last executing test programs:

2m54.529654726s ago: executing program 1 (id=10):
r0 = syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x10}}, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain)
sendmsg$nl_generic(r0, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080))
syz_emit_ethernet(0x2a, 0x0, 0x0)
getpid()
r3 = dup(0xffffffffffffffff)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000100)={'aio_aio12_8\x00', [0x100, 0x12, 0xd0, 0x2, 0x2, 0x100, 0x3, 0x7f, 0x5, 0xb, 0x2, 0x7, 0xffffffff, 0x401, 0x10001, 0x1, 0x9, 0xe, 0xfe5, 0x403, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20003, 0x9]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x48043)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)

2m52.987972188s ago: executing program 1 (id=12):
r0 = syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x10}}, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain)
sendmsg$nl_generic(r0, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080))
syz_emit_ethernet(0x2a, 0x0, 0x0)
getpid()
dup(0xffffffffffffffff)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000100)={'aio_aio12_8\x00', [0x100, 0x12, 0xd0, 0x2, 0x2, 0x100, 0x3, 0x7f, 0x5, 0xb, 0x2, 0x7, 0xffffffff, 0x401, 0x10001, 0x1, 0x9, 0xe, 0xfe5, 0x403, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20003, 0x9]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, &(0x7f0000000280), {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x4, 0x9, 'snmp_trap\x00', {0x2}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'team_slave_0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x12}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x6, 0x35d0, 0xfffffffc, 0x400, '\x00', 'syz0\x00', {0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x48043)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)

2m50.515404115s ago: executing program 1 (id=15):
r0 = getpid()
syz_pidfd_open(r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
renameat2(r1, 0x0, r1, &(0x7f0000000200)='.\x02\x00', 0x4)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4024015}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r3)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900080000", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x2048851}, 0x4800)

2m49.320806696s ago: executing program 1 (id=17):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"})
syz_emit_vhci(0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59})
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f0000000040))

2m44.31683281s ago: executing program 1 (id=18):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x60081, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x8)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8)
sendto$inet6(r3, 0x0, 0x0, 0x4048895, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @mcast1, 0x401}, 0x1c)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x8)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x880)
syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x40040)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

2m28.111818166s ago: executing program 1 (id=35):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x1, 0x0)
syz_open_dev$video(0x0, 0x8, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10)
r1 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
sendmsg$nl_route(r3, 0x0, 0x4000000)
r4 = socket$key(0xf, 0x3, 0x2)
fcntl$getflags(r4, 0x40a)
ioctl$XFS_IOC_DIOINFO(r4, 0x800c581e, &(0x7f0000000040))
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)

2m12.276437331s ago: executing program 32 (id=35):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x1, 0x0)
syz_open_dev$video(0x0, 0x8, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10)
r1 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
sendmsg$nl_route(r3, 0x0, 0x4000000)
r4 = socket$key(0xf, 0x3, 0x2)
fcntl$getflags(r4, 0x40a)
ioctl$XFS_IOC_DIOINFO(r4, 0x800c581e, &(0x7f0000000040))
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)

1m32.29822641s ago: executing program 4 (id=111):
mount$overlay(0x0, 0x0, 0x0, 0xc008, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$vcs(0xffffffffffffff9c, 0x0, 0xa100, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00')
lseek(r3, 0x2000, 0x0)

1m31.261653551s ago: executing program 4 (id=113):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071124c000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x3}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x2c}, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000007880)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r6=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118)

1m29.537976372s ago: executing program 4 (id=115):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
fsopen(&(0x7f00000001c0)='bdev\x00', 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
io_uring_setup(0x1b7b, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='16', 0x2)
syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)

1m26.921858668s ago: executing program 4 (id=119):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x1, 0x0)
syz_open_dev$video(0x0, 0x8, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10)
r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
sendmsg$nl_route(r4, 0x0, 0x4000000)
r5 = socket$key(0xf, 0x3, 0x2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x6})
ioctl$XFS_IOC_DIOINFO(r5, 0x800c581e, &(0x7f0000000040))
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x2000004, {{0xa, 0x4e22, 0x6f0, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x8, @empty, 0x492}}}, 0x108)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)

1m17.426710543s ago: executing program 4 (id=137):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000040)={[{}]})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a36eefec4910700004f78d4c1a0731cccf7"], 0x1c}}, 0x800)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r6, 0x0, 0x500}, 0x38)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f00000000c0)=0x1b, 0x4)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005e00019eb17738540600000000000000", @ANYRES32=0x0, @ANYBLOB="87"], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0)
memfd_create(0x0, 0x1)
mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r7, &(0x7f0000000500)='0123:abcd', 0x9)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

1m14.944917145s ago: executing program 4 (id=141):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x40000}], 0x1, 0xc0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd", 0x5c}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528", 0x78}, {&(0x7f0000000440)}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

59.064043829s ago: executing program 33 (id=141):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x40000}], 0x1, 0xc0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd", 0x5c}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528", 0x78}, {&(0x7f0000000440)}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

26.974480067s ago: executing program 5 (id=207):
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, 0x0, 0x0}, 0x1c)
recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
read$FUSE(r3, &(0x7f0000003380)={0x2020}, 0x2020)
close(0x3)
openat$nvram(0xffffff9c, &(0x7f0000000100), 0x40, 0x0)

25.079103565s ago: executing program 5 (id=209):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa6df, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
mknod(&(0x7f0000000100)='./file0\x00', 0x8000, 0xd02)
sync()
acct(&(0x7f0000000000)='./bus\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[], 0x2f0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40c5)

24.828296742s ago: executing program 3 (id=211):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x1, 0x0)
syz_open_dev$video(0x0, 0x8, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10)
r1 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000040))
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)

22.638438382s ago: executing program 5 (id=213):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x14, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071124c000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x3}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x2c}, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000007880)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r6=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118)

17.95032497s ago: executing program 0 (id=219):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000040)={[{}]})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a36eefec4910700004f78d4c1a0731cccf7"], 0x1c}}, 0x800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r4, 0x0, 0x500}, 0x38)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000000c0)=0x1b, 0x4)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005e00019eb17738540600000000000000", @ANYRES32=0x0, @ANYBLOB="87"], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0)
memfd_create(0x0, 0x1)
mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r5, &(0x7f0000000500)='0123:abcd', 0x9)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

15.58148491s ago: executing program 3 (id=220):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x14, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071124c000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x3}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x2c}, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000007880)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r6=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118)

15.513274574s ago: executing program 0 (id=222):
setns(0xc9, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
socket$inet6(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x80002, 0x4)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa1798b1747472e26, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1f0, 0x288, 0x158, 0x0, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
close(r0)

14.224651613s ago: executing program 2 (id=223):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x80000)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000611810000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x58bdcccb)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4)
connect$unix(r1, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x6ddd89916b0467f7)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)

14.1255549s ago: executing program 5 (id=224):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x1, 0x0)
syz_open_dev$video(0x0, 0x8, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10)
r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
fcntl$getflags(r5, 0x40a)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x6})
ioctl$XFS_IOC_DIOINFO(r5, 0x800c581e, &(0x7f0000000040))
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x2000004, {{0xa, 0x4e22, 0x6f0, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x8, @empty, 0x492}}}, 0x108)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)

13.620305402s ago: executing program 2 (id=225):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1d003300d00009000802110000"], 0x44}}, 0x0)

12.901870021s ago: executing program 2 (id=226):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "48646f28cdaf44df819deb26c008fd78c6b135c07633d7454ae3864a972a8e0672f12e5c063f9643eab677b240fa26a1d9b9f033c13195e8b6efc79ea04aae27", 0x20}, 0x48, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r2, 0x8000000000000000)
r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r2)
keyctl$negate(0xd, r3, 0x0, r2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000540)=[{0x0}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff}, 0x1c, &(0x7f0000000480)=[{0x0}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8)
close(r4)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40)
ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000400))
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setattr(0x0, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
r7 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r8 = fcntl$dupfd(r7, 0x0, r7)
write$binfmt_script(r8, 0x0, 0x0)
write$binfmt_script(r8, &(0x7f0000001b00), 0xfffffd9d)

9.784909588s ago: executing program 0 (id=227):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x14, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x3}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x2c}, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r4, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118)

9.733911749s ago: executing program 3 (id=228):
setns(0xc9, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
socket$inet6(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x80002, 0x4)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa1798b1747472e26, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1f0, 0x288, 0x158, 0x0, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
close(r0)

8.444525661s ago: executing program 3 (id=229):
setns(0xc9, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
socket$inet6(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x80002, 0x4)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000580)=@urb_type_iso={0x0, {0xc, 0x1}, 0x80, 0x80, 0x0, 0x0, 0x800, 0x9, 0xe, 0xffff0000, 0x7fff, &(0x7f0000000540)="8543708a62ac599adcfb826ce2e1c99e5a34dfb04f91e6f2e7d1", [{0x0, 0x51a6, 0xb6}, {0x6, 0xdbd, 0x2}, {0x7ff, 0xfffffffd, 0x250bc75a}, {0x2, 0x9, 0x80000000}, {0x7ccf, 0x5, 0x8}, {0x1ff, 0x3, 0xffffffa8}, {0x0, 0x1, 0x5}, {0x1, 0x8, 0x3}, {0x2, 0x8, 0x4}, {0xffff, 0x8, 0x59b}, {0xdcae, 0x3, 0x6}, {0x941, 0x30, 0xfffffffd}, {0x400, 0x5, 0x2}, {0x4, 0xffffffff, 0x2}]})
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa1798b1747472e26, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1f0, 0x288, 0x158, 0x0, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
close(r0)

6.907118184s ago: executing program 3 (id=230):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x1, 0x0)
syz_open_dev$video(0x0, 0x8, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10)
r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
sendmsg$nl_route(r4, 0x0, 0x4000000)
fcntl$getflags(0xffffffffffffffff, 0x40a)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x6})
ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000040))
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x2000004, {{0xa, 0x4e22, 0x6f0, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x8, @empty, 0x492}}}, 0x108)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)

6.876166077s ago: executing program 0 (id=231):
syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090268"], 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000140)={0x7, 0x0, 0x6, 0x1000000002, 0x8000000, 0x80000000})

5.339649635s ago: executing program 5 (id=232):
setns(0xc9, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
socket$inet6(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x80002, 0x4)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000580)=@urb_type_iso={0x0, {0xc, 0x1}, 0x80, 0x80, 0x0, 0x0, 0x800, 0x9, 0xe, 0xffff0000, 0x7fff, &(0x7f0000000540)="8543708a62ac599adcfb826ce2e1c99e5a34dfb04f91e6f2e7d1", [{0x0, 0x51a6, 0xb6}, {0x6, 0xdbd, 0x2}, {0x7ff, 0xfffffffd, 0x250bc75a}, {0x2, 0x9, 0x80000000}, {0x7ccf, 0x5, 0x8}, {0x1ff, 0x3, 0xffffffa8}, {0x0, 0x1, 0x5}, {0x1, 0x8, 0x3}, {0x2, 0x8, 0x4}, {0xffff, 0x8, 0x59b}, {0xdcae, 0x3, 0x6}, {0x941, 0x30, 0xfffffffd}, {0x400, 0x5, 0x2}, {0x4, 0xffffffff, 0x2}]})
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa1798b1747472e26, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1f0, 0x288, 0x158, 0x0, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
close(r0)

4.0184586s ago: executing program 5 (id=233):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x1, 0x0)
syz_open_dev$video(0x0, 0x8, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10)
r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
fcntl$getflags(r5, 0x40a)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x6})
ioctl$XFS_IOC_DIOINFO(r5, 0x800c581e, &(0x7f0000000040))
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x2000004, {{0xa, 0x4e22, 0x6f0, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x8, @empty, 0x492}}}, 0x108)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)

3.744585408s ago: executing program 2 (id=234):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mount(0x0, &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
openat2(r1, &(0x7f0000000040)='./config/usb_gadget/g1\x00', 0x0, 0x0)
write(r1, &(0x7f0000001600)='dummy_udc.', 0xa)
r2 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0)
read(r2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff02000000000000000000"], 0x0)

3.603805457s ago: executing program 0 (id=235):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x80000)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000611810000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x58bdcccb)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4)
connect$unix(r1, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x6ddd89916b0467f7)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)

2.702054349s ago: executing program 0 (id=236):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x60081, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0x8)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4048895, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @mcast1, 0x401}, 0x1c)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x8)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x880)
sendfile(r4, r1, 0x0, 0x7f03)
syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x40040)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

2.650433s ago: executing program 2 (id=237):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
mount(0x0, &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff)
openat2(r1, &(0x7f0000000040)='./config/usb_gadget/g1\x00', 0x0, 0x0)
write(r1, &(0x7f0000001600)='dummy_udc.0', 0xb)
r2 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0)
read(r2, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff02000000000000000000"], 0x0)

395.596148ms ago: executing program 2 (id=238):
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}})
fsopen(&(0x7f00000001c0)='bdev\x00', 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x48040)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='16', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0)
close(r4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)

0s ago: executing program 3 (id=239):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
chdir(&(0x7f0000000940)='./file1\x00')
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf2)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380), &(0x7f0000000440), 0x2, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="de0000000001000000000013730000a10000001100000018010000646c6c2500000000002020207b1af8ff00ffffffb702000008000000b70300000000000085000000b0000000950000000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="e4010000", @ANYRES16, @ANYBLOB="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"], 0x1e4}}, 0x4)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts.
[   94.702949][ T5604] cgroup: Unknown subsys name 'net'
[   94.831165][ T5604] cgroup: Unknown subsys name 'cpuset'
[   94.841054][ T5604] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   96.611832][ T5604] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   97.421224][   T25] cfg80211: failed to load regulatory.db
[   99.362575][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   99.364157][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   99.372105][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   99.388218][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   99.396221][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   99.403945][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   99.404193][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   99.423331][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   99.429700][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   99.433845][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   99.438660][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   99.448970][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   99.461225][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   99.464649][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   99.475418][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   99.476773][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   99.483140][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   99.489957][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   99.506221][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   99.507848][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   99.514696][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   99.522403][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   99.538217][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   99.539387][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   99.546966][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   99.554098][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   99.568475][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   99.569495][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   99.575997][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   99.582688][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  101.586160][ T5624] Bluetooth: hci4: command tx timeout
[  101.658379][ T5630] Bluetooth: hci2: command tx timeout
[  101.664338][   T50] Bluetooth: hci5: command tx timeout
[  101.670062][ T5639] Bluetooth: hci1: command tx timeout
[  101.676266][ T4934] Bluetooth: hci0: command tx timeout
[  101.683751][ T5624] Bluetooth: hci3: command tx timeout
[  102.250595][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.258398][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.266354][ T5619] bridge_slave_0: entered allmulticast mode
[  102.277550][ T5619] bridge_slave_0: entered promiscuous mode
[  102.335383][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.342647][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.350017][ T5619] bridge_slave_1: entered allmulticast mode
[  102.357719][ T5619] bridge_slave_1: entered promiscuous mode
[  102.567437][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.628578][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.685706][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.692971][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.700622][ T5623] bridge_slave_0: entered allmulticast mode
[  102.708558][ T5623] bridge_slave_0: entered promiscuous mode
[  102.745356][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.752564][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.760097][ T5620] bridge_slave_0: entered allmulticast mode
[  102.768150][ T5620] bridge_slave_0: entered promiscuous mode
[  102.797949][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.805248][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.812707][ T5623] bridge_slave_1: entered allmulticast mode
[  102.821009][ T5623] bridge_slave_1: entered promiscuous mode
[  102.857347][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.864660][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.872007][ T5620] bridge_slave_1: entered allmulticast mode
[  102.879914][ T5620] bridge_slave_1: entered promiscuous mode
[  102.899829][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.907035][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.914623][ T5621] bridge_slave_0: entered allmulticast mode
[  102.923280][ T5621] bridge_slave_0: entered promiscuous mode
[  102.946798][ T5619] team0: Port device team_slave_0 added
[  102.952632][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.959932][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.967453][ T5622] bridge_slave_0: entered allmulticast mode
[  102.975484][ T5622] bridge_slave_0: entered promiscuous mode
[  103.009692][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.016983][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.024219][ T5621] bridge_slave_1: entered allmulticast mode
[  103.032404][ T5621] bridge_slave_1: entered promiscuous mode
[  103.054835][ T5619] team0: Port device team_slave_1 added
[  103.061138][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.068543][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.075911][ T5622] bridge_slave_1: entered allmulticast mode
[  103.083832][ T5622] bridge_slave_1: entered promiscuous mode
[  103.106497][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.113817][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.121178][ T5618] bridge_slave_0: entered allmulticast mode
[  103.129376][ T5618] bridge_slave_0: entered promiscuous mode
[  103.155545][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.195294][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.204813][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.212720][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.220139][ T5618] bridge_slave_1: entered allmulticast mode
[  103.228107][ T5618] bridge_slave_1: entered promiscuous mode
[  103.266081][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.306353][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.332287][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.356811][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.363900][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  103.390096][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.407007][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.434411][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.448548][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.471896][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.478937][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  103.505697][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.520086][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.558992][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.586575][ T5623] team0: Port device team_slave_0 added
[  103.620445][ T5620] team0: Port device team_slave_0 added
[  103.655437][ T5624] Bluetooth: hci4: command tx timeout
[  103.660922][ T5623] team0: Port device team_slave_1 added
[  103.683479][ T5622] team0: Port device team_slave_0 added
[  103.692192][ T5620] team0: Port device team_slave_1 added
[  103.713685][ T5621] team0: Port device team_slave_0 added
[  103.736543][ T5624] Bluetooth: hci3: command tx timeout
[  103.742334][ T5639] Bluetooth: hci1: command tx timeout
[  103.747837][ T4934] Bluetooth: hci0: command tx timeout
[  103.754115][ T5630] Bluetooth: hci2: command tx timeout
[  103.755023][   T50] Bluetooth: hci5: command tx timeout
[  103.761768][ T5622] team0: Port device team_slave_1 added
[  103.801200][ T5618] team0: Port device team_slave_0 added
[  103.809833][ T5621] team0: Port device team_slave_1 added
[  103.828759][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.836068][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  103.862806][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.923319][ T5618] team0: Port device team_slave_1 added
[  103.946332][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.953332][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  103.979927][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.000476][ T5619] hsr_slave_0: entered promiscuous mode
[  104.007559][ T5619] hsr_slave_1: entered promiscuous mode
[  104.016310][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.023274][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.049255][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.061541][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.068961][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.095937][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.145981][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.153018][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.179016][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.191161][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.198202][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.224730][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.261695][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.268924][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.295751][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.364775][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.371979][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.398673][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.410996][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.418501][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.444541][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.504748][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.512092][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.539901][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.563101][ T5623] hsr_slave_0: entered promiscuous mode
[  104.569965][ T5623] hsr_slave_1: entered promiscuous mode
[  104.577293][ T5623] debugfs: 'hsr0' already exists in 'hsr'
[  104.583071][ T5623] Cannot create hsr debugfs directory
[  104.726131][ T5620] hsr_slave_0: entered promiscuous mode
[  104.732914][ T5620] hsr_slave_1: entered promiscuous mode
[  104.739885][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[  104.745839][ T5620] Cannot create hsr debugfs directory
[  104.768478][ T5622] hsr_slave_0: entered promiscuous mode
[  104.776088][ T5622] hsr_slave_1: entered promiscuous mode
[  104.782678][ T5622] debugfs: 'hsr0' already exists in 'hsr'
[  104.788718][ T5622] Cannot create hsr debugfs directory
[  104.801937][ T5621] hsr_slave_0: entered promiscuous mode
[  104.808798][ T5621] hsr_slave_1: entered promiscuous mode
[  104.815399][ T5621] debugfs: 'hsr0' already exists in 'hsr'
[  104.821154][ T5621] Cannot create hsr debugfs directory
[  104.966570][ T5618] hsr_slave_0: entered promiscuous mode
[  104.973296][ T5618] hsr_slave_1: entered promiscuous mode
[  104.979912][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[  104.985697][ T5618] Cannot create hsr debugfs directory
[  105.567046][ T5619] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  105.582928][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  105.591564][ T5619] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  105.604073][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  105.612706][ T5619] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  105.624712][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  105.679762][ T5619] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  105.691907][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  105.735100][   T50] Bluetooth: hci4: command tx timeout
[  105.815132][   T50] Bluetooth: hci5: command tx timeout
[  105.821212][ T5624] Bluetooth: hci3: command tx timeout
[  105.821242][ T5630] Bluetooth: hci2: command tx timeout
[  105.826814][ T5624] Bluetooth: hci0: command tx timeout
[  105.832223][ T4934] Bluetooth: hci1: command tx timeout
[  105.868185][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  105.883855][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  105.900293][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  105.913380][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  105.922716][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  105.934434][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  105.953527][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  105.968084][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  106.093665][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  106.107814][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  106.118033][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  106.128716][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  106.137145][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  106.148852][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  106.158439][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  106.168839][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  106.208944][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.311903][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[  106.331533][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  106.342308][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  106.351238][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  106.362892][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  106.371512][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  106.382189][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  106.390562][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  106.400633][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  106.465309][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.473034][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.530696][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.537902][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.583366][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  106.595504][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  106.603471][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  106.616024][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  106.624247][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  106.635278][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  106.657785][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  106.670012][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  106.753733][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.852103][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  106.863051][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  106.888933][ T5623] 8021q: adding VLAN 0 to HW filter on device team0
[  106.898057][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  106.910395][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  106.919104][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  106.929068][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  106.949558][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  106.960423][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  107.004461][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.011668][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.061474][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.068832][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.111130][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.180658][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.237296][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[  107.299597][   T98] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.306943][   T98] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.345355][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[  107.389016][   T98] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.396275][   T98] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.424014][   T98] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.431231][   T98] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.470555][   T98] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.477793][   T98] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.579894][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.707759][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[  107.816653][ T5624] Bluetooth: hci4: command tx timeout
[  107.817102][  T188] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.829296][  T188] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.858484][  T188] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.865734][  T188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.896253][   T50] Bluetooth: hci5: command tx timeout
[  107.901779][ T5624] Bluetooth: hci0: command tx timeout
[  107.908790][   T50] Bluetooth: hci2: command tx timeout
[  107.908990][ T5639] Bluetooth: hci3: command tx timeout
[  107.921274][ T5630] Bluetooth: hci1: command tx timeout
[  107.997218][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.142188][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.192096][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[  108.279461][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.286733][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.354617][ T5687] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.361858][ T5687] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.147869][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.462465][ T5623] veth0_vlan: entered promiscuous mode
[  109.560284][ T5619] veth0_vlan: entered promiscuous mode
[  109.583736][ T5623] veth1_vlan: entered promiscuous mode
[  109.691708][ T5619] veth1_vlan: entered promiscuous mode
[  109.750746][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.807076][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.904734][ T5623] veth0_macvtap: entered promiscuous mode
[  109.992125][ T5623] veth1_macvtap: entered promiscuous mode
[  110.024502][ T5619] veth0_macvtap: entered promiscuous mode
[  110.110680][ T5619] veth1_macvtap: entered promiscuous mode
[  110.174732][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.220178][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.285752][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.316360][ T5620] veth0_vlan: entered promiscuous mode
[  110.342846][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.438737][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.473743][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.483233][ T5620] veth1_vlan: entered promiscuous mode
[  110.527211][ T1307] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.636561][   T72] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.677742][   T20] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.701119][   T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.765560][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.779148][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.793008][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.846188][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.854276][ T5622] veth0_vlan: entered promiscuous mode
[  110.856187][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.875509][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.884351][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.906037][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.919644][ T5620] veth0_macvtap: entered promiscuous mode
[  110.952434][ T5622] veth1_vlan: entered promiscuous mode
[  110.994223][ T5804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.994736][ T5620] veth1_macvtap: entered promiscuous mode
[  111.006872][ T5804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.061140][ T5618] veth0_vlan: entered promiscuous mode
[  111.070380][ T5621] veth0_vlan: entered promiscuous mode
[  111.123481][ T5623] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  111.129951][ T5804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.150401][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.151758][ T5804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.182340][ T5621] veth1_vlan: entered promiscuous mode
[  111.208717][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.229716][ T5618] veth1_vlan: entered promiscuous mode
[  111.415658][ T1307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.447026][ T5622] veth0_macvtap: entered promiscuous mode
[  111.471678][ T5856] loop2: detected capacity change from 0 to 256
[  111.499273][ T5622] veth1_macvtap: entered promiscuous mode
[  111.509297][ T5856] exfat: Deprecated parameter 'utf8'
[  111.519603][ T5856] exfat: Deprecated parameter 'namecase'
[  111.597041][ T5621] veth0_macvtap: entered promiscuous mode
[  111.608598][ T5856] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x01ce8137, utbl_chksum : 0xe619d30d)
[  111.643017][ T5618] veth0_macvtap: entered promiscuous mode
[  111.673859][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.711957][ T5621] veth1_macvtap: entered promiscuous mode
[  111.736006][ T5618] veth1_macvtap: entered promiscuous mode
[  111.758928][   T20] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.772496][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.775834][   T20] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.906091][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.112372][ T5865] Device name cannot be null; rc = [-22]
[  112.621476][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.719622][  T188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.855807][  T188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.938651][   T20] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.025664][   T20] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.045345][  T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.075045][  T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.154164][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.187820][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.242925][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.352499][  T188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.421374][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.795405][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  114.849199][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.909129][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.005313][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.380710][    T9] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024
[  115.432071][    T9] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9
[  115.455618][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.465073][    T9] usb 6-1: config 1 interface 0 has no altsetting 0
[  115.504321][    T9] usb 6-1: string descriptor 0 read error: -22
[  115.514403][    T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  115.539800][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.053666][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.060666][ T5804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.122446][ T5804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.337006][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.345042][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.352127][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.503915][  T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.515348][ T5804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.519753][  T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.810240][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.833129][    T9] usbhid 6-1:1.0: can't add hid device: -32
[  116.869639][    T9] usbhid 6-1:1.0: probe with driver usbhid failed with error -32
[  117.833127][    T9] usb 6-1: USB disconnect, device number 2
[  118.399399][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.430963][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.754723][ T5896] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5623] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[5896]
[  118.855599][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.888955][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.959386][ T5898] =======================================================
[  118.959386][ T5898] WARNING: The mand mount option has been deprecated and
[  118.959386][ T5898]          and is ignored by this kernel. Remove the mand
[  118.959386][ T5898]          option from the mount to silence this warning.
[  118.959386][ T5898] =======================================================
[  119.085532][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.103859][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.149324][ T5901] syz.5.14 uses obsolete (PF_INET,SOCK_PACKET)
[  119.893071][ T5898] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14'.
[  121.424657][ T5916] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  121.439733][ T5916] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  121.457059][ T5916] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  121.506323][ T5916] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  121.587145][ T5916] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  127.021496][ T5946] Zero length message leads to an empty skb
[  128.783654][ T5961] Device name cannot be null; rc = [-22]
[  133.093179][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  133.330653][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  133.347624][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  134.364856][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  135.133187][    T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41
[  135.334101][    T9] usb 1-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2
[  135.380490][    T9] usb 1-1: Product: syz
[  135.414142][    T9] usb 1-1: SerialNumber: syz
[  136.273353][    T9] usb 1-1: config 0 descriptor??
[  136.956674][ T6007] netlink: 132 bytes leftover after parsing attributes in process `syz.3.30'.
[  136.999425][    T9] usb 1-1: can't set config #0, error -71
[  137.046924][    T9] usb 1-1: USB disconnect, device number 2
[  137.333522][ T6019] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33'.
[  147.056702][ T6070] xt_TPROXY: Can be used only with -p tcp or -p udp
[  149.445314][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  152.561177][ T6098] netlink: 132 bytes leftover after parsing attributes in process `syz.2.48'.
[  153.249260][ T6117] Device name cannot be null; rc = [-22]
[  155.155159][ T6118] Device name cannot be null; rc = [-22]
[  158.607235][ T6137] loop3: detected capacity change from 0 to 256
[  158.684789][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  158.700055][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  158.707893][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  158.720066][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  158.730844][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  158.742011][ T6137] exfat: Deprecated parameter 'utf8'
[  158.816870][ T6137] exfat: Deprecated parameter 'namecase'
[  159.512919][ T6137] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x01ce8137, utbl_chksum : 0xe619d30d)
[  160.795089][ T5630] Bluetooth: hci6: command tx timeout
[  162.273537][ T6157] siw: device registration error -23
[  162.855092][ T5630] Bluetooth: hci6: command tx timeout
[  164.022024][ T6180] loop0: detected capacity change from 0 to 1024
[  164.158672][ T5922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.274462][ T6180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.341221][   T31] audit: type=1804 audit(1785661557.684:2): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.65" name="/newroot/11/file1/bus" dev="loop0" ino=18 res=1 errno=0
[  164.934999][ T5630] Bluetooth: hci6: command tx timeout
[  164.995920][ T5922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.687267][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.767912][ T5922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.387775][ T5922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.070720][ T5630] Bluetooth: hci6: command tx timeout
[  167.333960][ T6204] loop0: detected capacity change from 0 to 8192
[  167.426713][ T6204] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  169.561008][ T6222] xt_TPROXY: Can be used only with -p tcp or -p udp
[  170.614635][ T6225] xt_TPROXY: Can be used only with -p tcp or -p udp
[  170.934046][ T5922] bridge_slave_1: left allmulticast mode
[  171.007123][ T5922] bridge_slave_1: left promiscuous mode
[  171.061761][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.218338][ T5922] bridge_slave_0: left allmulticast mode
[  172.242949][ T5922] bridge_slave_0: left promiscuous mode
[  172.291261][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.496916][ T6234] Device name cannot be null; rc = [-22]
[  174.554438][ T6245] misc userio: Invalid payload size
[  174.697862][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  174.898527][ T6248] misc userio: The device must be registered before sending interrupts
[  175.309849][ T6250] loop5: detected capacity change from 0 to 1024
[  175.413898][ T5922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.470823][ T6250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.577259][ T5922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.595253][   T31] audit: type=1804 audit(1785661568.944:3): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.79" name="/newroot/13/file1/bus" dev="loop5" ino=18 res=1 errno=0
[  175.630948][ T5922] bond0 (unregistering): Released all slaves
[  176.781997][ T5619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.440655][ T6275] loop0: detected capacity change from 0 to 8192
[  178.451701][ T6275] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  180.842623][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1
[  182.353805][ T6299] loop5: detected capacity change from 0 to 1024
[  184.121433][   T31] audit: type=1800 audit(1785661577.474:4): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.89" name="file0" dev="loop5" ino=18 res=0 errno=0
[  186.643057][ T5922] hsr_slave_0: left promiscuous mode
[  186.679028][ T5922] hsr_slave_1: left promiscuous mode
[  186.703950][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.739519][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.780313][ T6337] loop4: detected capacity change from 0 to 1024
[  186.833742][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.867860][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.954642][ T6337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.021096][ T5922] veth1_macvtap: left promiscuous mode
[  187.068600][ T5922] veth0_macvtap: left promiscuous mode
[  187.100753][ T5922] veth1_vlan: left promiscuous mode
[  187.131538][ T5922] veth0_vlan: left promiscuous mode
[  187.189153][ T6337] EXT4-fs (loop4): shut down requested (2)
[  187.609093][ T6347] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5622] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[6347]
[  188.442733][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.019727][ T6358] xt_TPROXY: Can be used only with -p tcp or -p udp
[  192.995689][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'.
[  193.832313][ T5922] team0 (unregistering): Port device team_slave_1 removed
[  193.858042][ T5922] team0 (unregistering): Port device team_slave_0 removed
[  194.631454][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2
[  194.697418][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  194.707493][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  194.857934][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.930485][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.954656][ T6138] bridge_slave_0: entered allmulticast mode
[  195.004799][ T6138] bridge_slave_0: entered promiscuous mode
[  195.080055][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.169305][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.290424][ T6138] bridge_slave_1: entered allmulticast mode
[  195.518088][ T6138] bridge_slave_1: entered promiscuous mode
[  197.143736][ T6404] loop0: detected capacity change from 0 to 1024
[  197.490867][ T6138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.574822][ T6138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.592521][ T6404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.830453][ T6404] EXT4-fs (loop0): shut down requested (2)
[  198.191154][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.369190][ T6138] team0: Port device team_slave_0 added
[  198.452543][ T6138] team0: Port device team_slave_1 added
[  199.923902][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.967591][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  200.094169][ T6138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.612589][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.645199][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  200.789187][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  201.193944][ T6138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.785414][ T6447] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5623] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[6447]
[  202.740484][ T6138] hsr_slave_0: entered promiscuous mode
[  202.786967][ T6138] hsr_slave_1: entered promiscuous mode
[  202.822091][ T6138] debugfs: 'hsr0' already exists in 'hsr'
[  202.857605][ T6138] Cannot create hsr debugfs directory
[  204.282957][ T6464] loop2: detected capacity change from 0 to 1024
[  205.807765][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3
[  207.311610][ T6138] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  207.428789][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  207.467351][ T6138] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  207.589787][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  207.761545][ T6138] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  209.098206][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  209.137391][ T6138] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  210.058466][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  210.752289][ T6138] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.848503][ T6138] 8021q: adding VLAN 0 to HW filter on device team0
[  212.035086][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.042350][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.291722][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.299017][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.863440][ T6539] loop5: detected capacity change from 0 to 8192
[  214.905728][ T6539] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  215.361136][ T6559] Device name cannot be null; rc = [-22]
[  218.175404][ T5888] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  218.388338][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4
[  218.414719][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  218.468324][ T5888] usb 3-1: config 0 has no interfaces?
[  218.478931][ T6586] netlink: 40 bytes leftover after parsing attributes in process `syz.3.146'.
[  218.520595][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  218.577928][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.625498][ T5888] usb 3-1: Product: syz
[  218.645019][ T5888] usb 3-1: Manufacturer: syz
[  218.670797][ T5888] usb 3-1: SerialNumber: syz
[  218.952845][ T5888] usb 3-1: config 0 descriptor??
[  219.135010][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  219.146339][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  219.154455][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  219.163542][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  219.173943][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  219.750048][ T5888] usb 3-1: USB disconnect, device number 2
[  221.014823][ T6613] Device name cannot be null; rc = [-22]
[  221.255271][ T5639] Bluetooth: hci1: command tx timeout
[  222.380311][ T5624] Bluetooth: hci2: command 0x0406 tx timeout
[  222.397574][ T5629] Bluetooth: hci3: command 0x0406 tx timeout
[  222.403732][ T5629] Bluetooth: hci5: command 0x0406 tx timeout
[  222.406666][ T5637] Bluetooth: hci4: command 0x0406 tx timeout
[  222.409853][ T5639] Bluetooth: hci0: command 0x0406 tx timeout
[  223.335106][ T5626] Bluetooth: hci1: command tx timeout
[  225.419779][ T5626] Bluetooth: hci1: command tx timeout
[  227.470188][ T6661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.159'.
[  227.495909][ T5626] Bluetooth: hci1: command tx timeout
[  227.861557][ T6119] bridge_slave_1: left allmulticast mode
[  227.901442][ T6119] bridge_slave_1: left promiscuous mode
[  227.928295][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.392450][ T6119] bridge_slave_0: left allmulticast mode
[  228.668989][ T6119] bridge_slave_0: left promiscuous mode
[  228.694055][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.311977][ T6679] loop3: detected capacity change from 0 to 8192
[  230.375632][ T6679] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  231.414047][ T6119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.507544][ T6119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.586761][ T6119] bond0 (unregistering): Released all slaves
[  231.790391][ T4934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  231.809034][ T4934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  231.821487][ T4934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  231.847713][ T4934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  231.870987][ T4934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  232.555107][ T6119] hsr_slave_0: left promiscuous mode
[  232.611544][ T6119] hsr_slave_1: left promiscuous mode
[  232.884845][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.973531][ T6711] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5618] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[6711]
[  233.515358][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  233.695948][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.976200][ T4934] Bluetooth: hci6: command tx timeout
[  234.934979][   T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  235.174333][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  235.206704][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  235.249114][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 166, setting to 64
[  235.288737][   T10] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  235.307666][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.324927][   T10] usb 1-1: Product: syz
[  235.330803][   T10] usb 1-1: Manufacturer: syz
[  235.340530][   T10] usb 1-1: SerialNumber: syz
[  235.389523][ T6716] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  235.431768][   T10] oti6858 1-1:1.0: oti6858 converter detected
[  235.506966][   T10] usb 1-1: oti6858 converter now attached to ttyUSB0
[  236.059231][ T4934] Bluetooth: hci6: command tx timeout
[  236.154760][ T6119] team0 (unregistering): Port device team_slave_1 removed
[  236.444560][ T6119] team0 (unregistering): Port device team_slave_0 removed
[  236.569059][ T5769] usb 1-1: USB disconnect, device number 3
[  236.569244][    C1] usb 1-1: oti6858_read_int_callback(): usb_submit_urb() failed with error -19
[  236.900685][ T5769] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  237.011868][ T5769] oti6858 1-1:1.0: device disconnected
[  237.162896][ T6735] netlink: 40 bytes leftover after parsing attributes in process `syz.2.173'.
[  237.620094][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5
[  238.135034][ T4934] Bluetooth: hci6: command tx timeout
[  240.215029][ T4934] Bluetooth: hci6: command tx timeout
[  240.322067][ T6742] hfs: unable to load iocharset "io#harset"
[  240.337672][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.385578][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.393127][ T6592] bridge_slave_0: entered allmulticast mode
[  240.401729][ T6592] bridge_slave_0: entered promiscuous mode
[  240.412115][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.419940][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.427322][ T6592] bridge_slave_1: entered allmulticast mode
[  240.436063][ T6592] bridge_slave_1: entered promiscuous mode
[  240.613267][ T6592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  240.718905][ T6592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.791824][ T6592] team0: Port device team_slave_0 added
[  242.911665][ T6592] team0: Port device team_slave_1 added
[  243.684236][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.713594][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.824176][ T6592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  244.141450][ T6119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.875358][ T5762] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  245.073110][ T5762] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  245.130551][ T5762] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41
[  245.167235][ T5762] usb 6-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2
[  245.222022][ T5762] usb 6-1: Product: syz
[  245.239152][ T5762] usb 6-1: SerialNumber: syz
[  245.843227][ T6770] loop3: detected capacity change from 0 to 8192
[  245.881516][ T5762] usb 6-1: config 0 descriptor??
[  245.919216][ T6770] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  245.920038][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.963205][ T5762] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  245.998446][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.027808][ T5762] usb 6-1: Detected SIO
[  246.048106][ T5762] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  246.109207][ T6592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.816381][    T9] usb 6-1: USB disconnect, device number 3
[  246.977482][ T6119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.978889][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  247.069753][    T9] ftdi_sio 6-1:0.0: device disconnected
[  247.322689][ T6119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.481298][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6
[  247.526768][ T6592] hsr_slave_0: entered promiscuous mode
[  247.550563][ T6592] hsr_slave_1: entered promiscuous mode
[  247.586306][ T6592] debugfs: 'hsr0' already exists in 'hsr'
[  247.611951][ T6592] Cannot create hsr debugfs directory
[  248.571755][ T6119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.195326][ T6802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.187'.
[  250.042238][ T6812] loop2: detected capacity change from 0 to 1024
[  250.220038][ T6812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.331288][   T31] audit: type=1804 audit(1785661643.684:5): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.184" name="/newroot/35/file1/bus" dev="loop2" ino=18 res=1 errno=0
[  250.353560][ T6119] bridge_slave_1: left allmulticast mode
[  250.387311][ T6119] bridge_slave_1: left promiscuous mode
[  250.390217][ T6812] EXT4-fs (loop2): shut down requested (2)
[  250.441000][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.523778][ T6119] bridge_slave_0: left allmulticast mode
[  250.556071][ T6119] bridge_slave_0: left promiscuous mode
[  250.580682][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.617797][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.677783][ T6119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.733296][ T6119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  251.811309][ T6119] bond0 (unregistering): Released all slaves
[  255.499617][ T6694] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.529940][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.582178][ T6694] bridge_slave_0: entered allmulticast mode
[  255.607253][ T6694] bridge_slave_0: entered promiscuous mode
[  255.684775][ T6119] hsr_slave_0: left promiscuous mode
[  255.716037][ T6119] hsr_slave_1: left promiscuous mode
[  255.739933][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.757390][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.773482][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.785297][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.867806][ T6119] veth1_macvtap: left promiscuous mode
[  255.898381][ T6119] veth0_macvtap: left promiscuous mode
[  255.910192][ T6119] veth1_vlan: left promiscuous mode
[  255.950792][ T6119] veth0_vlan: left promiscuous mode
[  256.174233][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  256.195272][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  256.963538][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'.
[  259.033696][ T6119] team0 (unregistering): Port device team_slave_1 removed
[  259.061905][ T6119] team0 (unregistering): Port device team_slave_0 removed
[  259.412091][ T6879] loop0: detected capacity change from 0 to 1024
[  259.498837][ T6879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.591812][   T31] audit: type=1804 audit(1785661652.944:6): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.201" name="/newroot/51/file1/bus" dev="loop0" ino=18 res=1 errno=0
[  259.662034][ T6879] EXT4-fs (loop0): shut down requested (2)
[  259.677735][ T6694] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.707941][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.735773][ T6694] bridge_slave_1: entered allmulticast mode
[  259.753866][ T6694] bridge_slave_1: entered promiscuous mode
[  259.845941][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.088098][ T6694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.197678][ T6694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.191045][ T6694] team0: Port device team_slave_0 added
[  261.276946][ T6694] team0: Port device team_slave_1 added
[  261.366793][ T6889] loop0: detected capacity change from 0 to 8192
[  261.619919][ T6889] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  261.708581][ T6900] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5619] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[6900]
[  262.526133][ T5798] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  262.939905][ T5798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  262.983525][ T5798] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41
[  263.030684][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2
[  263.349856][ T5798] usb 3-1: Product: syz
[  263.354374][ T5798] usb 3-1: SerialNumber: syz
[  263.771316][ T5798] usb 3-1: config 0 descriptor??
[  264.189282][ T5798] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  264.214183][ T6694] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.240108][ T5798] usb 3-1: Detected SIO
[  264.258741][ T6694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  264.291286][ T5798] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  264.389487][ T6694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.454598][ T6694] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.501821][ T6694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  264.569014][ T5888] usb 3-1: USB disconnect, device number 3
[  264.662449][ T6694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.663531][ T5888] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  264.859093][ T6919] Device name cannot be null; rc = [-22]
[  265.005522][ T5888] ftdi_sio 3-1:0.0: device disconnected
[  266.513125][ T6694] hsr_slave_0: entered promiscuous mode
[  266.524792][ T6694] hsr_slave_1: entered promiscuous mode
[  266.547533][ T6694] debugfs: 'hsr0' already exists in 'hsr'
[  266.684347][ T6694] Cannot create hsr debugfs directory
[  266.697244][ T6592] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  266.770887][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  266.828110][ T6592] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  266.928889][ T6931] loop2: detected capacity change from 0 to 1024
[  266.976746][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  267.024496][ T6592] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  267.060529][ T6931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.128650][   T31] audit: type=1804 audit(1785661660.474:7): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.212" name="/newroot/41/file1/bus" dev="loop2" ino=18 res=1 errno=0
[  267.149929][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  267.185274][ T6931] EXT4-fs (loop2): shut down requested (2)
[  267.217112][ T6592] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  267.291415][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  267.493100][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.014064][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'.
[  271.517404][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.664647][ T6973] Device name cannot be null; rc = [-22]
[  274.088198][ T6694] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  274.163193][ T6694] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  274.330336][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'.
[  274.707535][ T6694] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  274.804013][ T6694] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  274.852845][ T6694] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  274.975144][ T6694] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  275.030490][ T6694] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  275.102246][ T6694] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  275.131014][ T6592] 8021q: adding VLAN 0 to HW filter on device team0
[  275.258815][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.266070][ T5919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.423133][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.430375][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.226173][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'.
[  276.638954][ T6694] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.801713][ T6694] 8021q: adding VLAN 0 to HW filter on device team0
[  276.929854][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.937332][ T5809] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.073132][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.080568][ T5809] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.666877][ T7034] wlan0 speed is unknown, defaulting to 1000
[  278.674102][ T7034] wlan0 speed is unknown, defaulting to 1000
[  278.682442][ T7034] wlan0 speed is unknown, defaulting to 1000
[  278.689992][ T7034] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  278.704788][ T7034] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  278.721994][ T7034] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  278.743853][ T7034] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  279.295403][ T7035] xt_TPROXY: Can be used only with -p tcp or -p udp
[  279.337116][ T7034] wlan0 speed is unknown, defaulting to 1000
[  279.361210][ T7034] wlan0 speed is unknown, defaulting to 1000
[  279.386763][ T7034] wlan0 speed is unknown, defaulting to 1000
[  279.412474][ T7034] wlan0 speed is unknown, defaulting to 1000
[  279.436176][ T7034] wlan0 speed is unknown, defaulting to 1000
[  279.457880][ T7034] wlan0 speed is unknown, defaulting to 1000
[  279.595139][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  280.171388][ T7043] siw: device registration error -23
[  280.708006][ T7043] xt_TPROXY: Can be used only with -p tcp or -p udp
[  281.625293][ T7051] siw: device registration error -23
[  282.160669][ T7051] xt_TPROXY: Can be used only with -p tcp or -p udp
[  282.640603][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  282.662521][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  282.674127][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  282.686233][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  282.699192][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  283.164983][ T5888] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  283.628777][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  283.714751][ T5888] usb 1-1: config 0 has no interfaces?
[  283.750112][ T5888] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  283.837182][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.909690][ T5888] usb 1-1: Product: syz
[  283.931518][ T5888] usb 1-1: Manufacturer: syz
[  283.967102][ T5888] usb 1-1: SerialNumber: syz
[  284.013175][ T5888] usb 1-1: config 0 descriptor??
[  284.340795][ T5888] usb 1-1: USB disconnect, device number 4
[  284.545915][ T7082] siw: device registration error -23
[  285.064616][ T7082] xt_TPROXY: Can be used only with -p tcp or -p udp
[  285.089375][ T4934] Bluetooth: hci3: command tx timeout
[  285.987247][ T6694] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.174783][ T7092] UDC core: g1: couldn't find an available UDC or it's busy
[  287.175559][ T4934] Bluetooth: hci3: command tx timeout
[  288.333334][ T7052] wlan0 speed is unknown, defaulting to 1000
[  288.845027][ T5888] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  289.092503][ T5888] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.143368][ T5888] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  289.216291][ T5888] usb 1-1: Dual-Role OTG device on HNP port
[  289.265511][ T4934] Bluetooth: hci3: command tx timeout
[  289.277043][ T5888] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  289.289090][ T5809] bridge_slave_1: left allmulticast mode
[  289.311826][ T5809] bridge_slave_1: left promiscuous mode
[  289.338988][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.361235][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.470865][ T5809] bridge_slave_0: left allmulticast mode
[  289.565652][    C1] ------------[ cut here ]------------
[  289.571368][    C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
[  289.577986][    C1] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#1: syz-executor/5622
[  289.589052][    C1] Modules linked in:
[  289.593258][    C1] CPU: 1 UID: 0 PID: 5622 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  289.602894][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  289.612994][    C1] RIP: 0010:usb_ep_enable+0x3f8/0x490
[  289.618526][    C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 0a da 61 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 80 a1 b7 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 20 94 b7 8c
[  289.638270][    C1] RSP: 0018:ffffc90000a18a10 EFLAGS: 00010046
[  289.644601][    C1] RAX: dffffc0000000000 RBX: ffff888020b5c0e0 RCX: ffffffff8cb7d820
[  289.652786][    C1] RDX: 0000000000000081 RSI: ffffffff8cb7a180 RDI: ffffffff91306aa0
[  289.661237][    C1] RBP: 0000000000000081 R08: ffffffff8cb79460 R09: 0000000000000000
[  289.669431][    C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8cb79460
[  289.677428][    C1] R13: 0000000000000000 R14: ffff888020b5c0e0 R15: ffff88801314a920
[  289.685432][    C1] FS:  0000555580f98500(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000
[  289.694538][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  289.701290][    C1] CR2: 000020000023c030 CR3: 00000000579be000 CR4: 0000000000350ef0
[  289.709329][    C1] Call Trace:
[  289.712650][    C1]  <IRQ>
[  289.715559][    C1]  hidg_set_alt+0x190/0xa10
[  289.720223][    C1]  ? do_raw_spin_unlock+0x145/0x1e0
[  289.725684][    C1]  ? rcu_is_watching+0x12/0xc0
[  289.730523][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  289.736212][    C1]  composite_setup+0x2ccf/0x9290
[  289.741221][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  289.746947][    C1]  ? __pfx_composite_setup+0x10/0x10
[  289.752335][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  289.757786][    C1]  ? do_raw_spin_lock+0x128/0x260
[  289.762877][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  289.768328][    C1]  ? configfs_composite_setup+0xfb/0x130
[  289.774013][    C1]  configfs_composite_setup+0xfb/0x130
[  289.779541][    C1]  dummy_timer+0x2045/0x36f0
[  289.784206][    C1]  ? do_raw_spin_lock+0x128/0x260
[  289.789413][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  289.795100][    C1]  ? find_held_lock+0x2b/0x80
[  289.799928][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  289.805975][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  289.811682][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  289.817543][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  289.823226][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  289.828946][    C1]  ? __pfx_debug_object_deactivate+0x10/0x10
[  289.835082][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  289.840059][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  289.845764][    C1]  ? mark_held_locks+0x40/0x70
[  289.850698][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  289.856578][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  289.861604][    C1]  __hrtimer_run_queues+0x462/0x9c0
[  289.866911][    C1]  hrtimer_run_softirq+0x17d/0x2c0
[  289.872088][    C1]  handle_softirqs+0x1ea/0x9b0
[  289.877002][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  289.882340][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  289.888029][    C1]  ? _raw_spin_unlock+0x28/0x50
[  289.892921][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  289.898598][    C1]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  289.904299][    C1]  __irq_exit_rcu+0x162/0x210
[  289.909040][    C1]  irq_exit_rcu+0x9/0x30
[  289.913324][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  289.919010][    C1]  </IRQ>
[  289.921959][    C1]  <TASK>
[  289.924906][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  289.930955][    C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0
[  289.937529][    C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 d0 75 e7 09 e8 8b ad 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84
[  289.957185][    C1] RSP: 0018:ffffc900039876a8 EFLAGS: 00000202
[  289.963302][    C1] RAX: 000000000009907f RBX: ffff888023a81f00 RCX: 0000000000000040
[  289.971391][    C1] RDX: 0000000000000000 RSI: ffffffff8e1ac58a RDI: ffff888023a835f8
[  289.979748][    C1] RBP: ffffc90003987700 R08: 0000000000000001 R09: 0000000000000000
[  289.987769][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801ee95d00
[  289.995785][    C1] R13: 0000000000000001 R14: ffffffff9122e684 R15: ffff8880b853b600
[  290.003871][    C1]  ? finish_task_switch.isra.0+0x2c5/0x10c0
[  290.009883][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.015948][    C1]  __schedule+0x1264/0x6730
[  290.020552][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.026305][    C1]  ? __pfx___schedule+0x10/0x10
[  290.031250][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.036991][    C1]  ? mark_held_locks+0x40/0x70
[  290.041833][    C1]  preempt_schedule_irq+0x50/0x90
[  290.046924][    C1]  irqentry_exit+0x205/0xa00
[  290.051572][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.057275][    C1]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  290.062920][    C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x8/0x20
[  290.069244][    C1] Code: 00 00 00 e9 ea fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <48> 89 f2 48 89 fe bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00
[  290.088903][    C1] RSP: 0018:ffffc90003987988 EFLAGS: 00000293
[  290.095044][    C1] RAX: 0000000000000000 RBX: 0000000000000004 RCX: ffffffff89f6440f
[  290.103357][    C1] RDX: ffff888023a81f00 RSI: 00007ffe19ac0660 RDI: 00007ffe19ac065c
[  290.111492][    C1] RBP: 00007ffe19ac065c R08: 0000000000000006 R09: 00007ffe19ac0660
[  290.119537][    C1] R10: 00007ffffffff000 R11: 0000000000000000 R12: 00007ffe19ac0660
[  290.127555][    C1] R13: 00007ffffffff000 R14: 0000000000000000 R15: 0000000000000310
[  290.135625][    C1]  ? xt_data_to_user+0xdf/0x180
[  290.140728][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.146525][    C1]  xt_data_to_user+0xdf/0x180
[  290.151496][    C1]  xt_target_to_user+0x16d/0x210
[  290.156620][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.162321][    C1]  ? _copy_to_user+0xaf/0xd0
[  290.167212][    C1]  do_ipt_get_ctl+0x9f2/0xbf0
[  290.172050][    C1]  ? __pfx_do_ipt_get_ctl+0x10/0x10
[  290.177399][    C1]  ? __lock_acquire+0x49f/0x1a40
[  290.182387][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  290.188448][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.194138][    C1]  ? nf_sockopt_find.isra.0+0x222/0x290
[  290.199773][    C1]  nf_getsockopt+0x7c/0xe0
[  290.204354][    C1]  ip_getsockopt+0x192/0x1e0
[  290.209018][    C1]  ? __pfx_ip_getsockopt+0x10/0x10
[  290.214292][    C1]  ? _copy_from_user+0x59/0xd0
[  290.219120][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.224812][    C1]  ? copy_from_sockptr_offset.constprop.0+0xe2/0x150
[  290.231626][    C1]  tcp_getsockopt+0xa1/0x110
[  290.236330][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.242014][    C1]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  290.248034][    C1]  do_sock_getsockopt+0x50a/0x6e0
[  290.253096][    C1]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  290.259154][    C1]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  290.264734][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.270519][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.276203][    C1]  ? finish_task_switch.isra.0+0x2c5/0x10c0
[  290.282165][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.287850][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.293548][    C1]  ? tcp_setsockopt+0xae/0x100
[  290.298466][    C1]  __sys_getsockopt+0x148/0x260
[  290.303385][    C1]  ? xfd_validate_state+0x129/0x190
[  290.308687][    C1]  ? __x64_sys_getsockopt+0xbd/0x160
[  290.314129][    C1]  __x64_sys_getsockopt+0xbd/0x160
[  290.319318][    C1]  ? do_syscall_64+0x90/0x870
[  290.324168][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.329976][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  290.335267][    C1]  do_syscall_64+0x115/0x870
[  290.339962][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.346158][    C1] RIP: 0033:0x7ff13179f7ea
[  290.350706][    C1] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7
[  290.370365][    C1] RSP: 002b:00007ffe19ac03e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000037
[  290.378921][    C1] RAX: ffffffffffffffda RBX: 00007ffe19ac0470 RCX: 00007ff13179f7ea
[  290.386955][    C1] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003
[  290.395023][    C1] RBP: 0000000000000003 R08: 00007ffe19ac040c R09: 0000000000000000
[  290.403030][    C1] R10: 00007ffe19ac0470 R11: 0000000000000202 R12: 00007ff1319f0680
[  290.411043][    C1] R13: 00007ffe19ac040c R14: 0000000000000000 R15: 00007ff1319f2180
[  290.419571][    C1]  </TASK>
[  290.422619][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  290.429930][    C1] CPU: 1 UID: 0 PID: 5622 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  290.439517][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  290.449633][    C1] Call Trace:
[  290.453015][    C1]  <IRQ>
[  290.455884][    C1]  dump_stack_lvl+0x100/0x190
[  290.460731][    C1]  vpanic+0x552/0x970
[  290.464868][    C1]  ? __pfx_vpanic+0x10/0x10
[  290.469531][    C1]  panic+0xd1/0xe0
[  290.473297][    C1]  ? __pfx_panic+0x10/0x10
[  290.477778][    C1]  ? check_panic_on_warn+0x1f/0x90
[  290.483005][    C1]  check_panic_on_warn.cold+0x19/0x34
[  290.488618][    C1]  ? usb_ep_enable+0x3e6/0x490
[  290.493646][    C1]  __warn.cold+0x191/0x318
[  290.498209][    C1]  __report_bug+0x30f/0x440
[  290.502803][    C1]  ? usb_ep_enable+0x3e6/0x490
[  290.507808][    C1]  ? __pfx___report_bug+0x10/0x10
[  290.513021][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.518833][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  290.524713][    C1]  ? __pfx_try_to_wake_up+0x10/0x10
[  290.530098][    C1]  report_bug_entry+0xe1/0x290
[  290.534919][    C1]  ? usb_ep_enable+0x3f8/0x490
[  290.540010][    C1]  handle_bug+0x1cd/0x2a0
[  290.544420][    C1]  exc_invalid_op+0x17/0x50
[  290.548995][    C1]  asm_exc_invalid_op+0x1a/0x20
[  290.553883][    C1] RIP: 0010:usb_ep_enable+0x3f8/0x490
[  290.559501][    C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 0a da 61 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 80 a1 b7 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 20 94 b7 8c
[  290.579145][    C1] RSP: 0018:ffffc90000a18a10 EFLAGS: 00010046
[  290.585253][    C1] RAX: dffffc0000000000 RBX: ffff888020b5c0e0 RCX: ffffffff8cb7d820
[  290.593259][    C1] RDX: 0000000000000081 RSI: ffffffff8cb7a180 RDI: ffffffff91306aa0
[  290.601259][    C1] RBP: 0000000000000081 R08: ffffffff8cb79460 R09: 0000000000000000
[  290.609261][    C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8cb79460
[  290.617437][    C1] R13: 0000000000000000 R14: ffff888020b5c0e0 R15: ffff88801314a920
[  290.625482][    C1]  hidg_set_alt+0x190/0xa10
[  290.630234][    C1]  ? do_raw_spin_unlock+0x145/0x1e0
[  290.635665][    C1]  ? rcu_is_watching+0x12/0xc0
[  290.640500][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.646282][    C1]  composite_setup+0x2ccf/0x9290
[  290.651381][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.657271][    C1]  ? __pfx_composite_setup+0x10/0x10
[  290.662630][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  290.668159][    C1]  ? do_raw_spin_lock+0x128/0x260
[  290.673421][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  290.678859][    C1]  ? configfs_composite_setup+0xfb/0x130
[  290.684543][    C1]  configfs_composite_setup+0xfb/0x130
[  290.690096][    C1]  dummy_timer+0x2045/0x36f0
[  290.694903][    C1]  ? do_raw_spin_lock+0x128/0x260
[  290.700069][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.705750][    C1]  ? find_held_lock+0x2b/0x80
[  290.710670][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  290.716669][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  290.722386][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  290.728257][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.733955][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  290.739657][    C1]  ? __pfx_debug_object_deactivate+0x10/0x10
[  290.745821][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  290.750885][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.756685][    C1]  ? mark_held_locks+0x40/0x70
[  290.761499][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  290.767493][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  290.772503][    C1]  __hrtimer_run_queues+0x462/0x9c0
[  290.777800][    C1]  hrtimer_run_softirq+0x17d/0x2c0
[  290.782990][    C1]  handle_softirqs+0x1ea/0x9b0
[  290.787827][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  290.793169][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.798958][    C1]  ? _raw_spin_unlock+0x28/0x50
[  290.803969][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.809661][    C1]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  290.815819][    C1]  __irq_exit_rcu+0x162/0x210
[  290.820993][    C1]  irq_exit_rcu+0x9/0x30
[  290.825291][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  290.830993][    C1]  </IRQ>
[  290.833983][    C1]  <TASK>
[  290.836940][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  290.842973][    C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0
[  290.849544][    C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 d0 75 e7 09 e8 8b ad 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84
[  290.869688][    C1] RSP: 0018:ffffc900039876a8 EFLAGS: 00000202
[  290.875841][    C1] RAX: 000000000009907f RBX: ffff888023a81f00 RCX: 0000000000000040
[  290.883854][    C1] RDX: 0000000000000000 RSI: ffffffff8e1ac58a RDI: ffff888023a835f8
[  290.891850][    C1] RBP: ffffc90003987700 R08: 0000000000000001 R09: 0000000000000000
[  290.899848][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801ee95d00
[  290.907858][    C1] R13: 0000000000000001 R14: ffffffff9122e684 R15: ffff8880b853b600
[  290.915889][    C1]  ? finish_task_switch.isra.0+0x2c5/0x10c0
[  290.921929][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.927631][    C1]  __schedule+0x1264/0x6730
[  290.932198][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.937886][    C1]  ? __pfx___schedule+0x10/0x10
[  290.942804][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.948484][    C1]  ? mark_held_locks+0x40/0x70
[  290.953336][    C1]  preempt_schedule_irq+0x50/0x90
[  290.958587][    C1]  irqentry_exit+0x205/0xa00
[  290.963335][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.969027][    C1]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  290.974622][    C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x8/0x20
[  290.980908][    C1] Code: 00 00 00 e9 ea fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <48> 89 f2 48 89 fe bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00
[  291.000711][    C1] RSP: 0018:ffffc90003987988 EFLAGS: 00000293
[  291.006900][    C1] RAX: 0000000000000000 RBX: 0000000000000004 RCX: ffffffff89f6440f
[  291.014931][    C1] RDX: ffff888023a81f00 RSI: 00007ffe19ac0660 RDI: 00007ffe19ac065c
[  291.023127][    C1] RBP: 00007ffe19ac065c R08: 0000000000000006 R09: 00007ffe19ac0660
[  291.031339][    C1] R10: 00007ffffffff000 R11: 0000000000000000 R12: 00007ffe19ac0660
[  291.039430][    C1] R13: 00007ffffffff000 R14: 0000000000000000 R15: 0000000000000310
[  291.047557][    C1]  ? xt_data_to_user+0xdf/0x180
[  291.052533][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.058315][    C1]  xt_data_to_user+0xdf/0x180
[  291.063094][    C1]  xt_target_to_user+0x16d/0x210
[  291.068174][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.073879][    C1]  ? _copy_to_user+0xaf/0xd0
[  291.078551][    C1]  do_ipt_get_ctl+0x9f2/0xbf0
[  291.083396][    C1]  ? __pfx_do_ipt_get_ctl+0x10/0x10
[  291.088704][    C1]  ? __lock_acquire+0x49f/0x1a40
[  291.093747][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  291.099854][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.105705][    C1]  ? nf_sockopt_find.isra.0+0x222/0x290
[  291.111339][    C1]  nf_getsockopt+0x7c/0xe0
[  291.115830][    C1]  ip_getsockopt+0x192/0x1e0
[  291.120596][    C1]  ? __pfx_ip_getsockopt+0x10/0x10
[  291.125983][    C1]  ? _copy_from_user+0x59/0xd0
[  291.130822][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.136594][    C1]  ? copy_from_sockptr_offset.constprop.0+0xe2/0x150
[  291.143339][    C1]  tcp_getsockopt+0xa1/0x110
[  291.147994][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.153735][    C1]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  291.159781][    C1]  do_sock_getsockopt+0x50a/0x6e0
[  291.164865][    C1]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  291.170829][    C1]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  291.176508][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.182198][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.187901][    C1]  ? finish_task_switch.isra.0+0x2c5/0x10c0
[  291.193860][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.199545][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.205333][    C1]  ? tcp_setsockopt+0xae/0x100
[  291.210412][    C1]  __sys_getsockopt+0x148/0x260
[  291.215343][    C1]  ? xfd_validate_state+0x129/0x190
[  291.220652][    C1]  ? __x64_sys_getsockopt+0xbd/0x160
[  291.226084][    C1]  __x64_sys_getsockopt+0xbd/0x160
[  291.231355][    C1]  ? do_syscall_64+0x90/0x870
[  291.236194][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.241886][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  291.247159][    C1]  do_syscall_64+0x115/0x870
[  291.251827][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.257777][    C1] RIP: 0033:0x7ff13179f7ea
[  291.262330][    C1] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7
[  291.282075][    C1] RSP: 002b:00007ffe19ac03e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000037
[  291.290544][    C1] RAX: ffffffffffffffda RBX: 00007ffe19ac0470 RCX: 00007ff13179f7ea
[  291.298576][    C1] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003
[  291.306856][    C1] RBP: 0000000000000003 R08: 00007ffe19ac040c R09: 0000000000000000
[  291.314884][    C1] R10: 00007ffe19ac0470 R11: 0000000000000202 R12: 00007ff1319f0680
[  291.322909][    C1] R13: 00007ffe19ac040c R14: 0000000000000000 R15: 00007ff1319f2180
[  291.330981][    C1]  </TASK>
[  291.334384][    C1] Kernel Offset: disabled
[  291.338710][    C1] Rebooting in 86400 seconds..