fd 4788a6fd4788a6fd 4788a6fd4788a6fd 4788a6fd4788a6fd 4788a6fd4788a6fd 4788a6fd4788a6fd
ZMM24=b8da8902b8da8902 b8da8902b8da8902 b8da8902b8da8902 b8da8902b8da8902 b8da8902b8da8902 b8da8902b8da8902 b8da8902b8da8902 b8da8902b8da8902
ZMM25=87c0923a87c0923a 87c0923a87c0923a 87c0923a87c0923a 87c0923a87c0923a 87c0923a87c0923a 87c0923a87c0923a 87c0923a87c0923a 87c0923a87c0923a
ZMM26=140e9e82140e9e82 140e9e82140e9e82 140e9e82140e9e82 140e9e82140e9e82 140e9e82140e9e82 140e9e82140e9e82 140e9e82140e9e82 140e9e82140e9e82
ZMM27=49cf137749cf1377 49cf137749cf1377 49cf137749cf1377 49cf137749cf1377 49cf137749cf1377 49cf137749cf1377 49cf137749cf1377 49cf137749cf1377
ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=ba0d0000ba0d0000 ba0d0000ba0d0000 ba0d0000ba0d0000 ba0d0000ba0d0000 ba0d0000ba0d0000 ba0d0000ba0d0000 ba0d0000ba0d0000 ba0d0000ba0d0000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=ffff88802b73ff00 RCX=ffffffff818d6f74 RDX=ffff88801d298000
RSI=ffffffff818d6f4f RDI=0000000000000005 RBP=ffffc9000045fd78 RSP=ffffc9000045fca0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1bb8bee
R12=1ffff9200008bf98 R13=0000000000000001 R14=0000000000000003 R15=ffffed10056e7fe1
RIP=ffffffff818d6f55 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7465004 CR3=000000005b4ce000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000