last executing test programs:

12m55.377063358s ago: executing program 0 (id=1):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0)
ftruncate(r2, 0x8008976)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000567000/0x2000)=nil)
mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x400, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x200000005c831, 0xffffffffffffffff, 0x0)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304, 0x3a}, "56d87a2700f81000", "9eef1a3a33071799b7bbebfa86c071290d0e3800", "04000201", "540700000800dba1"}, 0x38)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xe, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x8cfd, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x2, 0x4, 0x1, 0x0, 0x2}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}, 0x3}, [@migrate={0x50, 0x11, [{@in=@empty=0xac141424, @in=@private=0xa010100, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x3c, 0x4, 0x0, 0x2, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40804}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a)
r7 = openat$cgroup_int(r6, &(0x7f0000000400)='cpu.max\x00', 0x2, 0x0)
r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10)
ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000340)={0xfffffffe, 0x1831})
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, 0x0, 0x0, 0x0, 0x81, 0x0, 0xff, 0x6, 0x101})
sendfile(r7, r7, 0x0, 0x85b5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

12m54.779244538s ago: executing program 0 (id=13):
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x62201)
write$P9_RVERSION(r0, &(0x7f0000002200)=ANY=[], 0xfffffcd9)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

12m51.212982974s ago: executing program 0 (id=19):
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000580)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

12m50.820037858s ago: executing program 0 (id=21):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}})
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xfff2}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0)
file_getattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x18, 0x100)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x70, 0x52, 0x4, 0x0, 0x0, {0x1c}, [@typed={0xe, 0x1, 0x0, 0x0, @str='\\,$!*(,,&\x00'}, @generic="0d3703c0c066dc3d56ab78bc80aaa14ce714f77510d25c6207fa411733d0f3e452afebf89cd0fbd1557da1a165e6f704c0171e21ce0db93a42c20f7b3743bd496f3179a0ed2e60dcabcee6"]}, 0x70}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d6974000000140002800800014080000001080002400000000114000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000200)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r7}, 0x8)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x54, 0x6, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40480}, 0x2040000)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r7, 0x401}, &(0x7f00000002c0)=0x8)
openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x4000, 0x194)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r9, 0x560e, &(0x7f0000000000))
ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40})
ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6})
sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x8000)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)

12m46.294089189s ago: executing program 0 (id=30):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGETD(r0, 0x5424, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000440)=""/102400, 0x19000)
ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffeae, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timerfd_create(0x0, 0x800)

12m30.354259442s ago: executing program 32 (id=30):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGETD(r0, 0x5424, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000440)=""/102400, 0x19000)
ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffeae, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timerfd_create(0x0, 0x800)

10m11.173910889s ago: executing program 2 (id=308):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005040100000000000000000000000000000000000000000000000c0003006272696467653000200012800b00010062"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYBLOB="140001800800010000000100050003"], 0x2c}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00\r\n'], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

10m11.002075695s ago: executing program 2 (id=310):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000440)=""/102400, 0x19000)
prctl$PR_GET_THP_DISABLE(0x2a)
ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, &(0x7f00000000c0))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timerfd_create(0x0, 0x800)

10m10.817527084s ago: executing program 2 (id=311):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="fa9926fc9c8856e6f3e311e44d163c59ba7715", 0x13}], 0x1, 0x9, 0x5, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2)
r4 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000002c0)={0x1000000, 0x1, 0x0, 0x0, 0x0, 0x28fc0, 0x9f8c})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000140), 0x400000000000287, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x3ec0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00')
preadv(r8, &(0x7f0000000440)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8000f, 0xfffffbff)

10m4.126992548s ago: executing program 2 (id=321):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
setrlimit(0x8396070e229498d7, &(0x7f0000000080)={0x4, 0x6cf1})
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write$sysctl(r3, &(0x7f0000000280)='1\x00', 0x1)

10m1.711956561s ago: executing program 2 (id=328):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
syz_clone(0x14100000, 0x0, 0x0, 0x0, 0x0, 0x0)

9m59.669172084s ago: executing program 2 (id=331):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0)
ftruncate(r2, 0x8008976)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000567000/0x2000)=nil)
mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x400, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x200000005c831, 0xffffffffffffffff, 0x0)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304, 0x3a}, "56d87a2700f81000", "9eef1a3a33071799b7bbebfa86c071290d0e3800", "04000201", "540700000800dba1"}, 0x38)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xe, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x8cfd, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x2, 0x4, 0x1, 0x0, 0x2}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}, 0x3}, [@migrate={0x50, 0x11, [{@in=@empty=0xac141424, @in=@private=0xa010100, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x3c, 0x4, 0x0, 0x2, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40804}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a)
r7 = openat$cgroup_int(r6, &(0x7f0000000400)='cpu.max\x00', 0x2, 0x0)
r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10)
ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000340)={0xfffffffe, 0x1831})
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, 0x0, 0x0, 0x0, 0x81, 0x0, 0xff, 0x6, 0x101})
sendfile(r7, r7, 0x0, 0x85b5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

9m43.297410548s ago: executing program 33 (id=331):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0)
ftruncate(r2, 0x8008976)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000567000/0x2000)=nil)
mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x400, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x200000005c831, 0xffffffffffffffff, 0x0)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304, 0x3a}, "56d87a2700f81000", "9eef1a3a33071799b7bbebfa86c071290d0e3800", "04000201", "540700000800dba1"}, 0x38)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xe, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x8cfd, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x2, 0x4, 0x1, 0x0, 0x2}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}, 0x3}, [@migrate={0x50, 0x11, [{@in=@empty=0xac141424, @in=@private=0xa010100, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x3c, 0x4, 0x0, 0x2, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40804}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a)
r7 = openat$cgroup_int(r6, &(0x7f0000000400)='cpu.max\x00', 0x2, 0x0)
r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10)
ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000340)={0xfffffffe, 0x1831})
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, 0x0, 0x0, 0x0, 0x81, 0x0, 0xff, 0x6, 0x101})
sendfile(r7, r7, 0x0, 0x85b5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

9m25.078349794s ago: executing program 4 (id=384):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f00000000c0)={[{@dax_never}]}, 0x0, 0x248, &(0x7f0000000bc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000200)=""/179, 0xb3)

9m24.374740248s ago: executing program 4 (id=388):
socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000380), &(0x7f0000000400)=0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1df7, 0x2500, 0x100, 0x1, 0x2, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0x25, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0)
getsockopt$inet_tcp_int(r2, 0x6, 0x25, 0x0, &(0x7f0000000140))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="c800000009060103000000000000000002000003080009400000000e050001200700000005000100070000003400078005000700ff00000008000b400000080008000b40000003ff0a00110000000000000000000c001940000000000000000408000940000000063c0008801c0007801800028014000240fe8000000000000000000000000000140c00078008000b4000000000100007800c00018008000140e00000021c0007800c000280080001400a0101020c00028008000140000000000500010007000000"], 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000011c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYRES64, @ANYRES32=r5, @ANYBLOB="040013000a0006000802110000010000060010008c020000060012000000000005001900010000000500c200e40000000500e400000000000c00810005000200d30000000600be0099190000"], 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

9m19.66575641s ago: executing program 4 (id=397):
socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000380), &(0x7f0000000400)=0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1df7, 0x2500, 0x100, 0x1, 0x2, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0x25, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)})
getsockopt$inet_tcp_int(r2, 0x6, 0x25, 0x0, &(0x7f0000000140))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="c800000009060103000000000000000002000003080009400000000e050001200700000005000100070000003400078005000700ff00000008000b400000080008000b40000003ff0a00110000000000000000000c001940000000000000000408000940000000063c0008801c0007801800028014000240fe8000000000000000000000000000140c00078008000b4000000000100007800c00018008000140e00000021c0007800c000280080001400a0101020c00028008000140000000000500010007000000"], 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000011c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYRES64, @ANYRES32=r5, @ANYBLOB="040013000a0006000802110000010000060010008c020000060012000000000005001900010000000500c200e40000000500e400000000000c00810005000200d30000000600be0099190000"], 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

9m16.877488622s ago: executing program 4 (id=406):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, 0x0, 0x25, 0x2, @void}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0xc, 0x0)
chdir(0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000002200))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r5, r6, 0x3d5, 0xad}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000004140)="d45b83db154f28fe5d16e258caad670c6eacb7e3567a69e13266313835bfaccc0d8a87c04dea4c9014bf3dc1ac622d37ac21344f1095bd4c8125ce96617fc2746471e9451641e50abc7a2d28728b119c1d7422467f5e52a311c7996185718cce6fd28ba0f8c1ae6a18366d906e4c1b4a240cce627b341ed8c54a97ef618b588ba1c87628e1986722d53a9e5fb43e98e6d1f867e3437e7cd0ffbc222eb9e24198df655e05f9138c9fe3b55f09216f0aa503f88df030f6ff421af5629e1c88ee934c72a0f32671b1183874b19e122201c868db43d6c92b1adc0c8b0f215cb0cc863bcaa077acf520de0fbedc285254693a43cfb3fe313a8db286a0eb1589128dbfcb0f9b50495c84606c8d915ca95f7318aadb59f54c2a8417a31778bd895ee5c9f69bf5726702733666c59b6e733ecf0386b5bc08239ffc308cb5bc24a282548e832a3659633f4f9a0e5353e5ea44bd4cde4b6aa14db416860a0267e047a4c92243998565b7641e549304b25d44de5ae373501ab4450b7fca7ec680d60b86a81ccab5fa2e82d0a4da0c1e9132364cab0e8ce9da9022dda9a5bb136c316685b6025e89f03e64d4622104328144decd42c3481d9e964704906374f7e1c2077fbd5b01cf48443b80c5d4f8af5de4adfd272a54984acc83a1530f54ddaaf0c87459d4938e466ef48764be6175b7ea91326f5f3295fbccea16c9fe65c4e688c2db1667c6faf4a8512035ce987e52cc71239593c340a20fb37f4cb3b2ee444559f33ce82d9b4d67ba57aed19055a37b895fe52267eda2cecd81f838dc7765f553828ff1a78a67ff7f861bcdc8553e462417ac82469ca569d27bcce98e62e3f7ce5ef492a761277ff076b2749ced5b318eaeb038cffa7cdce0214550bac53ce71cf0aa686dfa10679f929b938abc872c3839bd543dfe040bc4401c25ffdbb5f2b1f8c01080752ff0d208e76520e93bdebd7722d47681cf709db77874e89d9307b66b9bb296d3be9658f66fa99ae1874f0e23cae267cf32c37859588a1e8f9ebe6f0588c9f3cbc02b64eac3284af33c5f2e615a2bccfa7189ed7158637b84a370ccd3cb4ec4909af4e077b5adb3c5ce08f8cd80196054eb259e50624fc3fb1c6f5460b7e2056434c98065988428638d57675bbca5c471711692d533ba5ca076ff2c56e620ec08644fc3ee6007f6b9a0b849bdbcd2c05b89993a0c38a26eb36bc758b1d77891e2edefc657db397620be8d5642769f6e015774aa758e568b15aae5907377a7d3c56de4de5358ac165634b026ecf3311d2a0233069bc2284946e12aaf8dc7407f7457684a13da2b7952c19f366e459e5bea177da5e88ff26887c98382879a666efce687d4bb0b0c789bfbd7e6114f0e02b08804a1d7c1ee701bb893d6b73f949861feb4931d3365a8b0c2d50a1b1415b3cd5ce3090d907f3cb625a3e5e563b9b4bd39d65e4f925c95fdc9823d0f97136c6227e2f971da2aa49587d587b52882e8a89826a664245aff21dfc96c7c8b0c7b5031b86ad474ec61d25456cbc12f4f330be0669ef7939530138a08319bb518b6e8d44f658decc5cbdc416393602583cdb503dab96fdad120c080dcebee449bb934f1a06f120b8e27bb651880932aa43bbb6812cb58461eab2e9133447596df9476933a66d78b34237b4b8833b5dd9bbb852a82ba22698a7e878c05415b0f0edd24dd2ae317fc698e5d498ffe2b00ec00826a08f3585c2bdfc4b9583133bf6a60ebd8c7a91a0cc6d1b58217c89179bd08131827963d6b4babf747f1cc930c7d939d6dc2f5b04333405ea374cdcb2b948be2be2eebf073b1697795e21b08bada3a842dd68dd7c47bfa29047feed8c12ee72af97fd8681a750c2be596f8529890511a6b1180feee43ea9ddf4fcff5467ed83c7b96a22efdbee09e3283b726edfc4aa594cdd8f65a0f1ad38357dcfce979a951dcb4c61b3aa08a9ae43930147985d7b8dba22a1cbf9ecd3c2fd53da3d14a00edfd7206079633f1b512cd743d38ef16add1fbe7ff13a2bf222dbd892b9683e7f9c55729c6de81eec4339545f0879df6441f648ef3c5d73ee94fe5b619d3a1f0ca14a481bf5073894deaa0d175cb6eee57f6147d81aee7418aa949cba9da932fced0b71a01c6221c0665a904bcc297e70b471fc25866b4918c22f67e94d48bf2eb05b7d5cfdbbc8501fdd9e2126a877ea25f63177ae3dc3833fb176ab56e28d7210b029299e33d16f501eb903de7c4df702e9b5799578b90c4bebb4d38e630f14fcfff2eb46397f4ad72ea6ae30bf94c341f85a333ae3975054117681bdfa1b9837cf31d6a53f00ce356c166731055dcd033d526a146de35116f6cef5996622d70de81064f77bebfad069c51c8af4c9a31a568467bf4f706450bde8ea48d6cfaf6136ff37b9543b6492b5f583f434c6bbb482be4158baa5e2f27c7f56a735453f91ed8d369c5e598bec63ad4fbb48dd5e26b83b68d4e782eee656b33fc19062a576ac26dc3a05a16d2beeebe61886f09c308368ea536ea9e678e995ee1577d1d118e01412ce3e43b1d9164528da2b1b0d015e9cfd139691acf90fc05e3ff6a0ae8ab53bb74a6c2a1f18b2c4b2920cf14afe8b41d9e5fb5f2980dc97c0afaf0d7f797c5d9c2e40283d8b68b4f5ab57ace5f12c5af71e7a4f5972140b6967797db0b630a7617e417b10ae75c1f23f61a26e75a09cae1e54d191163449a27a1f880d64f0c3d4016520a1ba768be88e9e87c99815f80f593625c9ffcd5929747878816c74897433ad49538c8c3057ba0d8128fc3ec664d8aaf1739a1075c42b9ec9d47700f471eb51644426958dc6ef04b0d2e9c49f592089222c89403dea545b47ad354718a4cc03f2d41bcdaa86ceb2fb3fb5251c281665f7d448f481954e57068ce1a31fc6c2724afd2fdd389e67f4dc23c761df5060321ce8b03487d262e937bc47497a91f45c2b604706271d052edc200fd28d56a5be74c4b3b57d625bc509de46702b6e4c17bbb584211853ea1e1fc1f165a1d3f76768ea5cf342024e5a865d317e7958b2e6da5f3710453201df63a3b6f7a8459f41d4bac2252128e4ccd3b31eaeca3ae1efb431afcf48181ec8069af71a7a594cca717c9d6f5a0a5b9db384c98b013e48c880fce8a67b99d9194bca89b6b7c467dafd9d74f31dfe51d5a5c8e83e156b93e97936dfb077a6d9895bdd01c96b08dfdeb27b4af58b172d01dbbebafa2996c51c73f2964e6cc8df1e0e6203c9bec7f44c68439204a7e35d9e625c76b45cc57c51ca9a8a3e8875da1502cb0faff4788178554d699f23efc3ad247e1154a87baec9be094c6d74332b30475e7472a24f79774b11c6fa35e8ad77c442cc36aeb75c572b90a3afab95f95c613a61af5a8eccf5fe349f1a0f3ddbcbff38a2158860024b294200921c2c2d596787abde6b9cef5493d36ef76e7538b28dee58e2aee2a1b960fd6d96e7b335d607d23e6078a0264109450e479fe7b71c47800744a698a974f7fcd54264f5620873a4a114822fb88821f300f40fd31346c9f1fb21283615e2ebac1346f54d5ff4341b6984ec23c0757a8f6b1952f1c65186b0ddd5ad7c7e00706cf1c6ee19a5b4db73d4b30972dcead673cfff67e13157af6ae69d4df2653dafe4dfd26c61e0deb75e9b3d2935706dc564bb0ff2a404a3e979dc0411efd9e5cc8bd2e75612f484801e32a0add8f4d0e637498a47c89e72ed8c958d277e436c5b56df717104aba8b78977e85ec52d542b64952534f9ecffd952ed81762cf107e32e01d7a86732b7ffb6aa7165f8a22f33d97688648f055515aec126605fe90ab4dad9961473a404e28dc0d63954a1268e14a2daf933883fb44e4269cec4c7e2069d66269b7a05d6ee38e5b928ae00125f44e01754a35fe855b5132a7d351682e76903463611b276ea80e9a376b787ea9dbdd1347fda0a23a752ca23bfce0384a72a5eb33171c9dcec8ddb482efa46ef8d0ddc4bc149a75949a4fee5e1424b5dd7cf1a3b8940fa8d2229219e51a5cd62db24e7edc0be4796a79f9ca0a8cd1ee9a4a51522a6cc2d6070fb33370cf1be8c6107716dfe8314c0434b186c4772e578d38c85a65316e69cd4f15654551bcabbbfed6b7754de931e052e4dd4bddb16e7feb5a31dab1f0eefbae8f2d1fa079556554cbd25c77c146736011b42ed14b260288036eabb9fbf5ca38a117365e9d7241c8bc51f8eb1eb6857bec46f9d95abccb721c44e60f28fe96a15fd9ce88bbac61695b775647745f51f804e6e293ae929545fe6fc33720cb76001838eb75c89aa56565071cb6ed43065336398861870e8d7fb44b8f7a5b01205e5b342d3d61f1cd9b561eeaae89e015cf3d271d0d86f3edc5250414133421afdeac9811599ca6d40e8b32a1eac87c47f1d5a49d46798b91eee6bdd3b20b27bb2011478d4793299691fbe78247d2db4214ec0e0b38b022ef952de6f77a437f04427fe11ef145dbbeca37bed97847e9607bb8e9446ca597a908fbfc7e945bd5a7c906b671a2e48dc4ca9b595b1afb2f85986ed14b1d3ed61d228341338bbf0947578b1b91be1f5a897720a8eb34a02ace9491748e1b956228afbfd46143a6a92f1dfa72334bae9d7315c5709384de2693c579763b9e9939de4287d6fec972f35bbba01a466cb6a1d02cae85b8b48d712562127f3eea0574e753fec74e56f73b6ce2619aced373eff0d7ac64dfc7fd56450484f82079bb815ba4fdc0d68a0cf7c3a42bd0b1fe0eace83cc79a4e4a11b97c0111536b62c2cb1d6543ef93bd113724568b0c0f15c422666f022dbb7455459de7c24c446d7fde9b3b7c2efe9ee5a1a31fc86ffdafa6a8f3cd5aeafa91efd7195330ddf542a72357b06def53e820190cf2959e04a143d349f887d808620dc54ea094114242907ed7161dc6c61df0023e39ccdfa1670605e69539622965d8c43df8dd4f92bf15ac9252d285d9599e6d79e3fad7c64ac75061ff6735214b7486fc13fb454fe4b92e88cd469f218472dad523f39916b5f4fe8da914e44dbf10e6546c6fceec9192b929d49b5a3eb3aa58aac77948dddb5c473da4a4f7b26c0d7db759295a7329903f620c1c937308c694f8a5dd5381db251debb61b54074aea5defc78b0d646091a3f2e6ab8bd26f1588b99439fcc834fd6730836c5fa58001188b5b8f146e972352a21bbb91a8177575a4f91bef8aa55f4c7af15a66dd877ffb70e146e67d83a3946d19d16efd2fb39fb6c6ec413792e97c31e3e20fd91b64680be19732e47d2dd4c230b55a8b138ac8e55fe72158d56c270fd3fda00e98f933172b47d8185189f59a147c30dc6de5dc06bcdafb41d89bd477c911abfe2142fee931cd3f436ce271595cfbe5c97d201b5002c96ce733727ef82427a1ba1db3f77243f43eb6558c122110eb48700dc9583ddf88018c0bec1c304a7c868fdede78ed3c3c0864723e85f6fc78053a58163c9ab1cb5ca522c60354287cb017522f5a5a721b19f21b15045f738c191d7a3e451890e2d1791a0261d0a06c643f60e03beacb1377e6cea8e5bb2f4abbb69cbc6efbecf65ee7e286142a4e7f9a59a66ebb7a28f13c694626baf078b130f1e97e429f9bb1f8e48b2f8cd035b420b80fe82fa1c71957a4f95e06e175d275cdeb5389be97eda747a9a09344c45e71cee05927afa8ac2b8fd8b407638c02fb3ff3399d52df9a4488bff97dc2f4fe77c2cc45ff30369acf3ee9fcf384e4b964931f3a4ef07ed0d1e1863f2b69e1350448d7436ebbe5140baf78b14a9416ebedbfab20f1303f2395a6bc5a73a85a7314ae49d107501a2f1ac1a2b87e6e03d056e02d4c575ce71302532bc39f845d329a51aedf124f95f71b415f514fd19ac79e348a2c047d4d0b32cfe61aa3ae7457dad92e6092b2885ecf630cd32b366cfaaa17eab88b036414f1534316e5895f26fc27c31a74c725466a877821e92047e2f3a31f3a6660577c73188f6411710cccb87bdc476e0a2ba91658752f21727cc0878fce97a2c4dbc4e28ba2618e894ed478f6ce04dee54eab5c3e6bfc42aeff5606884456fe20cb9837d0ef252ef8bdf2e083beeeaa7e99c617c82b5367979463fba6756bfcc51d78d16227652ed666f4937ff888453087b1b44f0e5b015c1f3bc018d29f29cea3076ce11b9fc11e91b6f986b9de371d78173be72fb2f587248b50829326d7c32b1670f35c762f487faecf77232b35892926566e359c1dfc8043fb1871ca2f151902df4eb3dd4974f83c82bbe7829f47728cc2885cf93bb499bdc8e8a2869d723a8aebdb4f290476b3f38989f562a6c73f6d796391c80de2026561553dffb5259381eb8d4e7b76119df7f945d27994d87c716e8e2d93c384fd25ea33ba2260feedfd23305ad700c2dfe000e77009826ed853abb034871cbed3098a15b23dffcadbac933ec47f26912e9aafacf7ffd0261207017ef7a915a6a9eee4ca02008e463092aba3f7b7249c4bb41c0a8fa50dc4df741dcac02e47a3a9dcc27ed28247dc1e2ef85eefa2a0c6ba900aa172f94fd17bce96459622034d208df5edc0563016b7bc9ffae1ad75e9859b4d1cc792570e5efa5459ef4ffa1401e342efb2721cb459fb07ddad6105fe31848bd35be085142924b15700fe71605fe5fc2ddbd9b3df6b08327fe3cfa19628ae6b11b9a9d6b8a1554b8d93ce98074709d3b7d54dbf8eda41c0a427304d6b149db60f35504f4a1daec34bde9e4c11d93c2c8371d6f7e2e4af4155a8d14138dcd8fe18934dd4e95dbc603004860e6cbc89f8eaa0fb0de782c9a6efc71a117be5d0314d2f2605241045340b60ad9f6d73213dcfe75d5f28a3852091e2081a22736269c111710abaf046ea21d2192aa15dd244eaa23169e888c100bf2b4fb8967721d29083b16795887a6d635a31519f1cc0194ef7701a1b6ab39f856ac41bc0400010b3dc6ad5caddcf84cb4e4944094d8141c288c35874872f5c7cbf1d26610994633b77f8a2a4650e4a1639afbd2439f29d5d7384af291b9606ccf7c11c0216596bb50b12f62bf6a7ef6232d856c5217830fe38916d02cf1148a704c31718b61681f7e20bd7e8b431aff641442ccdae10b528d96465684dfcfd76282812444e5bf81405111e696ea7389d4ee485dbf5a4c0a19e31bf0f734997b05908fdc15f4612ee4d46c34c54fc2d38b7d4fc13e046266f4de44c98a6fcd28287d6bf3d656c660f497c36dc9a11134d24a58d18475d9523e47170f7b7137745f8d3db09825db9b4f4249f423b34723547470d8b9f013685ce827b42421cb931e281c27f39cc6d104dc8972c236c31962f806bc5ae24ca12b46ab1055c88737c8373e58fbe698cd068958737e9a5fa1dab06c0cf3ecb1336bdbfd5c1d35e6c39b8d97677b544941057c2562bf7b2db9ceffa0e3c900c462c0b3c29aee796a2d10fa7c2dc616e95f7918fa0ccfc246b38f6ffd819fcf8053469ffc030e4bc0f5d5747435e5239e311095f798e8dfe53fd759988722a4a89d4edb8f08971a0261b6df07aad8960b67a4b75ea6064bed72a7ef11044cb33fde83b0cd49d8d15a15568043f11b197555bbf9d2f69476947b020d3e8987991f0d8e6405e1b8bdc67bc1e66de69f046752970b85aceb417437ccc073f98937a475ab0010b220be123394f58c3f35cd14f65abd3a78b88772719df82ee35a1779c556eadf03ab143fd139f4aa2de2718e6dc83bf24a14c47a94696ad14426202542e02d17e10f8ea65266c639c38f0115c96e724545e3c40c1c76b09799238cf928c8171dec0de973845610bbb4e3da0c02397e107077e6c62f11a54b1105da3311dbae90428fb59a02a561c61e1ae5f337d2c0ca3253f2ed3480d156c7d51ef975695b988952494cb4bbe919c9fcb960094e7e4e4e730610259f4c4b59c26b95fee0bb877b972ad65dbee9609c65b4c2ae0f413f589cf3d0be29995d2ed2266c02fc024067c6544e070d8331836f372a5f6ea04aaccc2c47ab6a1a442d30eb1e8135b2fc8cd174bc89c84cac89fdfa66995a0734d5f1e3919db0d4c6ca43983409d4af86c4e885afaaff09ec053a20887e5d1a58a8b4cc59122b92c63ea3cbd3bca4ef4b7dcb4c48da21972b796a01cb74852a214b9446a1fac6e7aef3c3a26962a196366977af572a4482d89b35fa6e0e054189d012c0f2e68c5cdd0697308b3748d48e7648ff1e9e564ffe47079e97499b34220edcdf6764b3117ec9fadc196f03c01ce7783ab688b22838d22c1e500ee19ece580480031bb45ccce2dab12c20cd11093cb7ed2321200b7a0170abbb0f07eac8473dddde55cdac6af05bf618094e0b443d946de9b6329ddf424270677ca8f3ab3937bb941550a61a543817c4693afda8d1c6de9dfe7a61c51cb33c42b338845902c8cee76478e950f94d3dc8fa4a27510db74bf8e82e04d5e1d3b8fdf003a7962b3b8d00b1b83d8373ae593e06d2630c01667b482af8997955430b1e7ac83a8c26bf3f8405aa9590a4a11e876674a5dc41f9b68a36e05316d4b0e8a8c42fec0efee0ea20e512737632a2afbfb4e8e45534f452923cdb367acf88159e43734b2ea33ab38377f9379424672cd17766b325319d7321ce3afcd4fdcb009587e14915f0ab74573d3959c16c5f154718160f8acc317804592c6001a0bcd6b3559edd9181138e0c34c66b2c7feba3cd96bda82d480cd7e083b793ba85d65f3deada184da82081927a978965a4514bf5d0d8317d0d8284704ffe7a70071da81112d7793c2be7d6f42d4ab5cb8788493b337ecfffe02d9f1ca64dd985b6ae0fdbd83b797ffe01980a22818b23a8084fcbfa02441f6c7f89940e44e9b0f2aac8a8acb71d1fc82dae16a2354cb6aa30519c442dc4b76d9b6bc95c52472f8e9f17a7d16da97bde359b543b1bb71d5a6cf4f27d63a6a0f77490851fef0e88b0632b1e1cdf418d0a014d64cdcf91651e8b6bd24322beb8f9ff839db50f14a10e36229166a187feb9883f6df8b5d9e0a8903463471e17b29daff29eabc001e4f766cd134c59afdf9d9d345e90b60976a8d1480e0c3a2d43da70321c5284c4a2241e72ed58daefb70a27744ca395265db551efce31baf6ffb5e2e70a5492c05b81b2a14ae77fa699818d859024accb5d4ab839c8ee33e0b5f4091b082438b4c73c233358431e37173dcdfbf4da52b8c9e1bcb61929d38fb7145beb5e3cc050cd76286fcc64edad7d5718139ef4a46f3df90a7f21d39a6feed696bbac8113fa6969e68314c4d886c7802c82d03235a3306ccc6801f208ceb7332a2e73824fe198f1136ae4f62509c1ec7485523d4d727227099131e08fdb42e37559685d5738f6b829a9d6aa7dbed568397389384aafc9521cbd89060c8dd9f87002765e4bccaea181390893232d16a377c0d7b12f364497a716720c20bed4c3e03f6139c730d8fece7f8b815768d08e9e03aa058a18f91950fffa541bf011447d494277907a2418b5f777bf8ad0f79b3a4a2433ae643cba96f9b950e6fa62caf981eecc94be6c0a117b8f67bbc561c972055fde8f5534a2dfe0da15eb4b8f2405ae8fbc7e1d4e9040eaa0e3321127e795fe55e5c625f51eb22e4094a65aab0fdb88639d6f14664b912b91f95cd68bd6bd9ad8e746df71e1b311b68394c866f51f49391e0bbb69ee7ca8304d7b88bcb8cb2451050d7399a130ef54e74a346641660883a7270e652cffb24de90d9f9360918c0badaa0de33719b5fe047f252c70d3f2cfeb8f7a3e6869c49ef6bf885c0f83c44d821569271b9673b67c39d4148b440ce0c6cfa7e6a7c2c533414dbdb8e61154fd30cb2c4f545aa0b2be300052c0022bb8b92a3b272f4bf256abdc1ab9a983eb31f8518112c45d293e85c74d6e978dc8e5e445936b9377ba461300b698000f581294c60b674d422f87b994ffafd20b8e57d4a331894315cd49a505a245a698524214e2cbd2a0800f1c5bda31d71adea052f8a621a7b7b00d05b04b3fdc38856bbd0058bc5f2e856a09d5da02da84e1b5bf01ac0e1ba5151b54d4cabc0624f114239bd6c59d169485c213cd329d189429611155cae9b210fd443284c78b8e6504fd280664f77fac1185e848fc663a2c3e1d1f980377c9ba2e8ac68b36a55903a425058ecfd6fac07bb697c566bb763e07469d73ae5a4a768b79eb760bb09900964a2e3931def048f4b5b31c90a12e3f89a25479c1e4790e315b207d15788c439b640358e38d33ecd5086329a61329bbfa498db50022a40d55bc61b2ede0e668658a051a8a3b02b9f9c676c1e58a883f7091e9c59efa35ccdda0df22658e3de5b593e1fd9c5ada431011659526e6c2efdad9d28f06e488a7f7bea73cc1cd0154f2d4015ce2ec4eb1795decaabe0ad5ba642841cec4c670aa14c1c5ab3bdc4c9a31944e66d0a0fb95ef31401049d00bd370c091a92565ddf145790424f51a3316fa0f37475ad99be05191fa9d3fc75706c8a25c4c6cb088ab4e1ae2bed4c313d5051563ff19e53aeb70a21f8ef23bc4a23cc220c0f8be439300b93210721f86aa8f0c44010d4f8b29db62b41fec5d2691944d612cae6ecea286edb342b00132ba4b275c525d08fe2efc35ca55a9865c7f1386f37d874bf7088bcbb7eb75a5a6edf98c5ee6ec1bc927b3d1f635c76934e3493c49bd0131fdd7ed4b04247acbabdd2ca16d1614f354d67f9be0ef753590699e6ebe1d14cb96cc99bbed804ec06abe21c32b53a1cb31a1d68d85f49b695aca3ad729a4c87663f9079c5ea342be1a3ddd08fe5d2612089021de66c54b1dd7daf216378fe023c6b8ef9436e265e0786e1595b35d7bc5f5ed1da14335fc0fe8d369e2b568ff129998e601dd3a69684cc2b3d8fb18ab9b35f2a513f4e58969b4d99416c1620abf0a4630557ccb85172ce8c5c8a8f65e1f42d955147664bd9aa3a01ba0621eeacf50787e0df77bab6ab23b9ecc43d6242e0ad0386f36afb8fa2d60d75acf5fda26c31cb9b2b1010af299f0942915c354821c62cf13811e96fbe3ae3486f00d31269244919f57f1f66079db3d67758b8bf17af28da067a4c5a90b258f712b2efa9df18621a0190667f1893bdda1c7a19a58b86bc4fcd59393787c6507bf883b8655d8976e483063d571c1c0544ff1b3dfdb205dbf7e5e442dcaed8acfb6de9d475bdee64100f0dc4388f39d6ed403c3daca66d6ca45296dc928d05337e824ba32046dedabc4de14f30d54dbb77b4f98453dd402f6c2bc8b354f22b0fb0597cfdf1c354ac46abf20c1d5f3e66dd27da2130644f9877065b6ab90ea9da95771ce5c3c10984259497b7ee0a19dbf42e7cce886afa20a689b273302617addfb08b086bcc958fb1b2e0b72ccdf32863b59d945050233ced941a33cdf94c6c2b4ea0e71a8151d1bf134032e2d9662ba8887fd4cbc507da745bf345f1d021e18ae9413fa4a93f1d040e327a5f863464cdbd38827e8ccedcbec05b29cb460acb2c12f5eed915134377ce85b493a6675e1569664474f7d8c69548e07dd1a650afcadfcf2e5cda30d98c392d90fc9a81a3c2cccf390ac325e8231f06601d3f2920c2ce1289f71870092b7c5783e33e70216634bc68573b6447b21b9697e5dc79fb2e110080ea936db9f55660f395f8d0", 0x2000, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006900)={0xa0, 0x0, 0x0, {{0x5, 0x3, 0x9, 0x0, 0x2, 0x3, {0xfffffffffffffffd, 0x1, 0xfffffffffffffffd, 0xfc4, 0x124, 0x4749, 0x6, 0x9, 0x9, 0x8000, 0x800, r5, r6, 0x9, 0x2}}, {0x0, 0x12}}}, 0x0, 0x0})
write$FUSE_INIT(r3, &(0x7f00000006c0)={0x50, 0x0, r4, {0x7, 0x26, 0x4, 0x12885b10, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x10, 0x11fff}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

9m14.962740724s ago: executing program 4 (id=409):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
open_tree(0xffffffffffffffff, 0x0, 0x8c01)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
setrlimit(0x8396070e229498d7, &(0x7f0000000080)={0x4, 0x6cf1})
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000300)={0x1, [[0x1, 0x0, 0x0, 0x9, 0x6, 0xe], [0x10001, 0x0, 0x0, 0xfffffffc, 0x40000000, 0x3, 0x0, 0x7], [0x1, 0x0, 0x0, 0x7bf5, 0x0, 0x5dd6, 0x200, 0x9]], '\x00', [{0x4, 0x4000000}, {0x0, 0x1641c}, {}, {0x1, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x2000010, 0x0, 0x1}, {0xffff5283, 0xffffffff, 0x1}, {0x2000000}, {}, {}, {}, {}, {0x8}], '\x00', 0x1000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write$sysctl(r5, &(0x7f0000000280)='1\x00', 0x1)

9m13.105176837s ago: executing program 4 (id=412):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0})
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r5 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r5, 0x2000, 0xffbffffb, 0x89, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x8001, 0x6010, 0x0, 0x0}], 0x1})
r10 = gettid()
rt_sigqueueinfo(r10, 0x10000022, &(0x7f0000000040))
sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r11, 0x80047c05, &(0x7f0000000080)=<r12=>0xffffffffffffffff)
r13 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r13, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r12, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x878}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x10c}}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x67, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0)
read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, <r14=>0x0}, 0x2040)
write$FUSE_INIT(r0, &(0x7f0000000380)={0xfffffffffffffe5d, 0xffffffffffffffda, r14, {0x7, 0x27, 0x4, 0x801001a, 0x8, 0xfffe, 0xa, 0x3, 0x0, 0x0, 0x4}}, 0x50)

8m57.985367768s ago: executing program 34 (id=412):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0})
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r5 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r5, 0x2000, 0xffbffffb, 0x89, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x8001, 0x6010, 0x0, 0x0}], 0x1})
r10 = gettid()
rt_sigqueueinfo(r10, 0x10000022, &(0x7f0000000040))
sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r11, 0x80047c05, &(0x7f0000000080)=<r12=>0xffffffffffffffff)
r13 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r13, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r12, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x878}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x10c}}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x67, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0)
read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, <r14=>0x0}, 0x2040)
write$FUSE_INIT(r0, &(0x7f0000000380)={0xfffffffffffffe5d, 0xffffffffffffffda, r14, {0x7, 0x27, 0x4, 0x801001a, 0x8, 0xfffe, 0xa, 0x3, 0x0, 0x0, 0x4}}, 0x50)

6m42.757171869s ago: executing program 1 (id=656):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="000001001a00130700000000fcdbdf25fc00000000000000000000000000000120010000000000000000000000000001000000004e21000202000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010103000000000000000000000000000000fe3200000000000000000000000000000000000000000000000000000006000000000000000100ffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000040050000000000000400000000000000ffffffffffffff7ffcffffffffffffffe2eb0000000000000200000000000000000000002cbd7008013500000200030050000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
shutdown(r4, 0x0)
recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3)
r6 = semget$private(0x0, 0x6, 0x0)
semctl$GETZCNT(r6, 0x0, 0xf, 0x0)
recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)

6m41.570724108s ago: executing program 1 (id=657):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fanotify_mark(0xffffffffffffffff, 0x105, 0x40009965, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

6m38.899575542s ago: executing program 1 (id=662):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}})
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
file_getattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x100)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x3c, 0x52, 0x4, 0x0, 0x0, {0x1c}, [@generic="0d3703c0c066dc3d56ab78bc80aaa14ce714f77510d25c6207fa411733d0f3e452afebf89cd0"]}, 0x3c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d6974000000140002800800014080000001080002400000000114000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000200)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r6}, 0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x54, 0x6, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40480}, 0x2040000)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r6, 0x401}, &(0x7f00000002c0)=0x8)
openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x4000, 0x194)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r8, 0x560e, &(0x7f0000000000))
ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40})
ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6})
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x8000)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)

6m34.789836791s ago: executing program 1 (id=670):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080))
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r3, &(0x7f0000000980)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x13\xf6\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xffffffffffffffff}}, 0x23b)

6m23.572549599s ago: executing program 1 (id=686):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
open_tree(0xffffffffffffffff, 0x0, 0x8c01)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
setrlimit(0x8396070e229498d7, &(0x7f0000000080)={0x4, 0x6cf1})
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000300)={0x1, [[0x1, 0x0, 0x0, 0x9, 0x6, 0xe], [0x10001, 0x0, 0x0, 0xfffffffc, 0x40000000, 0x3, 0x0, 0x7], [0x1, 0x0, 0x0, 0x7bf5, 0x0, 0x5dd6, 0x200, 0x9]], '\x00', [{0x4, 0x4000000}, {0x0, 0x1641c}, {}, {0x1, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x2000010, 0x0, 0x1}, {0xffff5283, 0xffffffff, 0x1}, {0x2000000}, {}, {}, {}, {}, {0x8}], '\x00', 0x1000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write$sysctl(r5, 0x0, 0x0)

6m20.905183047s ago: executing program 1 (id=689):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
open_tree(0xffffffffffffffff, 0x0, 0x8c01)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
setrlimit(0x8396070e229498d7, &(0x7f0000000080)={0x4, 0x6cf1})
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000300)={0x1, [[0x1, 0x0, 0x0, 0x9, 0x6, 0xe], [0x10001, 0x0, 0x0, 0xfffffffc, 0x40000000, 0x3, 0x0, 0x7], [0x1, 0x0, 0x0, 0x7bf5, 0x0, 0x5dd6, 0x200, 0x9]], '\x00', [{0x4, 0x4000000}, {0x0, 0x1641c}, {}, {0x1, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x2000010, 0x0, 0x1}, {0xffff5283, 0xffffffff, 0x1}, {0x2000000}, {}, {}, {}, {}, {0x8}], '\x00', 0x1000})
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write$sysctl(r4, &(0x7f0000000280)='1\x00', 0x1)

6m4.451097046s ago: executing program 35 (id=689):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
open_tree(0xffffffffffffffff, 0x0, 0x8c01)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
setrlimit(0x8396070e229498d7, &(0x7f0000000080)={0x4, 0x6cf1})
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000300)={0x1, [[0x1, 0x0, 0x0, 0x9, 0x6, 0xe], [0x10001, 0x0, 0x0, 0xfffffffc, 0x40000000, 0x3, 0x0, 0x7], [0x1, 0x0, 0x0, 0x7bf5, 0x0, 0x5dd6, 0x200, 0x9]], '\x00', [{0x4, 0x4000000}, {0x0, 0x1641c}, {}, {0x1, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x2000010, 0x0, 0x1}, {0xffff5283, 0xffffffff, 0x1}, {0x2000000}, {}, {}, {}, {}, {0x8}], '\x00', 0x1000})
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write$sysctl(r4, &(0x7f0000000280)='1\x00', 0x1)

16.206927609s ago: executing program 5 (id=3329):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="ed071f234d10b279f227c5a45f3b5b0ca2734fe42c74b3bae9fceccd8d0a94efbac51549cd9532c4ec9b254412747ae0d4", 0x31}], 0x1}, 0x40000)

14.386140718s ago: executing program 5 (id=3332):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000007dc0)=[{{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f00000004c0)="4c1325dd", 0x4}], 0x1, &(0x7f0000002300)=[@cred={{0x1c}}], 0x20, 0x8000}}], 0x1, 0x20004000)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0)

13.334549649s ago: executing program 5 (id=3348):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

13.108145341s ago: executing program 5 (id=3352):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000065a12083a4100037040000000000", @ANYRES32=0x0, @ANYBLOB="8305050000000000200012800800010067726500140002800800050008000000080006000a"], 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r3})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41})
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe8000000000000000"], 0x64)

10.778936896s ago: executing program 5 (id=3361):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$kcm(0x2a, 0x2, 0x0)
r0 = socket$kcm(0x2a, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002f00090024bd7000000000000500000014000a"], 0x28}}, 0x84)

9.52065854s ago: executing program 5 (id=3380):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x1e5, 0x0, 0x25dfdbfe, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40)

7.635091904s ago: executing program 6 (id=3405):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf0000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000)
r3 = socket$netlink(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0), 0x0)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3)
accept4(r0, 0x0, 0x0, 0x80000)

7.031549475s ago: executing program 7 (id=3409):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0)

6.924480571s ago: executing program 7 (id=3410):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x2, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000008c0)=[{0x5, 0x5, 0xf, 0x5}, {0x2, 0x5, 0x0, 0xb}, {0x0, 0x3, 0x10, 0xc}, {0x2, 0x3, 0xa, 0x9}], 0x10, 0x3}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x80, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, ']-'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, 'syzkaller\x00'}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000894}, 0xac2585922dd40bfb)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r0)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r1, 0x2, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4000)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)

4.693253353s ago: executing program 8 (id=3413):
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0x28, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x28, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00')
recvmsg$unix(r0, 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

4.591782816s ago: executing program 7 (id=3414):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002f00)={0x88, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0x6c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x400001}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "06c23c949fa2a3989231b4efe4162d85"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6b85b9bcdcb3662c6d02f9327e33547f022100"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20048040}, 0x0)

4.5311504s ago: executing program 6 (id=3415):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf30000001400010069703667726574617030000000000000080002400000000209000200"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2000000014000105000000000000000023000000010000000500020008000000", 0x20}], 0x1}, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r4, &(0x7f0000000100)={0x23, 0x10, 0x8}, 0x10)
connect$phonet_pipe(r4, &(0x7f0000000140)={0x23, 0x10, 0x8}, 0x10) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0100001900010027bd7000ffdbdf25fe880000000000000000000000000001ac1414bb0000000000000000000000004e200000f7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f8ffffffffffffff0000000000000000ffffffffffffffff09000000000000000000000000000000000f000000000000000000000000000000000000000000000300000000000000060000190000000080000000000000000000000000000000fcffffff00000000000003000000000044010500fc000000a60000000000000000000004000000003c00000700000000e000000100000002000000000000d00b000000000000fe8000000000000000000000000000bb00000000320000000a000000ffffffff000000000000000000000000fdffffff010000000008000000080000ffffffff"], 0x1fc}, 0x1, 0x0, 0x0, 0x20002884}, 0x4048000)
r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe)
setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'caif0\x00', 0x1})
r8 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="100000000000000000000000010000001c"], 0x30}}], 0x1, 0xc0)
syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0)
socket$packet(0x11, 0x3, 0xf500)
ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f00000002c0)=0x6)

4.342543737s ago: executing program 7 (id=3417):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff3}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

4.120843738s ago: executing program 8 (id=3418):
listen(0xffffffffffffffff, 0x40000)
listen(0xffffffffffffffff, 0xacad)

4.023743438s ago: executing program 9 (id=3419):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)

3.971331186s ago: executing program 8 (id=3420):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x9}, {0x6, 0xfd, 0xfd}]})
write$ppp(r0, &(0x7f00000000c0)="43f1", 0x2)

3.90014726s ago: executing program 9 (id=3421):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$pptp(0x18, 0x1, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', <r2=>0x0})
r3 = gettid()
r4 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r2, @ANYBLOB="089805000750050008001300", @ANYRES32=r3, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x0)

3.863569597s ago: executing program 6 (id=3422):
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@random="bd606a2a7f2c", @random="24475466a8f0", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "902d03", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@hopopts={0x6c, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x5, 0x4}}]}]}}}}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x84)
socket$xdp(0x2c, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r1, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

3.738746192s ago: executing program 8 (id=3423):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x3f799000)
writev(r1, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1)
writev(r1, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1)
syz_genetlink_get_family_id$ethtool(0x0, r1)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

3.736944879s ago: executing program 7 (id=3424):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

3.596629846s ago: executing program 6 (id=3426):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0)

3.41250471s ago: executing program 9 (id=3427):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000080))
socket$vsock_stream(0x28, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40))
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a0000008500000006"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3.356837628s ago: executing program 6 (id=3428):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
write$nci(r0, 0x0, 0x0)

2.936918316s ago: executing program 9 (id=3430):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4890)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.693139775s ago: executing program 3 (id=3432):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'vxcan1\x00', 0x1}, 0x18)

2.551815065s ago: executing program 3 (id=3433):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc)

2.545072082s ago: executing program 8 (id=3434):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x8, 0x4}}}}]}, 0x44}}, 0x4890)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.483878211s ago: executing program 3 (id=3435):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff3}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

2.198916215s ago: executing program 3 (id=3436):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0100001900010027bd7000ffdbdf25fe880000000000000000000000000001ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f8ffffffffffffff0000000000000000ffffffffffffffff09000000000000000000000000000000000f000000000000000000000000000000000000000000000300000000000000060000190000000080000000000000000000000000000000fcffffff00000000000003000000000044010500fc000000a60000000000000000000004000000003c00000700000000e000000100000002000000000000d00b000000000000fe8000000000000000000000000000bb00000000320000000a000000ffffffff000000000000000000000000fdffffff010000000008000000080000ffffff"], 0x1fc}, 0x1, 0x0, 0x0, 0x20002884}, 0x4048000)

2.082029682s ago: executing program 3 (id=3437):
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@random="bd606a2a7f2c", @random="24475466a8f0", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "902d03", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@hopopts={0x6c, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x5, 0x4}}]}]}}}}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x84)
socket$xdp(0x2c, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r1, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

497.587148ms ago: executing program 3 (id=3438):
r0 = socket$inet(0x2, 0x3, 0x33)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x48, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x3c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfc}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffffc0}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001}, 0xc004)

476.547003ms ago: executing program 9 (id=3439):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xba)

419.888802ms ago: executing program 8 (id=3440):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x5, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x5, 0x8000, 0x1, 0x4dc, 0x81, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x5, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x7, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x403, 0x4, 0x1, 0x50200523, 0xfffffffb, 0x1, 0x4, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x0, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x8, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf1, 0x2, 0x9, 0x8, 0x40fff, 0x1ff, 0x8000, 0x18e8, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x65, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0xb, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x98}, 0x0)

402.866907ms ago: executing program 6 (id=3441):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000080))
socket$vsock_stream(0x28, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40))
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a0000008500000006"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

359.870643ms ago: executing program 7 (id=3442):
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0x28, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x28, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00')
recvmsg$unix(r0, 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

0s ago: executing program 9 (id=3443):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)

kernel console output (not intermixed with test programs):

ing interface: batadv_slave_0
[  432.952857][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  432.960362][  T143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  433.333815][ T8535] overlayfs: failed to resolve './file1/file0': -2
[  433.355916][  T143] veth1_macvtap: left promiscuous mode
[  433.373797][  T143] veth0_macvtap: left promiscuous mode
[  433.381955][  T143] veth1_vlan: left promiscuous mode
[  433.389312][  T143] veth0_vlan: left promiscuous mode
[  435.093434][  T143] team0 (unregistering): Port device team_slave_1 removed
[  435.123045][  T143] team0 (unregistering): Port device team_slave_0 removed
[  435.505709][ T8230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  435.582592][ T8230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.965383][ T8230] team0: Port device team_slave_0 added
[  437.376991][ T8230] team0: Port device team_slave_1 added
[  438.577659][ T8230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  438.609916][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'.
[  438.621335][ T8230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  438.650735][ T8230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.673239][ T8553] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  438.705386][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.601'.
[  438.734428][ T8230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.763042][ T8230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  438.849045][ T8230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  439.085413][ T8565] syz.5.603 uses obsolete (PF_INET,SOCK_PACKET)
[  439.392205][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  439.457231][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  439.659821][ T8230] hsr_slave_0: entered promiscuous mode
[  439.680900][ T8230] hsr_slave_1: entered promiscuous mode
[  439.800434][ T8230] debugfs: 'hsr0' already exists in 'hsr'
[  440.160739][ T8230] Cannot create hsr debugfs directory
[  444.481534][ T8609] overlayfs: failed to resolve './file1/file0': -2
[  450.158610][ T8656] loop6: detected capacity change from 0 to 512
[  451.270202][ T8656] journal_path: Non-blockdev passed as './dev'
[  451.300494][ T8656] EXT4-fs: error: could not find journal device path
[  452.192003][ T8668] loop5: detected capacity change from 0 to 512
[  452.219782][ T8668] EXT4-fs: Ignoring removed oldalloc option
[  452.249834][ T8668] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  452.339038][ T8668] EXT4-fs (loop5): 1 truncate cleaned up
[  452.397939][ T8668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.586434][ T8668] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.622: invalid indirect mapped block 4294901760 (level 0)
[  452.667564][ T8668] EXT4-fs (loop5): Remounting filesystem read-only
[  452.800177][ T8230] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  453.065696][ T8230] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  453.073722][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.092603][ T8230] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  453.430987][ T8230] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  453.485798][ T8230] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  453.576634][ T8230] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  453.630064][ T8230] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  454.734417][ T8230] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  455.227605][ T8700] loop7: detected capacity change from 0 to 1024
[  455.287691][ T8700] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  455.736990][ T8230] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.820544][ T8230] 8021q: adding VLAN 0 to HW filter on device team0
[  455.893143][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.897155][ T8712] sctp: [Deprecated]: syz.6.629 (pid 8712) Use of struct sctp_assoc_value in delayed_ack socket option.
[  455.897155][ T8712] Use struct sctp_sack_info instead
[  455.900412][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.981109][    T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  455.996621][ T8717] sctp: [Deprecated]: syz.6.629 (pid 8717) Use of struct sctp_assoc_value in delayed_ack socket option.
[  455.996621][ T8717] Use struct sctp_sack_info instead
[  456.140123][    T9] usb 8-1: device descriptor read/64, error -71
[  456.568287][    T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  456.941098][    T9] usb 8-1: device descriptor read/64, error -71
[  457.172624][    T9] usb usb8-port1: attempt power cycle
[  457.926784][    T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  458.275498][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  458.299729][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  458.317824][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  458.379780][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  458.390215][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  458.605178][    T9] usb 8-1: device descriptor read/8, error -71
[  459.268065][ T8743] overlayfs: failed to resolve './file1/file0': -2
[  459.548057][ T8745] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  459.662696][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.635'.
[  459.751043][ T5943] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  459.985738][ T5943] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00
[  460.213681][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  460.357816][ T5943] usb 7-1: Product: syz
[  460.453184][ T5943] usb 7-1: Manufacturer: syz
[  460.491516][   T50] Bluetooth: hci1: command tx timeout
[  461.307143][ T5943] msi2500 7-1:1.0: Registered as swradio24
[  461.333883][ T5943] msi2500 7-1:1.0: SDR API is still slightly experimental and functionality changes may follow
[  461.378499][ T8757] lo speed is unknown, defaulting to 1000
[  461.395033][ T5943] usb 7-1: USB disconnect, device number 12
[  461.410077][ T8757] lo speed is unknown, defaulting to 1000
[  461.807107][ T8757] lo speed is unknown, defaulting to 1000
[  462.124251][ T8757] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  462.576696][   T50] Bluetooth: hci1: command tx timeout
[  462.663252][ T8757] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  462.691073][ T8757] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  462.770515][ T8757] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  463.230822][ T8757] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  463.927767][ T5750] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  464.131912][ T5750] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00
[  464.146963][ T5750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  464.157025][ T5750] usb 7-1: Product: syz
[  464.161678][ T5750] usb 7-1: Manufacturer: syz
[  464.219946][ T8757] lo speed is unknown, defaulting to 1000
[  464.280036][ T8732] lo speed is unknown, defaulting to 1000
[  464.331921][    T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  464.518458][    T9] usb 6-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00
[  464.662663][   T50] Bluetooth: hci1: command tx timeout
[  464.950607][ T5750] msi2500 7-1:1.0: Registered as swradio24
[  465.001280][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  465.003224][ T8757] lo speed is unknown, defaulting to 1000
[  465.015939][ T5750] msi2500 7-1:1.0: SDR API is still slightly experimental and functionality changes may follow
[  465.037406][    T9] usb 6-1: Product: syz
[  465.076303][    T9] usb 6-1: Manufacturer: syz
[  465.121733][ T5750] usb 7-1: USB disconnect, device number 13
[  465.334569][ T8757] lo speed is unknown, defaulting to 1000
[  465.434571][    T9] msi2500 6-1:1.0: Registered as swradio24
[  465.449252][ T8757] lo speed is unknown, defaulting to 1000
[  465.473237][    T9] msi2500 6-1:1.0: SDR API is still slightly experimental and functionality changes may follow
[  465.533329][    T9] usb 6-1: USB disconnect, device number 33
[  465.563015][ T8757] lo speed is unknown, defaulting to 1000
[  465.617962][  T143] bridge_slave_1: left allmulticast mode
[  465.624755][  T143] bridge_slave_1: left promiscuous mode
[  465.638215][  T143] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.090340][  T143] bridge_slave_0: left allmulticast mode
[  466.193160][  T143] bridge_slave_0: left promiscuous mode
[  466.236684][  T143] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.741211][   T50] Bluetooth: hci1: command tx timeout
[  467.030442][ T8830] jffs2: notice: (8830) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  469.472618][ T5849] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  469.653033][ T5849] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00
[  469.697630][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  469.710747][ T5849] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  469.727755][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.818171][ T5849] usb 6-1: config 0 descriptor??
[  470.570773][ T5849] aquacomputer_d5next 0003:0C70:F00B.000B: unknown main item tag 0x0
[  470.579805][ T5849] aquacomputer_d5next 0003:0C70:F00B.000B: unknown main item tag 0x0
[  470.606397][ T5849] aquacomputer_d5next 0003:0C70:F00B.000B: unknown main item tag 0x0
[  470.630789][  T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  470.641101][ T5849] aquacomputer_d5next 0003:0C70:F00B.000B: unknown main item tag 0x0
[  470.660665][  T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  470.676931][ T5849] aquacomputer_d5next 0003:0C70:F00B.000B: unknown main item tag 0x0
[  470.697305][ T5849] aquacomputer_d5next 0003:0C70:F00B.000B: unknown main item tag 0x0
[  470.706057][ T5849] aquacomputer_d5next 0003:0C70:F00B.000B: unknown main item tag 0x0
[  470.706956][  T143] bond0 (unregistering): Released all slaves
[  470.714872][ T5849] aquacomputer_d5next 0003:0C70:F00B.000B: unknown main item tag 0x0
[  470.730430][ T8841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.742183][ T5849] aquacomputer_d5next 0003:0C70:F00B.000B: unknown main item tag 0x0
[  470.756948][ T8841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.759536][ T8757] lo speed is unknown, defaulting to 1000
[  470.768981][ T5849] aquacomputer_d5next 0003:0C70:F00B.000B: unknown main item tag 0x0
[  470.821507][ T8757] lo speed is unknown, defaulting to 1000
[  470.839186][ T5849] aquacomputer_d5next 0003:0C70:F00B.000B: hidraw0: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.5-1/input0
[  471.183844][  T143] hsr_slave_0: left promiscuous mode
[  471.254122][  T143] hsr_slave_1: left promiscuous mode
[  471.270846][  T143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  471.341307][  T143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  472.405981][ T8852] overlayfs: failed to resolve './file1/file0': -2
[  473.949184][ T8887] sctp: [Deprecated]: syz.1.662 (pid 8887) Use of struct sctp_assoc_value in delayed_ack socket option.
[  473.949184][ T8887] Use struct sctp_sack_info instead
[  473.953005][ T8885] jffs2: notice: (8885) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  473.985842][ T8887] sctp: [Deprecated]: syz.1.662 (pid 8887) Use of struct sctp_assoc_value in delayed_ack socket option.
[  473.985842][ T8887] Use struct sctp_sack_info instead
[  474.874820][  T143] team0 (unregistering): Port device team_slave_1 removed
[  475.031722][  T143] team0 (unregistering): Port device team_slave_0 removed
[  476.866005][ T8841] netlink: 'syz.5.654': attribute type 12 has an invalid length.
[  476.919122][ T8841] netlink: 'syz.5.654': attribute type 29 has an invalid length.
[  476.960587][ T8841] netlink: 148 bytes leftover after parsing attributes in process `syz.5.654'.
[  477.033334][ T8841] netlink: 'syz.5.654': attribute type 3 has an invalid length.
[  477.104485][ T8841] netlink: 35 bytes leftover after parsing attributes in process `syz.5.654'.
[  477.363070][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9
[  477.431526][ T5749] usb 6-1: USB disconnect, device number 34
[  480.114484][ T5749] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  482.147029][ T5749] usb 6-1: device descriptor read/all, error -71
[  482.508386][ T8947] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  482.629921][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'.
[  483.549167][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.613890][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.672265][ T8732] bridge_slave_0: entered allmulticast mode
[  483.749359][ T8732] bridge_slave_0: entered promiscuous mode
[  483.813775][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.864599][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.921600][ T8732] bridge_slave_1: entered allmulticast mode
[  484.014784][ T8732] bridge_slave_1: entered promiscuous mode
[  484.793582][ T8966] jffs2: notice: (8966) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  485.023522][ T8732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.247496][ T8732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.564891][ T8732] team0: Port device team_slave_0 added
[  485.609192][ T8732] team0: Port device team_slave_1 added
[  485.721707][ T8973] loop3: detected capacity change from 0 to 1024
[  485.754070][ T8973] EXT4-fs: Ignoring removed bh option
[  485.796693][ T8973] EXT4-fs: Ignoring removed bh option
[  485.848446][ T8973] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  485.921398][ T8732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  485.962856][ T8732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  485.993309][ T8973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  486.172688][ T8732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  486.436479][ T8973] overlayfs: missing 'workdir'
[  486.641990][ T8732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  486.665889][ T8732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  487.404535][ T8987] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  487.413191][ T8732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  487.732421][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10
[  487.886943][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.023924][ T8995] sctp: [Deprecated]: syz.5.684 (pid 8995) Use of struct sctp_assoc_value in delayed_ack socket option.
[  488.023924][ T8995] Use struct sctp_sack_info instead
[  488.101408][ T8996] sctp: [Deprecated]: syz.5.684 (pid 8996) Use of struct sctp_assoc_value in delayed_ack socket option.
[  488.101408][ T8996] Use struct sctp_sack_info instead
[  488.126009][ T8732] hsr_slave_0: entered promiscuous mode
[  488.178487][ T8732] hsr_slave_1: entered promiscuous mode
[  488.216188][ T8732] debugfs: 'hsr0' already exists in 'hsr'
[  488.234026][ T8732] Cannot create hsr debugfs directory
[  488.533723][   T30] audit: type=1800 audit(1787209231.104:10): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.685" name="control" dev="configfs" ino=23169 res=0 errno=0
[  492.150772][ T9017] loop7: detected capacity change from 0 to 512
[  492.162964][ T9022] jffs2: notice: (9022) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  492.190569][ T9017] journal_path: Non-blockdev passed as './dev'
[  492.259308][ T9017] EXT4-fs: error: could not find journal device path
[  493.334442][ T9031] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:0": -EINTR
[  493.898052][ T5750] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  494.261840][ T5750] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  494.305233][ T5750] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  495.320109][ T5750] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  495.342715][ T5750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.065895][ T5750] usb 6-1: config 0 descriptor??
[  496.196827][ T5750] usb 6-1: can't set config #0, error -71
[  496.236872][ T5750] usb 6-1: USB disconnect, device number 37
[  497.882505][ T5750] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  498.039410][ T9074] jffs2: notice: (9074) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  498.077119][ T5750] usb 6-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00
[  498.137869][ T5750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  498.170812][ T5750] usb 6-1: Product: syz
[  498.204731][ T5750] usb 6-1: Manufacturer: syz
[  499.387493][ T5750] msi2500 6-1:1.0: Registered as swradio24
[  499.407113][ T5750] msi2500 6-1:1.0: SDR API is still slightly experimental and functionality changes may follow
[  499.530665][ T5750] usb 6-1: USB disconnect, device number 38
[  500.148068][   T30] audit: type=1800 audit(1787209242.774:11): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.704" name="control" dev="configfs" ino=23408 res=0 errno=0
[  500.828302][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  500.857136][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  501.367523][ T8732] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  501.592468][ T8732] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  501.655634][ T8732] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  501.742974][ T8732] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  501.802132][ T8732] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  501.933738][ T8732] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  501.961330][ T8732] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  502.241646][ T9096] siw: device registration error -23
[  502.262993][ T9096] smbdirect: ib_dev[syz2] removed
[  503.160106][ T8732] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  504.353922][ T8732] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.598695][ T8732] 8021q: adding VLAN 0 to HW filter on device team0
[  505.381274][ T3276] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.388478][ T3276] bridge0: port 1(bridge_slave_0) entered forwarding state
[  506.209355][ T3276] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.216624][ T3276] bridge0: port 2(bridge_slave_1) entered forwarding state
[  506.325774][ T9139] loop5: detected capacity change from 0 to 512
[  506.333716][ T9139] journal_path: Non-blockdev passed as './dev'
[  506.340804][ T9139] EXT4-fs: error: could not find journal device path
[  506.981362][    T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  507.244404][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  507.303661][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  507.370868][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  507.447394][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  507.490563][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.990512][    T9] usb 6-1: config 0 descriptor??
[  508.036832][    T9] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  508.292182][   T30] audit: type=1800 audit(1787209250.954:12): pid=9151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.717" name="control" dev="configfs" ino=22397 res=0 errno=0
[  508.804413][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  508.819139][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  508.828816][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  508.842958][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  508.859476][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  509.127008][ T9171] jffs2: notice: (9171) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  510.015480][ T5749] usb 6-1: USB disconnect, device number 39
[  510.974510][ T5625] Bluetooth: hci0: command tx timeout
[  512.892731][   T30] audit: type=1800 audit(1787209255.524:13): pid=9171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.718" name="fillfile" dev="jffs2" ino=2 res=0 errno=0
[  512.990191][   T30] audit: type=1800 audit(1787209255.574:14): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.719" name="fillfile" dev="jffs2" ino=2 res=0 errno=0
[  513.065768][ T5625] Bluetooth: hci0: command tx timeout
[  515.268910][ T5625] Bluetooth: hci0: command tx timeout
[  515.557605][ T9219] loop6: detected capacity change from 0 to 512
[  515.627560][ T9219] journal_path: Non-blockdev passed as './dev'
[  515.715022][ T9219] EXT4-fs: error: could not find journal device path
[  516.055662][ T9229] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  516.139932][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'.
[  516.232937][ T8732] 8021q: adding VLAN 0 to HW filter on device batadv0
[  517.291144][ T5625] Bluetooth: hci0: command tx timeout
[  517.299746][ T9243] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  517.352254][ T9247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  517.370647][ T9247] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  517.385507][ T9247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  517.398934][ T9247] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  517.411772][ T9247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  517.480191][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'.
[  518.548989][ T9266] loop6: detected capacity change from 0 to 8
[  519.052180][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.077215][ T9276] sctp: [Deprecated]: syz.3.731 (pid 9276) Use of struct sctp_assoc_value in delayed_ack socket option.
[  519.077215][ T9276] Use struct sctp_sack_info instead
[  519.078188][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.115959][ T9281] jffs2: notice: (9281) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  519.134163][ T9163] bridge_slave_0: entered allmulticast mode
[  519.145461][ T9163] bridge_slave_0: entered promiscuous mode
[  519.177028][ T9283] sctp: [Deprecated]: syz.3.731 (pid 9283) Use of struct sctp_assoc_value in delayed_ack socket option.
[  519.177028][ T9283] Use struct sctp_sack_info instead
[  519.531080][ T5625] Bluetooth: hci5: command tx timeout
[  521.612831][ T5625] Bluetooth: hci5: command tx timeout
[  523.416849][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.442730][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.467739][ T9163] bridge_slave_1: entered allmulticast mode
[  523.483275][ T9163] bridge_slave_1: entered promiscuous mode
[  523.590307][ T9308] loop5: detected capacity change from 0 to 512
[  523.600391][ T9308] journal_path: Non-blockdev passed as './dev'
[  523.637958][ T9308] EXT4-fs: error: could not find journal device path
[  523.707569][ T5625] Bluetooth: hci5: command tx timeout
[  523.779187][ T9163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  524.162208][ T5749] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  524.993104][ T9322] netlink: 24 bytes leftover after parsing attributes in process `syz.7.738'.
[  525.173651][ T1172] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  525.204940][ T5749] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00
[  525.226155][ T5749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  525.269212][ T5749] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  525.339415][ T5749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.364490][ T1172] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  525.413518][ T1172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  525.456532][ T5749] usb 4-1: config 0 descriptor??
[  525.468285][ T9163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  525.480974][ T1172] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  525.525858][ T1172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  525.771338][ T5625] Bluetooth: hci5: command tx timeout
[  526.303885][ T1172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.305434][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.550822][ T9163] team0: Port device team_slave_0 added
[  526.561399][ T5749] hid_parser_main: 28 callbacks suppressed
[  526.561423][ T5749] aquacomputer_d5next 0003:0C70:F00B.000C: unknown main item tag 0x0
[  526.584059][ T1172] usb 6-1: config 0 descriptor??
[  526.592185][ T5749] aquacomputer_d5next 0003:0C70:F00B.000C: unknown main item tag 0x0
[  526.600497][ T5749] aquacomputer_d5next 0003:0C70:F00B.000C: unknown main item tag 0x0
[  526.609093][ T5749] aquacomputer_d5next 0003:0C70:F00B.000C: unknown main item tag 0x0
[  526.617571][ T5749] aquacomputer_d5next 0003:0C70:F00B.000C: unknown main item tag 0x0
[  526.626117][ T5749] aquacomputer_d5next 0003:0C70:F00B.000C: unknown main item tag 0x0
[  526.634580][ T1172] usb 6-1: can't set config #0, error -71
[  526.642019][ T5749] aquacomputer_d5next 0003:0C70:F00B.000C: unknown main item tag 0x0
[  526.650249][ T5749] aquacomputer_d5next 0003:0C70:F00B.000C: unknown main item tag 0x0
[  526.659312][ T5749] aquacomputer_d5next 0003:0C70:F00B.000C: unknown main item tag 0x0
[  526.660880][ T9163] team0: Port device team_slave_1 added
[  526.670026][ T5749] aquacomputer_d5next 0003:0C70:F00B.000C: unknown main item tag 0x0
[  526.686875][ T1172] usb 6-1: USB disconnect, device number 40
[  526.803642][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  526.837411][ T5749] aquacomputer_d5next 0003:0C70:F00B.000C: hidraw0: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.3-1/input0
[  527.030526][ T9340] jffs2: notice: (9340) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  529.265416][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_0
[  529.273906][ T9354] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  529.280808][ T9354] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  529.351387][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  529.359669][ T9354] vhci_hcd vhci_hcd.0: Device attached
[  529.432992][ T9163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  529.443912][ T9355] vhci_hcd: connection closed
[  529.449213][ T6267] vhci_hcd vhci_hcd.7: stop threads
[  529.480095][ T6267] vhci_hcd vhci_hcd.7: release socket
[  529.494818][ T9311] netlink: 'syz.3.739': attribute type 12 has an invalid length.
[  529.508132][ T6267] vhci_hcd vhci_hcd.7: disconnect device
[  529.531508][ T9311] netlink: 'syz.3.739': attribute type 29 has an invalid length.
[  529.551127][ T9311] netlink: 148 bytes leftover after parsing attributes in process `syz.3.739'.
[  529.564273][ T5849] vhci_hcd vhci_hcd.7: vhci_device speed not set
[  529.571753][ T9311] netlink: 'syz.3.739': attribute type 3 has an invalid length.
[  529.591273][ T9311] netlink: 35 bytes leftover after parsing attributes in process `syz.3.739'.
[  529.623649][ T9363] jffs2: notice: (9363) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  529.627222][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_1
[  529.676393][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  529.708336][ T5749] usb 4-1: USB disconnect, device number 25
[  529.757545][ T9163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  531.783304][ T9371] jffs2: notice: (9371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  533.350855][   T30] audit: type=1800 audit(1787209276.004:15): pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.748" name="fillfile" dev="jffs2" ino=2 res=0 errno=0
[  533.874888][ T9163] hsr_slave_0: entered promiscuous mode
[  534.137633][ T9163] hsr_slave_1: entered promiscuous mode
[  534.295729][ T9163] debugfs: 'hsr0' already exists in 'hsr'
[  534.442890][ T9163] Cannot create hsr debugfs directory
[  539.935031][ T9415] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  539.941582][ T9415] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  540.014611][ T9415] vhci_hcd vhci_hcd.0: Device attached
[  540.189468][ T6764] bridge_slave_1: left allmulticast mode
[  540.200338][ T6764] bridge_slave_1: left promiscuous mode
[  540.226925][ T6764] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.241940][ T5759] usb 8-1: new low-speed USB device number 9 using dummy_hcd
[  540.251142][ T1172] usb 47-1: new low-speed USB device number 3 using vhci_hcd
[  540.259857][ T6764] bridge_slave_0: left allmulticast mode
[  540.268391][ T6764] bridge_slave_0: left promiscuous mode
[  540.276875][ T6764] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.422075][ T5759] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  540.443337][ T5759] usb 8-1: config index 0 descriptor too short (expected 12592, got 45)
[  540.462714][ T5759] usb 8-1: config 55 has too many interfaces: 55, using maximum allowed: 32
[  540.473164][ T5759] usb 8-1: config 55 has an invalid descriptor of length 55, skipping remainder of the config
[  540.691099][ T5759] usb 8-1: config 55 has 0 interfaces, different from the descriptor's value: 55
[  540.720995][ T5759] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.684063][ T5759] usb 8-1: string descriptor 0 read error: -71
[  541.695757][ T9416] vhci_hcd: connection reset by peer
[  541.711141][ T5759] usb 8-1: USB disconnect, device number 9
[  541.720519][ T5938] vhci_hcd vhci_hcd.7: stop threads
[  541.736186][ T5938] vhci_hcd vhci_hcd.7: release socket
[  541.747752][ T5938] vhci_hcd vhci_hcd.7: disconnect device
[  541.884317][ T6764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  541.896578][ T6764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.919659][ T6764] bond0 (unregistering): Released all slaves
[  541.971061][ T5749] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  542.256241][ T5749] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00
[  542.270048][ T5749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  542.288528][ T5749] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  542.303976][ T5749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.345874][ T5749] usb 4-1: config 0 descriptor??
[  542.427564][ T6764] hsr_slave_0: left promiscuous mode
[  542.450305][ T6764] hsr_slave_1: left promiscuous mode
[  542.551118][ T6764] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.800128][ T6764] batman_adv: batadv0: Removing interface: batadv_slave_1
[  543.105599][ T5749] hid_parser_main: 28 callbacks suppressed
[  543.105625][ T5749] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0
[  543.141033][ T5749] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0
[  543.157827][ T5749] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0
[  543.182226][ T5749] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0
[  543.201142][ T5749] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0
[  543.228404][ T5749] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0
[  543.268845][ T5749] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0
[  543.278951][ T9437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.295676][ T5749] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0
[  543.319065][ T9437] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  543.335780][ T5749] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0
[  543.367345][ T5749] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0
[  543.418336][ T5749] aquacomputer_d5next 0003:0C70:F00B.000D: hidraw0: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.3-1/input0
[  544.168189][ T5749] usb 4-1: USB disconnect, device number 26
[  544.377116][ T6764] team0 (unregistering): Port device team_slave_1 removed
[  544.408681][ T6764] team0 (unregistering): Port device team_slave_0 removed
[  544.661728][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9
[  545.361595][ T1172] vhci_hcd vhci_hcd.7: vhci_device speed not set
[  547.317368][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.355504][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.358428][ T9494] loop5: detected capacity change from 0 to 512
[  547.403662][ T9246] bridge_slave_0: entered allmulticast mode
[  547.434339][ T9498] jffs2: notice: (9498) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  547.454689][ T9246] bridge_slave_0: entered promiscuous mode
[  547.466597][ T9246] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.476684][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.496364][ T9246] bridge_slave_1: entered allmulticast mode
[  547.545136][ T9494] journal_path: Non-blockdev passed as './dev'
[  547.593194][ T9246] bridge_slave_1: entered promiscuous mode
[  547.595394][ T9494] EXT4-fs: error: could not find journal device path
[  548.072120][ T9246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  548.131657][ T9246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  548.167934][ T9163] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  548.660054][ T9163] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  548.769274][ T9163] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  548.847899][ T9163] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  548.975582][ T9246] team0: Port device team_slave_0 added
[  548.995372][ T9246] team0: Port device team_slave_1 added
[  549.079735][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  549.087080][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  549.116956][ T9246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  549.134888][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  549.157783][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  549.234307][ T9246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  549.260523][ T5625] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  549.272331][ T9163] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  549.539707][ T9163] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  549.555737][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10
[  550.286275][ T9163] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  550.368466][ T9163] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  551.062573][ T9246] hsr_slave_0: entered promiscuous mode
[  551.096607][ T9246] hsr_slave_1: entered promiscuous mode
[  551.125990][ T9246] debugfs: 'hsr0' already exists in 'hsr'
[  551.147028][ T9246] Cannot create hsr debugfs directory
[  553.692951][ T9567] jffs2: notice: (9567) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  554.268651][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11
[  554.291981][   T30] audit: type=1800 audit(1787209296.954:16): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.787" name="file1" dev="tmpfs" ino=850 res=0 errno=0
[  554.317233][ T9163] 8021q: adding VLAN 0 to HW filter on device bond0
[  554.349450][ T9576] dlm: no local IP address has been set
[  554.366884][ T9576] dlm: cannot start dlm midcomms -107
[  554.424211][ T9578] loop5: detected capacity change from 0 to 512
[  554.440461][ T9580] loop7: detected capacity change from 0 to 512
[  554.444576][ T9578] journal_path: Non-blockdev passed as './dev'
[  554.453008][ T9580] journal_path: Non-blockdev passed as './dev'
[  554.462004][ T9580] EXT4-fs: error: could not find journal device path
[  554.474941][ T9578] EXT4-fs: error: could not find journal device path
[  555.121200][ T5750] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  555.291547][ T9163] 8021q: adding VLAN 0 to HW filter on device team0
[  555.353046][ T1172] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  555.423009][ T5750] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  555.493079][ T5750] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  555.549375][ T5750] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  555.554837][ T1172] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  555.576982][ T1172] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  555.589327][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.596501][ T8438] bridge0: port 1(bridge_slave_0) entered forwarding state
[  555.626589][ T5750] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  555.643983][ T1172] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  555.652403][ T5750] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.694797][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.702096][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  555.716519][ T5750] usb 8-1: config 0 descriptor??
[  555.720333][ T1172] usb 4-1: config 0 interface 0 has no altsetting 0
[  555.748308][ T1172] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  555.770740][ T1172] usb 4-1: Product: syz
[  555.772496][ T5750] em28xx 8-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  555.784886][ T1172] usb 4-1: Manufacturer: syz
[  555.784912][ T1172] usb 4-1: SerialNumber: syz
[  556.069759][ T1172] usb 4-1: config 0 descriptor??
[  556.076644][ T9576] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  556.091840][ T1172] usb 4-1: selecting invalid altsetting 0
[  556.183027][ T9595] loop9: detected capacity change from 0 to 2640
[  556.193008][ T9595] buffer_io_error: 6 callbacks suppressed
[  556.193048][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read
[  556.206951][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read
[  556.214991][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read
[  556.223107][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read
[  556.231123][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read
[  556.239078][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read
[  556.247298][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read
[  556.255556][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read
[  556.263498][ T9595] ldm_validate_partition_table(): Disk read failed.
[  556.271947][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read
[  556.281061][ T9595] Buffer I/O error on dev loop9, logical block 0, async page read
[  556.289295][ T9595] Dev loop9: unable to read RDB block 0
[  556.295904][ T9595]  loop9: unable to read partition table
[  556.302979][ T9595] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  557.080824][ T9576] loop3: detected capacity change from 0 to 8192
[  557.274098][ T9603] jffs2: notice: (9603) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  557.392312][ T1172] usb 4-1: USB disconnect, device number 27
[  557.555724][ T5624] usb 8-1: USB disconnect, device number 10
[  558.879023][ T9246] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  559.078679][ T9246] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  559.131971][ T9246] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  559.187073][ T9246] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  559.361555][ T9246] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  559.595792][ T9246] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  559.636941][ T9246] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  559.670727][ T9246] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  560.216535][ T9648] jffs2: notice: (9648) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  562.262242][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  562.423144][ T9246] 8021q: adding VLAN 0 to HW filter on device bond0
[  562.584353][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  563.313656][ T9246] 8021q: adding VLAN 0 to HW filter on device team0
[  563.399801][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.407004][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  563.471866][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.479249][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  563.849957][ T9163] 8021q: adding VLAN 0 to HW filter on device batadv0
[  564.020335][ T5625] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  564.441019][ T9682] loop3: detected capacity change from 0 to 512
[  564.463112][ T9682] journal_path: Non-blockdev passed as './dev'
[  564.469421][ T9682] EXT4-fs: error: could not find journal device path
[  565.983612][ T5749] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  566.216377][ T9701] loop6: detected capacity change from 0 to 512
[  566.277716][ T9701] journal_path: Non-blockdev passed as './dev'
[  566.311848][ T9701] EXT4-fs: error: could not find journal device path
[  566.327191][ T5749] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  566.358443][ T5749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  566.382433][ T9708] jffs2: notice: (9708) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  566.401054][ T5749] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  566.462611][ T5749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  566.518427][ T5749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.600806][ T1172] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[  566.709433][ T5749] usb 4-1: config 0 descriptor??
[  566.868240][ T1172] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00
[  566.935381][ T5749] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  567.052110][ T1172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  567.165145][ T1172] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  567.409007][ T1172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.576202][ T1172] usb 6-1: config 0 descriptor??
[  567.781357][ T9163] veth0_vlan: entered promiscuous mode
[  568.020349][ T9722] jffs2: notice: (9722) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  568.162832][ T5759] usb 4-1: USB disconnect, device number 28
[  568.288014][ T9246] 8021q: adding VLAN 0 to HW filter on device batadv0
[  568.541488][ T9704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  568.896019][ T9704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  568.916448][ T1172] hid_parser_main: 28 callbacks suppressed
[  568.916478][ T1172] aquacomputer_d5next 0003:0C70:F00B.000E: unknown main item tag 0x0
[  569.060323][ T9722] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR
[  569.081083][ T1172] aquacomputer_d5next 0003:0C70:F00B.000E: unknown main item tag 0x0
[  569.089596][ T1172] aquacomputer_d5next 0003:0C70:F00B.000E: unknown main item tag 0x0
[  569.097794][ T1172] aquacomputer_d5next 0003:0C70:F00B.000E: unknown main item tag 0x0
[  569.106798][ T1172] aquacomputer_d5next 0003:0C70:F00B.000E: unknown main item tag 0x0
[  569.114971][ T1172] aquacomputer_d5next 0003:0C70:F00B.000E: unknown main item tag 0x0
[  569.123267][ T1172] aquacomputer_d5next 0003:0C70:F00B.000E: unknown main item tag 0x0
[  569.132482][ T1172] aquacomputer_d5next 0003:0C70:F00B.000E: unknown main item tag 0x0
[  569.140761][ T1172] aquacomputer_d5next 0003:0C70:F00B.000E: unknown main item tag 0x0
[  569.149170][ T1172] aquacomputer_d5next 0003:0C70:F00B.000E: unknown main item tag 0x0
[  569.164207][ T1172] aquacomputer_d5next 0003:0C70:F00B.000E: hidraw0: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.5-1/input0
[  569.403423][ T9247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  569.424816][ T9247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  569.437369][ T9247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  569.455361][ T9247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  569.467254][ T9247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  571.158334][ T5750] usb 6-1: USB disconnect, device number 41
[  571.575328][ T5625] Bluetooth: hci1: command tx timeout
[  573.691109][ T5625] Bluetooth: hci1: command tx timeout
[  574.452866][ T9246] veth0_vlan: entered promiscuous mode
[  574.484718][ T9246] veth1_vlan: entered promiscuous mode
[  575.771127][ T5625] Bluetooth: hci1: command tx timeout
[  576.669504][ T9246] veth0_macvtap: entered promiscuous mode
[  576.690643][ T9793] lo speed is unknown, defaulting to 1000
[  576.700741][ T9793] lo speed is unknown, defaulting to 1000
[  576.707433][ T9793] lo speed is unknown, defaulting to 1000
[  576.714072][ T9793] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  576.728317][ T9793] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  576.745572][ T9793] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  576.764725][ T9793] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  576.788095][ T9793] lo speed is unknown, defaulting to 1000
[  576.795541][ T9793] lo speed is unknown, defaulting to 1000
[  576.802948][ T9793] lo speed is unknown, defaulting to 1000
[  576.810209][ T9793] lo speed is unknown, defaulting to 1000
[  576.818169][ T9793] lo speed is unknown, defaulting to 1000
[  576.825486][ T9793] lo speed is unknown, defaulting to 1000
[  576.833054][ T9793] lo speed is unknown, defaulting to 1000
[  576.840406][ T9793] lo speed is unknown, defaulting to 1000
[  577.233929][ T9733] lo speed is unknown, defaulting to 1000
[  577.736071][   T30] audit: type=1800 audit(1787209320.394:17): pid=9817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.822" name="file1" dev="tmpfs" ino=898 res=0 errno=0
[  577.941245][ T5625] Bluetooth: hci1: command tx timeout
[  578.053027][ T5749] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  578.867892][ T9822] siw: device registration error -23
[  578.934083][ T5749] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  579.052299][ T5749] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  579.064322][ T5749] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  579.077348][ T5749] usb 4-1: config 0 interface 0 has no altsetting 0
[  579.087165][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  579.095933][ T5749] usb 4-1: Product: syz
[  579.100304][ T5749] usb 4-1: Manufacturer: syz
[  579.117805][ T5749] usb 4-1: SerialNumber: syz
[  579.152908][ T5749] usb 4-1: config 0 descriptor??
[  579.186402][ T9817] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  580.208206][ T5749] usb 4-1: selecting invalid altsetting 0
[  580.868547][ T9247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  580.885412][ T9247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  580.895591][ T9247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  580.919214][ T9247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  580.952709][ T9247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  581.176512][ T9838] loop7: detected capacity change from 0 to 512
[  581.194483][ T5759] usb 4-1: USB disconnect, device number 29
[  581.213875][ T9838] journal_path: Non-blockdev passed as './dev'
[  581.246901][ T9838] EXT4-fs: error: could not find journal device path
[  583.051405][ T9247] Bluetooth: hci0: command tx timeout
[  584.920441][ T9856] jffs2: notice: (9856) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  585.075068][ T9758] udevd[9758]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  585.291443][ T9247] Bluetooth: hci0: command tx timeout
[  586.702806][   T30] audit: type=1800 audit(1787209329.354:18): pid=9856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.828" name="control" dev="configfs" ino=25906 res=0 errno=0
[  586.825742][ T7792] bridge_slave_1: left allmulticast mode
[  586.863006][ T7792] bridge_slave_1: left promiscuous mode
[  586.910818][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.001276][ T7792] bridge_slave_0: left allmulticast mode
[  587.025860][ T7792] bridge_slave_0: left promiscuous mode
[  587.173324][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.381021][ T9247] Bluetooth: hci0: command tx timeout
[  587.709740][ T9886] loop9: detected capacity change from 0 to 2640
[  587.716846][ T9886] buffer_io_error: 11 callbacks suppressed
[  587.716864][ T9886] Buffer I/O error on dev loop9, logical block 0, async page read
[  587.730736][ T9886] Buffer I/O error on dev loop9, logical block 0, async page read
[  587.738738][ T9886] Buffer I/O error on dev loop9, logical block 0, async page read
[  587.746692][ T9886] Buffer I/O error on dev loop9, logical block 0, async page read
[  587.754604][ T9886] Buffer I/O error on dev loop9, logical block 0, async page read
[  587.762589][ T9886] Buffer I/O error on dev loop9, logical block 0, async page read
[  587.770461][ T9886] Buffer I/O error on dev loop9, logical block 0, async page read
[  587.779013][ T9886] Buffer I/O error on dev loop9, logical block 0, async page read
[  587.786975][ T9886] ldm_validate_partition_table(): Disk read failed.
[  587.793683][ T9886] Buffer I/O error on dev loop9, logical block 0, async page read
[  587.801814][ T9886] Buffer I/O error on dev loop9, logical block 0, async page read
[  587.811323][ T9886] Dev loop9: unable to read RDB block 0
[  587.817093][ T9886]  loop9: unable to read partition table
[  587.824080][ T9886] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  588.569335][ T9888] loop9: detected capacity change from 0 to 2640
[  588.576841][ T9888] ldm_validate_partition_table(): Disk read failed.
[  588.583615][ T9888] Dev loop9: unable to read RDB block 0
[  588.589365][ T9888]  loop9: unable to read partition table
[  588.595588][ T9888] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  589.451107][ T9247] Bluetooth: hci0: command tx timeout
[  591.344848][ T9901] jffs2: notice: (9901) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  591.385850][ T7792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  591.423704][ T7792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  591.509982][ T7792] bond0 (unregistering): Released all slaves
[  593.673492][ T7792] hsr_slave_0: left promiscuous mode
[  593.763907][ T7792] hsr_slave_1: left promiscuous mode
[  593.788694][ T7792] batman_adv: batadv0: Removing interface: batadv_slave_0
[  593.830255][ T7792] batman_adv: batadv0: Removing interface: batadv_slave_1
[  593.862611][ T9913] jffs2: notice: (9913) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  593.908296][ T7792] veth0_vlan: left promiscuous mode
[  597.351914][ T9939] loop5: detected capacity change from 0 to 512
[  597.371507][ T9939] journal_path: Non-blockdev passed as './dev'
[  597.391580][ T9939] EXT4-fs: error: could not find journal device path
[  597.553791][ T7792] team0 (unregistering): Port device team_slave_1 removed
[  597.614125][ T7792] team0 (unregistering): Port device team_slave_0 removed
[  598.161238][   T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  598.355139][   T10] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  598.382676][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  598.399034][   T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  598.414883][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  598.428598][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.443418][   T10] usb 6-1: config 0 descriptor??
[  598.465981][   T10] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  598.842158][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9
[  599.074302][ T9832] lo speed is unknown, defaulting to 1000
[  599.143301][ T9954] jffs2: notice: (9954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  599.268914][ T9733] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.299436][ T9733] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.310596][ T9733] bridge_slave_0: entered allmulticast mode
[  599.333146][ T9733] bridge_slave_0: entered promiscuous mode
[  599.442758][ T9733] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.506198][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.569691][ T9733] bridge_slave_1: entered allmulticast mode
[  599.608849][ T9733] bridge_slave_1: entered promiscuous mode
[  599.640717][   T30] audit: type=1800 audit(1787209342.294:19): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.843" name="control" dev="configfs" ino=26014 res=0 errno=0
[  599.863075][ T9733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  599.922919][ T9733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  599.966818][ T5849] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  600.054714][ T9733] team0: Port device team_slave_0 added
[  600.081537][ T9733] team0: Port device team_slave_1 added
[  600.118342][ T9978] jffs2: notice: (9978) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  600.145863][ T5849] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00
[  600.174126][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  600.189948][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_0
[  600.204408][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  600.232999][ T5849] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  600.255822][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.286014][ T5849] usb 7-1: config 0 descriptor??
[  600.295539][ T9733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  600.425495][ T5624] usb 6-1: USB disconnect, device number 42
[  600.521969][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_1
[  600.539313][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  600.570955][ T9733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  600.930568][ T5849] hid_parser_main: 28 callbacks suppressed
[  600.930594][ T5849] aquacomputer_d5next 0003:0C70:F00B.000F: unknown main item tag 0x0
[  600.968680][ T5849] aquacomputer_d5next 0003:0C70:F00B.000F: unknown main item tag 0x0
[  600.993873][ T5849] aquacomputer_d5next 0003:0C70:F00B.000F: unknown main item tag 0x0
[  601.039367][ T5849] aquacomputer_d5next 0003:0C70:F00B.000F: unknown main item tag 0x0
[  601.066111][ T5849] aquacomputer_d5next 0003:0C70:F00B.000F: unknown main item tag 0x0
[  601.083768][ T5849] aquacomputer_d5next 0003:0C70:F00B.000F: unknown main item tag 0x0
[  601.106008][ T5849] aquacomputer_d5next 0003:0C70:F00B.000F: unknown main item tag 0x0
[  601.139758][ T9969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.172270][ T5849] aquacomputer_d5next 0003:0C70:F00B.000F: unknown main item tag 0x0
[  601.210325][ T9969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.236506][ T5849] aquacomputer_d5next 0003:0C70:F00B.000F: unknown main item tag 0x0
[  601.283219][ T5849] aquacomputer_d5next 0003:0C70:F00B.000F: unknown main item tag 0x0
[  601.342269][ T5849] aquacomputer_d5next 0003:0C70:F00B.000F: hidraw0: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.6-1/input0
[  601.664122][ T9733] hsr_slave_0: entered promiscuous mode
[  601.748946][ T9733] hsr_slave_1: entered promiscuous mode
[  601.783302][ T9733] debugfs: 'hsr0' already exists in 'hsr'
[  601.799419][ T9733] Cannot create hsr debugfs directory
[  601.909583][T10007] overlayfs: failed to resolve './file1/file0': -2
[  601.933481][ T5624] usb 7-1: USB disconnect, device number 14
[  602.863075][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10
[  603.850865][T10022] jffs2: notice: (10022) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  604.175916][ T5749] lo speed is unknown, defaulting to 1000
[  605.229912][   T30] audit: type=1800 audit(1787209347.884:20): pid=10028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.857" name="control" dev="configfs" ino=26091 res=0 errno=0
[  606.518004][T10037] syzkaller0: entered promiscuous mode
[  606.533551][T10037] syzkaller0: entered allmulticast mode
[  606.565210][ T9832] bridge0: port 1(bridge_slave_0) entered blocking state
[  606.594789][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.629968][ T9832] bridge_slave_0: entered allmulticast mode
[  606.666410][ T9832] bridge_slave_0: entered promiscuous mode
[  606.691974][T10069] netlink: 20 bytes leftover after parsing attributes in process `syz.5.865'.
[  606.745346][T10069] openvswitch: netlink: Key type 12543 is out of range max 32
[  608.782940][ T9832] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.790157][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.797961][ T9832] bridge_slave_1: entered allmulticast mode
[  608.813570][ T9832] bridge_slave_1: entered promiscuous mode
[  608.916442][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11
[  609.218432][ T9832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  609.242328][ T9832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  609.530145][ T9832] team0: Port device team_slave_0 added
[  609.575940][ T9832] team0: Port device team_slave_1 added
[  609.935310][ T7334] bridge_slave_1: left allmulticast mode
[  609.959792][ T7334] bridge_slave_1: left promiscuous mode
[  609.979543][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state
[  610.016375][ T7334] bridge_slave_0: left allmulticast mode
[  610.038978][ T7334] bridge_slave_0: left promiscuous mode
[  610.068127][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.396437][ T7334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  611.417806][ T7334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  611.437541][ T7334] bond0 (unregistering): Released all slaves
[  611.441978][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'.
[  611.454669][ T9832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  611.467043][ T9832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  611.512396][ T9832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  611.578079][ T9832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  611.594676][ T9832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  611.623603][ T9832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  611.933416][ T7334] hsr_slave_0: left promiscuous mode
[  611.963235][ T7334] hsr_slave_1: left promiscuous mode
[  611.980369][ T7334] batman_adv: batadv0: Removing interface: batadv_slave_0
[  611.994512][ T7334] batman_adv: batadv0: Removing interface: batadv_slave_1
[  612.022615][ T7334] veth0_macvtap: left promiscuous mode
[  612.030391][ T7334] veth1_vlan: left promiscuous mode
[  612.036605][ T7334] veth0_vlan: left promiscuous mode
[  612.725041][T10192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  612.835498][ T7334] team0 (unregistering): Port device team_slave_1 removed
[  612.916008][ T7334] team0 (unregistering): Port device team_slave_0 removed
[  613.325757][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.7.901'.
[  613.582686][ T9832] hsr_slave_0: entered promiscuous mode
[  613.598613][ T9832] hsr_slave_1: entered promiscuous mode
[  613.625078][ T9832] debugfs: 'hsr0' already exists in 'hsr'
[  613.631510][ T9832] Cannot create hsr debugfs directory
[  614.779846][ T9733] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  614.815079][ T9733] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  614.836053][ T9733] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  614.880761][ T9733] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  614.910729][ T9733] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  614.946478][ T9733] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  614.984128][ T9733] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  615.033207][ T9733] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  615.546009][T10299] syzkaller0: entered promiscuous mode
[  615.588450][T10299] syzkaller0: entered allmulticast mode
[  616.044180][T10305] syzkaller0: entered promiscuous mode
[  616.050757][T10305] syzkaller0: entered allmulticast mode
[  616.099039][T10309] syzkaller1: entered allmulticast mode
[  616.392340][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.928'.
[  616.469579][T10331] netlink: 'syz.7.928': attribute type 83 has an invalid length.
[  616.526210][ T9247] Bluetooth: hci1: link tx timeout
[  616.536557][ T9247] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  618.585144][ T9247] Bluetooth: hci1: command 0x0406 tx timeout
[  618.978698][T10328] bridge_slave_1: left allmulticast mode
[  619.001448][T10328] bridge_slave_1: left promiscuous mode
[  619.015956][T10328] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.076580][T10328] bridge_slave_0: left allmulticast mode
[  619.088196][T10328] bridge_slave_0: left promiscuous mode
[  619.097935][T10328] bridge0: port 1(bridge_slave_0) entered disabled state
[  619.224782][ T9733] 8021q: adding VLAN 0 to HW filter on device bond0
[  619.624336][ T9733] 8021q: adding VLAN 0 to HW filter on device team0
[  619.673953][ T9832] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  619.709815][ T9832] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  619.724652][ T9832] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  619.777753][ T9832] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  619.812025][ T9832] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  619.843608][ T9832] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  619.874531][ T9832] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  619.907149][ T9832] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  619.976883][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state
[  619.984124][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.090426][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.097656][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state
[  620.395616][T10437] netlink: 28 bytes leftover after parsing attributes in process `syz.6.946'.
[  620.610314][ T9832] 8021q: adding VLAN 0 to HW filter on device bond0
[  620.722530][ T9832] 8021q: adding VLAN 0 to HW filter on device team0
[  620.785147][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.792466][ T8438] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.860079][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.867368][ T8438] bridge0: port 2(bridge_slave_1) entered forwarding state
[  620.944291][T10452] netlink: 'syz.3.950': attribute type 21 has an invalid length.
[  620.993081][T10452] netlink: 128 bytes leftover after parsing attributes in process `syz.3.950'.
[  621.073084][T10452] netlink: 'syz.3.950': attribute type 4 has an invalid length.
[  621.101593][T10452] netlink: 3 bytes leftover after parsing attributes in process `syz.3.950'.
[  621.517244][ T9733] 8021q: adding VLAN 0 to HW filter on device batadv0
[  621.797412][T10481] syzkaller0: entered promiscuous mode
[  621.820222][T10481] syzkaller0: entered allmulticast mode
[  621.845625][T10457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  622.506744][   T30] audit: type=1800 audit(1787209365.164:21): pid=10487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.957" name="memory.events" dev="tmpfs" ino=701 res=0 errno=0
[  622.668646][ T9733] veth0_vlan: entered promiscuous mode
[  622.717142][ T9733] veth1_vlan: entered promiscuous mode
[  622.818910][ T9832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  622.934850][ T9733] veth0_macvtap: entered promiscuous mode
[  622.955375][T10515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.965'.
[  622.997790][ T9733] veth1_macvtap: entered promiscuous mode
[  623.102811][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_0
[  623.143030][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_1
[  623.271323][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  623.337474][ T5941] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  623.390135][ T5941] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  623.462038][ T5940] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  623.656685][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  623.695932][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  623.696645][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  623.703935][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  623.900214][ T8438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  623.933279][ T8438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  624.189115][ T9832] veth0_vlan: entered promiscuous mode
[  624.215613][T10554] bond0: (slave ip6tnl0): refused to change device type
[  624.291416][ T9832] veth1_vlan: entered promiscuous mode
[  625.067783][ T9832] veth0_macvtap: entered promiscuous mode
[  625.231510][ T9832] veth1_macvtap: entered promiscuous mode
[  625.336813][ T9832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  625.376472][ T9832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  625.442929][ T6222] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  625.495663][ T5941] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  625.549669][ T5941] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  625.773402][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  625.948462][T10584] syzkaller1: entered promiscuous mode
[  625.979015][T10584] syzkaller1: entered allmulticast mode
[  626.237813][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  626.273591][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  626.550271][ T6222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  626.578729][ T6222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  627.192905][ T5943] usb 9-1: new low-speed USB device number 2 using dummy_hcd
[  627.372503][ T5943] usb 9-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  627.404486][ T5943] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  627.440988][ T5943] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  627.467152][ T5943] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.514465][ T5943] usb 9-1: config 0 descriptor??
[  627.925236][T10663] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  628.247847][ T5943] usbhid 9-1:0.0: can't add hid device: -71
[  628.280822][ T5943] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  628.320987][ T5943] usb 9-1: USB disconnect, device number 2
[  629.500243][T10720] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  629.671401][T10724] geneve0: entered promiscuous mode
[  629.864711][T10724] Bluetooth: MGMT ver 1.23
[  630.530338][T10744] syzkaller0: entered promiscuous mode
[  630.558257][T10744] syzkaller0: entered allmulticast mode
[  631.378575][T10786] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  633.584332][T10775] macvlan0: entered promiscuous mode
[  634.224925][T10840] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  634.277650][T10840] ieee802154 phy0 wpan0: encryption failed: -22
[  634.315444][T10846] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1083'.
[  634.327050][T10840] ieee802154 phy0 wpan0: encryption failed: -22
[  634.512481][T10846] hsr_slave_1 (unregistering): left promiscuous mode
[  635.479546][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1100'.
[  635.531838][T10893] 0: reclassify loop, rule prio 0, protocol 03
[  635.787272][T10909] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1104'.
[  636.002487][T10909] hsr_slave_1 (unregistering): left promiscuous mode
[  636.723919][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1118'.
[  636.976304][T10957] macvlan0: entered promiscuous mode
[  637.014093][T10957] netlink: 'syz.3.1121': attribute type 1 has an invalid length.
[  637.042382][T10957] netlink: 'syz.3.1121': attribute type 2 has an invalid length.
[  637.255720][T10957] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  637.566555][T10978] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14
[  637.641718][T10981] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1130'.
[  637.971211][T10981] hsr_slave_1 (unregistering): left promiscuous mode
[  639.316274][T11044] IPVS: persistence engine module ip_vs_pe_ 
 not found
[  640.806907][T11075] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  645.113053][T11201] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1205'.
[  645.546644][   T48] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  646.915818][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  648.085099][T11311] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.093822][T11311] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.184216][T11311] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  648.200680][T11311] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  648.343576][ T8438] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  648.360946][ T8438] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  648.380309][ T8438] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  648.395554][ T8438] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  648.425470][T11215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  648.799152][T11325] block nbd0: not configured, cannot reconfigure
[  649.425509][T11352] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  649.438343][T11352] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  649.561053][ T5940] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  649.587981][ T5940] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  649.607864][ T5940] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  649.627432][ T5940] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  651.163553][T11412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  651.890671][T11331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  652.425420][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1301'.
[  653.633289][T11497] syzkaller0: entered promiscuous mode
[  653.675908][T11497] syzkaller0: entered allmulticast mode
[  653.713257][T11503] tipc: Started in network mode
[  653.755254][T11503] tipc: Node identity 5ac95e14f505, cluster identity 4711
[  653.825433][T11503] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  653.904091][T11497] tipc: Resetting bearer <eth:syzkaller0>
[  653.954239][T11496] tipc: Resetting bearer <eth:syzkaller0>
[  654.048010][T11496] tipc: Disabling bearer <eth:syzkaller0>
[  655.331995][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1347'.
[  656.291872][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1362'.
[  656.841732][T11607] syzkaller0: entered promiscuous mode
[  656.865343][T11607] syzkaller0: entered allmulticast mode
[  657.683958][T11614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  660.588775][T11703] syzkaller0: entered promiscuous mode
[  660.603983][T11703] syzkaller0: entered allmulticast mode
[  663.866616][T11723] netlink: 'syz.8.1416': attribute type 1 has an invalid length.
[  664.113350][T11750] syzkaller0: entered promiscuous mode
[  664.132540][T11750] syzkaller0: entered allmulticast mode
[  664.615642][T11779] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1440'.
[  664.854332][T11768] syzkaller0: entered promiscuous mode
[  664.888424][T11768] syzkaller0: entered allmulticast mode
[  668.669512][T11846] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1457'.
[  669.708880][T11885] syzkaller0: entered promiscuous mode
[  669.741142][T11885] syzkaller0: entered allmulticast mode
[  670.276224][T11905] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1479'.
[  670.710743][T11924] netlink: NAT attribute has 4 unknown bytes
[  670.725164][T11924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  670.997694][T11930] syzkaller0: entered promiscuous mode
[  671.014139][T11930] syzkaller0: entered allmulticast mode
[  671.395234][T11943] syzkaller0: entered promiscuous mode
[  671.401464][T11943] syzkaller0: entered allmulticast mode
[  672.403723][T11956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1496'.
[  672.426569][T11956] hsr_slave_1 (unregistering): left promiscuous mode
[  672.821636][T11891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  673.987859][T12006] syzkaller0: entered promiscuous mode
[  674.011254][T12006] syzkaller0: entered allmulticast mode
[  674.046569][T12025] v: renamed from veth0_vlan (while UP)
[  674.254182][T12032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1513'.
[  677.283747][T12068] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1525'.
[  679.058090][T12149] siw: device registration error -23
[  681.957852][T12146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  683.156721][ T5941] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  683.544366][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1592'.
[  683.557917][T12263] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  683.585676][T12263] batman_adv: batadv0: Removing interface: batadv_slave_1
[  683.644533][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1592'.
[  683.675533][T12269] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1592'.
[  683.732545][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1592'.
[  683.793972][T12276] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1592'.
[  684.146490][T12285] bridge0: port 2(bridge_slave_1) entered disabled state
[  684.154472][T12285] bridge0: port 1(bridge_slave_0) entered disabled state
[  684.243759][T12285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  684.284936][T12285] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  684.456752][ T5943] lo speed is unknown, defaulting to 1000
[  684.469639][ T5943] syz2: Port: 1 Link DOWN
[  684.492577][   T48] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  684.525650][   T48] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  684.548067][   T48] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  684.606853][   T48] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  684.731808][T12322] netlink: 'syz.5.1603': attribute type 10 has an invalid length.
[  685.068638][T12339] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1610'.
[  685.092189][T12339] warning: `syz.6.1610' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  685.127141][T12339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  685.143307][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  685.149790][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  686.010333][T12234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  686.021053][ T5625] Bluetooth: hci1: command 0x0406 tx timeout
[  686.414324][   T48] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  688.163858][T12413] netlink: 596 bytes leftover after parsing attributes in process `syz.8.1630'.
[  689.270052][T12364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  689.389726][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1643'.
[  689.957293][T12474] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1651'.
[  690.013686][T12481] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1651'.
[  690.206658][T12474] macvlan0: entered promiscuous mode
[  690.554508][   T48] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  690.880690][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1664'.
[  691.330369][T12531] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1673'.
[  691.397037][T12536] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1673'.
[  691.708428][T12547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  692.030575][T12555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1679'.
[  692.367495][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1684'.
[  692.482448][T12570] syzkaller0: entered promiscuous mode
[  692.488106][T12570] syzkaller0: entered allmulticast mode
[  693.432494][T12498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  693.630929][T12607] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1693'.
[  695.006443][T12607] hsr_slave_1 (unregistering): left promiscuous mode
[  695.570043][ T9186] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  695.954467][T12652] syzkaller0: entered promiscuous mode
[  695.960348][T12652] syzkaller0: entered allmulticast mode
[  698.429437][T12634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  701.775658][T12732] syzkaller0: entered promiscuous mode
[  701.786546][T12732] syzkaller0: entered allmulticast mode
[  702.185977][T12769] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1746'.
[  704.678226][T12826] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1767'.
[  705.948488][T12844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  705.973512][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1777'.
[  706.549806][T12866] syzkaller0: entered promiscuous mode
[  706.559159][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1786'.
[  706.568103][T12866] syzkaller0: entered allmulticast mode
[  710.705319][T12947] syzkaller0: entered promiscuous mode
[  710.727020][T12947] syzkaller0: entered allmulticast mode
[  713.954106][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1834'.
[  714.001434][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1834'.
[  714.090733][T13021] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1838'.
[  714.967995][T13043] syzkaller0: entered promiscuous mode
[  714.973981][T13043] syzkaller0: entered allmulticast mode
[  715.338517][T13062] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1854'.
[  717.412840][T13083] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.420512][T13083] bridge0: port 1(bridge_slave_0) entered disabled state
[  717.428963][T13083] bridge0: entered allmulticast mode
[  717.437553][T13085] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  717.452789][T13089] bridge_slave_1: left allmulticast mode
[  717.470964][T13089] bridge_slave_1: left promiscuous mode
[  717.481088][T13089] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.543146][T13089] bridge_slave_0: left allmulticast mode
[  717.575657][T13089] bridge_slave_0: left promiscuous mode
[  717.594258][T13089] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.093314][T13110] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1867'.
[  718.238571][ T5625] Bluetooth: hci1: link tx timeout
[  718.248828][ T5625] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  718.723675][T13127] syzkaller0: entered promiscuous mode
[  718.741958][T13127] syzkaller0: entered allmulticast mode
[  718.977386][T13142] syzkaller0: entered promiscuous mode
[  718.986231][T13142] syzkaller0: entered allmulticast mode
[  718.999117][T13142] tipc: Started in network mode
[  719.004968][T13142] tipc: Node identity 82efc5be9c62, cluster identity 4711
[  719.020670][T13142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  719.148956][T13141] tipc: Resetting bearer <eth:syzkaller0>
[  719.346951][T13141] tipc: Disabling bearer <eth:syzkaller0>
[  719.897744][T12313] IPVS: starting estimator thread 0...
[  720.026345][T13168] IPVS: using max 25 ests per chain, 60000 per kthread
[  720.215401][T13182] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1889'.
[  720.334689][ T5625] Bluetooth: hci1: command 0x0406 tx timeout
[  721.179638][T13190] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1892'.
[  722.128884][T13153] macvlan0: left promiscuous mode
[  722.694336][T13220] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1905'.
[  723.168274][T13227] syzkaller0: entered promiscuous mode
[  723.228156][T13227] syzkaller0: entered allmulticast mode
[  723.383856][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1915'.
[  723.546003][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1918'.
[  723.659378][T13238] syzkaller0: entered promiscuous mode
[  723.681376][T13238] syzkaller0: entered allmulticast mode
[  728.388492][T13304] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1938'.
[  728.679765][T13306] syzkaller0: entered promiscuous mode
[  728.697084][T13306] syzkaller0: entered allmulticast mode
[  729.033272][T13330] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1946'.
[  729.225280][T13342] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1949'.
[  731.721821][T13364] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1955'.
[  732.325543][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1968'.
[  732.438775][T13352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  732.878534][T13406] syzkaller0: entered promiscuous mode
[  732.886485][T13398] nbd: socks must be embedded in a SOCK_ITEM attr
[  732.905461][T13406] syzkaller0: entered allmulticast mode
[  732.918299][T13398] block nbd0: shutting down sockets
[  732.945192][T13413] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1976'.
[  733.271503][T13422] syzkaller0: entered promiscuous mode
[  733.290129][T13422] syzkaller0: entered allmulticast mode
[  733.452829][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1981'.
[  734.154435][T13461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1991'.
[  734.716662][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2001'.
[  736.021533][T13511] lo: entered allmulticast mode
[  736.209009][T13511] lo: left allmulticast mode
[  736.823062][T13443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  737.184360][T13549] syzkaller0: entered promiscuous mode
[  737.190477][T13549] syzkaller0: entered allmulticast mode
[  737.808937][T13568] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  738.209387][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'.
[  738.305550][T13590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2044'.
[  738.339812][T13595] syzkaller0: entered promiscuous mode
[  738.350395][T13595] syzkaller0: entered allmulticast mode
[  739.662923][T13646] syzkaller0: entered promiscuous mode
[  739.675234][T13646] syzkaller0: entered allmulticast mode
[  740.053122][T13660] syzkaller0: entered promiscuous mode
[  740.069545][T13660] syzkaller0: entered allmulticast mode
[  740.917486][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2082'.
[  741.225652][T13700] syzkaller0: entered promiscuous mode
[  741.255141][T13700] syzkaller0: entered allmulticast mode
[  741.675139][T13722] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2093'.
[  742.129043][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2100'.
[  742.455919][T13756] syzkaller0: entered promiscuous mode
[  742.462214][T13756] syzkaller0: entered allmulticast mode
[  742.641568][T13759] syzkaller0: entered promiscuous mode
[  742.661206][T13759] syzkaller0: entered allmulticast mode
[  744.169553][T13829] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2121'.
[  744.369225][T13836] syzkaller0: entered promiscuous mode
[  744.400154][T13836] syzkaller0: entered allmulticast mode
[  744.849499][ T5941] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  744.914412][T13856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  745.786899][T13899] syzkaller0: entered promiscuous mode
[  745.808430][T13899] syzkaller0: entered allmulticast mode
[  745.904543][  T143] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  745.999790][T13901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  746.370563][T13911] tipc: Started in network mode
[  746.386705][T13911] tipc: Node identity 36f04123c3c6, cluster identity 4711
[  746.406874][T13911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  746.434045][T13908] tipc: Disabling bearer <eth:syzkaller0>
[  746.574832][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  746.581393][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  747.149625][ T5941] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  747.200118][T13947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  747.279358][T13956] syzkaller0: entered promiscuous mode
[  747.293957][T13956] syzkaller0: entered allmulticast mode
[  748.534566][T14012] syzkaller0: entered promiscuous mode
[  748.540256][T14012] syzkaller0: entered allmulticast mode
[  748.675812][T14015] syzkaller0: entered promiscuous mode
[  748.682777][T14015] syzkaller0: entered allmulticast mode
[  748.987976][T14020] syzkaller0: entered promiscuous mode
[  749.014523][T14020] syzkaller0: entered allmulticast mode
[  750.506987][T13968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  752.257007][T14060] syzkaller0: entered promiscuous mode
[  752.264631][T14060] syzkaller0: entered allmulticast mode
[  752.429289][T14068] syzkaller0: entered promiscuous mode
[  752.441501][T14068] syzkaller0: entered allmulticast mode
[  752.750320][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2205'.
[  753.787725][T14035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  753.807086][T14070] netlink: 'syz.8.2202': attribute type 23 has an invalid length.
[  754.586869][T14113] syzkaller0: entered promiscuous mode
[  754.602899][T14113] syzkaller0: entered allmulticast mode
[  757.099863][T14125] syzkaller0: entered promiscuous mode
[  757.105552][T14125] syzkaller0: entered allmulticast mode
[  757.655358][T14193] netlink: 'syz.9.2235': attribute type 1 has an invalid length.
[  758.023483][T14143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  758.455868][T14220] syzkaller0: entered promiscuous mode
[  758.474571][T14220] syzkaller0: entered allmulticast mode
[  758.863895][T14240] tipc: Enabled bearer <udp:syz2>, priority 10
[  758.933386][T14237] tipc: Started in network mode
[  758.955577][T14237] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  759.014249][T14237] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  759.085538][T14237] tipc: Enabled bearer <udp:syz0>, priority 10
[  759.270384][T14255] syzkaller0: entered promiscuous mode
[  759.310915][T14255] syzkaller0: entered allmulticast mode
[  759.351601][T14269] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2254'.
[  759.470614][T14269] unsupported nlmsg_type 40
[  759.709703][T14274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  759.984155][T12299] tipc: Node number set to 2949406228
[  760.005413][T14291] syzkaller0: entered promiscuous mode
[  760.021088][T14291] syzkaller0: entered allmulticast mode
[  760.203792][T12299] tipc: Node number set to 1
[  761.391071][T14342] tipc: Started in network mode
[  761.408865][T14342] tipc: Node identity ca6847754659, cluster identity 4711
[  761.417152][T14342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  761.461143][T14338] tipc: Disabling bearer <eth:syzkaller0>
[  761.511318][T14340] syzkaller0: entered promiscuous mode
[  761.526513][T14340] syzkaller0: entered allmulticast mode
[  762.420972][T14382] netlink: 'syz.3.2292': attribute type 1 has an invalid length.
[  763.211916][T14416] syzkaller0: entered promiscuous mode
[  763.254397][T14416] syzkaller0: entered allmulticast mode
[  763.307929][T14408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  763.368539][T14410] syzkaller0: entered promiscuous mode
[  763.389612][T14410] syzkaller0: entered allmulticast mode
[  763.543728][T14408] tipc: Resetting bearer <eth:syzkaller0>
[  763.680709][T14407] tipc: Resetting bearer <eth:syzkaller0>
[  763.795212][T14407] tipc: Disabling bearer <eth:syzkaller0>
[  765.906108][T14529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  766.050540][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2341'.
[  766.379893][T14537] syzkaller0: entered promiscuous mode
[  766.401513][T14537] syzkaller0: entered allmulticast mode
[  768.818454][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2353'.
[  769.768338][T14614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  769.910565][ T5940] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  770.014402][T14617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  770.674696][T14658] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2377'.
[  770.986039][T14641] xt_CT: No such helper "pptp"
[  771.726413][T14694] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  772.023377][T14707] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2392'.
[  772.135995][T14718] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2394'.
[  773.367276][T14770] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2412'.
[  773.589768][T14778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  773.830638][T14783] syzkaller0: entered promiscuous mode
[  773.850580][T14783] syzkaller0: entered allmulticast mode
[  775.618000][T14838] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  775.793632][T14840] syzkaller0: entered promiscuous mode
[  775.801818][T14840] syzkaller0: entered allmulticast mode
[  775.989525][T14849] syzkaller0: entered promiscuous mode
[  776.027240][T14849] syzkaller0: entered allmulticast mode
[  776.073640][T14851] tipc: Started in network mode
[  776.080680][T14851] tipc: Node identity aaf71c011cf5, cluster identity 1
[  776.100445][T14851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  776.123951][T14848] tipc: Resetting bearer <eth:syzkaller0>
[  776.145625][T14861] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2448'.
[  776.228333][T14848] tipc: Disabling bearer <eth:syzkaller0>
[  777.562397][T14901] bridge0: port 2(bridge_slave_1) entered disabled state
[  777.570232][T14901] bridge0: port 1(bridge_slave_0) entered disabled state
[  777.898092][T14941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  778.086016][T14901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  778.113916][T14901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  778.126438][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2468'.
[  778.206350][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2468'.
[  778.602788][ T6222] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  778.612537][T14942] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  778.687653][T14960] vlan2: entered promiscuous mode
[  778.716544][T14960] bridge0: entered promiscuous mode
[  778.972102][ T1151] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.004971][ T1151] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.392705][ T7334] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.755513][T15003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  779.769566][T15007] syzkaller0: entered promiscuous mode
[  779.776634][T15007] syzkaller0: entered allmulticast mode
[  779.856050][T15007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  779.865645][T15005] tipc: Resetting bearer <eth:syzkaller0>
[  779.898791][T15005] tipc: Disabling bearer <eth:syzkaller0>
[  779.916205][T15003] tipc: Resetting bearer <eth:syzkaller0>
[  780.036693][T15001] tipc: Disabling bearer <eth:syzkaller0>
[  780.415073][T15028] syzkaller0: entered promiscuous mode
[  780.442538][T15028] syzkaller0: entered allmulticast mode
[  780.871014][T15016] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  781.422321][T15058] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  781.474687][T15058] tipc: Resetting bearer <eth:syzkaller0>
[  781.609218][T15056] tipc: Disabling bearer <eth:syzkaller0>
[  781.662878][T15085] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2514'.
[  781.771634][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2516'.
[  781.826080][T15078] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2513'.
[  781.934460][T15089] syzkaller0: entered promiscuous mode
[  781.946064][T15089] syzkaller0: entered allmulticast mode
[  782.704881][T15094] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  783.102427][T15133] tipc: Started in network mode
[  783.130627][T15133] tipc: Node identity 362b401f7e32, cluster identity 4711
[  783.173685][T15133] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  783.384355][T15140] tipc: Resetting bearer <eth:syzkaller0>
[  783.420536][T15160] Bluetooth: hci0: unsupported parameter 5135
[  783.457365][T15160] Bluetooth: hci0: unsupported parameter 8192
[  783.468986][T15131] tipc: Disabling bearer <eth:syzkaller0>
[  783.495197][T15160] Bluetooth: hci0: unsupported parameter 5135
[  783.512951][T15160] Bluetooth: hci0: unsupported parameter 8192
[  784.461868][T15206] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  784.480161][T15206] tipc: Resetting bearer <eth:syzkaller0>
[  784.588641][T15170] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  784.602214][T15205] tipc: Disabling bearer <eth:syzkaller0>
[  784.772472][T15221] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2555'.
[  784.796707][T15218] syzkaller0: entered promiscuous mode
[  784.842994][T15218] syzkaller0: entered allmulticast mode
[  785.851328][T15264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  785.902776][T15264] tipc: Resetting bearer <eth:syzkaller0>
[  785.918348][T15262] tipc: Disabling bearer <eth:syzkaller0>
[  786.206936][T15283] syzkaller0: entered promiscuous mode
[  786.226406][T15283] syzkaller0: entered allmulticast mode
[  786.532851][T15266] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  786.761392][T15307] netlink: 388 bytes leftover after parsing attributes in process `syz.8.2588'.
[  786.806749][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2589'.
[  787.228017][T15324] syzkaller0: entered promiscuous mode
[  787.254061][T15324] syzkaller0: entered allmulticast mode
[  787.621041][T15349] netlink: 388 bytes leftover after parsing attributes in process `syz.6.2606'.
[  788.194129][T15335] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  788.357560][T15374] syzkaller0: entered promiscuous mode
[  788.382441][T15374] syzkaller0: entered allmulticast mode
[  788.475237][T15378] syzkaller0: entered promiscuous mode
[  788.501018][T15378] syzkaller0: entered allmulticast mode
[  788.565790][T15386] netlink: 388 bytes leftover after parsing attributes in process `syz.6.2622'.
[  788.586421][T15388] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2620'.
[  788.598648][T15379] syzkaller0: entered promiscuous mode
[  788.627541][T15379] syzkaller0: entered allmulticast mode
[  788.769604][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.502571][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2637'.
[  789.754818][T15429] syzkaller0: entered promiscuous mode
[  789.814096][T15429] syzkaller0: entered allmulticast mode
[  789.994568][T15447] syzkaller0: entered promiscuous mode
[  790.005030][T15447] syzkaller0: entered allmulticast mode
[  790.026340][T15445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2645'.
[  790.106326][T15416] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  790.339569][T15431] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  790.364419][T12315] IPVS: starting estimator thread 0...
[  790.473427][T15463] IPVS: using max 26 ests per chain, 62400 per kthread
[  791.040508][T15492] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2659'.
[  791.104166][T15491] syzkaller0: entered promiscuous mode
[  791.123527][T15491] syzkaller0: entered allmulticast mode
[  791.277040][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2662'.
[  791.315192][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2662'.
[  792.109462][T15536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2677'.
[  792.372769][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2680'.
[  792.655768][T15554] syzkaller0: entered promiscuous mode
[  792.687954][T15554] syzkaller0: entered allmulticast mode
[  792.794489][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2685'.
[  793.172676][T15570] syzkaller0: entered promiscuous mode
[  793.210754][T15570] syzkaller0: entered allmulticast mode
[  793.244483][T15573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  793.384451][T15570] tipc: Resetting bearer <eth:syzkaller0>
[  793.395699][T15567] tipc: Resetting bearer <eth:syzkaller0>
[  793.410412][T15592] netlink: 'syz.5.2694': attribute type 1 has an invalid length.
[  793.480042][T15567] tipc: Disabling bearer <eth:syzkaller0>
[  793.754290][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2697'.
[  794.258873][T15624] syzkaller0: entered promiscuous mode
[  794.273815][T15623] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2705'.
[  794.302911][T15624] syzkaller0: entered allmulticast mode
[  795.201753][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2715'.
[  795.848091][T15696] syzkaller0: entered promiscuous mode
[  795.854016][T15696] syzkaller0: entered allmulticast mode
[  797.974926][T15656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  799.152205][T15784] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2757'.
[  799.350305][T15787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2758'.
[  800.270276][T15837] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2772'.
[  801.111319][T15871] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2784'.
[  802.881400][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2810'.
[  803.034952][T15957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2812'.
[  803.836336][T15994] ipip0: entered promiscuous mode
[  806.322295][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2854'.
[  807.102343][T16155] syzkaller1: entered promiscuous mode
[  807.122324][T16155] syzkaller1: entered allmulticast mode
[  807.645331][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'.
[  807.691343][T16179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2874'.
[  807.707961][T16186] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2877'.
[  808.015078][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  808.022432][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  808.527516][T16214] syzkaller0: entered promiscuous mode
[  808.535424][T16214] syzkaller0: entered allmulticast mode
[  808.549518][T16214] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2888'.
[  808.580766][T16221] ieee802154 phy0 wpan0: encryption failed: -22
[  808.605472][T16214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.182252][T16245] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  809.689047][T16265] netlink: 324 bytes leftover after parsing attributes in process `syz.8.2901'.
[  809.824236][T16274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  809.955275][T16276] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2905'.
[  810.406154][T16300] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  810.636325][T16303] syzkaller0: entered promiscuous mode
[  810.648523][T16303] syzkaller0: entered allmulticast mode
[  811.006853][T16327] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2923'.
[  811.503360][T16343] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  813.504409][T16322] syzkaller0: entered promiscuous mode
[  813.510035][T16322] syzkaller0: entered allmulticast mode
[  814.153851][T16364] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  814.173120][T16364] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  814.182930][T16364] netdevsim netdevsim7: Falling back to sysfs fallback for: .
[  814.365829][T16389] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  814.826831][T16402] syzkaller0: entered promiscuous mode
[  814.840157][T16402] syzkaller0: entered allmulticast mode
[  817.856553][T16465] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2958'.
[  818.656470][T16489] syzkaller0: entered promiscuous mode
[  818.678216][T16489] syzkaller0: entered allmulticast mode
[  818.698566][T16497] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  818.750546][T16504] syzkaller0: entered promiscuous mode
[  818.757711][T16504] syzkaller0: entered allmulticast mode
[  819.121242][T16521] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2976'.
[  821.125445][T16528] netlink: 'syz.5.2979': attribute type 7 has an invalid length.
[  821.135224][T16528] netlink: 'syz.5.2979': attribute type 8 has an invalid length.
[  821.529060][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2986'.
[  822.350628][T16573] syzkaller0: entered promiscuous mode
[  822.382212][T16573] syzkaller0: entered allmulticast mode
[  822.398887][T16579] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  825.997137][T16645] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3019'.
[  826.364928][T16669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3026'.
[  826.418235][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3023'.
[  826.420190][T16665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  826.497251][T16670] syzkaller0: entered promiscuous mode
[  826.506881][T16670] syzkaller0: entered allmulticast mode
[  829.047208][T16665] tipc: Resetting bearer <eth:syzkaller0>
[  829.083771][T16662] tipc: Disabling bearer <eth:syzkaller0>
[  829.215474][T12291] tipc: Node number set to 4113973539
[  829.281723][T16702] syzkaller0: entered promiscuous mode
[  829.295252][T16702] syzkaller0: entered allmulticast mode
[  829.482716][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3043'.
[  829.533810][T16713] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3044'.
[  829.545190][T16711] syzkaller0: entered promiscuous mode
[  829.562254][T16711] syzkaller0: entered allmulticast mode
[  830.379414][T16738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  830.402233][T16745] syzkaller0: entered promiscuous mode
[  830.432455][T16745] syzkaller0: entered allmulticast mode
[  830.488487][T16737] tipc: Resetting bearer <eth:syzkaller0>
[  830.611750][T16734] tipc: Disabling bearer <eth:syzkaller0>
[  830.664923][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3054'.
[  830.914709][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3061'.
[  831.038017][T16768] syzkaller0: entered promiscuous mode
[  831.055049][T16768] syzkaller0: entered allmulticast mode
[  831.961230][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3077'.
[  832.753678][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3085'.
[  833.096445][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3091'.
[  833.432071][T16841] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  833.495806][T16841] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  833.531102][T16856] netlink: 'syz.5.3101': attribute type 6 has an invalid length.
[  833.539993][T16841] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  833.882377][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3108'.
[  834.747480][T16879] netlink: 'syz.6.3110': attribute type 10 has an invalid length.
[  834.946744][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3115'.
[  835.040463][T16903] syzkaller0: entered promiscuous mode
[  835.049002][T16903] syzkaller0: entered allmulticast mode
[  835.095237][T16903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.217652][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3122'.
[  836.492823][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3137'.
[  837.020590][T16959] netlink: 'syz.8.3136': attribute type 10 has an invalid length.
[  837.740431][T17000] Bluetooth: hci0: unsupported parameter 5135
[  837.752539][T17000] Bluetooth: hci0: unsupported parameter 8192
[  837.769327][T17000] Bluetooth: hci0: unsupported parameter 5135
[  837.797939][T17000] Bluetooth: hci0: unsupported parameter 8192
[  837.953452][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3152'.
[  838.121521][T17008] syzkaller0: entered promiscuous mode
[  838.156401][T17008] syzkaller0: entered allmulticast mode
[  838.262055][T17013] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  838.487682][T17023] syzkaller0: entered promiscuous mode
[  838.557852][T17023] syzkaller0: entered allmulticast mode
[  838.601139][T17013] tipc: Resetting bearer <eth:syzkaller0>
[  838.630132][T17032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  838.654330][T17007] tipc: Resetting bearer <eth:syzkaller0>
[  838.770434][T17007] tipc: Disabling bearer <eth:syzkaller0>
[  838.805225][T17022] tipc: Resetting bearer <eth:syzkaller0>
[  838.900378][T17022] tipc: Disabling bearer <eth:syzkaller0>
[  839.354230][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3170'.
[  839.519321][T17037] netlink: 'syz.5.3163': attribute type 10 has an invalid length.
[  839.549260][T17076] syzkaller0: entered promiscuous mode
[  839.570251][T17076] syzkaller0: entered allmulticast mode
[  839.618973][T17069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.108451][T17102] syzkaller0: entered promiscuous mode
[  840.132509][T17102] syzkaller0: entered allmulticast mode
[  840.173060][T17102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  840.227473][T17101] tipc: Resetting bearer <eth:syzkaller0>
[  840.378299][T17101] tipc: Disabling bearer <eth:syzkaller0>
[  841.405055][T17130] netlink: 'syz.8.3193': attribute type 10 has an invalid length.
[  842.107136][T17175] ipip0: entered promiscuous mode
[  842.863198][T17212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3220'.
[  843.231526][T17229] lo speed is unknown, defaulting to 1000
[  843.856728][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3235'.
[  843.918348][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3235'.
[  845.682648][T17201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  845.692231][T17209] netlink: 'syz.6.3222': attribute type 10 has an invalid length.
[  846.150976][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3253'.
[  846.177126][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3253'.
[  846.691205][T17305] syzkaller0: entered promiscuous mode
[  846.704640][T17305] syzkaller0: entered allmulticast mode
[  849.387435][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3273'.
[  849.401764][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3273'.
[  849.759071][T17324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  849.787459][T17339] netlink: 'syz.6.3267': attribute type 10 has an invalid length.
[  850.585980][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3288'.
[  850.614111][T17390] syzkaller0: entered promiscuous mode
[  850.632703][T17390] syzkaller0: entered allmulticast mode
[  853.208210][T17440] ipip0: entered promiscuous mode
[  853.461952][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3305'.
[  853.487992][T17448] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3305'.
[  854.090345][T17424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  854.107448][T17436] netlink: 'syz.5.3300': attribute type 10 has an invalid length.
[  854.492056][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3314'.
[  854.737699][T17472] 8021q: adding VLAN 0 to HW filter on device bond1
[  854.847958][T17485] syzkaller0: entered promiscuous mode
[  854.886308][T17485] syzkaller0: entered allmulticast mode
[  858.039333][T17503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  858.054505][T17516] netlink: 'syz.7.3327': attribute type 10 has an invalid length.
[  858.470740][T17564] syzkaller0: entered promiscuous mode
[  858.482015][T17564] syzkaller0: entered allmulticast mode
[  859.173104][T17608] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3356'.
[  860.686768][T17580] syzkaller0: entered promiscuous mode
[  860.692657][T17580] syzkaller0: entered allmulticast mode
[  861.227145][T17625] syzkaller0: entered promiscuous mode
[  861.247731][T17625] syzkaller0: entered allmulticast mode
[  861.478003][T17635] netlink: 'syz.9.3365': attribute type 1 has an invalid length.
[  861.564935][T17644] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3369'.
[  861.699803][T17621] netlink: 'syz.5.3361': attribute type 10 has an invalid length.
[  861.870645][T17651] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3372'.
[  862.087400][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3376'.
[  862.160968][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3376'.
[  862.334272][T17668] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3378'.
[  862.667697][T17681] netlink: 'syz.8.3386': attribute type 1 has an invalid length.
[  862.696278][T17687] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3387'.
[  862.784086][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  862.798200][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  862.810158][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  862.827517][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  862.843783][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  863.435637][T17706] IPv6: Can't replace route, no match found
[  863.872495][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3398'.
[  864.065738][T17736] netlink: 'syz.7.3403': attribute type 1 has an invalid length.
[  864.148609][T17688] lo speed is unknown, defaulting to 1000
[  864.241570][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3404'.
[  864.267926][T17746] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3406'.
[  864.626070][T17688] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.633472][T17688] bridge0: port 1(bridge_slave_0) entered disabled state
[  864.641849][T17688] bridge_slave_0: entered allmulticast mode
[  864.649771][T17688] bridge_slave_0: entered promiscuous mode
[  864.660319][T17688] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.667810][T17688] bridge0: port 2(bridge_slave_1) entered disabled state
[  864.675602][T17688] bridge_slave_1: entered allmulticast mode
[  864.685053][T17688] bridge_slave_1: entered promiscuous mode
[  864.754334][T17688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  864.767893][T17688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  864.825434][T17688] team0: Port device team_slave_0 added
[  864.835270][T17688] team0: Port device team_slave_1 added
[  864.874340][T17688] batman_adv: batadv0: Adding interface: batadv_slave_0
[  864.881543][T17688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  864.910965][T17688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  864.924861][T17688] batman_adv: batadv0: Adding interface: batadv_slave_1
[  864.932210][T17688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  864.958701][T17688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  864.971011][ T9247] Bluetooth: hci5: command tx timeout
[  865.029120][T17688] hsr_slave_0: entered promiscuous mode
[  865.035748][T17688] hsr_slave_1: entered promiscuous mode
[  865.043037][T17688] debugfs: 'hsr0' already exists in 'hsr'
[  865.048878][T17688] Cannot create hsr debugfs directory
[  866.848227][T17725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  866.861103][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3405'.
[  867.050982][ T9247] Bluetooth: hci5: command tx timeout
[  867.065678][T17688] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  867.145866][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  867.196335][T17688] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  867.241681][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  867.265951][T17688] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  867.292532][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  867.324039][T17688] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  867.391448][T17779] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3415'.
[  867.459552][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  867.468616][T17785] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3416'.
[  867.497345][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3416'.
[  868.099770][T17688] 8021q: adding VLAN 0 to HW filter on device bond0
[  868.200025][T17809] v: renamed from veth0_vlan
[  868.254450][T17818] syzkaller1: entered promiscuous mode
[  868.265890][T17818] syzkaller1: entered allmulticast mode
[  868.303149][T17688] 8021q: adding VLAN 0 to HW filter on device team0
[  868.433644][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.440902][ T6222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  868.485040][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.492289][ T6222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  868.982780][T17839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3431'.
[  868.999489][T17838] syzkaller0: entered promiscuous mode
[  869.017350][T17838] syzkaller0: entered allmulticast mode
[  869.131174][ T9247] Bluetooth: hci5: command tx timeout
[  869.326859][T17849] netlink: 'syz.3.3435': attribute type 1 has an invalid length.
[  869.424510][T17851] syzkaller0: entered promiscuous mode
[  869.430343][T17851] syzkaller0: entered allmulticast mode
[  869.457752][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  869.464246][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  869.597648][T17858] netlink: 324 bytes leftover after parsing attributes in process `syz.3.3436'.
[  869.602826][T17688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  869.939508][T17688] veth0_vlan: entered promiscuous mode
[  869.952369][T17688] veth1_vlan: entered promiscuous mode
[  869.985634][T17688] veth0_macvtap: entered promiscuous mode
[  869.995807][T17688] veth1_macvtap: entered promiscuous mode
[  870.016521][T17688] batman_adv: batadv0: Interface activated: batadv_slave_0
[  870.035881][T17688] batman_adv: batadv0: Interface activated: batadv_slave_1
[  870.083386][ T6222] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  870.095963][ T6222] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  870.121198][ T6222] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  870.131778][ T6222] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  871.118086][T17811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  871.212332][ T9247] Bluetooth: hci5: command tx timeout
[  871.327747][ T7334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.342642][ T7334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  871.619381][ T5941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.645432][ T5941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  977.640733][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  977.647797][    C1] rcu: 	0-...!: (3 ticks this GP) idle=76dc/1/0x4000000000000000 softirq=91457/91475 fqs=4
[  977.659247][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=112685, q=890 ncpus=2)
[  977.667173][    C1] Sending NMI from CPU 1 to CPUs 0:
[  977.667206][    C0] NMI backtrace for cpu 0
[  977.667222][    C0] CPU: 0 UID: 0 PID: 17886 Comm: syz.3.3438 Not tainted syzkaller #0 PREEMPT(full) 
[  977.667247][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  977.667261][    C0] RIP: 0010:mark_lock+0x3c/0x190
[  977.667300][    C0] Code: 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 64 5f d1 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 10 45 15 94 eb 42 83 3d 2b ef
[  977.667319][    C0] RSP: 0018:ffffc90000007ad0 EFLAGS: 00000047
[  977.667338][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  977.667352][    C0] RDX: 0000000000000000 RSI: ffff8880251e0bf8 RDI: ffff8880251e0000
[  977.667368][    C0] RBP: 0000000000000001 R08: ffffffff84e09e27 R09: 0000000000080000
[  977.667383][    C0] R10: 0000000000000000 R11: ffffffff9a9fc480 R12: 0000000000000002
[  977.667397][    C0] R13: ffff8880251e0bf8 R14: ffff8880251e0000 R15: 0000000000000002
[  977.667417][    C0] FS:  00007f0e103086c0(0000) GS:ffff888124f36000(0000) knlGS:0000000000000000
[  977.667436][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  977.667452][    C0] CR2: 00007f51d5dfb6b0 CR3: 0000000049efc000 CR4: 0000000000350ef0
[  977.667470][    C0] Call Trace:
[  977.667479][    C0]  <IRQ>
[  977.667493][    C0]  __lock_acquire+0x63a/0x2cf0
[  977.667529][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  977.667556][    C0]  ? __lock_acquire+0x683/0x2cf0
[  977.667589][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  977.667615][    C0]  ? rcu_is_watching+0x16/0xb0
[  977.667638][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  977.667665][    C0]  ? __lock_acquire+0x683/0x2cf0
[  977.667700][    C0]  ? debug_object_activate+0xb7/0x420
[  977.667733][    C0]  lock_acquire+0x106/0x350
[  977.667763][    C0]  ? debug_object_activate+0xb7/0x420
[  977.667794][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  977.667825][    C0]  _raw_spin_lock_irqsave+0x40/0x60
[  977.667857][    C0]  ? debug_object_activate+0xb7/0x420
[  977.667884][    C0]  debug_object_activate+0xb7/0x420
[  977.667918][    C0]  enqueue_hrtimer+0xa9/0x2c0
[  977.667948][    C0]  __hrtimer_run_queues+0x4ce/0xa10
[  977.667984][    C0]  hrtimer_interrupt+0x4cd/0xaa0
[  977.668028][    C0]  __sysvec_apic_timer_interrupt+0x102/0x430
[  977.668053][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  977.668087][    C0]  </IRQ>
[  977.668095][    C0]  <TASK>
[  977.668104][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  977.668129][    C0] RIP: 0010:lockdep_unregister_key+0x2d4/0x350
[  977.668164][    C0] Code: e9 41 0d 09 00 48 c7 c7 d0 c9 74 96 89 c6 e8 73 db 35 0a e9 66 fe ff ff e8 f9 08 33 0a 41 f7 c7 00 02 00 00 74 b4 fb 40 84 ed <75> b3 eb c4 90 0f 0b 90 e9 27 ff ff ff 90 0f 0b 90 e9 2f ff ff ff
[  977.668181][    C0] RSP: 0018:ffffc9000df47130 EFLAGS: 00000246
[  977.668200][    C0] RAX: 0000000000000046 RBX: ffff8880212dc268 RCX: 0000000000000046
[  977.668215][    C0] RDX: ffffffff94304538 RSI: ffffffff8e251f86 RDI: ffffffff8c4bdd80
[  977.668232][    C0] RBP: ffff8880251e0000 R08: ffffffff81b020b8 R09: 0000000000000000
[  977.668248][    C0] R10: 0000000000000000 R11: ffffffff8eb5a0e0 R12: 0000000000000000
[  977.668262][    C0] R13: ffff8880212dc269 R14: 0000000000001000 R15: 0000000000000a47
[  977.668287][    C0]  ? __is_module_percpu_address+0x28/0x3f0
[  977.668323][    C0]  ? __pfx_pfifo_fast_destroy+0x10/0x10
[  977.668356][    C0]  __qdisc_destroy+0x1ab/0x470
[  977.668392][    C0]  taprio_attach+0x253/0x380
[  977.668418][    C0]  ? __pfx_taprio_attach+0x10/0x10
[  977.668440][    C0]  qdisc_graft+0x1292/0x1810
[  977.668476][    C0]  ? __pfx_qdisc_graft+0x10/0x10
[  977.668505][    C0]  ? trace_qdisc_create+0x83/0x200
[  977.668535][    C0]  ? qdisc_create+0xa62/0xf00
[  977.668563][    C0]  ? lockdep_rtnl_is_held+0x26/0x40
[  977.668589][    C0]  tc_modify_qdisc+0x1968/0x2390
[  977.668627][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  977.668668][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  977.668699][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  977.668735][    C0]  rtnetlink_rcv_msg+0x7b9/0xc00
[  977.668765][    C0]  ? netlink_sendmsg+0x5d4/0xb40
[  977.668789][    C0]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  977.668819][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  977.668850][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  977.668876][    C0]  ? __lock_acquire+0x683/0x2cf0
[  977.668917][    C0]  netlink_rcv_skb+0x226/0x4a0
[  977.668952][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  977.668984][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  977.669027][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  977.669061][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  977.669100][    C0]  netlink_unicast+0x7bd/0x940
[  977.669138][    C0]  netlink_sendmsg+0x813/0xb40
[  977.669166][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  977.669185][    C0]  ? kasan_save_free_info+0x40/0x50
[  977.669214][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  977.669241][    C0]  ? aa_sock_msg_perm+0xf6/0x1c0
[  977.669269][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  977.669297][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  977.669317][    C0]  sock_sendmsg_nosec+0x13a/0x180
[  977.669346][    C0]  ____sys_sendmsg+0x54e/0x850
[  977.669384][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  977.669420][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  977.669449][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  977.669475][    C0]  ? import_iovec+0x73/0xa0
[  977.669504][    C0]  ___sys_sendmsg+0x2a5/0x360
[  977.669537][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  977.669563][    C0]  ? __lock_acquire+0x683/0x2cf0
[  977.669597][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  977.669634][    C0]  ? tomoyo_path_number_perm+0x219/0x5f0
[  977.669690][    C0]  ? __fget_files+0x2a/0x420
[  977.669710][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  977.669742][    C0]  ? __fget_files+0x3a2/0x420
[  977.669770][    C0]  __x64_sys_sendmsg+0x1b1/0x290
[  977.669805][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  977.669839][    C0]  ? kfree+0x4d/0x640
[  977.669871][    C0]  ? __pfx_kcov_ioctl+0x10/0x10
[  977.669907][    C0]  do_syscall_64+0x166/0x520
[  977.669942][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.669969][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.669992][    C0] RIP: 0033:0x7f0e0f39e0d9
[  977.670013][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  977.670031][    C0] RSP: 002b:00007f0e10308028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  977.670052][    C0] RAX: ffffffffffffffda RBX: 00007f0e0f626090 RCX: 00007f0e0f39e0d9
[  977.670069][    C0] RDX: 000000000000c004 RSI: 00002000000012c0 RDI: 0000000000000004
[  977.670084][    C0] RBP: 00007f0e0f435024 R08: 0000000000000000 R09: 0000000000000000
[  977.670098][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  977.670111][    C0] R13: 00007f0e0f626128 R14: 00007f0e0f626090 R15: 00007fff909efa08
[  977.670139][    C0]  </TASK>
[  977.670200][    C1] rcu: rcu_preempt kthread starved for 10493 jiffies! g112685 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  978.346130][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  978.356092][    C1] rcu: RCU grace-period kthread stack dump:
[  978.361965][    C1] task:rcu_preempt     state:R  running task     stack:27496 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  978.375476][    C1] Call Trace:
[  978.378745][    C1]  <TASK>
[  978.381675][    C1]  __schedule+0x17d4/0x5630
[  978.386208][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.391905][    C1]  ? do_raw_spin_unlock+0xf5/0x200
[  978.397032][    C1]  ? __pfx___schedule+0x10/0x10
[  978.401898][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.407545][    C1]  ? schedule+0x90/0x2b0
[  978.411800][    C1]  schedule+0x164/0x2b0
[  978.415984][    C1]  schedule_timeout+0x152/0x2c0
[  978.420840][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  978.426223][    C1]  ? __pfx_process_timeout+0x10/0x10
[  978.431524][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.437162][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  978.442975][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.448607][    C1]  ? prepare_to_swait_event+0x322/0x350
[  978.454159][    C1]  rcu_gp_fqs_loop+0x30c/0x11f0
[  978.459039][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  978.465206][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  978.470501][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  978.475718][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  978.481537][    C1]  rcu_gp_kthread+0x9e/0x2b0
[  978.486140][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  978.491432][    C1]  ? __kthread_parkme+0x71/0x1f0
[  978.496373][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.502013][    C1]  ? __kthread_parkme+0x199/0x1f0
[  978.507045][    C1]  kthread+0x38b/0x480
[  978.511123][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  978.516325][    C1]  ? __pfx_kthread+0x10/0x10
[  978.520927][    C1]  ret_from_fork+0x514/0xb70
[  978.525540][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  978.530747][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.536379][    C1]  ? __switch_to+0xc89/0x1420
[  978.541063][    C1]  ? __pfx_kthread+0x10/0x10
[  978.545671][    C1]  ret_from_fork_asm+0x1a/0x30
[  978.550466][    C1]  </TASK>
[  978.553482][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  978.559793][    C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  978.569070][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  978.579292][    C1] Workqueue: events_unbound toggle_allocation_gate
[  978.585814][    C1] RIP: 0010:smp_call_function_many_cond+0x628/0x1500
[  978.592501][    C1] Code: 00 44 8b 3b 44 89 fe 83 e6 01 31 ff e8 31 36 0c 00 41 83 e7 01 75 07 e8 26 31 0c 00 eb 3f f3 90 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 04 84 c0 75 0f f7 03 01 00 00 00 74 1d e8 02 31 0c 00
[  978.612630][    C1] RSP: 0018:ffffc90000117740 EFLAGS: 00000293
[  978.618735][    C1] RAX: dffffc0000000000 RBX: ffff8880b8643188 RCX: ffff88801dac8000
[  978.626719][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  978.634778][    C1] RBP: ffffc90000117890 R08: ffff88801dac9597 R09: 1ffff11003b592b2
[  978.642749][    C1] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff110170c8631
[  978.650805][    C1] R13: 0000000000000000 R14: ffff8880b8643180 R15: 0000000000000001
[  978.658776][    C1] FS:  0000000000000000(0000) GS:ffff888125036000(0000) knlGS:0000000000000000
[  978.667700][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  978.674277][    C1] CR2: 00007fffc295e248 CR3: 000000000e946000 CR4: 0000000000350ef0
[  978.682246][    C1] Call Trace:
[  978.685521][    C1]  <TASK>
[  978.688451][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  978.693489][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  978.699825][    C1]  ? kmem_cache_alloc_bulk_noprof+0xb7/0x7b0
[  978.705818][    C1]  ? __pfx___text_poke+0x10/0x10
[  978.710764][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.716486][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.722126][    C1]  smp_text_poke_batch_finish+0x5fd/0x1110
[  978.728026][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  978.734023][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  978.739044][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  978.745297][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.750934][    C1]  ? arch_jump_label_transform_queue+0x97/0x110
[  978.757187][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.762824][    C1]  ? __jump_label_update+0x347/0x370
[  978.768114][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  978.774099][    C1]  static_key_enable_cpuslocked+0x128/0x240
[  978.780090][    C1]  ? process_scheduled_works+0xa1a/0x14c0
[  978.785821][    C1]  static_key_enable+0x1a/0x20
[  978.790624][    C1]  toggle_allocation_gate+0xab/0x290
[  978.795958][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  978.801875][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.807525][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.813165][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.818800][    C1]  ? trace_workqueue_execute_start+0x7c/0x1d0
[  978.824870][    C1]  ? process_scheduled_works+0xa1a/0x14c0
[  978.830588][    C1]  process_scheduled_works+0xa88/0x14c0
[  978.836265][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  978.842261][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.847893][    C1]  ? assign_work+0x3cf/0x5d0
[  978.852490][    C1]  worker_thread+0xa47/0xfb0
[  978.857116][    C1]  kthread+0x38b/0x480
[  978.861193][    C1]  ? __pfx_worker_thread+0x10/0x10
[  978.866301][    C1]  ? __pfx_kthread+0x10/0x10
[  978.870901][    C1]  ret_from_fork+0x514/0xb70
[  978.875588][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  978.880711][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  978.886341][    C1]  ? __switch_to+0xc89/0x1420
[  978.891038][    C1]  ? __pfx_kthread+0x10/0x10
[  978.895649][    C1]  ret_from_fork_asm+0x1a/0x30
[  978.900443][    C1]  </TASK>