last executing test programs:

11m29.592324492s ago: executing program 32 (id=12):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto]}}, 0x0, 0x4a}, 0x28)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fbffffff0000000003000000850000002a000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000000))
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0x20001, 0x4)
fdatasync(r4)
timer_settime(0x0, 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

8m37.461841226s ago: executing program 4 (id=201):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100))
r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x32}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000280)=0x8)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)

8m35.446569998s ago: executing program 4 (id=203):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10"], 0x48)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e0000"], 0x50}}, 0x0)
r4 = gettid()
tkill(r4, 0x16)
r5 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f00000001c0)={0x2, 0x100, 0x3, {0x4, 0xfffffffe, 0x6, 0x870}})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = dup(0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}}}, 0x84)

8m35.443024133s ago: executing program 1 (id=211):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r3, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r4, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff)
ftruncate(r5, 0x200000)
write(0xffffffffffffffff, 0x0, 0x0)

8m32.629953679s ago: executing program 4 (id=204):
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

8m32.494801528s ago: executing program 1 (id=205):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0xa, 0x801, 0x0)
r3 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x80)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000001c00), 0x12)
syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00')
r6 = socket$inet_udp(0x2, 0x2, 0x0)
fchdir(0xffffffffffffffff)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9)
getdents(r7, &(0x7f0000000080)=""/43, 0x2b)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x190)

8m31.712943564s ago: executing program 4 (id=208):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
pipe(&(0x7f0000000200))
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb080047fa00300066000204f471cd854eb26d783fffffff4404119144046c634e244e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100005907805dc"], 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r1, 0x5ee36000)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000"], 0x40}}, 0x0)
sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(0xffffffffffffffff, 0x0, 0x1)
fchdir(r4)
getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29)

8m30.507980703s ago: executing program 1 (id=210):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x20000000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x5, "dcdf04"}]}}}}}}}}, 0x0)
listen(r4, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, 0x0, &(0x7f0000004880)=@udp=r4}, 0x20)
recvfrom(r4, 0x0, 0x0, 0x12120, 0x0, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x4000000)

8m29.313422821s ago: executing program 4 (id=212):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_get$pid(0x2, r0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff)
r5 = socket(0x1d, 0x2, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6}, 0x0, 0x0)
bind$can_j1939(r5, &(0x7f0000000000)={0x1d, 0x0, 0x3}, 0x18)
sendmmsg$inet(r5, &(0x7f0000002e00), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0)

8m28.061104015s ago: executing program 1 (id=213):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000a5"], 0x0, 0x4e}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x49a0, &(0x7f0000000300)={0x0, 0x9e70, 0x80000, 0x0, 0x2e8}, &(0x7f00000003c0)=<r2=>0x0, 0x0, &(0x7f0000000480))
syz_ublk_setup_io_uring(0x7096, &(0x7f00000004c0)={0x0, 0x9acb, 0x1, 0x3, 0x1d, 0x0, r1}, &(0x7f0000000580), 0x0, &(0x7f0000000600))
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r4 = syz_io_uring_setup(0x281a, &(0x7f0000000800)={0x0, 0xa8c3, 0x400, 0x3, 0x2c1}, 0x0, &(0x7f0000000680)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, r6, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x44, 0x0, @fd=r3, 0x5f4a, 0x0, 0x29b, 0x2, 0x0, {0x0, r7}})
syz_io_uring_submit(r2, 0x0, 0x0, &(0x7f0000000780)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r7}})
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r8, 0x106, 0x1, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
ppoll(&(0x7f0000000380)=[{r10, 0x8430}, {r9, 0x14001}], 0x2, 0x0, 0x0, 0x0)
r11 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0)
syz_usb_ep_read(r11, 0xd, 0x6, &(0x7f0000000140))
r12 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r12, 0x4020565a, &(0x7f0000000200)={0x5, 0xa9, 0x3})
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)

8m25.2140109s ago: executing program 4 (id=215):
r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x270846)
read$FUSE(r0, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, 0x0, 0x0, 0x1214040, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r5, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x23}], 0x1)
r6 = fcntl$dupfd(r5, 0x0, r5)
write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xfffffffe]}}, {0x0, 0x0, 0x3, 0x0, @time}], 0x38)
write$9p(r0, 0x0, 0x0)

8m22.62237466s ago: executing program 1 (id=217):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
tgkill(r2, r0, 0x20)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mremap(&(0x7f00004f9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000474000/0x1000)=nil)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x38}}, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
waitid(0x2, r2, &(0x7f00000000c0), 0x8, &(0x7f0000000200))
getdents64(0xffffffffffffffff, &(0x7f0000003f80)=""/4098, 0x1002)

8m20.512438586s ago: executing program 1 (id=219):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x450001, 0x4c)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe})
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0)
listen(r0, 0xfffffff7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x282422, &(0x7f0000000400)=ANY=[])
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050)
fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "77d2f65b8b80751448be9757f6a4adfd0c3e66f5"}, 0x15, 0x3)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)

8m8.055699376s ago: executing program 33 (id=215):
r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x270846)
read$FUSE(r0, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, 0x0, 0x0, 0x1214040, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r5, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x23}], 0x1)
r6 = fcntl$dupfd(r5, 0x0, r5)
write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xfffffffe]}}, {0x0, 0x0, 0x3, 0x0, @time}], 0x38)
write$9p(r0, 0x0, 0x0)

8m4.808927552s ago: executing program 34 (id=219):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x450001, 0x4c)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe})
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0)
listen(r0, 0xfffffff7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x282422, &(0x7f0000000400)=ANY=[])
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050)
fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "77d2f65b8b80751448be9757f6a4adfd0c3e66f5"}, 0x15, 0x3)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)

5m0.792275748s ago: executing program 7 (id=369):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000800)=ANY=[@ANYRES16=r1, @ANYBLOB="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", @ANYRES8=r0], 0x1c}, {&(0x7f0000000240)=ANY=[@ANYBLOB='%\x00'/16], 0x10}], 0x2}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="05"], 0x80}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="c3aee0710000000000", @ANYRESDEC=r0, @ANYBLOB="04002b000808000000140018008000087564703a73797a3000fd00"/42], 0x30}, 0x1, 0x0, 0x0, 0x20040045}, 0x40001)
r2 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r2, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
io_uring_setup(0x3a63, &(0x7f0000000500)={0x0, 0xfd31, 0x40, 0x80000, 0x126})
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r6, 0x89ef, &(0x7f0000000080))
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$int_in(r7, 0x400455c8, 0x0)

4m57.288958541s ago: executing program 6 (id=372):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00')
read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4)
sendmsg$802154_dgram(r6, &(0x7f00000018c0)={&(0x7f0000000500)={0x24, @short}, 0x14, &(0x7f0000001880)={0x0}}, 0x0)
gettimeofday(0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000090)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000)

4m54.316216025s ago: executing program 7 (id=373):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x2, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100))
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd700003dcdf250400000014000600000000000000000000000000000000011400050000000000000000000000000000000000080004000300304508000200"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

4m54.249836293s ago: executing program 6 (id=374):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00'})
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x5, &(0x7f00000003c0)={0x7fffffff, {{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {{0xa, 0x4e24, 0xffffffff, @mcast2, 0x6}}}, 0x108)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff)
write$cgroup_pid(r4, &(0x7f0000000380), 0x12)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000007000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000016e000/0x1000)=nil, &(0x7f000003a000/0x2000)=nil, &(0x7f00006ef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffe6c)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
read$FUSE(r5, &(0x7f0000002700)={0x2020}, 0x2020)

4m52.448599245s ago: executing program 6 (id=375):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0xa0000004})

4m42.065869497s ago: executing program 7 (id=385):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(&(0x7f00000013c0), 0xc0, 0x40001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x148}}, 0x4810)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x804)
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write(r6, &(0x7f0000000240)="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", 0x17e)

4m40.261137897s ago: executing program 7 (id=386):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f00000008c0)={&(0x7f0000000600)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000085}, 0x80)
write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0)
openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x280, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6(0xa, 0x2, 0x6)

4m40.001945268s ago: executing program 6 (id=387):
getdents(0xffffffffffffffff, &(0x7f0000000000)=""/101, 0x65)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80322, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x106f)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000180)={0x9f14, {"0000000000000000c031ff5b22fd9b7b", "3dfab043e15fad27a639f905b5e9f977", "a7ff0f000000000089000000ff4a70f3"}, 0xffffff00, 0x7})
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbhid/remove_id\x00', 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000840)='net/packet\x00')
read$FUSE(r6, &(0x7f0000000880)={0x2020}, 0x2020)
write(r5, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9bba02f104f8330f}, 0x4c011)

4m38.751566364s ago: executing program 7 (id=388):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0)
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1}, 0x1c, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000440)}, {&(0x7f0000000480)="0c7d18b0d81b997e4fee", 0xa}], 0x3}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc48f}, 0x7)
capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000100)={0x200000, 0x200000, 0x1000002, 0x0, 0xd33, 0xd26d})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, <r7=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r6, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r7, 0x0, 0x0, <r8=>0x0, 0x0, 0x1000})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r7, 0x0, r8})

4m36.948120309s ago: executing program 7 (id=389):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc3})
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000000))
ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, 0x0)
sched_setscheduler(0x0, 0x6, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r7 = getpid()
kcmp(r7, r7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)

4m35.029352059s ago: executing program 6 (id=392):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}})
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e)

4m31.519479751s ago: executing program 6 (id=394):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000"], 0x0, 0x3a, 0x0, 0x0, 0x5}, 0x28)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={0x0})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r4 = socket(0x1e, 0x80000, 0x4)
setsockopt(r4, 0xff, 0x1, 0x0, 0x51)
set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="88000000000000002a5b8b6ccd1a751d5378188aa558445d1f410adcbeeb7808a6d54372a9e6f4a1b7d3c92c30a8d877a191d62d854466111cfdf75bda8e16921c4f5bdf18e8fa46161dc579987ca7c5a569d9dbfb85bee1d69fd781666cb43652c9cd50de129f87b878dffd6e66636741ffcae9afc12fdc3cf2a9782c5a0c453f", 0x0, 0x3ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m19.997905027s ago: executing program 35 (id=389):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc3})
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000000))
ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, 0x0)
sched_setscheduler(0x0, 0x6, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r7 = getpid()
kcmp(r7, r7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)

4m18.572285774s ago: executing program 3 (id=407):
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000040000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400), 0xc)
prctl$PR_SET_TIMERSLACK(0x1d, 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r3, 0x0, 0x4000)
r4 = socket(0x23, 0x5, 0x0)
sendmsg$rds(r4, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4000040)

4m16.199318995s ago: executing program 36 (id=394):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000"], 0x0, 0x3a, 0x0, 0x0, 0x5}, 0x28)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={0x0})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r4 = socket(0x1e, 0x80000, 0x4)
setsockopt(r4, 0xff, 0x1, 0x0, 0x51)
set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="88000000000000002a5b8b6ccd1a751d5378188aa558445d1f410adcbeeb7808a6d54372a9e6f4a1b7d3c92c30a8d877a191d62d854466111cfdf75bda8e16921c4f5bdf18e8fa46161dc579987ca7c5a569d9dbfb85bee1d69fd781666cb43652c9cd50de129f87b878dffd6e66636741ffcae9afc12fdc3cf2a9782c5a0c453f", 0x0, 0x3ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m14.162809825s ago: executing program 3 (id=413):
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
socket(0x1e, 0x80000, 0x4)

4m10.507349927s ago: executing program 3 (id=415):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}})
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e)

4m10.065889349s ago: executing program 3 (id=417):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}})
r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6)
fallocate(0xffffffffffffffff, 0x71, 0x80000001, 0xcfc9)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xa800, 0x0)
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f0000000140))
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x40, @loopback, 0x2392}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7}], 0x1c)

4m6.779002716s ago: executing program 3 (id=421):
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
getpid()
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
close_range(r3, r4, 0x0)

4m2.364980251s ago: executing program 3 (id=426):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, 0x0, 0x20000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

3m46.944334922s ago: executing program 37 (id=426):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, 0x0, 0x20000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

25.953620797s ago: executing program 5 (id=571):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x106, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}, r6}}, 0x30)
fcntl$lock(r1, 0x24, &(0x7f0000000280)={0x0, 0x0, 0xf7, 0x4, r0})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r6, 0x9dff7ffc}}, 0x4d)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x7400}, 0x20004800)
sendmsg$nl_route(r4, 0x0, 0x40)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)

23.320798966s ago: executing program 5 (id=575):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d", 0x4}, {0x0}], 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r1, &(0x7f0000000a40)={0x0, &(0x7f0000000880)=[@wrmsr={0x65, 0x20, {0x83f, 0xffffffffffffffff}}, @wr_drn={0x68, 0x20, {0x3, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @uexit={0x0, 0x18, 0x22}, @nested_vmresume={0x130, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x4, 0xccbe}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x4, 0x8cac}}], 0xf0})
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
rename(0x0, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x140, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {0x0, 0x401}, 0x0, 0x0, 0xa, 0x1, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}]}, 0x140}}, 0x20000000)

16.868941815s ago: executing program 5 (id=578):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0)
r1 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x30b8, 0x8, 0x2, 0x158}, &(0x7f00000020c0)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r0, {0x212, 0x8001}}, './sys/bus/i2c/devices/i2c-0/new_device\x00'})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x10, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd33, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x7, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r5, '\x00', {0x204, 0x8004, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r9, 0x0, 0xffffff6a)
unshare(0x22020600)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
fsync(r10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0, <r12=>0x0}, 0x0)
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x38728a2, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r12}}]})

16.801099056s ago: executing program 8 (id=579):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x1a2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0)
rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00')
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x2, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x8, 0x40040001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

15.147221047s ago: executing program 8 (id=580):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x10, 0x0, 0x7fc00100}]})
io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x3e, &(0x7f0000019340)=ANY=[@ANYBLOB], 0x0)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xd, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040040)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002080))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100))
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}]}, 0x34}}, 0x0)

14.724196805s ago: executing program 5 (id=582):
prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000f77000/0x4000)=nil)
capset(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000b25000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x7750)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000440))
r5 = openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000780)=0x3)
ioctl$TIOCSSOFTCAR(r5, 0x5434, 0x0)
munlockall()
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)

13.149485901s ago: executing program 0 (id=583):
socket$unix(0x1, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)

13.147678908s ago: executing program 8 (id=584):
syz_io_uring_setup(0x8ce, 0x0, 0x0, 0x0, &(0x7f0000000280))
openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)="1dfd71d864192bb2e01c945aae35f1bd51ad8c64b9071fa0a870d49a6e01c42b5028df27c3af10b4ba540b149238d64aaca12eacdd5f6d824920e5f9f7adba3df8c68bd4ebac87aebc176fc3322970cc769cb6e9402c692bb1ae6d526f9a40d5", 0x60}, {0x0}, {0x0}], 0x3)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
signalfd(r2, &(0x7f0000000340)={[0xabed2e56]}, 0x8)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4)
recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4, 0x4}, 0x1}], 0x1, 0x60010160, 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000})
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

10.915523139s ago: executing program 0 (id=586):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x33)
ioctl$BLKZEROOUT(r7, 0xc01070ce, &(0x7f0000000040)={0x1, 0xffff})
ioctl$PPPIOCDISCONN(r7, 0x7439)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000001780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0})
r8 = syz_open_dev$sg(&(0x7f0000000140), 0x690, 0x0)
ioctl$SG_SET_DEBUG(r8, 0x227e, &(0x7f0000000180)=0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000000))
r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r9, &(0x7f0000005180)={0x2020}, 0x2020)

8.907913658s ago: executing program 2 (id=587):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d", 0x4}, {0x0}], 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r1, &(0x7f0000000a40)={0x0, &(0x7f0000000880)=[@wrmsr={0x65, 0x20, {0x83f, 0xffffffffffffffff}}, @wr_drn={0x68, 0x20, {0x3, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @uexit={0x0, 0x18, 0x22}, @nested_vmresume={0x130, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x4, 0xccbe}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x4, 0x8cac}}], 0xf0})
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
rename(0x0, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x140, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {0x0, 0x401}, 0x0, 0x0, 0xa, 0x1, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}]}, 0x140}}, 0x20000000)

8.724282098s ago: executing program 8 (id=588):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setitimer(0x1, 0x0, &(0x7f0000000840))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102020000402505a1a440000102030109025c0002010080050904000001020d0000052406000105240022fe0d240f0104000000030002000306241200000c0905810320000101000904010000020d00000904010102020d000009058202100037070509050302ff03050009"], 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000200))
r4 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000009b80)={0x40000012})
r5 = io_uring_setup(0x4129, &(0x7f00000007c0)={0x0, 0x0, 0x1000, 0x0, 0x1000000, 0x0, r3})
r6 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "41fad9231f9605db7317a505c9c6e3c54139a42fc3bb2674bd7c89e8d48b86b308fab237d6231b302b7421a260396f8c81ecc6c21d1ac02a49db9a9a20d2250d", 0x2f}, 0x48, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f00000004c0)='\'@%\\\x00', &(0x7f0000000500))
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xdc80ea85af82a79c, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x7, r8, 0x0, &(0x7f0000000340)='~', 0x1, 0x80002})
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00000002c0)='\n', 0xfffffff8, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r2, 0x0, &(0x7f000000c000/0x2000)=nil, 0x2000, 0xd})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x80108907, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffe29, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYRES64=r8], 0x114}], 0x1, 0x0, 0x0, 0x24002000}, 0x0)

8.205704204s ago: executing program 0 (id=589):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$setsig(0x4203, 0x0, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'erspan0\x00', 0x0})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
fallocate(r1, 0x20, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000000c0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

8.138301586s ago: executing program 2 (id=590):
setns(0xc9, 0x0)
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000400)={r1, 0x0, 0x230000, &(0x7f0000000300)={@align, {0x265, 0x1, 0x40, 0x2}}, 0x10000, &(0x7f0000000340), &(0x7f0000000740)=0xfffffff6})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/24/smp_affinity\x00', 0x1, 0x0)
write(r5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20)
syz_open_dev$audion(&(0x7f00000005c0), 0x137c, 0x40001)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r6], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x197c}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
r7 = openat(r0, &(0x7f0000001040)='net/atm/vc\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000002080)={0x2020}, 0x2020)

6.743098986s ago: executing program 0 (id=591):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x4ae, r2)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x2, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100))
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd700003dcdf250400000014000600000000000000000000000000000000011400050000000000000000000000000000000000080004000300304508000200"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

5.634085909s ago: executing program 5 (id=592):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x8100, 0xd, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da2", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$rxrpc(0x21, 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./config\x00')
write(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0xa4a1\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x2, 0x0)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000000040f7eca4d7"], 0x40)
write(r2, 0x0, 0x0)
symlinkat(&(0x7f0000000340)='usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='usb_gadget/g1/configs/c.1/ecm.usb0\x00')
nanosleep(&(0x7f0000000440)={0x0, 0x1dcd6500}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', 0x1})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r5, &(0x7f0000000600)={0x11, 0x300, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x930)

5.537593615s ago: executing program 2 (id=593):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@deltclass={0x6c, 0x29, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xb, 0xfff2}, {0x0, 0xffff}, {0x3}}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0xf7, 0x9b}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0xfc, 0x8}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24045090}, 0x4880)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x81, 0x3, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)="21920152", 0x4}], 0x1, 0x0, 0x1b}, 0x24004014)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'vcan0\x00'})
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f00000000c0), 0xc, &(0x7f0000000f80)={&(0x7f0000000880)=ANY=[], 0x1d0}, 0x1, 0x0, 0x0, 0x4004}, 0x4008004)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f0000000000)='0\x00', 0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="33330000000100000000000086dd6000000000072c40fe800000000000000000000000000001ff020000000000000000000000000001"], 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000016})
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="0f01c90f20a7c4817d5bf12e460f01df440f20c0350b000200440f22c03e36360f0726260f01cb660f38de257a6200000f01c40f07", 0x35}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000778000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.094017133s ago: executing program 0 (id=594):
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002280), &(0x7f00000022c0)=0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x14, 0x2d, 0x1, 0x0, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42801, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
timer_create(0x0, 0x0, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x4, &(0x7f0000000100)=[{0x401, 0x2, 0x6, 0xffff}, {0x81, 0x0, 0x49, 0x1}, {0x25f2, 0x2, 0x3, 0x5}, {0x6, 0x2, 0x9, 0x1}]}, 0x8)
r6 = socket$inet(0x2, 0x2, 0x1)
syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="796112000000000000007e00000008000300", @ANYBLOB="ca68201a3d94ea508ad56fba7f7364d5fe547c347172be31c3007dab19e9bb34e90200bba0"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040810)

3.936305417s ago: executing program 2 (id=595):
socket$unix(0x1, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)

3.341240499s ago: executing program 8 (id=596):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r3 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_mreqn(r3, 0x6a, 0x4, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x8000000)
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0xff22, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x3c, 0x68, 0x400, 0x0, 0x25dfdbff, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE}, @NHA_OIF={0x8}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x4}, @NHA_ID={0x8, 0x6, 0xf2}]}, 0x3c}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x47)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f"], 0x22)
syz_emit_vhci(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

3.257554718s ago: executing program 5 (id=597):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x37, 0x18}, 0x20)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100"})
r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r2, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength', 0x37)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000040), 0x43000002)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x401c2103, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010400000000000000000700000014000780080011400600000005001500050000000500010006000000050005000200000005000400030000000900020073797a30000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x20004000)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000630138000000000095"], &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf}, 0x94)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000002740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002540)={0x19c, 0x0, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASK={0x70, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xa}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000015}, 0x400c000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000000)={0x4, @meta={0x48435655, 0x6c4c6504, 0xfa75, 0xb6f1, 0x2b40e32e}})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f00000004c0)=@vmx={0x100, 0x0, 0x20dd, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x1, 0x800000000008}, {"00f5c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"}})
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write$P9_RREADDIR(r9, &(0x7f0000000140)={0x46, 0x29, 0x1, {0x8000, [{{0x8, 0x0, 0x2}, 0x4, 0xfe, 0x6, './proc'}, {{0x2, 0x3, 0x4}, 0x81d1, 0x0, 0x5, './sys'}]}}, 0x46)

1.429872568s ago: executing program 2 (id=598):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdc02, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4018}, 0x40000)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r5)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="14000000", 0x4)
sendto$inet6(r6, &(0x7f00000004c0)="b0", 0xfd15, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x5, @loopback, 0x300}}}, 0x84)

942.661586ms ago: executing program 8 (id=599):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d", 0x4}, {0x0}], 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r1, &(0x7f0000000a40)={0x0, &(0x7f0000000880)=[@wrmsr={0x65, 0x20, {0x83f, 0xffffffffffffffff}}, @wr_drn={0x68, 0x20, {0x3, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @uexit={0x0, 0x18, 0x22}, @nested_vmresume={0x130, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x4, 0xccbe}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x4, 0x8cac}}], 0xf0})
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
rename(0x0, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x140, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {0x0, 0x401}, 0x0, 0x0, 0xa, 0x1, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}]}, 0x140}}, 0x20000000)

912.706206ms ago: executing program 0 (id=600):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00')
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
syz_usb_connect(0x0, 0x32, 0x0, 0x0)
setgroups(0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0])
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x20, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x1a, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x3, 0x1, 0x2, 0x7, 0x8, 0x30}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0xb4, &(0x7f0000000240)=""/180, 0x40e00, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x3, 0xa, 0x5}, {0x1, 0x5, 0xe, 0x3}, {0x4, 0x4, 0xc, 0x7}], 0x10, 0x10}, 0x94)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f00000000c0), 0x0}, 0x20)

0s ago: executing program 2 (id=601):
syz_open_dev$vbi(0x0, 0x2, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
tkill(0x0, 0x3b)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x9, "a6b73d0c4e4bcb7cffa51a00d8046d6fa4d71a9a9a5b2f4d45d026abfe6c72c4", "850bdb54a923bd8777061febd8ab77ea", {"ae40248fd73e6116d10e7d48d84d58e1", "bf006a15f77655df3542f5fe2b0dbfd5"}}}}}}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x20020000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x4, 0x700000000000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00'})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

kernel console output (not intermixed with test programs):

 T5254] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  205.118190][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  205.181499][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  205.195210][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  205.252532][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  205.274105][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  208.697102][ T5609] Bluetooth: hci3: command tx timeout
[  210.354042][ T3363] bridge_slave_1: left allmulticast mode
[  210.354231][ T3363] bridge_slave_1: left promiscuous mode
[  210.356232][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.561107][ T3363] bridge_slave_0: left allmulticast mode
[  210.561162][ T3363] bridge_slave_0: left promiscuous mode
[  210.561439][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.723746][ T5609] Bluetooth: hci3: command tx timeout
[  213.688604][ T5609] Bluetooth: hci3: command tx timeout
[  215.920309][ T6272] gfs2: not a GFS2 filesystem
[  215.927150][ T6272] hpfs: Bad magic ... probably not HPFS
[  216.795907][ T5609] Bluetooth: hci3: command tx timeout
[  216.983223][ T6262] syz.4.98 (6262) used greatest stack depth: 18424 bytes left
[  218.152263][ T6280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.103'.
[  219.433948][ T3363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.505008][ T3363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.530700][ T3363] bond0 (unregistering): Released all slaves
[  222.896711][   T59] Bluetooth: hci2: command 0x0406 tx timeout
[  222.896745][ T5599] Bluetooth: hci1: command 0x0406 tx timeout
[  223.089066][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1
[  223.197742][ T6302] openvswitch: netlink: Flow actions attr not present in new flow.
[  223.626558][ T6309] 9pnet_virtio: no channels available for device 127.0.0.1
[  224.833121][ T5609] Bluetooth: hci4: command 0x0406 tx timeout
[  224.833307][ T5594] Bluetooth: hci0: command 0x0401 tx timeout
[  229.761232][ T6320] xfrm0: entered allmulticast mode
[  229.832515][ T6340] netlink: 'syz.3.116': attribute type 3 has an invalid length.
[  236.985841][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2
[  237.288614][ T6405] netlink: 32 bytes leftover after parsing attributes in process `syz.0.127'.
[  238.113139][ T5707] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  238.374708][ T5707] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  238.427719][ T6421] netlink: 44 bytes leftover after parsing attributes in process `syz.1.130'.
[  238.445007][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.662123][ T5707] usb 1-1: config 0 descriptor??
[  239.819787][ T5707] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  241.848843][ T5707] gp8psk: usb in 128 operation failed.
[  241.867300][ T5707] gp8psk: usb in 137 operation failed.
[  241.867339][ T5707] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  241.909995][ T5707] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  241.919957][ T5707] usb 1-1: media controller created
[  241.972460][ T5707] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  243.385522][ T5707] gp8psk_fe: Frontend attached
[  243.397077][ T5707] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  243.411933][ T5707] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  243.736993][ T3363] hsr_slave_0: left promiscuous mode
[  244.051194][ T3363] hsr_slave_1: left promiscuous mode
[  244.132600][ T3363] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.183482][ T5707] gp8psk: usb in 138 operation failed.
[  244.193574][ T5707] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  244.193843][ T5707] gp8psk: found Genpix USB device pID = 203 (hex)
[  244.260888][ T5707] usb 1-1: USB disconnect, device number 3
[  244.264522][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_0
[  245.600648][ T3363] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  245.601871][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.020706][ T5707] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  248.720871][ T3363] veth1_macvtap: left promiscuous mode
[  248.721227][ T3363] veth0_macvtap: left promiscuous mode
[  248.721587][ T3363] veth1_vlan: left promiscuous mode
[  248.722021][ T3363] veth0_vlan: left promiscuous mode
[  250.286935][ T6492] jffs2: notice: (6492) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  250.447020][ T6492] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR
[  253.591740][ T3363] team0 (unregistering): Port device team_slave_1 removed
[  253.647508][ T3363] team0 (unregistering): Port device team_slave_0 removed
[  255.000156][ T5254] 8021q: adding VLAN 0 to HW filter on device eth3
[  255.447562][ T5612] Bluetooth: hci1: unexpected event for opcode 0x2035
[  255.794347][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.794553][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.794800][ T6207] bridge_slave_0: entered allmulticast mode
[  255.876625][ T6207] bridge_slave_0: entered promiscuous mode
[  255.937009][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  255.944278][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  256.959197][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.959330][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.959543][ T6207] bridge_slave_1: entered allmulticast mode
[  257.150487][ T6207] bridge_slave_1: entered promiscuous mode
[  257.819250][ T6207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  257.833829][ T6207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  257.906965][ T6207] team0: Port device team_slave_0 added
[  257.918874][ T6207] team0: Port device team_slave_1 added
[  257.996267][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.003391][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  258.003423][ T6207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.008761][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.008779][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  258.008810][ T6207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  262.025589][ T6207] hsr_slave_0: entered promiscuous mode
[  262.026925][ T6207] hsr_slave_1: entered promiscuous mode
[  262.027852][ T6207] debugfs: 'hsr0' already exists in 'hsr'
[  262.027878][ T6207] Cannot create hsr debugfs directory
[  264.468591][ T6581] PKCS7: Unknown OID: [4] 0.0
[  264.469421][ T6581] PKCS7: Only support pkcs7_signedData type
[  265.270038][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  265.317727][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  265.383644][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  265.405864][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  265.422785][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  265.928791][ T5254] 8021q: adding VLAN 0 to HW filter on device eth4
[  267.606882][ T5603] Bluetooth: hci5: command tx timeout
[  268.461056][ T6623] Bluetooth: MGMT ver 1.23
[  268.477088][ T6623] Bluetooth: hci0: unsupported parameter 255
[  268.477112][ T6623] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  268.715509][ T3363] bridge_slave_1: left allmulticast mode
[  268.715614][ T3363] bridge_slave_1: left promiscuous mode
[  268.715944][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.783092][ T5603] Bluetooth: hci5: command tx timeout
[  271.864971][ T5603] Bluetooth: hci5: command tx timeout
[  273.351249][ T3363] bridge_slave_0: left allmulticast mode
[  273.358484][ T3363] bridge_slave_0: left promiscuous mode
[  273.359260][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.908564][ T3363] bridge_slave_1: left allmulticast mode
[  273.915285][ T3363] bridge_slave_1: left promiscuous mode
[  273.915579][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.923634][ T5603] Bluetooth: hci5: command tx timeout
[  275.983697][ T3363] bridge_slave_0: left allmulticast mode
[  275.983725][ T3363] bridge_slave_0: left promiscuous mode
[  275.983981][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.664994][ T6671] netlink: 64 bytes leftover after parsing attributes in process `syz.0.171'.
[  281.665130][ T6671] netlink: 64 bytes leftover after parsing attributes in process `syz.0.171'.
[  281.665195][ T6671] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22)
[  281.675072][ T6671] mmap: syz.0.171 (6671) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  284.373560][ T6685] input: syz0 as /devices/virtual/input/input5
[  286.761840][   T38] audit: type=1800 audit(1787704660.479:3): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.176" name="file0" dev="overlay" ino=250 res=0 errno=0
[  286.933845][   T37] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  287.125668][ T6705] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  287.145642][ T6705] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  287.884339][   T37] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  292.871736][ T3363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.851156][   T37] usb 4-1: unable to read config index 0 descriptor/start: -110
[  293.851230][   T37] usb 4-1: can't read configurations, error -110
[  294.133147][   T37] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  294.337096][ T3363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  294.794591][ T3363] bond0 (unregistering): Released all slaves
[  297.584809][ T3363] bond0 (unregistering): Released all slaves
[  300.022194][   T38] audit: type=1326 audit(1787704673.979:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.3.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f687b23e0d9 code=0x0
[  303.003275][ T3363] hsr_slave_0: left promiscuous mode
[  304.046534][ T3363] hsr_slave_1: left promiscuous mode
[  304.076908][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.108799][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.943094][ T5707] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  307.198340][ T3363] team0 (unregistering): Port device team_slave_1 removed
[  307.235136][ T5707] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  307.246292][ T5707] usb 1-1: Dual-Role OTG device on HNP port
[  307.252740][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.331392][ T3363] team0 (unregistering): Port device team_slave_0 removed
[  310.562535][ T6790] tipc: Started in network mode
[  310.562567][ T6790] tipc: Node identity 7f000001, cluster identity 4711
[  310.564606][ T6790] tipc: New replicast peer: 127.0.0.2
[  310.565560][ T6790] tipc: Enabled bearer <udp:syz0>, priority 10
[  311.017069][ T5707] gspca_main: spca501-2.14.0 probing 0000:0000
[  311.037706][ T5707] gspca_spca501: reg write: error -32
[  311.037724][ T5707] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  311.037836][ T5707] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  311.085527][ T5707] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  311.504561][   T38] audit: type=1326 audit(1787704685.759:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6814 comm="syz.4.199" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8dfcbee0d9 code=0x0
[  312.612598][ T5727] tipc: Node number set to 2130706433
[  315.523114][ T6847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.203'.
[  316.575935][ T6852] overlayfs: failed lookup in lower (newroot/54, name='file0', err=-40): overlapping layers
[  316.863846][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.864048][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.864266][ T6576] bridge_slave_0: entered allmulticast mode
[  316.891709][ T6576] bridge_slave_0: entered promiscuous mode
[  317.400291][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  317.406845][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  317.480508][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.480692][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.481138][ T6576] bridge_slave_1: entered allmulticast mode
[  317.693386][ T6576] bridge_slave_1: entered promiscuous mode
[  318.158632][ T6576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.195583][ T6576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.668127][ T6576] team0: Port device team_slave_0 added
[  320.722085][ T6576] team0: Port device team_slave_1 added
[  324.258174][ T6576] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.259777][ T6576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  324.259810][ T6576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.530506][ T6576] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.530618][ T6576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  324.530650][ T6576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.912505][ T6897] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size.
[  325.945420][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  325.995739][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  326.005799][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  326.054575][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  326.066596][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  329.297011][ T5612] Bluetooth: hci3: command tx timeout
[  331.363468][ T5612] Bluetooth: hci3: command tx timeout
[  334.834448][ T5612] Bluetooth: hci3: command tx timeout
[  336.949041][ T5612] Bluetooth: hci3: command tx timeout
[  338.826051][ T6978] LUN: removable file: (no medium)
[  342.559004][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  342.598696][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  342.600141][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  342.601833][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  342.607885][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  344.813772][ T5603] Bluetooth: hci5: command tx timeout
[  345.255626][   T13] bridge_slave_1: left allmulticast mode
[  345.255725][   T13] bridge_slave_1: left promiscuous mode
[  345.256060][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.006999][   T13] bridge_slave_0: left allmulticast mode
[  347.014979][   T13] bridge_slave_0: left promiscuous mode
[  347.015271][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.043248][ T5603] Bluetooth: hci5: command tx timeout
[  347.816118][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  347.857601][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  347.892294][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  347.913563][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  347.951591][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  348.373769][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.488853][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.535531][   T13] bond0 (unregistering): Released all slaves
[  350.323382][ T5603] Bluetooth: hci0: command tx timeout
[  351.443325][ T5603] Bluetooth: hci5: command tx timeout
[  352.243177][   T38] audit: type=1800 audit(1787704726.329:6): pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.236" name="idProduct" dev="configfs" ino=13636 res=0 errno=0
[  352.430136][ T5603] Bluetooth: hci0: command tx timeout
[  353.528995][ T5603] Bluetooth: hci5: command tx timeout
[  354.483009][ T5603] Bluetooth: hci0: command tx timeout
[  354.790315][ T7048] Bluetooth: MGMT ver 1.23
[  354.819647][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  354.857969][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.166312][   T13] team0 (unregistering): Port device team_slave_1 removed
[  355.234993][   T13] team0 (unregistering): Port device team_slave_0 removed
[  356.573348][ T5603] Bluetooth: hci0: command tx timeout
[  361.844370][ T7119] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  361.849064][ T7119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  363.781003][   T38] audit: type=1800 audit(1787704738.039:7): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.248" name="idProduct" dev="configfs" ino=13898 res=0 errno=0
[  368.567668][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.567878][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.568078][ T6907] bridge_slave_0: entered allmulticast mode
[  368.583027][ T6907] bridge_slave_0: entered promiscuous mode
[  368.721647][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.722464][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.724795][ T6907] bridge_slave_1: entered allmulticast mode
[  368.772688][ T6907] bridge_slave_1: entered promiscuous mode
[  369.909378][   T38] audit: type=1800 audit(1787704743.759:8): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.251" name="file0" dev="overlay" ino=383 res=0 errno=0
[  370.820612][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.087075][ T6907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.215360][ T6907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  373.596362][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.325694][ T6989] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.334666][ T6989] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.335242][ T6989] bridge_slave_0: entered allmulticast mode
[  375.358489][ T6989] bridge_slave_0: entered promiscuous mode
[  375.417167][ T6907] team0: Port device team_slave_0 added
[  375.426080][ T6989] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.426210][ T6989] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.426407][ T6989] bridge_slave_1: entered allmulticast mode
[  376.018824][ T6989] bridge_slave_1: entered promiscuous mode
[  376.084520][ T6907] team0: Port device team_slave_1 added
[  376.796524][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.890287][ T6989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.901665][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.908885][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  376.908921][ T6907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.008673][ T6989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.020573][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.020646][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.020711][ T6907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  378.742876][ T6989] team0: Port device team_slave_0 added
[  378.961664][   T38] audit: type=1326 audit(1787704753.129:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.0.259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fffbe0d9 code=0x7ffc0000
[  378.974290][   T38] audit: type=1326 audit(1787704753.129:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.0.259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fffbe0d9 code=0x7ffc0000
[  378.974702][   T38] audit: type=1326 audit(1787704753.129:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.0.259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09fff7e90e code=0x7ffc0000
[  378.974947][   T38] audit: type=1326 audit(1787704753.129:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.0.259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fffbe0d9 code=0x7ffc0000
[  378.975192][   T38] audit: type=1326 audit(1787704753.129:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.0.259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fffbe0d9 code=0x7ffc0000
[  378.975451][   T38] audit: type=1326 audit(1787704753.129:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.0.259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f09fffbe0d9 code=0x7ffc0000
[  378.975700][   T38] audit: type=1326 audit(1787704753.129:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.0.259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fffbe0d9 code=0x7ffc0000
[  378.975950][   T38] audit: type=1326 audit(1787704753.129:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.0.259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fffbe0d9 code=0x7ffc0000
[  378.976271][   T38] audit: type=1326 audit(1787704753.129:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.0.259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09fffbe0d9 code=0x7ffc0000
[  378.976561][   T38] audit: type=1326 audit(1787704753.129:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.0.259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fffbe0d9 code=0x7ffc0000
[  379.821983][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  379.824692][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  380.128237][ T6989] team0: Port device team_slave_1 added
[  382.388014][ T6907] hsr_slave_0: entered promiscuous mode
[  382.405615][ T6907] hsr_slave_1: entered promiscuous mode
[  382.444306][ T6907] debugfs: 'hsr0' already exists in 'hsr'
[  382.458820][ T6907] Cannot create hsr debugfs directory
[  382.738302][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.745706][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.745899][ T7016] bridge_slave_0: entered allmulticast mode
[  382.749795][ T7016] bridge_slave_0: entered promiscuous mode
[  383.529023][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.529099][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.529123][ T6989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.594614][ T7016] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.594997][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.595537][ T7016] bridge_slave_1: entered allmulticast mode
[  383.631229][ T7016] bridge_slave_1: entered promiscuous mode
[  383.647706][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.649380][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.649460][ T6989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.551700][ T7221] 0x000000000006-0x000000020000 : ""
[  385.023736][ T7221] ftl_cs: FTL header corrupt!
[  385.277192][ T7016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.516147][ T7016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.786902][ T6989] hsr_slave_0: entered promiscuous mode
[  385.795156][ T6989] hsr_slave_1: entered promiscuous mode
[  385.807118][ T6989] debugfs: 'hsr0' already exists in 'hsr'
[  385.813975][ T6989] Cannot create hsr debugfs directory
[  385.925397][ T7016] team0: Port device team_slave_0 added
[  386.234842][ T7016] team0: Port device team_slave_1 added
[  387.445537][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  387.531169][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  387.554692][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  387.594825][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  387.610849][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  387.682002][ T7239] 9p: Bad value for 'wfdno'
[  389.846343][ T5603] Bluetooth: hci2: command tx timeout
[  392.003080][ T5603] Bluetooth: hci2: command tx timeout
[  393.307750][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.657910][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.665637][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  393.665713][ T7016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.728602][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.730426][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  393.730522][ T7016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.108772][ T5603] Bluetooth: hci2: command tx timeout
[  396.446776][ T5603] Bluetooth: hci2: command tx timeout
[  396.648308][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.073213][ T7273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  399.074211][ T7273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  399.461190][ T7016] hsr_slave_0: entered promiscuous mode
[  399.472503][ T7016] hsr_slave_1: entered promiscuous mode
[  399.484859][ T7016] debugfs: 'hsr0' already exists in 'hsr'
[  399.491238][ T7016] Cannot create hsr debugfs directory
[  400.045883][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.836358][ T5254] 8021q: adding VLAN 0 to HW filter on device eth5
[  401.549467][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.736244][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  405.789172][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  405.868439][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  406.127576][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  406.600808][ T5603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  408.524527][ T5603] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  408.549411][ T5603] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  408.557682][ T5603] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  408.590237][ T5603] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  408.600554][ T5603] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  408.807426][ T5603] Bluetooth: hci3: command tx timeout
[  409.117532][ T1683] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  409.293848][ T1683] usb 4-1: Using ep0 maxpacket: 32
[  409.305007][ T1683] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  409.333314][ T1683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.742470][ T1683] gspca_main: nw80x-2.14.0 probing 055f:d001
[  409.824385][ T5254] 8021q: adding VLAN 0 to HW filter on device eth6
[  410.835288][ T1683] usb 4-1: USB disconnect, device number 5
[  410.883041][ T5612] Bluetooth: hci3: command tx timeout
[  411.053043][ T5612] Bluetooth: hci6: command tx timeout
[  412.286367][   T13] bridge_slave_1: left allmulticast mode
[  412.292201][   T13] bridge_slave_1: left promiscuous mode
[  412.292474][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.526230][   T13] bridge_slave_0: left allmulticast mode
[  412.532050][   T13] bridge_slave_0: left promiscuous mode
[  412.532322][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.946187][ T5612] Bluetooth: hci3: command tx timeout
[  413.949105][ T5612] Bluetooth: hci6: command tx timeout
[  416.280357][ T5603] Bluetooth: hci3: command tx timeout
[  416.280356][ T5612] Bluetooth: hci6: command tx timeout
[  416.304090][   T13] bridge_slave_1: left allmulticast mode
[  416.309883][   T13] bridge_slave_1: left promiscuous mode
[  416.310146][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.704206][   T13] bridge_slave_0: left allmulticast mode
[  416.704289][   T13] bridge_slave_0: left promiscuous mode
[  416.704977][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.666374][ T5612] Bluetooth: hci6: command tx timeout
[  421.647711][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  421.713684][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  421.761588][   T13] bond0 (unregistering): Released all slaves
[  422.323601][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  422.393819][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  422.439152][   T13] bond0 (unregistering): Released all slaves
[  422.696301][ T6989] netdevsim netdevsim6: probe with driver netdevsim failed with error -12
[  424.296571][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.296902][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.297064][ T7233] bridge_slave_0: entered allmulticast mode
[  424.300993][ T7233] bridge_slave_0: entered promiscuous mode
[  424.328287][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.328744][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.329414][ T7233] bridge_slave_1: entered allmulticast mode
[  424.334489][ T7233] bridge_slave_1: entered promiscuous mode
[  425.655029][ T7453] null_blk: nullb1: using native zone append
[  427.665387][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.915983][ T5254] 8021q: adding VLAN 0 to HW filter on device eth7
[  428.182461][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.345549][ T7233] team0: Port device team_slave_0 added
[  429.440271][ T7233] team0: Port device team_slave_1 added
[  429.690608][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.690804][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.690836][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.156643][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.164345][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.164379][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.203624][ T7541] input: syz0 as /devices/virtual/input/input6
[  432.291178][ T7233] hsr_slave_0: entered promiscuous mode
[  432.297974][ T7233] hsr_slave_1: entered promiscuous mode
[  432.308419][ T7233] debugfs: 'hsr0' already exists in 'hsr'
[  432.318485][ T7233] Cannot create hsr debugfs directory
[  432.424153][ T7336] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.424330][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.424541][ T7336] bridge_slave_0: entered allmulticast mode
[  432.445492][ T7336] bridge_slave_0: entered promiscuous mode
[  432.614372][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.614576][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.614781][ T7336] bridge_slave_1: entered allmulticast mode
[  432.637704][ T7336] bridge_slave_1: entered promiscuous mode
[  432.646717][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.647162][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.725633][ T7350] bridge_slave_0: entered allmulticast mode
[  432.734720][ T7350] bridge_slave_0: entered promiscuous mode
[  432.897538][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.897881][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.898308][ T7350] bridge_slave_1: entered allmulticast mode
[  432.913207][ T7350] bridge_slave_1: entered promiscuous mode
[  432.926904][ T5254] 8021q: adding VLAN 0 to HW filter on device eth8
[  433.910719][ T7336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.593375][   T13] hsr_slave_0: left promiscuous mode
[  435.074370][   T13] hsr_slave_1: left promiscuous mode
[  435.075621][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.075657][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.114200][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.116429][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  436.192973][   T13] hsr_slave_0: left promiscuous mode
[  436.232976][   T13] hsr_slave_1: left promiscuous mode
[  436.233810][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  436.233828][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  436.273622][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  436.273648][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  436.328568][   T13] veth1_macvtap: left promiscuous mode
[  436.328650][   T13] veth0_macvtap: left promiscuous mode
[  436.328811][   T13] veth1_vlan: left promiscuous mode
[  436.328948][   T13] veth0_vlan: left promiscuous mode
[  436.583304][   T13] veth1_macvtap: left promiscuous mode
[  436.583361][   T13] veth0_macvtap: left promiscuous mode
[  436.583481][   T13] veth1_vlan: left promiscuous mode
[  436.583604][   T13] veth0_vlan: left promiscuous mode
[  438.144686][   T13] team0 (unregistering): Port device team_slave_1 removed
[  438.193591][   T13] team0 (unregistering): Port device team_slave_0 removed
[  439.772587][   T13] team0 (unregistering): Port device team_slave_1 removed
[  440.140536][   T13] team0 (unregistering): Port device team_slave_0 removed
[  440.303790][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  440.303913][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  440.415942][ T7336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.441914][ T7350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.487681][ T7350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.626992][ T7336] team0: Port device team_slave_0 added
[  440.708819][ T7336] team0: Port device team_slave_1 added
[  440.728254][ T7350] team0: Port device team_slave_0 added
[  440.806886][ T7583] netlink: 'syz.3.315': attribute type 2 has an invalid length.
[  441.364233][ T7350] team0: Port device team_slave_1 added
[  442.957994][ T7594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.317'.
[  442.958557][ T7594] Bluetooth: MGMT ver 1.23
[  443.286394][ T7336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  443.288107][ T7336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.288136][ T7336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  443.617263][ T7336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  443.618795][ T7336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.618824][ T7336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  443.681282][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_0
[  443.685689][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.685769][ T7350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  443.772584][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_1
[  443.772651][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.772677][ T7350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  443.854815][ T7596] kvm [7595]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffc900000000
[  443.889469][ T7596] kvm [7595]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfefd00000000
[  443.900664][ T7596] kvm [7595]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  444.197347][ T7336] hsr_slave_0: entered promiscuous mode
[  444.205686][ T7336] hsr_slave_1: entered promiscuous mode
[  444.450854][ T7350] hsr_slave_0: entered promiscuous mode
[  444.461210][ T7350] hsr_slave_1: entered promiscuous mode
[  444.479308][ T7350] debugfs: 'hsr0' already exists in 'hsr'
[  444.479387][ T7350] Cannot create hsr debugfs directory
[  445.699947][ T5254] 8021q: adding VLAN 0 to HW filter on device eth9
[  446.001523][ T7233] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  446.037262][ T7233] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  447.219376][ T7634] loop5: detected capacity change from 0 to 7
[  447.796544][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  447.851506][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  447.892469][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  447.894004][ T7634] Dev loop5: unable to read RDB block 7
[  447.894093][ T7634]  loop5: AHDI p1
[  447.894115][ T7634] loop5: partition table partially beyond EOD, truncated
[  447.895258][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  447.897728][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  448.592959][ T5727] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  448.828945][ T5727] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  448.842965][ T5727] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  448.842995][ T5727] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  448.844790][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  448.844816][ T5727] usb 4-1: SerialNumber: syz
[  449.431620][ T5254] 8021q: adding VLAN 0 to HW filter on device eth10
[  449.907859][   T13] IPVS: stop unused estimator thread 0...
[  450.116747][ T7336] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  450.169915][ T7336] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  450.243264][ T5612] Bluetooth: hci0: command tx timeout
[  450.273985][ T7336] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  450.416945][ T5727] usb 4-1: 0:2 : does not exist
[  450.516078][ T7336] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  451.426708][ T5727] usb 4-1: USB disconnect, device number 6
[  451.536972][ T7623] udevd[7623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  452.237094][ T7336] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  452.278291][ T7336] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  452.325328][ T5612] Bluetooth: hci0: command tx timeout
[  452.458039][ T7336] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  452.502375][ T7336] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  452.657397][ T5254] 8021q: adding VLAN 0 to HW filter on device eth11
[  453.053497][ T7350] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  453.096286][ T7350] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  453.165275][ T7350] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  453.198646][ T7350] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  453.216809][ T7350] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  453.272999][ T7350] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  453.285251][ T7350] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  453.332700][ T7350] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  453.901114][ T5254] 8021q: adding VLAN 0 to HW filter on device eth12
[  454.076854][ T7336] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.347828][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.348406][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.348909][ T7632] bridge_slave_0: entered allmulticast mode
[  454.362246][ T7632] bridge_slave_0: entered promiscuous mode
[  454.403096][ T5612] Bluetooth: hci0: command tx timeout
[  454.431438][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.431863][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.432298][ T7632] bridge_slave_1: entered allmulticast mode
[  454.443897][ T7632] bridge_slave_1: entered promiscuous mode
[  454.467771][ T7336] 8021q: adding VLAN 0 to HW filter on device team0
[  454.614507][   T13] bridge_slave_1: left allmulticast mode
[  454.614671][   T13] bridge_slave_1: left promiscuous mode
[  454.628385][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.734204][   T13] bridge_slave_0: left allmulticast mode
[  454.734303][   T13] bridge_slave_0: left promiscuous mode
[  454.735032][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.953190][   T13] bridge_slave_1: left allmulticast mode
[  454.953298][   T13] bridge_slave_1: left promiscuous mode
[  454.953955][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.055404][   T13] bridge_slave_0: left allmulticast mode
[  455.055501][   T13] bridge_slave_0: left promiscuous mode
[  455.056211][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.253193][   T13] bridge_slave_1: left allmulticast mode
[  455.253288][   T13] bridge_slave_1: left promiscuous mode
[  455.253932][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.354127][   T13] bridge_slave_0: left allmulticast mode
[  455.354234][   T13] bridge_slave_0: left promiscuous mode
[  455.354941][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.553254][   T13] bridge_slave_1: left allmulticast mode
[  455.553373][   T13] bridge_slave_1: left promiscuous mode
[  455.554223][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.675301][   T13] bridge_slave_0: left allmulticast mode
[  455.675388][   T13] bridge_slave_0: left promiscuous mode
[  455.675965][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.045128][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.124237][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.204813][   T13] bond0 (unregistering): Released all slaves
[  456.464210][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.483268][ T5612] Bluetooth: hci0: command tx timeout
[  456.543760][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.605532][   T13] bond0 (unregistering): Released all slaves
[  456.873771][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.983803][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  457.057185][   T13] bond0 (unregistering): Released all slaves
[  457.286168][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  457.383983][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  457.446091][   T13] bond0 (unregistering): Released all slaves
[  457.513899][ T7632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  457.538609][ T7632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  457.562002][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.562551][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  457.716449][ T7632] team0: Port device team_slave_0 added
[  457.767978][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.768541][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  457.807076][ T7632] team0: Port device team_slave_1 added
[  457.925308][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_0
[  457.925391][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.925458][ T7632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.013777][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_1
[  458.013862][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.013920][ T7632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  458.091329][ T7350] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.272607][ T7632] hsr_slave_0: entered promiscuous mode
[  458.284031][ T7632] hsr_slave_1: entered promiscuous mode
[  458.286479][ T7632] debugfs: 'hsr0' already exists in 'hsr'
[  458.286547][ T7632] Cannot create hsr debugfs directory
[  458.457689][ T7350] 8021q: adding VLAN 0 to HW filter on device team0
[  458.659590][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.660180][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.765290][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.765579][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  459.103155][   T13] hsr_slave_0: left promiscuous mode
[  459.134030][   T13] hsr_slave_1: left promiscuous mode
[  459.139355][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.173904][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  459.313559][   T13] hsr_slave_0: left promiscuous mode
[  459.353853][   T13] hsr_slave_1: left promiscuous mode
[  459.358414][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.394001][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  459.513133][   T13] hsr_slave_0: left promiscuous mode
[  459.533134][   T13] hsr_slave_1: left promiscuous mode
[  459.535917][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.574668][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  459.673186][   T13] hsr_slave_0: left promiscuous mode
[  459.715904][   T13] hsr_slave_1: left promiscuous mode
[  459.722292][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.733715][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.194042][   T13] team0 (unregistering): Port device team_slave_1 removed
[  460.243529][   T13] team0 (unregistering): Port device team_slave_0 removed
[  460.683806][   T13] team0 (unregistering): Port device team_slave_1 removed
[  460.733547][   T13] team0 (unregistering): Port device team_slave_0 removed
[  461.184717][   T13] team0 (unregistering): Port device team_slave_1 removed
[  461.233736][   T13] team0 (unregistering): Port device team_slave_0 removed
[  461.564870][   T13] team0 (unregistering): Port device team_slave_1 removed
[  461.613442][   T13] team0 (unregistering): Port device team_slave_0 removed
[  461.819563][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13
[  462.608210][ T7336] 8021q: adding VLAN 0 to HW filter on device batadv0
[  463.578395][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  463.637971][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  463.644163][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  463.654013][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  463.658442][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  464.769770][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv0
[  465.504988][ T7632] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  465.537053][ T7632] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  465.597571][ T7632] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  465.698726][ T7632] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  465.758363][ T7632] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  465.772908][ T5612] Bluetooth: hci2: command tx timeout
[  465.804374][ T7632] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  465.812634][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  465.989379][ T7632] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  466.030895][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  466.045475][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  466.060619][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  466.135907][ T5603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  466.315969][ T7632] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  467.291738][ T7632] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.367390][ T7632] 8021q: adding VLAN 0 to HW filter on device team0
[  467.506181][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.506679][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.628082][ T1534] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.628615][ T1534] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.766515][ T7768] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.766921][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.767438][ T7768] bridge_slave_0: entered allmulticast mode
[  467.776838][ T7768] bridge_slave_0: entered promiscuous mode
[  467.829297][ T7768] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.838277][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.838468][ T7768] bridge_slave_1: entered allmulticast mode
[  467.841422][ T7768] bridge_slave_1: entered promiscuous mode
[  467.843634][ T5612] Bluetooth: hci2: command tx timeout
[  467.981318][ T7768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  468.014281][ T7768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  468.323088][ T5612] Bluetooth: hci3: command tx timeout
[  468.460137][ T7768] team0: Port device team_slave_0 added
[  468.474467][ T7768] team0: Port device team_slave_1 added
[  468.580545][ T7768] batman_adv: batadv0: Adding interface: batadv_slave_0
[  468.580624][ T7768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.580706][ T7768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  468.630374][ T7768] batman_adv: batadv0: Adding interface: batadv_slave_1
[  468.630441][ T7768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.630494][ T7768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  469.307546][ T7768] hsr_slave_0: entered promiscuous mode
[  469.319004][ T7768] hsr_slave_1: entered promiscuous mode
[  469.324383][ T7768] debugfs: 'hsr0' already exists in 'hsr'
[  469.324442][ T7768] Cannot create hsr debugfs directory
[  469.914660][ T7808] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.915058][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.916699][ T7808] bridge_slave_0: entered allmulticast mode
[  469.924477][ T5612] Bluetooth: hci2: command tx timeout
[  469.936694][ T7808] bridge_slave_0: entered promiscuous mode
[  469.994454][ T7808] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.994756][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.995231][ T7808] bridge_slave_1: entered allmulticast mode
[  470.002180][ T7808] bridge_slave_1: entered promiscuous mode
[  470.247832][ T7808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.300349][ T7808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.413183][ T5612] Bluetooth: hci3: command tx timeout
[  470.470592][ T7808] team0: Port device team_slave_0 added
[  470.720488][ T7808] team0: Port device team_slave_1 added
[  470.987560][ T7632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.995288][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.997301][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.997374][ T7808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  471.275492][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.284841][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  471.284871][ T7808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.741180][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13
[  471.761474][ T7808] hsr_slave_0: entered promiscuous mode
[  471.764434][ T7808] hsr_slave_1: entered promiscuous mode
[  471.767552][ T7808] debugfs: 'hsr0' already exists in 'hsr'
[  471.767619][ T7808] Cannot create hsr debugfs directory
[  472.013082][ T5612] Bluetooth: hci2: command tx timeout
[  472.306965][ T7632] veth0_vlan: entered promiscuous mode
[  472.360011][ T7632] veth1_vlan: entered promiscuous mode
[  472.438929][ T7632] veth0_macvtap: entered promiscuous mode
[  472.455534][ T7632] veth1_macvtap: entered promiscuous mode
[  472.482960][ T5612] Bluetooth: hci3: command tx timeout
[  472.496888][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_0
[  472.683244][   T13] bridge_slave_1: left allmulticast mode
[  472.689061][   T13] bridge_slave_1: left promiscuous mode
[  472.689325][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.855322][   T13] bridge_slave_0: left allmulticast mode
[  472.855405][   T13] bridge_slave_0: left promiscuous mode
[  472.856090][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.153200][   T13] bridge_slave_1: left allmulticast mode
[  473.153298][   T13] bridge_slave_1: left promiscuous mode
[  473.154139][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.285180][   T13] bridge_slave_0: left allmulticast mode
[  473.285280][   T13] bridge_slave_0: left promiscuous mode
[  473.285954][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.093579][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  474.174073][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  474.195549][   T13] bond0 (unregistering): Released all slaves
[  474.563503][ T5612] Bluetooth: hci3: command tx timeout
[  474.714888][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  474.773710][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  474.806465][   T13] bond0 (unregistering): Released all slaves
[  474.866831][ T5254] 8021q: adding VLAN 0 to HW filter on device eth14
[  474.918538][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_1
[  476.093176][   T13] hsr_slave_0: left promiscuous mode
[  476.133209][   T13] hsr_slave_1: left promiscuous mode
[  476.136123][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  476.176391][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  476.333079][   T13] hsr_slave_0: left promiscuous mode
[  476.373098][   T13] hsr_slave_1: left promiscuous mode
[  476.376461][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  476.393984][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  477.023515][   T13] team0 (unregistering): Port device team_slave_1 removed
[  477.074143][   T13] team0 (unregistering): Port device team_slave_0 removed
[  477.614667][   T13] team0 (unregistering): Port device team_slave_1 removed
[  477.673436][   T13] team0 (unregistering): Port device team_slave_0 removed
[  478.222933][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.224482][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.246153][   T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.258750][ T1534] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.259335][ T3307] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.259689][ T3307] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.499947][ T3394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.500017][ T3394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.236656][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.369990][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.186309][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.198955][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.198014][ T7768] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  482.393395][ T7768] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  482.423250][ T7768] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  482.487904][ T7768] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  482.497466][ T7768] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  482.605817][ T7768] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  482.641284][ T7768] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  482.744551][ T7768] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  483.412730][ T7963] syz.5.26 (7963): drop_caches: 2
[  483.471843][ T7808] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  483.660695][ T7808] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  483.831017][ T8008] input: syz0 as /devices/virtual/input/input8
[  484.745087][ T7808] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  487.442659][ T7808] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  487.510659][ T7808] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  487.526129][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  489.451167][ T7808] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  489.473858][ T7808] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  489.597196][ T7808] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  489.740819][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  491.380531][ T7768] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.027678][ T7768] 8021q: adding VLAN 0 to HW filter on device team0
[  492.293472][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.293786][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  492.334515][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.335056][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.180225][ T7808] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.825626][ T7808] 8021q: adding VLAN 0 to HW filter on device team0
[  496.045708][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.150959][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  496.412569][ T1533] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.421756][ T1533] bridge0: port 2(bridge_slave_1) entered forwarding state
[  499.883944][ T7768] 8021q: adding VLAN 0 to HW filter on device batadv0
[  500.376059][ T7808] 8021q: adding VLAN 0 to HW filter on device batadv0
[  500.796907][ T7768] veth0_vlan: entered promiscuous mode
[  500.879549][ T7768] veth1_vlan: entered promiscuous mode
[  500.978339][ T7768] veth0_macvtap: entered promiscuous mode
[  500.992608][ T7768] veth1_macvtap: entered promiscuous mode
[  501.018413][ T7768] batman_adv: batadv0: Interface activated: batadv_slave_0
[  501.072476][ T7768] batman_adv: batadv0: Interface activated: batadv_slave_1
[  501.540176][ T7808] veth0_vlan: entered promiscuous mode
[  501.708096][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  501.708214][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  501.804210][ T7808] veth1_vlan: entered promiscuous mode
[  501.831871][ T3393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.831938][ T3393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.051101][ T1533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  502.059644][ T1533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.139843][ T7808] veth0_macvtap: entered promiscuous mode
[  502.168918][ T7808] veth1_macvtap: entered promiscuous mode
[  502.204656][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.256184][ T7808] batman_adv: batadv0: Interface activated: batadv_slave_0
[  502.283317][ T7808] batman_adv: batadv0: Interface activated: batadv_slave_1
[  502.363239][ T1178] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.917684][ T1534] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  503.007426][ T8162] netlink: 104 bytes leftover after parsing attributes in process `syz.5.348'.
[  504.061722][ T1534] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.312710][ T8172] input: syz0 as /devices/virtual/input/input9
[  505.221029][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  506.587241][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.587312][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.625445][ T1178] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  506.866495][ T3392] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  511.442201][ T3363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.442221][ T3363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.593747][ T3363] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.175127][ T8233] comedi comedi3: pcmmio: I/O base address not correctly aligned
[  516.511025][ T8242] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  516.511252][ T8242] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  521.668566][ T8270] usb usb8: usbfs: process 8270 (syz.3.360) did not claim interface 0 before use
[  523.003270][ T8283] loop5: detected capacity change from 0 to 7
[  523.589661][ T8283] Dev loop5: unable to read RDB block 7
[  523.589696][ T8283]  loop5: AHDI p1
[  523.589716][ T8283] loop5: partition table partially beyond EOD, truncated
[  523.765781][ T8289] syz.3.364 (8289): attempted to duplicate a private mapping with mremap.  This is not supported.
[  527.432887][ T5706] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  532.693182][ T8324] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  532.693464][ T8324] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  539.321583][ T8344] tmpfs: Bad value for 'nr_inodes'
[  548.823515][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.385'.
[  548.826590][ T8383] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request
[  553.277654][ T8397] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  553.277941][ T8397] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  562.527299][ T8431] loop5: detected capacity change from 0 to 7
[  562.582241][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.582863][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.328195][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  563.349179][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  563.369420][ T8431] Dev loop5: unable to read RDB block 7
[  563.369464][ T8431]  loop5: AHDI p1
[  563.369486][ T8431] loop5: partition table partially beyond EOD, truncated
[  565.003488][ T8438] Bluetooth: MGMT ver 1.23
[  565.030297][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'.
[  567.985461][ T8458] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  568.437681][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.5.402'.
[  568.438075][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.5.402'.
[  571.849293][ T8461] Bluetooth: hci0: command 0x0406 tx timeout
[  572.074679][ T8461] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  572.124488][ T8461] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  572.141934][ T8461] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  572.169455][ T8461] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  572.177549][ T8461] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  573.837169][   T37] libceph: connect (1)[c::]:6789 error -101
[  574.067502][   T37] libceph: mon0 (1)[c::]:6789 connect error
[  574.107473][ T8474] ceph: No mds server is up or the cluster is laggy
[  574.196673][   T37] libceph: connect (1)[c::]:6789 error -101
[  574.205839][   T37] libceph: mon0 (1)[c::]:6789 connect error
[  574.762916][ T5612] Bluetooth: hci5: command tx timeout
[  574.824167][   T37] libceph: connect (1)[c::]:6789 error -101
[  574.824421][   T37] libceph: mon0 (1)[c::]:6789 connect error
[  575.236234][ T8495] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  575.335117][ T5600] libceph: connect (1)[c::]:6789 error -101
[  575.335743][ T5600] libceph: mon0 (1)[c::]:6789 connect error
[  575.365055][ T8461] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  575.433145][ T8461] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  575.467285][ T8461] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  575.480552][ T8461] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  575.497127][ T8461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  576.885599][ T5612] Bluetooth: hci5: command tx timeout
[  577.684016][ T5612] Bluetooth: hci3: command tx timeout
[  578.916596][ T1533] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.962871][ T5612] Bluetooth: hci5: command tx timeout
[  579.885068][ T5612] Bluetooth: hci3: command tx timeout
[  580.833557][ T5612] Bluetooth: hci0: unexpected event for opcode 0x204e
[  581.119285][ T5612] Bluetooth: hci5: command tx timeout
[  581.922903][ T5612] Bluetooth: hci3: command tx timeout
[  582.762394][ T1533] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.574135][ T1533] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.004624][ T5612] Bluetooth: hci3: command tx timeout
[  584.188070][ T1533] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.249843][ T8587] xfrm0: entered allmulticast mode
[  591.343414][ T1533] bridge_slave_1: left allmulticast mode
[  591.343507][ T1533] bridge_slave_1: left promiscuous mode
[  591.343781][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.508494][ T5612] Bluetooth: hci1: unexpected subevent 0x1a length: 30 > 6
[  595.040281][ T1533] bridge_slave_0: left allmulticast mode
[  595.046457][ T1533] bridge_slave_0: left promiscuous mode
[  595.122502][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.043707][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  599.095678][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  601.950478][ T1533] bond0 (unregistering): Released all slaves
[  604.334703][ T8636] netlink: 104 bytes leftover after parsing attributes in process `syz.0.437'.
[  604.734074][ T8461] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  604.802505][ T8461] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  604.831265][ T8461] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  604.839475][ T8461] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  604.845148][ T8461] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  604.966636][ T8472] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.966895][ T8472] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.967070][ T8472] bridge_slave_0: entered allmulticast mode
[  604.970652][ T8472] bridge_slave_0: entered promiscuous mode
[  606.964990][ T8461] Bluetooth: hci2: command tx timeout
[  607.961948][ T8472] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.962332][ T8472] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.962879][ T8472] bridge_slave_1: entered allmulticast mode
[  608.009700][ T8472] bridge_slave_1: entered promiscuous mode
[  608.309502][ T8667] device-mapper: ioctl: only supply one of name or uuid, cmd(14)
[  609.427643][ T8461] Bluetooth: hci2: command tx timeout
[  611.443705][ T8461] Bluetooth: hci2: command tx timeout
[  613.522998][ T8461] Bluetooth: hci2: command tx timeout
[  615.794575][ T8472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  615.805509][ T8496] bridge0: port 1(bridge_slave_0) entered blocking state
[  615.812817][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state
[  615.820110][ T8496] bridge_slave_0: entered allmulticast mode
[  615.835412][ T8496] bridge_slave_0: entered promiscuous mode
[  615.855043][ T8472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  615.876774][ T8496] bridge0: port 2(bridge_slave_1) entered blocking state
[  615.885540][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state
[  615.885724][ T8496] bridge_slave_1: entered allmulticast mode
[  615.892652][ T8496] bridge_slave_1: entered promiscuous mode
[  618.299618][ T8472] team0: Port device team_slave_0 added
[  618.337460][ T8496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  618.495086][ T1533] hsr_slave_0: left promiscuous mode
[  618.535486][ T1533] hsr_slave_1: left promiscuous mode
[  618.553842][ T1533] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  618.553917][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_0
[  618.596496][ T1533] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  618.596618][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_1
[  618.856859][ T1533] veth1_macvtap: left promiscuous mode
[  618.875286][ T1533] veth0_macvtap: left promiscuous mode
[  618.875440][ T1533] veth1_vlan: left promiscuous mode
[  618.875532][ T1533] veth0_vlan: left promiscuous mode
[  620.461391][ T5716] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  620.624796][ T5716] usb 6-1: device descriptor read/64, error -71
[  620.643679][    C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  620.883002][ T5716] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  621.012960][ T5716] usb 6-1: device descriptor read/64, error -71
[  621.822271][ T5716] usb usb6-port1: attempt power cycle
[  624.190998][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.461'.
[  624.706949][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  624.714886][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  625.194116][ T1533] team0 (unregistering): Port device team_slave_1 removed
[  626.002967][ T8751] comedi comedi0: comedi_config --init_data is deprecated
[  627.383222][ T1533] team0 (unregistering): Port device team_slave_0 removed
[  630.456947][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  630.501501][ T8472] team0: Port device team_slave_1 added
[  630.554267][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  630.564744][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  630.586244][ T8496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  630.600461][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  630.612288][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  631.047550][ T8496] team0: Port device team_slave_0 added
[  631.163556][ T8496] team0: Port device team_slave_1 added
[  632.805785][ T8461] Bluetooth: hci4: command tx timeout
[  632.829185][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_0
[  632.837589][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  632.837624][ T8496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  632.903476][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_1
[  632.905052][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  632.905094][ T8496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  634.676806][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13
[  634.892939][ T8461] Bluetooth: hci4: command tx timeout
[  635.101681][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  636.147058][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  636.204057][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  636.215472][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  637.604862][ T5612] Bluetooth: hci4: command tx timeout
[  637.605369][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  638.057699][ T8836] binder: 8835:8836 ioctl c0306201 0 returned -14
[  638.155029][   T37] kernel write not supported for file bpf-prog (pid: 37 comm: kworker/1:1)
[  638.574380][ T8637] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.582267][ T8637] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.582464][ T8637] bridge_slave_0: entered allmulticast mode
[  638.603350][ T8637] bridge_slave_0: entered promiscuous mode
[  639.683150][ T8833] Bluetooth: hci4: command tx timeout
[  639.977980][ T8637] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.978123][ T8637] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.978352][ T8637] bridge_slave_1: entered allmulticast mode
[  640.018951][ T8637] bridge_slave_1: entered promiscuous mode
[  640.119183][ T8461] Bluetooth: hci5: command tx timeout
[  641.763917][ T8637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  641.913626][ T8872] 9p: Bad value for 'rfdno'
[  642.493836][ T8833] Bluetooth: hci5: command tx timeout
[  642.891609][ T5254] 8021q: adding VLAN 0 to HW filter on device eth14
[  642.928592][ T8637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  644.562977][ T8833] Bluetooth: hci5: command tx timeout
[  646.652999][ T8833] Bluetooth: hci5: command tx timeout
[  653.848664][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'.
[  654.029544][ T8887] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request
[  654.897923][ T8637] team0: Port device team_slave_0 added
[  655.313005][ T8637] team0: Port device team_slave_1 added
[  656.525528][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  656.533126][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  656.533163][ T8637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  660.848916][ T1533] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.104421][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  662.104501][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  662.104573][ T8637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  662.306640][   T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  663.089927][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.098294][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.098458][ T8763] bridge_slave_0: entered allmulticast mode
[  663.104121][ T8763] bridge_slave_0: entered promiscuous mode
[  663.353311][   T31] usb 6-1: Using ep0 maxpacket: 32
[  663.354968][   T31] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  665.298278][   T31] usb 6-1: unable to read config index 0 descriptor/start: -71
[  665.298381][   T31] usb 6-1: can't read configurations, error -71
[  665.419609][ T8461] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  665.488184][ T8461] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  665.548408][ T8461] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  665.599932][ T8461] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  665.616328][ T8461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  665.781457][ T1533] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.831551][ T8942] 9p: Bad value for 'wfdno'
[  665.858369][ T8944] syz.0.488 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  665.869628][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.869892][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.870369][ T8763] bridge_slave_1: entered allmulticast mode
[  665.899507][ T8763] bridge_slave_1: entered promiscuous mode
[  665.920279][ T8938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  665.921552][ T8938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  666.068924][   T38] kauditd_printk_skb: 25 callbacks suppressed
[  666.068949][   T38] audit: type=1326 audit(1787705040.339:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8937 comm="syz.0.488" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09fffbe0d9 code=0x0
[  667.693061][ T8833] Bluetooth: hci3: command tx timeout
[  668.382112][ T8763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  668.463703][ T8763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  668.615033][ T8763] team0: Port device team_slave_0 added
[  668.685830][ T8763] team0: Port device team_slave_1 added
[  669.501886][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_0
[  669.509038][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.509075][ T8763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  669.602374][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_1
[  669.610306][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.610344][ T8763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  670.672045][ T8833] Bluetooth: hci3: command tx timeout
[  671.607474][ T1533] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.532565][ T3300] IPVS: starting estimator thread 0...
[  672.634748][ T8985] IPVS: using max 11 ests per chain, 26400 per kthread
[  672.723164][ T8833] Bluetooth: hci3: command tx timeout
[  673.011285][ T5254] 8021q: adding VLAN 0 to HW filter on device eth15
[  674.803036][ T8833] Bluetooth: hci3: command tx timeout
[  675.966195][ T1533] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.000903][ T8763] hsr_slave_0: entered promiscuous mode
[  678.075006][ T8763] hsr_slave_1: entered promiscuous mode
[  678.906595][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.907148][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.907723][ T8812] bridge_slave_0: entered allmulticast mode
[  678.924597][ T8812] bridge_slave_0: entered promiscuous mode
[  678.988237][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state
[  678.988648][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.989118][ T8812] bridge_slave_1: entered allmulticast mode
[  679.013427][ T8812] bridge_slave_1: entered promiscuous mode
[  679.216227][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  679.295343][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  679.657515][ T8812] team0: Port device team_slave_0 added
[  679.714657][ T8812] team0: Port device team_slave_1 added
[  681.056075][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  681.056255][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  681.056393][ T8812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  681.750217][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  681.750328][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  681.750361][ T8812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  682.692972][ T1533] bridge_slave_1: left allmulticast mode
[  682.698777][ T1533] bridge_slave_1: left promiscuous mode
[  682.698996][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state
[  683.934085][ T1533] bridge_slave_0: left allmulticast mode
[  683.939909][ T1533] bridge_slave_0: left promiscuous mode
[  683.940145][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state
[  684.854570][ T9048] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  685.281486][ T1533] bridge_slave_1: left allmulticast mode
[  685.299372][ T1533] bridge_slave_1: left promiscuous mode
[  685.299659][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.439181][ T1533] bridge_slave_0: left allmulticast mode
[  685.439641][ T1533] bridge_slave_0: left promiscuous mode
[  685.472457][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.991617][ T1533] bridge_slave_1: left allmulticast mode
[  685.999300][ T1533] bridge_slave_1: left promiscuous mode
[  686.028064][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  686.039681][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  686.056978][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.876894][ T1533] bridge_slave_0: left allmulticast mode
[  686.887602][ T1533] bridge_slave_0: left promiscuous mode
[  687.019998][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state
[  688.969790][ T9076] netlink: 'syz.0.506': attribute type 16 has an invalid length.
[  688.977747][ T9076] netlink: 'syz.0.506': attribute type 17 has an invalid length.
[  689.554929][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  689.653687][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  689.715795][ T1533] bond0 (unregistering): Released all slaves
[  690.105081][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  690.223542][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  690.309867][ T1533] bond0 (unregistering): Released all slaves
[  690.556212][ T8461] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  690.646526][ T8461] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  690.655388][ T8461] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  690.698321][ T8461] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  690.715253][ T8461] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  691.135052][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  691.194020][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  691.242826][ T1533] bond0 (unregistering): Released all slaves
[  691.450643][ T5254] 8021q: adding VLAN 0 to HW filter on device eth16
[  691.668809][ T8812] hsr_slave_0: entered promiscuous mode
[  691.673511][ T8812] hsr_slave_1: entered promiscuous mode
[  691.674975][ T8812] debugfs: 'hsr0' already exists in 'hsr'
[  691.675100][ T8812] Cannot create hsr debugfs directory
[  692.803732][ T8833] Bluetooth: hci2: command tx timeout
[  692.831235][ T9094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.840617][ T9094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  694.801916][ T8461] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  694.888219][ T8461] Bluetooth: hci2: command tx timeout
[  694.901812][ T8461] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  694.927916][ T8461] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  694.937785][ T8461] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  695.121455][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'.
[  695.123631][ T9111] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request
[  695.973358][ T5603] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  696.923382][ T9127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.929311][ T9127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.982937][ T8833] Bluetooth: hci2: command tx timeout
[  697.053629][ T8933] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.061097][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.061338][ T8933] bridge_slave_0: entered allmulticast mode
[  697.065720][   T38] audit: type=1326 audit(1787705071.329:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9126 comm="syz.0.511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09fffbe0d9 code=0x0
[  697.098643][ T8933] bridge_slave_0: entered promiscuous mode
[  698.921751][ T8833] Bluetooth: hci6: command tx timeout
[  698.922369][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.922517][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.922839][ T8933] bridge_slave_1: entered allmulticast mode
[  698.957149][ T8933] bridge_slave_1: entered promiscuous mode
[  699.174734][ T5603] Bluetooth: hci2: command tx timeout
[  699.765879][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_0
[  699.794248][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_1
[  699.985244][ T1533] hsr_slave_0: left promiscuous mode
[  700.023080][ T1533] hsr_slave_1: left promiscuous mode
[  700.033856][ T1533] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  700.033956][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.065213][ T1533] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  700.065582][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_1
[  701.924388][ T5603] Bluetooth: hci6: command tx timeout
[  702.110016][ T1533] veth1_macvtap: left promiscuous mode
[  702.111820][ T1533] veth0_macvtap: left promiscuous mode
[  702.112305][ T1533] veth1_vlan: left promiscuous mode
[  702.143124][ T1533] veth0_vlan: left promiscuous mode
[  702.746972][ T1533] team0 (unregistering): Port device team_slave_1 removed
[  702.803729][ T1533] team0 (unregistering): Port device team_slave_0 removed
[  703.274410][ T1533] team0 (unregistering): Port device team_slave_1 removed
[  704.122020][ T5603] Bluetooth: hci6: command tx timeout
[  704.143547][ T1533] team0 (unregistering): Port device team_slave_0 removed
[  706.163000][ T5603] Bluetooth: hci6: command tx timeout
[  707.765894][ T1533] team0 (unregistering): Port device team_slave_1 removed
[  707.823536][ T1533] team0 (unregistering): Port device team_slave_0 removed
[  708.117977][ T8933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  708.147315][ T5254] 8021q: adding VLAN 0 to HW filter on device eth17
[  708.556792][ T8933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  708.807301][ T8933] team0: Port device team_slave_0 added
[  708.835046][ T8933] team0: Port device team_slave_1 added
[  708.986439][ T8933] batman_adv: batadv0: Adding interface: batadv_slave_0
[  708.989491][ T8933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  708.989529][ T8933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  709.144162][ T8933] batman_adv: batadv0: Adding interface: batadv_slave_1
[  709.144243][ T8933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  709.144275][ T8933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  710.940957][ T9211] trusted_key: syz.0.521 sent an empty control message without MSG_MORE.
[  712.140117][ T8933] hsr_slave_0: entered promiscuous mode
[  712.147200][ T8933] hsr_slave_1: entered promiscuous mode
[  712.153193][ T8933] debugfs: 'hsr0' already exists in 'hsr'
[  712.153378][ T8933] Cannot create hsr debugfs directory
[  715.035998][ T9081] bridge0: port 1(bridge_slave_0) entered blocking state
[  715.048005][ T9081] bridge0: port 1(bridge_slave_0) entered disabled state
[  715.048670][ T9081] bridge_slave_0: entered allmulticast mode
[  715.085588][ T9081] bridge_slave_0: entered promiscuous mode
[  715.249067][ T9081] bridge0: port 2(bridge_slave_1) entered blocking state
[  715.256784][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state
[  715.257433][ T9081] bridge_slave_1: entered allmulticast mode
[  715.285400][ T9081] bridge_slave_1: entered promiscuous mode
[  715.567355][ T5254] 8021q: adding VLAN 0 to HW filter on device eth18
[  715.659374][ T9081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  715.715952][ T9081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  718.059802][ T9261] qnx6: unable to read the first superblock
[  718.208590][ T9261] qnx6: unable to read the first superblock
[  718.215085][ T9261] qnx6: unable to read the first superblock
[  718.713048][ T9268] netlink: 156 bytes leftover after parsing attributes in process `syz.5.527'.
[  719.172510][ T9266] bridge0: port 1(bridge_slave_0) entered disabled state
[  719.177624][ T9266] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.261091][ T9081] team0: Port device team_slave_0 added
[  719.285976][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.527'.
[  719.448107][ T9081] team0: Port device team_slave_1 added
[  720.178939][ T9276] pim6reg: entered allmulticast mode
[  720.477555][ T9107] bridge0: port 1(bridge_slave_0) entered blocking state
[  720.477705][ T9107] bridge0: port 1(bridge_slave_0) entered disabled state
[  720.477926][ T9107] bridge_slave_0: entered allmulticast mode
[  720.500882][ T9107] bridge_slave_0: entered promiscuous mode
[  721.153620][ T9107] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.170208][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.170441][ T9107] bridge_slave_1: entered allmulticast mode
[  721.189205][ T9107] bridge_slave_1: entered promiscuous mode
[  721.276815][ T9081] batman_adv: batadv0: Adding interface: batadv_slave_0
[  721.283988][ T9081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  721.284024][ T9081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  721.366535][ T9081] batman_adv: batadv0: Adding interface: batadv_slave_1
[  721.373778][ T9081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  721.373816][ T9081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  721.439745][ T9107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  721.475820][ T9107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  725.459116][ T9107] team0: Port device team_slave_0 added
[  725.504375][ T9081] hsr_slave_0: entered promiscuous mode
[  725.506740][ T9081] hsr_slave_1: entered promiscuous mode
[  725.509239][ T9081] debugfs: 'hsr0' already exists in 'hsr'
[  725.509292][ T9081] Cannot create hsr debugfs directory
[  725.529862][ T9107] team0: Port device team_slave_1 added
[  726.916701][ T8833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  727.013856][ T8461] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  727.065865][ T8461] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  727.080626][ T8461] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  727.139430][ T8461] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  728.967825][ T5254] 8021q: adding VLAN 0 to HW filter on device eth19
[  728.971122][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_0
[  728.971140][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  728.971172][ T9107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  729.131247][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_1
[  729.139978][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  729.140017][ T9107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  729.285123][ T5603] Bluetooth: hci4: command tx timeout
[  731.795123][ T5603] Bluetooth: hci4: command tx timeout
[  732.832536][ T9107] hsr_slave_0: entered promiscuous mode
[  732.842425][ T9107] hsr_slave_1: entered promiscuous mode
[  732.863191][ T9107] debugfs: 'hsr0' already exists in 'hsr'
[  732.863283][ T9107] Cannot create hsr debugfs directory
[  733.846043][ T5603] Bluetooth: hci4: command tx timeout
[  735.926006][ T5603] Bluetooth: hci4: command tx timeout
[  737.305206][ T9347] ntfs3(nullb0): Primary boot signature is not NTFS.
[  737.420398][ T9347] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  742.071968][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.5.541'.
[  747.446149][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  747.453021][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  752.274092][ T8461] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  752.340610][ T8461] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  752.364589][ T8461] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  752.381029][ T8461] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  752.389509][ T8461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  753.897227][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state
[  753.904959][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state
[  753.905545][ T9306] bridge_slave_0: entered allmulticast mode
[  753.910292][ T9306] bridge_slave_0: entered promiscuous mode
[  753.952039][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state
[  753.964364][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state
[  753.964634][ T9306] bridge_slave_1: entered allmulticast mode
[  753.992950][ T9306] bridge_slave_1: entered promiscuous mode
[  754.106363][ T5254] 8021q: adding VLAN 0 to HW filter on device eth20
[  754.572159][ T1533] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.644244][ T9306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  754.645772][ T8461] Bluetooth: hci3: command tx timeout
[  754.685935][ T9306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  755.259973][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  755.322076][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  755.327135][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  755.385976][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  755.387336][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  755.817232][ T1533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.868988][ T9306] team0: Port device team_slave_0 added
[  755.935089][ T9306] team0: Port device team_slave_1 added
[  756.361134][ T1533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.473870][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  756.473958][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  756.474056][ T9306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  756.535758][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  756.535862][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  756.535927][ T9306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  756.722798][ T8461] Bluetooth: hci3: command tx timeout
[  757.186639][ T1533] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  757.522872][ T8461] Bluetooth: hci2: command tx timeout
[  757.569626][ T9306] hsr_slave_0: entered promiscuous mode
[  757.575600][ T9306] hsr_slave_1: entered promiscuous mode
[  757.581485][ T9306] debugfs: 'hsr0' already exists in 'hsr'
[  757.584495][ T9306] Cannot create hsr debugfs directory
[  758.783105][ T1533] bridge_slave_1: left allmulticast mode
[  758.783197][ T1533] bridge_slave_1: left promiscuous mode
[  758.783510][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.802868][ T8461] Bluetooth: hci3: command tx timeout
[  758.914754][ T1533] bridge_slave_0: left allmulticast mode
[  758.914860][ T1533] bridge_slave_0: left promiscuous mode
[  758.915624][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.194407][ T1533] bridge_slave_1: left allmulticast mode
[  759.194510][ T1533] bridge_slave_1: left promiscuous mode
[  759.195282][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.365299][ T1533] bridge_slave_0: left allmulticast mode
[  759.371154][ T1533] bridge_slave_0: left promiscuous mode
[  759.371456][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.603173][ T8461] Bluetooth: hci2: command tx timeout
[  759.653198][ T1533] bridge_slave_1: left allmulticast mode
[  759.659034][ T1533] bridge_slave_1: left promiscuous mode
[  759.659344][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.824716][ T1533] bridge_slave_0: left allmulticast mode
[  759.830572][ T1533] bridge_slave_0: left promiscuous mode
[  759.830849][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.093339][ T1533] bridge_slave_1: left allmulticast mode
[  760.093439][ T1533] bridge_slave_1: left promiscuous mode
[  760.094178][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.214069][ T1533] bridge_slave_0: left allmulticast mode
[  760.214166][ T1533] bridge_slave_0: left promiscuous mode
[  760.214983][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.443180][ T1533] bridge_slave_1: left allmulticast mode
[  760.443280][ T1533] bridge_slave_1: left promiscuous mode
[  760.444011][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.526013][ T1533] bridge_slave_0: left allmulticast mode
[  760.526119][ T1533] bridge_slave_0: left promiscuous mode
[  760.526845][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.883025][ T8461] Bluetooth: hci3: command tx timeout
[  761.033538][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  761.133903][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  761.195436][ T1533] bond0 (unregistering): Released all slaves
[  761.483582][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  761.585727][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  761.664703][ T1533] bond0 (unregistering): Released all slaves
[  761.682869][ T5603] Bluetooth: hci2: command tx timeout
[  761.923466][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  762.004028][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  762.066088][ T1533] bond0 (unregistering): Released all slaves
[  762.685196][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  762.744262][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  762.765709][ T1533] bond0 (unregistering): Released all slaves
[  763.023592][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  763.103537][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  763.165202][ T1533] bond0 (unregistering): Released all slaves
[  763.656904][ T9403] bridge0: port 1(bridge_slave_0) entered blocking state
[  763.657719][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.658311][ T9403] bridge_slave_0: entered allmulticast mode
[  763.671315][ T9403] bridge_slave_0: entered promiscuous mode
[  763.741633][ T9403] bridge0: port 2(bridge_slave_1) entered blocking state
[  763.748999][ T9403] bridge0: port 2(bridge_slave_1) entered disabled state
[  763.749207][ T9403] bridge_slave_1: entered allmulticast mode
[  763.751537][ T9403] bridge_slave_1: entered promiscuous mode
[  763.773205][ T5603] Bluetooth: hci2: command tx timeout
[  764.123853][ T9403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  764.317771][ T9403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  764.360088][ T1533] tipc: Disabling bearer <udp:syz0>
[  764.375062][ T1533] tipc: Left network mode
[  764.524933][ T9306] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  764.586290][ T9306] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  764.666199][ T9403] team0: Port device team_slave_0 added
[  764.671128][ T9306] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  764.777661][ T9306] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  764.787068][ T9403] team0: Port device team_slave_1 added
[  764.854982][ T9306] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  764.927878][ T9306] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  765.004278][ T9306] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  765.080534][ T9306] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  765.128746][ T9403] batman_adv: batadv0: Adding interface: batadv_slave_0
[  765.128828][ T9403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  765.128859][ T9403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  765.260025][ T9403] batman_adv: batadv0: Adding interface: batadv_slave_1
[  765.260234][ T9403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  765.260396][ T9403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  765.887910][ T9442] bridge0: port 1(bridge_slave_0) entered blocking state
[  765.888507][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state
[  765.888998][ T9442] bridge_slave_0: entered allmulticast mode
[  765.906537][ T9442] bridge_slave_0: entered promiscuous mode
[  765.940585][ T9442] bridge0: port 2(bridge_slave_1) entered blocking state
[  765.942204][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.942652][ T9442] bridge_slave_1: entered allmulticast mode
[  765.951999][ T9442] bridge_slave_1: entered promiscuous mode
[  765.984243][ T9403] hsr_slave_0: entered promiscuous mode
[  765.989708][ T9403] hsr_slave_1: entered promiscuous mode
[  765.992019][ T9403] debugfs: 'hsr0' already exists in 'hsr'
[  765.992089][ T9403] Cannot create hsr debugfs directory
[  766.379269][ T9442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  766.464004][ T9442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  766.682027][ T9442] team0: Port device team_slave_0 added
[  766.711457][ T9442] team0: Port device team_slave_1 added
[  767.080954][ T9442] batman_adv: batadv0: Adding interface: batadv_slave_0
[  767.081029][ T9442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  767.081103][ T9442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  767.127739][ T9442] batman_adv: batadv0: Adding interface: batadv_slave_1
[  767.127821][ T9442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  767.127879][ T9442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  767.322923][ T1533] hsr_slave_0: left promiscuous mode
[  767.362933][ T1533] hsr_slave_1: left promiscuous mode
[  767.368987][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_0
[  767.405323][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_1
[  767.562866][ T1533] hsr_slave_0: left promiscuous mode
[  767.603408][ T1533] hsr_slave_1: left promiscuous mode
[  767.606999][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_0
[  767.645158][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_1
[  767.854882][ T1533] hsr_slave_0: left promiscuous mode
[  767.893139][ T1533] hsr_slave_1: left promiscuous mode
[  767.899979][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_0
[  767.934297][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_1
[  768.132998][ T1533] hsr_slave_0: left promiscuous mode
[  768.174491][ T1533] hsr_slave_1: left promiscuous mode
[  768.182434][ T1533] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  768.182489][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_0
[  768.224430][ T1533] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  768.224512][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_1
[  768.264017][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_0
[  768.305430][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_1
[  768.385440][ T1533] veth1_macvtap: left promiscuous mode
[  768.385664][ T1533] veth0_macvtap: left promiscuous mode
[  768.385836][ T1533] veth1_vlan: left promiscuous mode
[  768.385971][ T1533] veth0_vlan: left promiscuous mode
[  769.047853][ T1533] team0 (unregistering): Port device team_slave_1 removed
[  769.093443][ T1533] team0 (unregistering): Port device team_slave_0 removed
[  769.584997][ T1533] team0 (unregistering): Port device team_slave_1 removed
[  769.644068][ T1533] team0 (unregistering): Port device team_slave_0 removed
[  770.134460][ T1533] team0 (unregistering): Port device team_slave_1 removed
[  770.186380][ T1533] team0 (unregistering): Port device team_slave_0 removed
[  770.833727][ T1533] team0 (unregistering): Port device team_slave_1 removed
[  770.893704][ T1533] team0 (unregistering): Port device team_slave_0 removed
[  771.154298][ T1533] team0 (unregistering): Port device team_slave_1 removed
[  771.204993][ T1533] team0 (unregistering): Port device team_slave_0 removed
[  771.510719][ T9442] hsr_slave_0: entered promiscuous mode
[  771.514051][ T9442] hsr_slave_1: entered promiscuous mode
[  772.363986][ T9306] 8021q: adding VLAN 0 to HW filter on device bond0
[  772.649395][ T9306] 8021q: adding VLAN 0 to HW filter on device team0
[  772.987759][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  772.990614][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  773.021618][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1
[  773.029982][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  773.030198][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  773.077092][ T9403] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  773.167115][ T9403] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  773.219733][ T9403] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  773.314240][ T9403] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  773.342310][ T9403] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  773.388892][ T9403] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  773.551190][ T9403] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  773.578308][ T9403] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  774.747153][ T9403] 8021q: adding VLAN 0 to HW filter on device bond0
[  774.824420][ T9403] 8021q: adding VLAN 0 to HW filter on device team0
[  775.081062][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2
[  775.140368][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state
[  775.147832][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  775.177443][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state
[  775.185025][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  775.778639][ T9306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  776.529792][ T9306] veth0_vlan: entered promiscuous mode
[  776.548511][ T9442] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  776.649071][ T9442] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  776.729990][ T9306] veth1_vlan: entered promiscuous mode
[  776.742420][ T9442] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  776.837815][ T9442] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  776.847389][ T5254] 8021q: adding VLAN 0 to HW filter on device eth3
[  776.850976][ T9442] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  776.940097][ T9442] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  777.001550][ T9442] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  777.038605][ T9442] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  777.127076][ T9403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  777.348274][ T9306] veth0_macvtap: entered promiscuous mode
[  777.400063][ T9306] veth1_macvtap: entered promiscuous mode
[  777.573509][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_0
[  777.600592][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_1
[  778.255313][ T9403] veth0_vlan: entered promiscuous mode
[  778.415489][ T9442] 8021q: adding VLAN 0 to HW filter on device bond0
[  778.736343][ T9403] veth1_vlan: entered promiscuous mode
[  778.861915][ T9442] 8021q: adding VLAN 0 to HW filter on device team0
[  778.871598][ T3300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  778.871621][ T3300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  778.973469][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[  778.979451][ T3298] bridge0: port 1(bridge_slave_0) entered forwarding state
[  779.040172][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[  779.048054][ T3300] bridge0: port 2(bridge_slave_1) entered forwarding state
[  779.179735][ T5254] 8021q: adding VLAN 0 to HW filter on device eth4
[  779.344669][ T1533] bridge_slave_1: left allmulticast mode
[  779.344790][ T1533] bridge_slave_1: left promiscuous mode
[  779.345578][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.504634][ T1533] bridge_slave_0: left allmulticast mode
[  779.504734][ T1533] bridge_slave_0: left promiscuous mode
[  779.505552][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state
[  779.712982][ T1533] bridge_slave_1: left allmulticast mode
[  779.713075][ T1533] bridge_slave_1: left promiscuous mode
[  779.713758][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.814116][ T1533] bridge_slave_0: left allmulticast mode
[  779.814241][ T1533] bridge_slave_0: left promiscuous mode
[  779.814981][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state
[  780.226223][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  780.303611][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  780.364631][ T1533] bond0 (unregistering): Released all slaves
[  780.675365][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  780.774364][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  780.836103][ T1533] bond0 (unregistering): Released all slaves
[  780.900107][ T9403] veth0_macvtap: entered promiscuous mode
[  781.060653][ T9403] veth1_macvtap: entered promiscuous mode
[  781.086860][ T8506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  781.094926][ T8506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  781.321996][ T9403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  781.392621][ T9403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  785.685065][ T1533] hsr_slave_0: left promiscuous mode
[  785.757015][ T1533] hsr_slave_1: left promiscuous mode
[  785.758136][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_0
[  785.979244][ T9775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.552'.
[  786.067735][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_1
[  787.263046][ T1533] hsr_slave_0: left promiscuous mode
[  787.283017][ T1533] hsr_slave_1: left promiscuous mode
[  787.284287][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_0
[  788.203622][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_1
[  789.153738][ T1533] team0 (unregistering): Port device team_slave_1 removed
[  789.398698][ T1533] team0 (unregistering): Port device team_slave_0 removed
[  789.707757][ T9792] 0x000000000006-0x000000020000 : ""
[  789.928186][ T5603] Bluetooth: hci4: command 0x0406 tx timeout
[  790.070086][ T9792] ftl_cs: FTL header corrupt!
[  790.594480][ T1533] team0 (unregistering): Port device team_slave_1 removed
[  790.639062][ T9797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  790.652977][ T1533] team0 (unregistering): Port device team_slave_0 removed
[  790.663168][ T9797] IPv6: NLM_F_CREATE should be set when creating new route
[  791.753844][ T3298] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  791.783267][ T8506] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  791.785006][ T8506] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  791.881152][ T9815] ubi0: attaching mtd0
[  791.971842][ T9815] ubi0: scanning is finished
[  791.971904][ T9815] ubi0: empty MTD device detected
[  792.127501][ T8506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  792.652050][ T1165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  792.655546][ T1165] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  792.656147][ T1165] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  792.841434][ T3300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  792.841508][ T3300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  793.206062][ T3392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.214123][ T3392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  793.248728][ T8506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  793.329183][ T9815] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  797.300792][   T38] audit: type=1326 audit(1787705171.569:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9846 comm="syz.2.564" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa362c5e0d9 code=0x0
[  798.254023][ T9442] 8021q: adding VLAN 0 to HW filter on device batadv0
[  801.579230][ T9442] veth0_vlan: entered promiscuous mode
[  801.646302][ T9442] veth1_vlan: entered promiscuous mode
[  801.954001][ T9442] veth0_macvtap: entered promiscuous mode
[  802.048417][ T9442] veth1_macvtap: entered promiscuous mode
[  802.205279][ T9442] batman_adv: batadv0: Interface activated: batadv_slave_0
[  802.248009][ T9442] batman_adv: batadv0: Interface activated: batadv_slave_1
[  802.313127][ T1011] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  802.324032][   T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  802.340769][ T1011] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  802.355660][ T8507] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  803.177720][ T9882] ieee802154 phy0 wpan0: encryption failed: -22
[  808.906265][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  808.906511][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  809.416881][ T3393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  809.430268][ T3393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  810.022943][ T9955] fuse: Unknown parameter 'group_id00000000000000000000'
[  812.612830][ T5727] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  812.623666][    C0] raw-gadget.0 gadget.8: ignoring, device is not running
[  812.901306][ T5727] usb 9-1: device descriptor read/64, error -32
[  813.552484][ T8506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  813.571734][ T8506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  813.745474][ T9979] LUN: removable file: (no medium)
[  815.883539][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.8.580'.
[  818.997226][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  819.166203][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  819.196371][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  819.257449][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  819.270736][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  821.056830][T10022] binder: 10019:10022 ioctl 4008550d 200000000000 returned -22
[  821.767144][ T5727] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  821.912185][   T38] audit: type=1326 audit(1787705196.179:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10028 comm="syz.8.588" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbda1f9e0d9 code=0x0
[  823.173206][ T8461] Bluetooth: hci5: command tx timeout
[  825.183711][T10061] random: crng reseeded on system resumption
[  826.264064][ T8461] Bluetooth: hci5: command tx timeout
[  826.371386][ T5727] usb 9-1: device descriptor read/all, error -71
[  826.603344][   T38] audit: type=1800 audit(1787705200.869:48): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.592" name="ifname" dev="configfs" ino=28204 res=0 errno=0
[  827.557351][T10071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  828.323015][ T8461] Bluetooth: hci5: command tx timeout
[  828.400015][   T38] audit: type=1800 audit(1787705202.649:49): pid=10064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.594" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  828.421493][T10064] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  828.431018][T10064] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  828.431056][T10064] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  829.509802][T10090] syz.2.598 (10090) used greatest stack depth: 18144 bytes left
[  830.475195][   T27] 
[  830.477602][   T27] ======================================================
[  830.484626][   T27] WARNING: possible circular locking dependency detected
[  830.491669][   T27] syzkaller #0 Tainted: G             L     
[  830.497684][   T27] ------------------------------------------------------
[  830.504706][   T27] migration/1/27 is trying to acquire lock:
[  830.510604][   T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0
[  830.519333][   T27] 
[  830.519333][   T27] but task is already holding lock:
[  830.526701][   T27] ffff888020baaa40 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410
[  830.536279][   T27] 
[  830.536279][   T27] which lock already depends on the new lock.
[  830.536279][   T27] 
[  830.546692][   T27] 
[  830.546692][   T27] the existing dependency chain (in reverse order) is:
[  830.555726][   T27] 
[  830.555726][   T27] -> #1 (&p->pi_lock){-...}-{2:2}:
[  830.563036][   T27]        _raw_spin_lock+0x2e/0x40
[  830.568075][   T27]        rtlock_slowlock_locked+0x1ec/0x3c20
[  830.574078][   T27]        rt_spin_lock+0x165/0x400
[  830.579120][   T27]        __wake_up_common_lock+0x2f/0x1f0
[  830.584889][   T27]        rcu_exp_sel_wait_wake+0xc00/0x1170
[  830.590838][   T27]        kthread_worker_fn+0x4eb/0xb20
[  830.596357][   T27]        kthread+0x38b/0x470
[  830.600974][   T27]        ret_from_fork+0x514/0xb70
[  830.606156][   T27]        ret_from_fork_asm+0x1a/0x30
[  830.611480][   T27] 
[  830.611480][   T27] -> #0 (_T->lock){....}-{2:2}:
[  830.618581][   T27]        __lock_acquire+0x1520/0x2ce0
[  830.623984][   T27]        lock_acquire+0x106/0x350
[  830.629031][   T27]        _raw_spin_lock_irqsave+0x40/0x60
[  830.634778][   T27]        rt_spin_trylock+0x56/0x2b0
[  830.639990][   T27]        __kfree_rcu_sheaf+0xd3/0x620
[  830.645422][   T27]        kvfree_call_rcu+0xa4/0x430
[  830.650644][   T27]        set_cpus_allowed_force+0x1bd/0x2a0
[  830.656568][   T27]        cpuset_cpus_allowed_fallback+0x24a/0x370
[  830.663029][   T27]        select_fallback_rq+0x11e/0x200
[  830.668620][   T27]        __balance_push_cpu_stop+0xa1/0x410
[  830.674526][   T27]        cpu_stopper_thread+0x25e/0x3f0
[  830.680106][   T27]        smpboot_thread_fn+0x565/0xa70
[  830.685592][   T27]        kthread+0x38b/0x470
[  830.690194][   T27]        ret_from_fork+0x514/0xb70
[  830.695329][   T27]        ret_from_fork_asm+0x1a/0x30
[  830.700633][   T27] 
[  830.700633][   T27] other info that might help us debug this:
[  830.700633][   T27] 
[  830.710870][   T27]  Possible unsafe locking scenario:
[  830.710870][   T27] 
[  830.718333][   T27]        CPU0                    CPU1
[  830.723707][   T27]        ----                    ----
[  830.729172][   T27]   lock(&p->pi_lock);
[  830.733322][   T27]                                lock(_T->lock);
[  830.739672][   T27]                                lock(&p->pi_lock);
[  830.746275][   T27]   lock(_T->lock);
[  830.750125][   T27] 
[  830.750125][   T27]  *** DEADLOCK ***
[  830.750125][   T27] 
[  830.758286][   T27] locks held by migration/1/27: 2, last CPU#1:
[  830.764454][   T27]  #0: ffff888020baaa40 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410
[  830.773512][ T8461] Bluetooth: hci5: command tx timeout
[  830.779813][   T27]  #1: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370
[  830.790421][   T27] 
[  830.790421][   T27] stack backtrace:
[  830.796349][   T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  830.807660][   T27] Tainted: [L]=SOFTLOCKUP
[  830.811998][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  830.822072][   T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0
[  830.830545][   T27] Call Trace:
[  830.833848][   T27]  <TASK>
[  830.836803][   T27]  dump_stack_lvl+0xe8/0x150
[  830.841446][   T27]  print_circular_bug+0x2e1/0x300
[  830.846517][   T27]  check_noncircular+0x12e/0x150
[  830.851504][   T27]  __lock_acquire+0x1520/0x2ce0
[  830.856397][   T27]  ? __pfx_usage_match+0x10/0x10
[  830.861371][   T27]  ? lockdep_unlock+0x5c/0xd0
[  830.866084][   T27]  ? __lock_acquire+0x13e8/0x2ce0
[  830.871144][   T27]  ? rt_spin_trylock+0x56/0x2b0
[  830.876030][   T27]  lock_acquire+0x106/0x350
[  830.880577][   T27]  ? rt_spin_trylock+0x56/0x2b0
[  830.885494][   T27]  _raw_spin_lock_irqsave+0x40/0x60
[  830.890736][   T27]  ? rt_spin_trylock+0x56/0x2b0
[  830.895626][   T27]  rt_spin_trylock+0x56/0x2b0
[  830.900330][   T27]  __kfree_rcu_sheaf+0xd3/0x620
[  830.905222][   T27]  kvfree_call_rcu+0xa4/0x430
[  830.909955][   T27]  ? do_raw_spin_unlock+0xf5/0x200
[  830.915100][   T27]  set_cpus_allowed_force+0x1bd/0x2a0
[  830.920508][   T27]  ? __pfx_set_cpus_allowed_force+0x10/0x10
[  830.926469][   T27]  ? cpuset_cpus_allowed_fallback+0x22/0x370
[  830.932492][   T27]  ? cpuset_cpus_allowed_fallback+0x22/0x370
[  830.938509][   T27]  cpuset_cpus_allowed_fallback+0x24a/0x370
[  830.944445][   T27]  select_fallback_rq+0x11e/0x200
[  830.949476][   T27]  ? __pfx___balance_push_cpu_stop+0x10/0x10
[  830.955460][   T27]  __balance_push_cpu_stop+0xa1/0x410
[  830.960851][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  830.966086][   T27]  ? __pfx___balance_push_cpu_stop+0x10/0x10
[  830.972080][   T27]  cpu_stopper_thread+0x25e/0x3f0
[  830.977139][   T27]  ? smpboot_thread_fn+0x4e/0xa70
[  830.982192][   T27]  smpboot_thread_fn+0x565/0xa70
[  830.987149][   T27]  ? smpboot_thread_fn+0x4e/0xa70
[  830.992238][   T27]  kthread+0x38b/0x470
[  830.996318][   T27]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  831.001808][   T27]  ? __pfx_kthread+0x10/0x10
[  831.006436][   T27]  ret_from_fork+0x514/0xb70
[  831.011047][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  831.016187][   T27]  ? __switch_to+0xc89/0x1420
[  831.020900][   T27]  ? __pfx_kthread+0x10/0x10
[  831.025512][   T27]  ret_from_fork_asm+0x1a/0x30
[  831.030296][   T27]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  831.033351][   T27] process 10093 (syz.0.600) no longer affine to cpu1