last executing test programs:

4m33.619860559s ago: executing program 0 (id=250):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x84)
fchdir(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x28, 0x5, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008894}, 0x20004890)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=<r9=>0x0)
syz_open_dev$sndpcmc(&(0x7f0000000500), 0x8, 0x8000)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_ublk_setup_queues(r4, r9, &(0x7f0000000540)={0x0, 0x11aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x69, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r4}}], 0x1, &(0x7f00000003c0)={0x2e, 0x2c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94)
r10 = userfaultfd(0x801)
ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc3, 0x0, 0x0, 0x58049}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
memfd_secret(0x0)

4m32.51367714s ago: executing program 0 (id=251):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00')
r1 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00')
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00)

4m32.469327701s ago: executing program 0 (id=253):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0xe, 0x0, 0xffffffffffffffff, 0x9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000340)="63ec33c9e902000000fd00000008", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)

4m32.258238889s ago: executing program 0 (id=254):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0xe, 0x0, 0xffffffffffffffff, 0x9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000340)="63ec33c9e902000000fd00000008", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) (fail_nth: 2)

4m32.18979582s ago: executing program 32 (id=254):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0xe, 0x0, 0xffffffffffffffff, 0x9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000340)="63ec33c9e902000000fd00000008", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) (fail_nth: 2)

3m30.290225531s ago: executing program 3 (id=525):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000006280)=@ethtool_gstrings={0x1b, 0x1}})

3m30.188746516s ago: executing program 3 (id=526):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x1, 0x2, 0xc, 0xbc, 0x101}, 0x20) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) (async)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) (async)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0xa140) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r1, 0x8b32, &(0x7f0000000040)) (async)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000400)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f00000003c0)={0x1, r3, 0x9, 0x4, 0xeb0, 0x0, 0x0, 0x40, 0xffffff4f}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
r6 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'sit0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r8, 0x8, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) (async)
r9 = epoll_create1(0x0) (async)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000"], 0x48)
r11 = dup3(r9, r10, 0x0)
fcntl$dupfd(r11, 0x0, 0xffffffffffffffff)
epoll_create1(0x0) (async)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3m29.816079429s ago: executing program 3 (id=530):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0xa7, 0x6, 0x2}, 0x10) (fail_nth: 2)

3m29.681434107s ago: executing program 3 (id=532):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9a000)
kcmp(r1, r1, 0x6, r0, r0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
r2 = open(0x0, 0x0, 0x0)
mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000001c0)='(\xa6\x00', &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', r2) (async)
renameat(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00')
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000000)='3', 0x4e) (async)
r5 = open(0x0, 0x143142, 0x0) (async)
mount(0x0, 0x0, 0x0, 0x2208440, 0x0) (async)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x257})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000006cff0000000000000000000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async)
syz_pidfd_open(r1, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020048f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
recvfrom$inet(r5, &(0x7f00000000c0)=""/73, 0x49, 0x10002, 0x0, 0x0)
shmget$private(0x0, 0x4000, 0x40, &(0x7f00000f3000/0x4000)=nil)

3m28.071865354s ago: executing program 3 (id=544):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)

3m27.46914108s ago: executing program 3 (id=547):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
socket(0x10, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a07058102200000070502"], 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xfd96}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0)
write(r6, &(0x7f00000005c0)='\x00a\x00', 0x3)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="34001200", @ANYRES16=r1, @ANYBLOB="cf042dbd7000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0c004300f8fffffff5ffffff0a0006000802110000010000"], 0x34}}, 0x4)

3m12.24328665s ago: executing program 33 (id=547):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
socket(0x10, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a07058102200000070502"], 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xfd96}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0)
write(r6, &(0x7f00000005c0)='\x00a\x00', 0x3)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="34001200", @ANYRES16=r1, @ANYBLOB="cf042dbd7000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0c004300f8fffffff5ffffff0a0006000802110000010000"], 0x34}}, 0x4)

2m34.203846491s ago: executing program 5 (id=747):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x200, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x15, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x3, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x19, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x1000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xfffffffffffffe81}, 0x1, 0x0, 0x0, 0x815}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000000506030000000000000000000100000305000100070000000900030073797a3231000000000000000000000000000000c0be6807becf4869a6daca4a233fef91aee3aabfc80d8561b8f3b4d3963f0644e3fc4bbdf60c35f9d5d1f0e7e636b3362ab9478dcfc4e523020fb7b05d41cb9747717d7b1b74ff2487f31752c57a85b57a6f78f1c99d14de0dc8f3839d3762020b70242f324b1107ee01e36e3e23a70b5a48c4c1a1b03e1471350af28c398c5ceea67c8f0f14ceca0684be1b641e918313a81cce56c8ef5cd5e85cdfebde28c5637b"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)="abd5520eea202d9b7ee635c183b2dc156ad2a5f1dccbfc797c76b424ac5bfbb75d404f227cb9479f032d2fa872add755a93b5e3ca0cf3ffc562a0d955cf769ff82072674435c49649d0ca0130ccf3bf176c080a82e58419c93495e0defbdd64e09fe42c5e3444e201cab7d4cfddcccbde3a80e9212eb50a2ce88fe31ba36d12919ab4ac855", 0x85}], 0x1, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r1, @ANYRES32=r1, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1000000001000000010000006e6a73a2032aecc5970d2019210404a6daa320d8107c9208e3018e65cf0567c9685f296654b27e9fc3fbadd054a6338f7a6cfb5f78de0000009a47f1849bb78d5db3605ba00edf6d1d8cb172", @ANYRES32=r5, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r1], 0x98, 0x20040800}}], 0x1, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2702, &(0x7f0000000200)=ANY=[])
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000440)=0x7)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000057b700, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xfffffffc, 0x2d67)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0xff, 0x8, 0x3, 0xdd, 0xb, 0x9, 0x40, 0xfffffff7, 0x1})
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)

2m32.740908918s ago: executing program 5 (id=756):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0)
read(r0, &(0x7f0000000300), 0x1)
read(r0, &(0x7f0000000400), 0x120)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='qnx6\x00', 0x4000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@deltfilter={0x100, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xd0, 0x2, [@TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_ENC_OPTS={0xac, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x60}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x5d}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7f}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0xa2}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff000000}]}}]}, 0x100}}, 0x20044800)
setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, r4}, 0xc)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
unshare(0x28000600)
r8 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100087, 0x0, 0x100000, {r8}}, 0x20)
r9 = getpid()
syz_pidfd_open(r9, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', <r10=>0x0})
r11 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00')
read$FUSE(r11, &(0x7f0000001f40)={0x2020}, 0x2020)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r7, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4042)

2m31.950596612s ago: executing program 5 (id=757):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa0, 0xffb, 0x2, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x8, 0x9, 0x3, 0x3, 0x1, 0xfffffffc, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x240d43ee, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x80000000, 0xbab4, 0x79b, 0x2, 0x1, 0x7f, 0x3, 0x2, 0x7, 0x8000, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xae, 0x7f, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0xfffffffe, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x753, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x488b, 0x84, 0x100, 0x10, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xdda, 0xd, 0x29e, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x7fff, 0x2, 0x3f, 0x8, 0xcb, 0x3, 0x400, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5)
write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d)
recvmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f0000002700)=[{&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000001440)=""/138, 0x8a}, {0x0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x6, &(0x7f0000002740)=""/243, 0xf3}, 0x3dfdbfbdd7a869e0)
r3 = socket(0xa, 0x3, 0x3a)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fchmodat(r4, &(0x7f0000001500)='./file0\x00', 0x13b)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r6, r6, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')

2m30.600931062s ago: executing program 5 (id=766):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000007060500000000e1ffffff0001000005050001000700000228"], 0x1c}, 0x1, 0x0, 0x0, 0x4000814}, 0x48810)

2m30.530245517s ago: executing program 5 (id=769):
r0 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
recvfrom(r0, 0x0, 0xfffffffffffffe67, 0x0, 0x0, 0x22)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
unshare(0x4020400)
acct(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00')
unshare(0x2c020400)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x36, 0x1, 0x7fffc, 0x1, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x27}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r4, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1c}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x50}}, 0x40)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0)
ioctl$TUNSETDEBUG(r6, 0x400454c9, &(0x7f00000007c0)=0x2)
close(r8)

2m29.098510714s ago: executing program 5 (id=777):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0x20501, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000710400008500000021000000b70000000000000095301e822cc057299061fe25e081e05eb5ff24ac91fd161b9a14feacc5c9963edb877e84088b31d19d9b95eb3ac5835e6b2d6ad601a25aeadfb4184812266ada12333f80f5ef8436abb37d061e82b7da3851fccfc5de4f3d46151ca7ac1d43757f939e557a200d60c6cd98996f94736abf9d499cfe839181"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=@target={'target ', {'PCI:', '1a', ':', '5', ':', '16', '.', '15'}}, 0x16)
r1 = fsopen(&(0x7f0000000200)='gfs2meta\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
listxattr(&(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)=""/108, 0x6c)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000240)='*\x00', &(0x7f0000000280)="117661242e2db2f819605d9cfa65f92357966ca5f90f42fe7e454952830bd5834ec04cddd9c10eacf9e48f9c7c1620a71e88f51087a91639754977ee5ce10514604f6cca1c463092605717", 0x4b)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0x20501, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000710400008500000021000000b70000000000000095301e822cc057299061fe25e081e05eb5ff24ac91fd161b9a14feacc5c9963edb877e84088b31d19d9b95eb3ac5835e6b2d6ad601a25aeadfb4184812266ada12333f80f5ef8436abb37d061e82b7da3851fccfc5de4f3d46151ca7ac1d43757f939e557a200d60c6cd98996f94736abf9d499cfe839181"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=@target={'target ', {'PCI:', '1a', ':', '5', ':', '16', '.', '15'}}, 0x16) (async)
fsopen(&(0x7f0000000200)='gfs2meta\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) (async)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async)
listxattr(&(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)=""/108, 0x6c) (async)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000240)='*\x00', &(0x7f0000000280)="117661242e2db2f819605d9cfa65f92357966ca5f90f42fe7e454952830bd5834ec04cddd9c10eacf9e48f9c7c1620a71e88f51087a91639754977ee5ce10514604f6cca1c463092605717", 0x4b) (async)

2m12.510473981s ago: executing program 34 (id=777):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0x20501, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000710400008500000021000000b70000000000000095301e822cc057299061fe25e081e05eb5ff24ac91fd161b9a14feacc5c9963edb877e84088b31d19d9b95eb3ac5835e6b2d6ad601a25aeadfb4184812266ada12333f80f5ef8436abb37d061e82b7da3851fccfc5de4f3d46151ca7ac1d43757f939e557a200d60c6cd98996f94736abf9d499cfe839181"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=@target={'target ', {'PCI:', '1a', ':', '5', ':', '16', '.', '15'}}, 0x16)
r1 = fsopen(&(0x7f0000000200)='gfs2meta\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
listxattr(&(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)=""/108, 0x6c)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000240)='*\x00', &(0x7f0000000280)="117661242e2db2f819605d9cfa65f92357966ca5f90f42fe7e454952830bd5834ec04cddd9c10eacf9e48f9c7c1620a71e88f51087a91639754977ee5ce10514604f6cca1c463092605717", 0x4b)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0x20501, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000710400008500000021000000b70000000000000095301e822cc057299061fe25e081e05eb5ff24ac91fd161b9a14feacc5c9963edb877e84088b31d19d9b95eb3ac5835e6b2d6ad601a25aeadfb4184812266ada12333f80f5ef8436abb37d061e82b7da3851fccfc5de4f3d46151ca7ac1d43757f939e557a200d60c6cd98996f94736abf9d499cfe839181"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=@target={'target ', {'PCI:', '1a', ':', '5', ':', '16', '.', '15'}}, 0x16) (async)
fsopen(&(0x7f0000000200)='gfs2meta\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) (async)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async)
listxattr(&(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)=""/108, 0x6c) (async)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000240)='*\x00', &(0x7f0000000280)="117661242e2db2f819605d9cfa65f92357966ca5f90f42fe7e454952830bd5834ec04cddd9c10eacf9e48f9c7c1620a71e88f51087a91639754977ee5ce10514604f6cca1c463092605717", 0x4b) (async)

1m13.990760041s ago: executing program 1 (id=1184):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000700), 0x0)
close(0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='0', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0)
write(r3, &(0x7f0000000d00)='0\n', 0x2)
close(r3)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd)

1m12.983997141s ago: executing program 1 (id=1186):
mkdirat(0xffffffffffffffff, &(0x7f00000004c0)='./tracing\x00', 0xbb)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r0, @ANYBLOB="00000000a45555009500"/25], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x3, {0x0, 0x0, 0x5}, 0x1}, 0x18)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
sendmsg$can_j1939(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0xf0, 0x1}}, 0x18, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24040881}, 0x4004150)
io_setup(0x3, &(0x7f00000001c0)=<r6=>0x0)
r7 = eventfd2(0x0, 0x0)
io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r7}])
io_getevents(r6, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0)
setsockopt(r2, 0x0, 0x10001, &(0x7f0000000340)="936269b6fbcf50708abfde11d18ce027b4e76bdbae291d56be090ee71eabc5f52809e2428b64bc6b6183f5c513d2ad208f012de2b0bb83e844fbf54734b2e5c91b55505acf1d078108fba48ab662ecb19318a34aae6b2b1e60503f3bc476ea21bcc9b7f1a22f3a121318104020b4750233bb5cdd46224645a449ad6b283bd0630c773a3e556f65ef69ef8503751073f834f8a7e465b45c49308dd8b4d6480f007ab0374694a32d1ccd7dd8bdceec44f93557cd2ceb515bb21fd45d8af4363952c69669c722b43ec08ac5b6d77d89a738ba938f826447764d", 0xd8)
shutdown(r1, 0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01001600040000000400030021020000c1000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r9, &(0x7f0000000440)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r8}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x8)
write(r10, &(0x7f0000000140)="28fb", 0x2)

1m9.071872845s ago: executing program 1 (id=1197):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
clock_gettime(0x1, &(0x7f0000000100))
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0xa, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x200000c2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x14000, 0x20)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0xc0003, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r2)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="03062cbd7000ffdbdf25450000000e0001006a657464657673696d0000000f0002006e657464657673696d30000008008e00030000005e0b817cf35fa8611b8d379bd50431988e9858811bf09ca71e6c20627544a2638770baf0486cbb1e5ffaec06be48fd4162266ef42666e64c9ba67cf91f97ad64441bdd564e05f9bdb2c3bb127dc947dd9aca6975afc0e6638fec3d7fd6aeb2db87d0954790e2731349594610c0b156ae5f9cb11ea3cb6933de762799939aa59d692f396a097ee689f8794e617b7d3c9674d07e197378f57c51baa67b4087c65a7eec3ac7f6356a36daca7b907af4be155ce70bb07f00000000000000db4dcd947e0271341fe9"], 0x3c}, 0x1, 0x0, 0x0, 0x808}, 0x24040090)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
write$proc_mixer(r0, &(0x7f00000001c0)=[{'OGAIN', @void}], 0x6)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNISCRNMAP(r5, 0x5410, &(0x7f00000010c0)=""/4096)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="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", @ANYBLOB="dc70b75fa4b0", @ANYBLOB="001500430024273a5c5cd12b2d7b4028292d2d5e2800000000b45038e4ea0707c6efdf45717fd4c7aafd317ee88a629b425976e48913e14894f214ba5cbc9819098d36f00947a00e7dec9b7e9845388acd27107800000087234b808016e56eb9e01589bb3f82b802c966dc4dad641770ee243a02fdd4ad0d567262a3da499ccf6591f41119c284d165599e9120791efc566340dcb19cd8f4b756032d6fcc6ce3e5ce22fc7b12e15e6583b417e258312505ddf4898109b53937b5a0bbb2050ded5887132ca81768507bade0bd8ce0a20f911586775c"], 0x50d8}}, 0xc000)

1m7.949895028s ago: executing program 1 (id=1200):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047ed, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
r1 = syz_io_uring_setup(0xb28, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3ab}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000180))
io_uring_enter(r1, 0x8a1, 0xb08a, 0x6, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000300)="f6", 0x1, 0x845, 0x0, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f00000002c0)=0x8f, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff850000000f000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r5, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3)
openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000680)="0ca5ac161ae2541e0ff5602427566e18598aec611c87996d108995edde93cac9842fbb23ace316d4ada7a614ef3590992b6dc78a0bac56d4e4ce20b98febcbdcf1bc280e96f6e195c8f13779742bd1355d09a4258efb8d3b6b0eb4e4f0efd1d6d73c0cd4d970d9c1ff6eb7bab6ba", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)='\b', 0x1}], 0x1, 0x0, 0xfe41}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)='Y', 0x1}, {&(0x7f00000000c0)="79a87031a35fedcf53b8b309123d910663f17a44fd754810d2e16d179f36c54cb949cc272e85a7f7b8ab37527180de101e57735de5056379c0404858883600ea472368e4c10a0844a42597586d294a0d2a6e15", 0x53}], 0x2}}], 0x4, 0x4000001)

1m7.037707856s ago: executing program 1 (id=1204):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/fail_page_alloc/min-order\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='0', 0x1)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008b0000000000000000000000850000001300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000008ea00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9ff03076003008cb89e08f088a8", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005})
r5 = socket$inet(0x2, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r8], 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="46030800030016000c0045"], 0x66)

1m6.10282115s ago: executing program 1 (id=1206):
r0 = syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='D', 0x1}], 0x1}, 0x4048841)
recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffe52, &(0x7f0000000800)=[{&(0x7f00000003c0)="c9b5087f1b7370c580348527c56a082b3a56ccc5a6a720917588f51e33a523ca58d7cc270878acfd64351b705666c01f5846e18cd8aff9dc3810a03edb7d56b70eea2bf2d979a2067c338c5d3d756386592c8e60bae4f201bccc"}, {&(0x7f0000000640)="b96afd7029a66b709f521810b494e89726401c323d385a70bc42110414871a343e9c14433a291610c117ee7f196a189cb63ede4885aa46d3533bef1f6b299e0f21e108412e384d"}, {&(0x7f00000006c0)="ef07ca69cdf419d59decfe8963665400"/26}, {&(0x7f0000000700)="f9a5e07cb1d9f5673b4bab8258fa6daf55bfc36e2c8c48c65d42bb6cba4ac22284717a8fd326f045d3604eb3caf24e549a47077cce74f05253da677792b16010c35a0317c1a46da30c47613b6c762744fcbff909effc2f2c70ad2395c172b2b41949a3a784e79a6ba14a7cf6033e586033bd6e6795c7886e1d11ea79525ec9c55a3fb2d972d69289c4f5510ac509ec6c3bb145ba773a4f1415538642a4519747fd93f2e4669005ab4b2ecfbf43596e45e7656448245582b9ee00a50ff7efa8e4291890c3021ea255de7a5ed144f5fe486b0d6c2d94e0662c48e212ce", 0x2a}]}, 0xc850)
recvmsg$unix(r1, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x40000001)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf9, 0x5})
preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/21, 0x15}], 0x1, 0x10001, 0x6)
r3 = syz_open_pts(0xffffffffffffffff, 0x400000)
futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x200, 0x38e41e62, 0x64})
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1, 0xa0cc0)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4affffff0a9e0020a80300f6", @ANYRES8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="0700d4"], 0x44}, 0x1, 0x0, 0x0, 0x8054}, 0x48008)
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x5)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

50.700989574s ago: executing program 35 (id=1206):
r0 = syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='D', 0x1}], 0x1}, 0x4048841)
recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffe52, &(0x7f0000000800)=[{&(0x7f00000003c0)="c9b5087f1b7370c580348527c56a082b3a56ccc5a6a720917588f51e33a523ca58d7cc270878acfd64351b705666c01f5846e18cd8aff9dc3810a03edb7d56b70eea2bf2d979a2067c338c5d3d756386592c8e60bae4f201bccc"}, {&(0x7f0000000640)="b96afd7029a66b709f521810b494e89726401c323d385a70bc42110414871a343e9c14433a291610c117ee7f196a189cb63ede4885aa46d3533bef1f6b299e0f21e108412e384d"}, {&(0x7f00000006c0)="ef07ca69cdf419d59decfe8963665400"/26}, {&(0x7f0000000700)="f9a5e07cb1d9f5673b4bab8258fa6daf55bfc36e2c8c48c65d42bb6cba4ac22284717a8fd326f045d3604eb3caf24e549a47077cce74f05253da677792b16010c35a0317c1a46da30c47613b6c762744fcbff909effc2f2c70ad2395c172b2b41949a3a784e79a6ba14a7cf6033e586033bd6e6795c7886e1d11ea79525ec9c55a3fb2d972d69289c4f5510ac509ec6c3bb145ba773a4f1415538642a4519747fd93f2e4669005ab4b2ecfbf43596e45e7656448245582b9ee00a50ff7efa8e4291890c3021ea255de7a5ed144f5fe486b0d6c2d94e0662c48e212ce", 0x2a}]}, 0xc850)
recvmsg$unix(r1, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x40000001)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf9, 0x5})
preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/21, 0x15}], 0x1, 0x10001, 0x6)
r3 = syz_open_pts(0xffffffffffffffff, 0x400000)
futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199)
ioctl$TIOCMBIC(r3, 0x5417, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x200, 0x38e41e62, 0x64})
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1, 0xa0cc0)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4affffff0a9e0020a80300f6", @ANYRES8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="0700d4"], 0x44}, 0x1, 0x0, 0x0, 0x8054}, 0x48008)
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x5)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

34.453250546s ago: executing program 7 (id=1324):
mkdir(&(0x7f0000000240)='./file0\x00', 0x1ff)
socket$inet_udp(0x2, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0)
listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000004c0)=""/234, 0xea)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x25a5, 0x0)

33.731018969s ago: executing program 7 (id=1330):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40)
r2 = getpgid(0x0)
syz_pidfd_open(r2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040))
r5 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0x1, 0x200, 0x4a, 0x28, 0x80000005, 0x2})
pselect6(0x40, &(0x7f0000000080)={0x3, 0x0, 0x7fffffff, 0xfffffffffffffffd, 0x2, 0x0, 0x3, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x26}, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

32.840656444s ago: executing program 7 (id=1333):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000400)=0xe4)
r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6)
fcntl$notify(r1, 0x402, 0x8000001c)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x10)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x37, 0x0, &(0x7f0000000400)="b9ff03310644268cb89614e886dd6f8ec0a5fa7a80339e916b28fea3fc5c6afe0189acc82c8112eb153b3415124ef9ab1d0dd98b72de1b", 0x0, 0x8003, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)

29.493262506s ago: executing program 7 (id=1346):
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)='m', 0x1}])
io_destroy(r2)
mkdir(&(0x7f0000000040)='./mount_sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./mount_sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000240)='./mount_sys/fs/ocfs2/cluster_stack\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='user', 0x4)
gettid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000240)=@gcm_128={{}, "ecb9d06d2d6e459d", "9ab7e8da5fbd3fc91d33e32cd9f5bddb", "6973ca9e", "e80ebfa5ac114dfa"}, 0x28)
setsockopt$inet6_tcp_int(r5, 0x6, 0x3, &(0x7f0000000000), 0x4)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/wireless\x00')
preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x100)
r7 = openat$uinput(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000140)={{0x100, 0x7, 0x4b, 0x8007}, 'syz1\x00', 0x1d})
ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2)
dup3(r8, r4, 0x80000)
write$uinput_user_dev(r4, 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x30083, 0x4c)
write(r9, &(0x7f0000000000)='1e', 0x2)

29.024440457s ago: executing program 7 (id=1348):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/fail_page_alloc/min-order\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='0', 0x1)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008b0000000000000000000000850000001300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000008ea00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9ff03076003008cb89e08f088a8", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005})
r5 = socket$inet(0x2, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r8], 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="46030800030016000c0045"], 0x66)

28.322005812s ago: executing program 7 (id=1351):
r0 = socket(0xa, 0x2, 0xfff)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048800)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtclass={0x6c, 0x28, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0x3, 0x2}, {0xffff, 0x5066f40b3246344d}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x8, 0xff}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x804}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0xfffffffffffffe2d)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000000280)="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", 0x1f9, 0x0)
setgroups(0x0, 0x0)
r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f00000005c0)=<r8=>0x0, &(0x7f0000000180)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x1bd, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x1}}}, &(0x7f00000004c0))
syz_open_dev$tty20(0xc, 0x4, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x400, 0x1, &(0x7f0000000600))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000062c0)=0xe4)

27.358950439s ago: executing program 2 (id=1354):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0x200001d6, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r2}, 0xc)

27.28362525s ago: executing program 2 (id=1355):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='9', 0x1)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, 0x18, 0x1, 0x1, 0x0, {0x37, 0x1}, [@generic="0e0001006e657464657673696d0000000f0002006e657464657673696d30"]}, 0x34}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) (async)
write(r1, &(0x7f0000000100)='9', 0x1) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, 0x18, 0x1, 0x1, 0x0, {0x37, 0x1}, [@generic="0e0001006e657464657673696d0000000f0002006e657464657673696d30"]}, 0x34}}, 0x0) (async)

27.098221591s ago: executing program 2 (id=1356):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendto$packet(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000040)={0x0, 0xf, 0x0, 0xf773, "00207d2000002000201b14700c1e0ac74f000000001200000000000900"})
r5 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, 0x0, &(0x7f0000000080))

26.879665132s ago: executing program 2 (id=1358):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r1, &(0x7f0000000000)="ff", 0x58200, 0x2200)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000714010000000000000000000500600004"], 0x18}}, 0x0)

26.837075961s ago: executing program 2 (id=1359):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/fail_page_alloc/min-order\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='0', 0x1)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008b0000000000000000000000850000001300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000008ea00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9ff03076003008cb89e08f088a8", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005})
r5 = socket$inet(0x2, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r8], 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="46030800030016000c0045"], 0x66)

25.9766579s ago: executing program 2 (id=1360):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f00000000c0)="4b0003000000", 0x6)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c400)=[{{0x0, 0x0, &(0x7f0000005f00)=[{0x0}, {&(0x7f0000004e80)="a6f93b8431a4e835806ec98df29440bb45bfc75e0d8f5bfb7c17e4a79f9e0cf2b00139f6a69641bd873dcef9624c1c4bf19e91978b3ea4019e626fdc99db004d61412401eff4d363c76b3787fb08dce3706436c50aa8083801443a2b85f653144409f174e67ae52808775b51d77b2187399f827200baa8ba823b9347541cbd24288d06fb3f8c3c3593feb5af38d312dc2f86a48e40d8dff33b8a0befa71c560539e0d4a36318187465eacc0fe1f0ae27156184564e4320a51004b2001617bdc7eec134f8d846ad071e90bba2143d2c98d900da946aa854faa37506749e19dda511abc274e45cf331df66b25e31088fc2ba66bcc2f9b547c73e81b3de245e5db7b3af6c0e86699ae47f6b9fe1626ac00152eeb4f2e85f8c9d11a0e9c4ac7bcdc3794739169cf326b9b1e243a3db72d4df6495c8ea85e3d5fc8883b6ded59348b0b2a1a7735151fec8a88992e00e033e1484fc5de8a8af0ed35b8b46333633de77a5cecc5f05b7594532c37089389704b7f6eafb9d27fb89445996926643b9c89e25ae94a4e7f559839443c41f2f9a7716eff030816ea90a5c54a5bf4d1aab297425129639d4de0e5ad6daba55689fafb1d548f906b3a0fdf79c7e8990494d74c0ebf7e4b79a65d3abfd918968a2ab3283e8e9652a2253d5d51ba28761b21e030502d17fa4fb7ae7cef532732cd665a0d6585c28c53b51c04958e1247450598ab1dbae773b25f030362e91b36e3d94b176159d87d8084aefd15da438735594d916fbdfe70c38c319296312d1321f3ae3d888840b1221bbc191c7a10bc649900d2b1306dd14f58353164016a823f4c1916dbc61a31ced55a107c2a2b4267c2b42e50dbf818e8d91e58f42241939c876ee23366d2ddaee60b3d55d176a1027448ab4b92fe1a23368b81081278ff5b26005ba3cb74620e38bf7f8e5041f5efa30e8d95714f21f75420cd1c88c2cba56f78f99d95cd7a0e2dc16109e11063f4bbbb3f4bbc7bce08098c9056ef8d0600c6bd4ad5f6e69e471422056e691d9de8460d05b10eee4a5b75f8869d3d051bf35c4fa338ca75fc07cda6d235800221b492d6ad9b62cff8bde54c5253424f00565ff80a0135f05c57e4595413ae092ca85fb5ca03749955f1fb5520e6219474cb1812cb316d67351b48dbebd9f6987704bfddff4834bf9ef6f14eda0f77a003dced952c791cfc8d6ca3c4b9198f4f4cc815178451d28702a8687392173618317903d2c95d4c1b269ee192e5d532ce8c6b59639686b7083c9cd151a65b7a0ba4682fb23ee4a811a67850964409438066589fa11b85be42a9872e2549f8177e42e6139446cd5b5fd9bcf8416675d0fc062ed346e3568a5bbdc583b2248d40f9b3ed75073aadfb664e3db09dd229c015e141ad509f95bf41351dacbc6b499abb00878fc76c04c406f534ec1bcdd0e921e6c6b5e38204522e0339e8b3444fe13558abbf9de4022b032b22cdb4b62a4bdb53952d9bf6c97f7179f2b52f093d2c4483576b87f44899d74b8b2f58a6db0e97bf96bb5872e84967a6fcb9c5bb3f013965dd5ecd33850ab1034412f5e46821bee5196598b2d76090beec7fb7279234b62326133c88ee2a4017875755997c5abd4d9ab69532774bbcdea2d07439170245f0800986ec2ed7783a4858ea7e106c36704d6902737f528960fead820a5563c5bfa271a68cd19fe0118ed13ea1642369e6059a41f512c57448a2cb414598c764889d8dc58a5a29580aa3d0b107f5f3e1fc28361042cdac058984c931a5e4a2bf61174208f46b0a114f6ddd1c3abb8b909ab3861d5ced53e60e5955b92846a3a4c7463faf8127c1dc2c310b49bd3560552a1466fed9a07de91b34bf6e1ba5a741dc2a526871fda01dc89e24ba8d725aba2cd9546148f336e432b173b5e5e3e01a9b0be66e813d6e456f64939c0b4b4122fe08a40c68a655037ee880655926b7221545017f99e8d7ccf89335d3cad59b515e82ebed3ffd77704202ec783bbb10cf7865ad71d6afee80d8277ebc5e3fbf894ab05e08df20ee667f2b8722f9e5b070035dd2958b907beff604c356ab89a4b09dd4c9f5f86f6892987a027355d77c64d2e9e8539f313dec032a35a126786753cfd1f1244c316255f4dbf5870c8201a85a2bea7504fadf527dea2b1d4ae975091800c86d8eb2adb3986d9317145239de76be57cceab83d2d92f6aabc3ef942a9c3aa9d23060b737f91bfe33fd6fe2f14329f1b919cd506cc26cbc28187dbbb9883897ae20e314ed52b754a8004182d5b41bca0b0760cfa3c191ecd3196cf15c6d140ff7862e35b718f5827e7ebfc70a9cead96980e83b980364cad468f94f20ac732e10839196a51bfadb24f10f71a2ea8ba0ad025d9d4b2fb615b93533a52c06633be206a2007858d91fd29fb5f692556a97d919de9e1e1aa82217b8b2ba4a58978f6956cec212acc75bbfae8d04fd7d6b11152d412af7019efcf9befa084b9ff898f1adaeafe0c9ed3ae7ec838ce57d3d968ed5323b99cae5dc6639778b871f5b32e5de4678440412b7c2572aeaf34bb89a7554f1e92bf4279ac347b47bc2fe400f04cefa02c75d06e47e044f66ddb375160177d2f638e137260fb25dae01b4c78bf6e5f38da8050f00d78762a9b2cafd5827f4d18529e42f891853b9fb8b81ed7da0dadc9e2f8856ed7f5883a63ed1d10f0709024bf87a28a91d51d4c419ace259c70388c6cc4b4f5aab8ec36d6de3519ab5305e93732efd4684fb16bb14707fd2b43c36cbe07646f2731773354edcc4c923f5dc86576fa212df8754c82672e0aa5d647e2fd50da3af77a92424db9fa9ae8907e44a919be024986c08431ae6ab29e41505b82e182f657fb4700700d2fad0b65cac96bc6340d9ffcae87b2190831e2380e318a28c83570c05957e8cbdfd858a9ee50477a45148217af175f4d09858fafb4a7b13b2944ed021be7bc9f09cc648f8e1d8c3fa0161f7e68ac4a3dbd3885bc58ef85585a18f97d7d27833a3726edc4693e8b587a7c1d4851eb33a32d78330121fadbfb0bd60fa5d7756e2f666694b4b5daf785ff302b06fedad43787aa33f67c13a4413785ba68d33c507439d9c739454f48939087873294a7cf5a57a00ba98444ce52a83a546c67deb6f2f3a8bda150cd98c72631a0be009d0a263ebbc4f512a949e4cf120909f4e5e64114c4a2b459f16323ad8771870f944d14fcdba311a9d89668b770415a7deab2da586592c41b251e7e52ee99bb35a9c", 0x8f9}, {&(0x7f0000005e80)="55c86e538e72f448faecaf96e0df30e2a67ad4bd5b7a7630093653c08aa259e3563b34f4cca89beedb5a6dc6cf1ba502b0a1e160a95b7b5b43a7a3b7c2be1da83b96f068ba3679ef0afed086ebf5290a1260ba4ff07ed1af81ed017c9db2d6264bc4483628048284502a", 0x6a}], 0x3, &(0x7f000000c140), 0x0, 0x8000}}, {{&(0x7f000000c240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000c3c0)=[{&(0x7f000000c2c0)="b40df7fd4aacc8942acec7e540ae506349088a7c198c5c41be38dad6ebc080602b", 0x21}, {&(0x7f000000c300)="5fccd73e48c22000813bce18d76a23484a633051e93dab3d234662735821e34192b230f45c4b6dc24e8fcdfd14a1118724b6468336c3e7d2ac2cfd84df1ef6788236719bde89bfdd97e8d2a872fef787aeb7cef33be5ad7e865a4b677c36480a7d4891dea80e1f6b4629deb264daee33b8fc0e9b9210830ed6a99774249c76f41f9b660f37f49c2a1fc1321ac64038477132fa594e34cea2bdfa5d4a730fd7c90a", 0xa1}], 0x2, 0x0, 0x0, 0x4000}}], 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000840)=[{0x0}, {0x0}, {&(0x7f00000007c0)=""/128, 0x80}], 0x3, &(0x7f0000000940)=""/107, 0x6b}, 0x3}], 0x1, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r2, r2, 0x0, 0x20000005)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendfile(r4, r2, 0x0, 0x1002000ff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bond0\x00'})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc094)
splice(r5, 0x0, r5, 0x0, 0x2, 0x3)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28)
recvmmsg(r1, 0x0, 0x0, 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x2000})

25.109940829s ago: executing program 4 (id=1364):
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="0500000000000000002f0208000100ef80040800000caa87f6873187df9043c5fba9fb3aba72e174bc62880ca1d27ab90b453a", @ANYRES32, @ANYBLOB="38002d800a0000000202020202"], 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x24, &(0x7f0000000280)={0x0, 0xa49, 0x0, 0x0, 0x1bd}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0xc22f, 0x10000, 0x1, 0x16f, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd35, 0x4, 0x20000000, 0x364}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x262f, 0x4, 0x2, 0x43, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9360, 0x2, 0x1, 0x42}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc264, 0x2000, 0x1, 0xf4, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x4, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x3, 0xb44, 0x0, 0x0}}, 0x0)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x0, 0x1000, 0x0, 0x1ea}, &(0x7f0000000dc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1747, 0x8, 0x801}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1c6c, 0x0, 0x0, 0x27f, 0x0, r1}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x4, 0x0, 0x0, 0x0}}, &(0x7f0000000b00))

24.99037609s ago: executing program 4 (id=1365):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
clock_gettime(0x1, &(0x7f0000000100))
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0xa, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x200000c2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x14000, 0x20)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0xc0003, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r2)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYRES16=r3, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x808}, 0x24040090)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
write$proc_mixer(r0, &(0x7f00000001c0)=[{'OGAIN', @void}], 0x6)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNISCRNMAP(r5, 0x5410, &(0x7f00000010c0)=""/4096)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="d850000044000701fefffffffcdbdf25037c000004004580c0500180bc506480b850cd80b450d680b05018800400f28004008d809f506a80cb84262700fc44f829e9ac5d2b0168d2ed51fbf02783ae7705c94d9468d49caa3fe7907450398014006d800500a4000000000008004d00ac14140c5950028037000180d01032234b706888b980d85f5def3c191ca34a6233501153013bfba3d086610cf508856addde7e5c76f43c436ca7ad24952a0b0085125080106436907b2a903f7e0157da1114736ba94b5dbf4f9c4f80f729a22252376abc3c07a20ec89bb97eb05c339e1274645639afd083cb636ee66d5c151197e89a6e61c57a8c6166ab600ed3768498f99189e39e1b69fc318fdf49ec5bb01f58252c64b18d56a5d340c13a8bc9079abfef0061800400d98004006b00ea11c6ebcf7daba729395ae46378a6c5ea317653ba1c9c415186a816e5b96d1bb170d08a0c3662a881ae356dd004bdcec0f7523da7ba2cca516faf18cc0f269d75b20e5b9a1ba0fe28c74d055c36a00d4055fe19f4d587c63364210d3ba1c9065fb993f13e48a2b2ae7f807b33ef09377821210240935f332253a7abc5a81e51fdf5a47c34d6b6735a1cfc8a2c08d27a668b14211d555addb43097e24d6122e4fd6eb36336a962c07465bbf558eda52d3381f3a8731316953ac9ec5a1621ddb5f93beacfaeb9a06ed666cd011e61d39471491d66ccdbacf99d42fcd8313f8e7625cc2700cf10c58006000d005b000000c41b098a50dda9bb69dd1b8fbc7e1d6a6d00426bb56a116f397aee87932d5a5dcaf58f5d35653926a46cfd0c7cae541dc5e9a0e092c7fe0373937164401ea504e79bea646aef3e0f16f82ba596e064bf2b2cc8528df217def0e6b8974ff2d7952dca23f00149d9b4189a26e057806a67f166922f06db4ce6e19cdaf26b1fa56a7b52b69794ca5624b7dee8f48eba85ae25559334a6af7439a0d58e3b238cb98d501cc026e13fc0269f68b83e006359e5a79f7916096d99fbe600a35a8b55205f631a0a2fe3f13938fdbe4cb259df8a7a69d00594b28249d1764d7b202230c0ca148f6efdfe3108fe38dfd34e5711df4bd741729e138c73faba648361fb53a772d70f8662818764f66302f3314ba96f7c175ec76242b5fb66ff2dd7e81a9bfddf8c58101b30c85fa65239218400300bb7cae9fe6dd4e5827af6c51f506a657aba798068b80283b55149491b49ea8db6c27ea283f0284410098268320e90a7a6508fa9d86f7cc74dfc42688d7e8281692b4f4a66654188f1ef99d1074291c751f57327c93bb1b411bab7e65aa8b26272e211367e80e903796ef0c705856941c9e14940f5925c6dfd7995d6769b7c788ad28125a487594560cd614132be9eb9f74b23f0412cc589ee152ed50adad3ad7722a0f67a3e523798e5fda6dd9eaf4e8407af3f8679efce7ed3fd7f1ff687ad45e2e769ea4cb12ec8eb4c9902b84cc5c4428181a4321379486852a809b0947c464fe5eb261c9d4b74bf0c85e0a92b87933e2bd0ff3538a882fc8460016c5964b963ac67040ab872c438d792c797a9cd57f0f6caea157c7866362dd4f41088f5d02e2bca6a07838a85f1cbef335e0e069641135b4c3e5a055f9fc501859c7c90ea1105faba48a9f6b5d58f6fc3ea487811c760b5848d0aae86fd6c482625087b6831873b26cdae442675fad68b5e904e4ba013fc9ae86f271290671b6c9b65ce00f40e11938384744bed5f4e6ec68e530eb89da516a6d032f979688821893f0920e8b2b51f47081270d0b209c875fa7817f375568e0e08a85b50c3e69a6c5935fda95c43732c2963071ea98cba4382403b95ffa88fcb8b7155685304d8021ba5ab6ce1fb98aea0ac742e69f6039506b4dbaa6af01a0a0dd683717d59373a88b602fc0f3165b1b7817af9490081239d1a2ecdf21b65023bc071fc18aae01ea888182f326969fda2f073219bb135ef632f67a83eb12deb8ee880e8f4bf217e077d83ae9fdbbd8ef4556c5ecd9de9a0387970766a1515ea10099d080eb0f3c31b542fdbb05e2359728c287cc38c98908a8335e2b2f0f32950639670be162075ec4711ca4396ecc32d803195f8992afd430c1e8f9de7810f4bd2708d55eccdf048f87e5e02040a572ec122934a6fcab35091fe94107bf1d1fc19cc28b60cb27ad86c5a2929f4d6781182164c18c86b04ae221746e952d5cf9a26dc9df51f2837bb0d13bdbba32fe810ec3fb6a985c277bc13f1ce5d23285e388ec1a30473d1d6437ed77ca1e42e6c41a6bb81185bf7e7880cbeb13c95ab547f3655787869f608d1e2fc1536dd67163104acbd961a632ce46dcb9ab1d79c7d77ea58c6caa462ca6caa7f4d9365cdcb3703a78d6ed4684c069bbcaf7f9e10f6377652f0bfce0a4204f1dc1dde6e1fcd5dd441749bd6479d90734426a59a749fd1d9c35651b79c21865bb261ad1cf776b4d6556160f1742e7c838824258fd547c98c1ff6967e36a68e2d1e238a582f2a0600a8fffd19d7166959bfdf1387911406b4bf8fdb7095d32eb9c286cf36499f15238ec7fe416b42c9240d6d25c4dd46a024127d688464d1d2ae1726587dd65a43e5133bec63e5b78bcac5b062d149ff1b0a65a73fcb0e0281ddfba3847d6b3170a85e74accce9cc4e5b724dd22ff236149df77f68b2c7511c86b51bf4b0c2d4b78755fe0433ac79480c77fbbdc6a8f388866cffc16f1c7fd28fdaac9649853c2aeb18c2bccd3a687f4854e93dae6fdba1ba7525e6a50ef1030897cbe0e44fc877b1709bf140f2a75c32bfcf3843705b8eced1591f7cf5f026a8a2768f0f98169044fa5e0787a70051ed03f013db08865e35bf492181707cacff3127ffe31ec99c35ebed947f1e6f20fea488399f424034a309b6b0f1dcf26a99346f3e36e004a02f31821c74012056649b7576c3609903ac934ddd1eb7578adaee500412870ac6d1ba0b179282a8def13eb50dd98c212cb4736928ba542eaf0a28c8b56c2977c13e9db017097e5f937f710c1f754e674a3dd014805e47c139a9849b41a9a704b82be90f48d3b6757334cd9f6dca805cfa93254b1e2d6a68865cca329eedafb9e0c73c158484e7d992c35e37cfbea8becaec8e1d358ea37ee757c4f5ce6b1bb1815c3c8d80dd8c97fec1b9d4618b38cfffcc2ae805e848c48a5847f5aca059a15f3b8b687483a8d95ef143544e2b8d0f00e90bc403695213aad03b9656e1a63f8905c22d1e89cd761768aeb0c610d95640ee26aabb9ec22261fc1c82f6596da0157518a48df88f6c65afbfda0ab3d6b1dd6485833ab895877b08c649916e39146f580ef33f524c33db12ff14e0d9595097e6c850894e3910d6fc14c80d3d049222d4b37182ffd0bd876ee93b4f46802f2c80cd7821acddad18560641436815648ad905cf56eba110e54617a9601ef04829cba95193aca589248a5a251c4324c4420ecf12ae04e4f5334c0c2c04e7eccac3466f7be1938668b68e67e2b43bef196729603bea1f5af2d959a49625c0a2304e79dba43f482ea91db3dcae842460f05754cb2f1cb26191d1015405bc5593e227cb3a4dd791027b69389ed99ed468b7fb19abc8923ed2d15bfeba7845c5bc47fafe2ba8d22c7ad17eaf348f9515d85108b08a17ebae461e5520cc54c667b4fc6ee6cf382082e8b51508264eeaa2c966f6d8c28d0be1b9e6757ef9d92499f5984a2ea22f75b0cef8320c3afff7fea3f68682d35cd0a8bd590e7a854e684f7e38362b8b63625ff13b56bbde27722f4b215e5e03e9ec22cc3312b4cb7d04a30118101e26e3ed0d432bead3971bbce729b619e3d6c0e41654837a633f68fea9655078b678f7cc023293ff5b14c1982d5fae0960f686855ff219e8289a865802a23a56383ee09931e0939b5ef5e63fcdc55b5b38882378f6bea2ddea534a7804815a847c9fe95c861be8ed9b34f2f26b0e74aa64e1bfd1be6a943fc7706e98469233a38a37e15635bcb9291ff488e460773ea4378cab865fc478923883961bcee5d71d329990ff3472d0779c1679f41f091437fa4e43bbc95c46a7585c747a77b2ca4f019cc5f65df463b7b0154fbacad87e9e0c5bc0b94227e661e1bd000fd154e4e4ac2d8ffb92cb1e562afd7ca8d5f093ad4ed0185bf1cb56ea1596e8da48e12885e4e13da282aa483cd8fd5cec3eb871711f12663539401f3deae877f51538c09de134600e1d262b808f2c4da5023c87252b27fbf79dbfb901e9966408195c8c2fd6d91833620d0b70ef69ddee6e672d135c0794cc3a42c6dab20756052f15ef26058a1cd01e7fe22d370f708d9dc8c369538e4eed407c4e34fac739dadf35d2ba19e0c25257272023a7aa25a9885ff95c03c52100b1289513cdb519498691c6b780dbcbf4b508e22c6ee708ba7bbe3c2ce961b54261c643d2cba2d2ce880231df714826d5bd45c57f4532fa48e22eade4fac92e03c92f506271285a157712d27dc9b42eed3314a59595705216e8225c946fc4193d42b1203f237fc3e35cd15e797d86f19a44a7e15f1064808ba4aed7004872ed1f5b691fc635b222f6e1d602a0134e87160432732b78e9df76980bbf42713e0508cc7635a605dd949d233a72b3b08f8a5ae9d81675df110993533abbea32c0c63b00961fbf3b6c6e80f086774b3a3ff4a210662d9a71cec43d2ee62ed2fdc56e3225a1f9466da00e1af3ed417ae24b5b5020d37ba949bc5f663a8d3f32b1a0662245711049bd2d03284bc2b6319be35e53e145c3f309b4f5e60ee2ecfe40a454c2b257e6cc80b8600d3bd642b8ccd2bd3c5d49b3de07be953dddfcac96c13019e53f52858defb4ca40da16d1371bdc2064c083586f56fa0dbb8cb6b60909753b8eb1aca6de192b8b21fbc0408f2effc44db01229bd559c74e3ed710859c8c142bbf78b4e3abb84dff73d6ffed99d0d694a13bf21cfdb856dedce5f740ffcd407ca3dea9354e978f8b1cb7cf06c70003997d3ebcd5fa38185698db7e8c184c8eb7b2640c22c0bc8ec51747cc0a0cc706349e548d2f8bd9858ac3962f8965da1742ee22fa31782e9c3d976ee8410075dd48b5850228872ba4510567a136ca1de43f810dad56440adc478c3c6bc160cc9d4c92f50e1ffb29a1c718f79d6123830b09995a71f76fb5fb925fcfd08f2885c74724195841edcf146fdd6ff3f96471ac0feb8ab7eaea640997573afb7c6768383710c60752c37155d52a0d472d4fd3ddcd18c559726257043944c536e36e5d569f09693d915c621e607df38ec29f0e4422613f4e5f45f286afde51f5079a1ee960000bc0a946cb5ccc225eb54f9a3cc113279642193f8369be5ffa1dd3dc42ac13bdee38029c53c8fe1d428116030893e7c49f42af0df6765e23aec30654875633023089fd3918b5390004c7d0812ba8fbfb2040e08abe08e39833c020ce5e5b77960565b1c0062605ce53530f54e0c65a0028df727660657694bc92dc3fc2b392cd0274fb576494118b37eb1efd6d304d45f4f101d6b211b0df806c411512dd2c0ffc3419144c09de70c2ad006b7f68e9a143bdbf2beeb0b3aeb177922e2a26be1d23355c76a05a6d303b2e16866dda6c8e21ca933593a3da91557050eb85c91bd175049a0da1b5651763951aeda3a971b477d6059ce262f21dd22f0b9fcae20a06fc7d3ecb3f56547fa92b512aabbd3d652854afa4837f6a7d8f72370d5c331d1b5d2d3788d05f1279bb5abe7b2ffb972e884c29954515d8aa114b74060f5d6ef8e72b1808c534b53534245f8278a315abb71425a5871839100ff261b167b04a37ed3d3ea8d18cd5d99f74bfee0edaff564f3ab4494f9132bd9d5a2a0f688a4398cd0ed9ba9ec6fe421338ab18ce8a7606c93535b7e629bb694741f7e5f3a1ce91c3248cdb5c4cd556ff09d22b2c65bb5f0a3dac47b089914d5903ad7638c82e6eb36c44dac04fc62b4fe841b01259a7cbba79895752f7e699ac0c8ee313aa6d618c41c5ccd76accc22eb693e3e69f5276537c645009340524f7f2bda0a4facd9b0cc9b3d4a152305211db838d3bdacd84cee76792c4c6ad9f6b1582b962d2ce037c8b2810fa589977b4bcc20adb295bd274df8f9e8d0993e7a0aec91bc1cef4f06c19a88bb3b583cc28e3ea824a21beae3736710a8f7513172a4bce7e6bd8a3117c606ae102533a97d54f8c9e727ae7e07a066cc2028fdccff77350f29a1288dd8e51d718024dae754eb35d32a3404ed2db6c0cc020fcfaad05199d227f019ca680b66e5e7d2f39c03117c3238eefacfed2b3af3ad43fd509172fc83076a40bc0b4bc0da26db657e4a068588e4c82d8574e25e2a53046e472be2c181463a516ba30a5d0fdfb64732e84baf9fc1360f052628e1877de983a4d3e7fdbb6c1029f5eaa7c90b059e7a4c7d2085e3d099e9c1158cbe5928554f0e1c9a3f9bdb3f9e7e0ca1b5e07fd31f6d8cd8", @ANYBLOB="dc70b75fa4b0", @ANYBLOB="001500430024273a5c5cd12b2d7b4028292d2d5e2800000000b45038e4ea0707c6efdf45717fd4c7aafd317ee88a629b425976e48913e14894f214ba5cbc9819098d36f00947a00e7dec9b7e9845388acd27107800000087234b808016e56eb9e01589bb3f82b802c966dc4dad641770ee243a02fdd4ad0d567262a3da499ccf6591f41119c284d165599e9120791efc566340dcb19cd8f4b756032d6fcc6ce3e5ce22fc7b12e15e6583b417e258312505ddf4898109b53937b5a0bbb2050ded5887132ca81768507bade0bd8ce0a20f911586775c"], 0x50d8}}, 0xc000)

24.89752174s ago: executing program 4 (id=1366):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendto$packet(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, 0x0, &(0x7f0000000080))

24.776017151s ago: executing program 4 (id=1367):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000240)={0x4, 0x1, 0x3, 0x3, 0x100, &(0x7f0000001100)="387ed7626d850509a2d6c1aa38f15cd0c234cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae257cf47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c890928831cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a750ecb3421143c5c4ded0f06affc524dcf3418272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955582efa94242065a4c8dd9f939ce9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852802175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284a3e90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def9122c0d2c1e558dc6586958a283762386ecf369274e45eb44504901ef0d00baa91c10a8e44a7e58b4f8c6a1c6b9b5ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7ac5d42cece59181fcb5bad8c24bd9f8f78dd85b82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2b046c6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed590ad1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969d6043db5bd77fd60000001313992c60700005c0c761785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829ed0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1aa1ab704782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f91ac933b6b923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29a814bd8fed1ab6d2846c73345962895d289ac718aacac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"})
r1 = socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000140)='./tracing\x00', 0xa, 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)=')', 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0000d20b060005"], 0x24}}, 0x0)

24.539374793s ago: executing program 4 (id=1368):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/fail_page_alloc/min-order\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='0', 0x1)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008b0000000000000000000000850000001300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000008ea00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9ff03076003008cb89e08f088a8", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005})
r5 = socket$inet(0x2, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r8], 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="46030800030016000c0045"], 0x66)

23.620344876s ago: executing program 4 (id=1370):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x3, 0x5)
mq_open(0x0, 0x42, 0x48, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
r2 = open(&(0x7f0000000380)='./bus\x00', 0x109240, 0x145)
r3 = creat(0x0, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1)
mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000)
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="9b90b0c6633865c048bb336777f6846aa0e4fdaf830fc39d8648c93000000000000000000000000000000000715aff9e6099d88d7f2bdd8cd11129288c4c0386370f298d127a49d70a00e4611cb5bb1c064ec764ba71bfde5e3f2186a77a1ed2a6c65d3ab9b108c3ac4c099e57ee01490d1e325da05a9b45bc37426a6989f535b0b235746248a4eb06a7bb065662603ecb48d31f2ecf6b758b5ac9850bb132f9daa5476fd1093c1b112712c7468422daa113c032a2055972f13a039f083a12a15a0455891b7b2f84a06efe0c1fafb63b743a", @ANYRESHEX=r3, @ANYBLOB="35a7488ff9e2f6641f1d38e6f0bdf150fe81c6e326b51a0ae687b3b418b009319933c1a542d8a9fdd72b5c2b6670545c87bc9550f9f620acad73d12415f554d3d64b770972", @ANYRES64, @ANYRESDEC], 0x2b)
sendfile(0xffffffffffffffff, r2, 0x0, 0x4000000053d2)
sendmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)

12.96642681s ago: executing program 36 (id=1351):
r0 = socket(0xa, 0x2, 0xfff)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048800)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtclass={0x6c, 0x28, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0x3, 0x2}, {0xffff, 0x5066f40b3246344d}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x8, 0xff}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x804}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0xfffffffffffffe2d)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000000280)="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", 0x1f9, 0x0)
setgroups(0x0, 0x0)
r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f00000005c0)=<r8=>0x0, &(0x7f0000000180)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x1bd, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x1}}}, &(0x7f00000004c0))
syz_open_dev$tty20(0xc, 0x4, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x400, 0x1, &(0x7f0000000600))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000062c0)=0xe4)

12.659899396s ago: executing program 6 (id=1393):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, 0x0, &(0x7f0000000080))

12.583829071s ago: executing program 6 (id=1394):
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4}}, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32, @ANYBLOB="400002800300"], 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004)

12.426045482s ago: executing program 6 (id=1395):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x881)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x9d, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
setgroups(0x0, 0x0)
r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040)=0x1000, 0x4)
r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
r10 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=<r11=>0x0)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000180)={0x7, 0xa5, 0x4, 0x2, 0x7, 0x2})
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r10, 0x2)
syz_ublk_setup_queues(r12, r11, &(0x7f0000000540)={0x0, 0xda81, 0x0, 0x3, 0x28e}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd3c, 0x80, 0x2, 0x1af, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdca, 0x200, 0x0, 0x330, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x20, 0x0, 0x20, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x2, 0x1fe}}], 0x4, &(0x7f00000003c0)={0x2e, 0x0, 0x0, r12, 0xc0107524, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, 0x0, '\x00', {0x2, 0xb55, 0x0, 0x0}}, &(0x7f0000001fc0))

10.835231412s ago: executing program 37 (id=1360):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f00000000c0)="4b0003000000", 0x6)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c400)=[{{0x0, 0x0, &(0x7f0000005f00)=[{0x0}, {&(0x7f0000004e80)="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", 0x8f9}, {&(0x7f0000005e80)="55c86e538e72f448faecaf96e0df30e2a67ad4bd5b7a7630093653c08aa259e3563b34f4cca89beedb5a6dc6cf1ba502b0a1e160a95b7b5b43a7a3b7c2be1da83b96f068ba3679ef0afed086ebf5290a1260ba4ff07ed1af81ed017c9db2d6264bc4483628048284502a", 0x6a}], 0x3, &(0x7f000000c140), 0x0, 0x8000}}, {{&(0x7f000000c240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000c3c0)=[{&(0x7f000000c2c0)="b40df7fd4aacc8942acec7e540ae506349088a7c198c5c41be38dad6ebc080602b", 0x21}, {&(0x7f000000c300)="5fccd73e48c22000813bce18d76a23484a633051e93dab3d234662735821e34192b230f45c4b6dc24e8fcdfd14a1118724b6468336c3e7d2ac2cfd84df1ef6788236719bde89bfdd97e8d2a872fef787aeb7cef33be5ad7e865a4b677c36480a7d4891dea80e1f6b4629deb264daee33b8fc0e9b9210830ed6a99774249c76f41f9b660f37f49c2a1fc1321ac64038477132fa594e34cea2bdfa5d4a730fd7c90a", 0xa1}], 0x2, 0x0, 0x0, 0x4000}}], 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000840)=[{0x0}, {0x0}, {&(0x7f00000007c0)=""/128, 0x80}], 0x3, &(0x7f0000000940)=""/107, 0x6b}, 0x3}], 0x1, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r2, r2, 0x0, 0x20000005)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendfile(r4, r2, 0x0, 0x1002000ff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bond0\x00'})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc094)
splice(r5, 0x0, r5, 0x0, 0x2, 0x3)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28)
recvmmsg(r1, 0x0, 0x0, 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x2000})

10.780177759s ago: executing program 6 (id=1397):
syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0)
set_mempolicy(0x3, 0x0, 0x5)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x150, 0x30, 0xb, 0x0, 0x0, {}, [{0x13c, 0x1, [@m_ife={0x138, 0x16, 0x0, 0x0, {{0x8}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_SMAC={0xa, 0x4, @random="549b86fe65e3"}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x10004}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x10000, 0x3, 0x9}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xde, 0x101, 0x7, 0x2, 0x3ff}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xfa0, 0x1, 0x9, 0xd2}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x1ff, 0x0, 0x10000, 0x1}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6d, 0x8, 0x6, 0x4, 0x7}}}]}, {0x33, 0x6, "014c0e448b6de9e0fb1ecc5b75462dfc1113d71d2f96fe52886437ce14b031fd2271cfa2af6ac3e8120a318453fde3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x150}}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000), 0x6)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0)
shutdown(r5, 0x1)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}], 0x10)
setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000140)=0x5, 0x4)
dup(0xffffffffffffffff)

9.510155841s ago: executing program 6 (id=1398):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/fail_page_alloc/min-order\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='0', 0x1)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008b0000000000000000000000850000001300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000008ea00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9ff03076003008cb89e08f088a8", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005})
r5 = socket$inet(0x2, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r8], 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="46030800030016000c0045"], 0x66)

8.248955029s ago: executing program 38 (id=1370):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x3, 0x5)
mq_open(0x0, 0x42, 0x48, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
r2 = open(&(0x7f0000000380)='./bus\x00', 0x109240, 0x145)
r3 = creat(0x0, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1)
mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000)
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="9b90b0c6633865c048bb336777f6846aa0e4fdaf830fc39d8648c93000000000000000000000000000000000715aff9e6099d88d7f2bdd8cd11129288c4c0386370f298d127a49d70a00e4611cb5bb1c064ec764ba71bfde5e3f2186a77a1ed2a6c65d3ab9b108c3ac4c099e57ee01490d1e325da05a9b45bc37426a6989f535b0b235746248a4eb06a7bb065662603ecb48d31f2ecf6b758b5ac9850bb132f9daa5476fd1093c1b112712c7468422daa113c032a2055972f13a039f083a12a15a0455891b7b2f84a06efe0c1fafb63b743a", @ANYRESHEX=r3, @ANYBLOB="35a7488ff9e2f6641f1d38e6f0bdf150fe81c6e326b51a0ae687b3b418b009319933c1a542d8a9fdd72b5c2b6670545c87bc9550f9f620acad73d12415f554d3d64b770972", @ANYRES64, @ANYRESDEC], 0x2b)
sendfile(0xffffffffffffffff, r2, 0x0, 0x4000000053d2)
sendmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)

8.199445384s ago: executing program 6 (id=1400):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0xd)
fchdir(r3)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r5)
close_range(r4, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

3.752017068s ago: executing program 9 (id=1396):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000013c0)={0x2020}, 0x2020)

3.526794685s ago: executing program 9 (id=1403):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000230001000900000001"], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0})
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001040)='syz0\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000140)={0x11100100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)
r5 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24)
sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r5, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})

3.137736086s ago: executing program 8 (id=1405):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047ed, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
r1 = syz_io_uring_setup(0xb28, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3ab}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000180))
io_uring_enter(r1, 0x8a1, 0xb08a, 0x6, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000300)="f6", 0x1, 0x845, 0x0, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f00000002c0)=0x8f, 0x4)
sendto$inet(r2, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff850000000f000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3)
openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000680)="0ca5ac161ae2541e0ff5602427566e18598aec611c87996d108995edde93cac9842fbb23ace316d4ada7a614ef3590992b6dc78a0bac56d4e4ce20b98febcbdcf1bc280e96f6e195c8f13779742bd1355d09a4258efb8d3b6b0eb4e4f0efd1d6d73c0cd4d970d9c1ff6eb7bab6ba", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)='\b', 0x1}], 0x1, 0x0, 0xfe41}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)='Y', 0x1}, {&(0x7f00000000c0)="79a87031a35fedcf53b8b309123d910663f17a44fd754810d2e16d179f36c54cb949cc272e85a7f7b8ab37527180de101e57735de5056379c0404858883600ea472368e4c10a0844a42597586d294a0d2a6e15", 0x53}], 0x2}}], 0x4, 0x4000001)

2.133566796s ago: executing program 8 (id=1406):
mkdir(&(0x7f0000000240)='./file0\x00', 0x1ff)
socket$inet_udp(0x2, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0)
splice(r2, 0x0, r5, 0x0, 0x25a5, 0x0)

1.882748077s ago: executing program 9 (id=1407):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r1, &(0x7f0000000000)="ff", 0x58200, 0x2200)

1.389662104s ago: executing program 9 (id=1408):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
unshare(0x100000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2)
getdents64(r1, &(0x7f00000021c0)=""/59, 0x3b)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00')
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000840)={<r3=>0x0, 0xffff, 0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, <r5=>r1, {<r6=>0xee01, <r7=>0xffffffffffffffff}}, './file0\x00'})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005440)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000680)="165b1873959c7201069035bc23deab09a49f4a82a75a4d037638d9a8d45b53ff751e97aa0f60eb19d0950887b3a67c1a0eb40fa32b7c45a2c9573ca3af13a96a79d5df9c6bb39e54f4f734a46e85551a8979f003466d43acab81e511f5fbe95dcdb86f9663b9898bb73cf08ac0bc83031809b14e6dde20ded2d08c47753d491d37817126658144ae502d9210120eb572455cb29d96e1cafd184321ed4e63a13d4e5defb0da75708863cac34f2f337e707c1361132966b0aa0aa6f74204d632c4214775072d3590b1e48592c6069f006c3ae729ab", 0xd4}, {&(0x7f0000000780)="8619416485307668b0b0bc80fd0c60d085883d09ea287998e1fb2a63fb259070b145288532b57f44fd931be9d7fd784283ecf859d5422d45418bb663d4c29226cc831e635343b12c7dfd6ad3a21081646a2de7d56b00c3fca136aa74b302a27c289e72", 0x63}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="000000002800000000000000b73387", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="14000001000000009b120eaf11ea9a8567ad615009a1c4b791992561f2f3c8da", @ANYRES32=r0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES64=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0], 0x90, 0x40}}, {{0x0, 0x0, &(0x7f0000001b80), 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c0000770000000d0100000001000000", @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x20, 0x801}}, {{&(0x7f0000001f00)=@file={0x1, './file0/../file0/../file0/../file0\x00'}, 0x6e, &(0x7f00000025c0)=[{&(0x7f0000001f80)="3305ee66863b6e5043bf223b80dcbfbbb0d6a70b", 0x14}, {0x0}, {&(0x7f00000020c0)="458f3cd3a35f335bd1ac0eabbd5f18ec3a50407192aa3ffc7d562b67d37f095f70692e898f6a6f036c6672b37552b1b3256fd5f18828fb9c737b07a1632b42dc6c864ef79c73b0df8f6119f29603b1954e3cd47082c48521adfd8597a8d456e63865ba52", 0x64}, {&(0x7f0000002140)="470237942da085a3965dceaa9f3c77325d4124f6d6cc0f3e12279eaa56b6a717b37d4a5f82ec5ef3819a0a51591dff3438cd72dabca547ebd9de368d73f45d37ae1ab002af76f56d5d78706a4cf3214e539b009c4b90e8163a69cad8fe2ba7", 0x5f}, {&(0x7f0000002200)="cf44b7e8467d5493bfd962028890e15b3b834d61c00af896cdc6cbc545f9e1bebbf8be9f809b533a6702d52a", 0x2c}, {&(0x7f0000002240)="52856953e72bff689d24", 0xa}, {&(0x7f0000000580)="514dd00a986883009b1f0fca04d36170dcca1e4e60601ab1d86887dfea60ad0ccaf25e8addf2b226c134a4c476f271d7fb", 0x31}, {0x0}, {&(0x7f0000000900)="5df205bfa4136d1ac2fb562b7192537798a65e3c8a93237d405ac297972742ed02c118c3e9f1efcf93e47841f24c2d8aac98be486cafef7cd53cae64aaae60afa48aef7bc271d1cac6bd800f05d44089b29ca82b91bf85f00a72f550e093e8d939e71c232e9c8e31bf1d", 0x6a}], 0x9, &(0x7f0000002680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x000\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x4040000}}, {{&(0x7f0000002a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005380)=[{&(0x7f0000002a80)="5356b24098294b6eab273796283beb51649ef3f1d813b4e73c262972ccd82fa6aceed963942b119239c524890bdda9a0bc8b0837b2ad1d789f87978d9f909e297ba83d8d", 0x44}, {&(0x7f0000002b00)="6c212694f52aa406dac040718fd674d30fc79b3fb2c042dd9e72a4dc419a9a92599dc0b71442905cbdab2d532268696cb6", 0x31}, {&(0x7f0000002b80)="c916bde3b428b97ec13a1c6fa0fb6e374c3a0ab5396ac0c8f8f6701950112be638221002cdb05d49f92e0305ddafab06a449359e5a70e7b526a9d22281d0f01ccc44e431190ef55ffd8ff252a17e90d8af7578dd08aea333b188e55467361b4de29a9d651bc88f738fe41f54e93901f5b63fbe38708f306dd3c1b687df4e774b87a8e193696d6ed47ffe7cb365cd", 0x8e}, {&(0x7f00000042c0)="d27d94ebe5c2f63b1f6db590b0a85ae88d1ce852a1235402a966b062070b56d2f7caf4e9d43a905503032ada0e3f7dd19db57287632cdecf5c0b5a99bf88e4aa6b0188f0325a1cc6a74de2a7778718474f3a66e1bb3b72cab57461440f4cabfb0bebe24b64c0f730ec71b8cac2bc61e7e55c119db9a11d9b5c0670f22bd6f7e3711b68c376ece584f77aaf19929b3d7449586746e74f3933935c269539a326cb8a64085d15fc84c309711cceb5b6b54dfb541e40fc9a21bb4dc094b3d957f8b20aae3b8ef02a3061e3626ee6c33c804e410662b84e24fc7c0a3d917d8a8b9f1033fe32b352722ff919fecdebee6247527c06be19d9ceb0cc619e427e4d5a9eea9d45750d844dae4c73119fa13055d1b988afe532e48e7d31a41f22a2dd5539f9a7c7cf42af39bbe1eefb3f1141652cd19772c994314dcf4e6f538beb6b42e1ad7a18fac5de166d77f8a87906c0f61f0de55652ec8f264bf5d95b351ecea0f9e5207fe113cf959f07f5c7079b0934d6b6d9b48c9ed76df7aade0aea57515a49007784868c46f62e8be09d739118bfcb228877f52904e77cbcf8cb8a76b4d14efdb626f6daeac491d4ce26b6c356f1b8685ce721b38b681eed2d7627578ef4e05de35d82c108b4ab4f8a42600e7a67210e70ed6363486eec6a7d53026a55fa89bb59f73fcd79171cf2ed238ea3a971c4c22136cbe3109b6c5dfc1fdc7d97f40691871a612e018ff5599e8320126f6a26e2cfce5e8402e44a3d3fc6b31e310904473265b893d617400617f88759be2a38d4960ce297d123c8a00043e47913361b6b90d0e259c49e219005f733da62b7c98a8e0d826734b2966bf4ab0e4774c8adf28a7a4238af85616b638eece6c72889860109d282372497486da6290ea76006cd81ce9d60d968c3fbae08e4f996cf2be6b5ea0ceab925c58b963b37321afd6936231068288320ad2309db7301fdcd199e381c07b2165d8f4748306ac61001edc4533e33867383990a5ee541ea13f0dbc6baf5fb3b6326500855fa348ce5714b9229d9b1d9502df2e4e52c6c9406936fd213c03d271db24bb04f13b9c847cf3d4f262994e1df955e76cf19ed92344d4201e5a65b5ec8224a421a3236f96a681d30910a5d4eae33452ea0aead775ab258464d941e07b8d2944a43a87512e45e3b6bd2c9c0340a001de29fcd2fd3db5b8997724eeabc27756a822f4775813400a167cf031b06b5e2ff097d934c3f9c468235a170ad26c72db6068b8531c93c0122314ed14b82bbf2058644adb86b73d4329e3f4b62cfaea8b7324f39f3503b787ca6ffafb0ea00269dbe331041f729390a4f8d76fdf74fcf16877f3ffa41a2f7b23a1d1930d647b564850e50cc74fae7b8c678dfdd0bf36b2d7714483c93455cf0534a4081423291b130a6c98c4c4cb093d3091f02b5c1cde9ebaf6fa32166559025f80a9a28ecae8619d606d70fb900379a3648dd204afe828becf7707c8615aa265f686863127472d4847b41b1618b778d1ef56ea5bd9b9ec281a3180272e36db13e8c62971ed5c5816dd24b1f83a9205ca29eadd1cf775e1a017b4bc7c7e1ec10b2d47deb4b1dce08054f5ae5eb5ae271352d881deb00203ecf30b17e48a18db49b5903833d0733cdfe12deeff474d6b83e30691ca6849305ca2926cba28f40c26f22a4276dcf39bc2a8213550705020bb38117e49d979291694157b6c0d62b94cacfafac7db13a7a166c25c1692c7eb443ef9c67fadefdd22c385e73d401b439951640b773b766db7ff941d3627143a63e562a3b67f81c476bddfba64ab5e7b7e4714886d66ef0f3c72271a0ee7ff3c942ffbcb0867bf6cf4a41cde811a6c48bd86acf51a3e308e1712de2846c62db651b5ba4cb8a637dc8cfb9072622ad1da167d0cfbed3b07f83efee371f96e1b681727cb3804a69851595269a93eec0f8468636808d662eed2d34ee0e7f140ae3d2b70d32460e965fe83b3c49c44d088b747b937c3751302ec1ec7da70b30a1e8db49b960bc56d25177767424c34d2fe0a982fe65741dc36632d3fafc01262b27b31159dfcc9cd7516804a0044756a96cd10fce88cdc79da00f24b680f4fc420bcd0477f676da34b7c5ff483561c38b5dcc868e71575a00654280e4a4d247079ff485f7e5ee5f2beab51573497d4bdf174256ee412b6104b65057add524e05405752de1699755edf67033c1641398a1b910e273d60465eb01042016b5c8cfc96d3c6ab675c2bdd15b1d2aadc027e15cb625a59d9dd65c3b9423915c0653d7b68127c06a85908bbd9c2ff3920f9e742607af8b0ca49f2ed1835c1c6c365493255a2f8f6457ca8be9bada25a56b9494bf30433a1f7145ba806be4637cedab50c596a969e9393ad2eff3b064057f19ef9e522667ab517f911c53bf4ac293a76d6e8c82472fcf34eb7cde68ad1ec1c4e3123cda878e452ae96ae057b85e85efa2381aa1ff97ec73cde8dc7040d634c9968af6a62708fb337d0d02b6d8de3729d699449bfcf0ab17dced052f6ba7af466288c90e172a1f52bd99e7143828c950824deacbc46dd3dec2f3961f91af6395fb0ce9cf44dd8ee64890670cdc5883ce3f1656fdff7fdad1e363bd2d3d7f898ac984030252aa6ee87a23acda176c8123982403f47cd0d805ce798300018d035009be6e659809f05bfe7cb163526433fe1e67ef49ae48bd2b1b24a1ce9de95547fa57b033995eb5faae94cb2b070729d7f76f244b9edeeafba837493a9d6ba30f596e66fe7938a80cea5273e39e9b2416fba51fc4a31b2b9be91731e8e6e455816866b412b9c7bd3663d8aa1257bb9dd5cec7e4f3e7b9d453c049531b930223d3f82dad96357bce3da4fca9c9ede8e1646a7e65406088c55205cf85782bfca28559b642c6996164c9db4220d82967a9d5728a3bdb68f6f6bb2a0f01ecb43c701ffaee1ff9994c3b9a7c6303bbd512a360d706daee473b53681a0055675412ba46599de2dd8b71d735d148a63e12e251d191687988fa3798cd1464d9c24e60e9cc02af6759e2bdfb3a0a84c9dbadd6b2e3a50e339c4702a04648f5ede424b678cb9fd877d2bd854d23161d29c1e453b1241068931bea0e2172cb09b2f5d9c82e0a34ad95c9e83cb547373c5bdb97a3be7ac6da952769ffc934ca86816676ae3a983c0254abd148bb5a6d6c744e551c38e8a7c3954476109248201db2cfb8c2503195ff0a1f1259fe8fd42c2db79880ae74988fd7177f6eb6a02d98ac0dce6d02d103bda5cdecb107566e598ecf3abfa40ff3e53889f669964f45b9aacdf7ea2c8ce8ae64c269ae20e0260a66ba4a392c125714901e9086c0088258d443910adc39ebcead01f7436ed1761cb72d458c3c90df9e38dfcd3789b323d77811e5c128b4595b7790b2198a5666fb7812ea17b16c1aed7a2bc7b59cbe2ea0a45b8a116cadf08fde7879d6e8e9d6b002c93da784b8e2f6d5775298573086d44b67406edd7aa9136ae6c558f79b9678e4c9625aecc62f37a11299c14183c0ba3c5c689af4c738343f2e305a5bc8b17bead4cba9ac58002c4c03f48e73d77f0e3a1237ab63333f58f62fa22c0b40dceb48bad6e19948a1b94aa9fefd55a7c71e67ca223b9007e2ff8e51", 0xa00}, {&(0x7f00000052c0)='?m', 0x2}, {&(0x7f0000005300)="4899425f5245930cea52ad3b970b0a3f3a07c55642327a3e9347b8668378f2d448ec343af88ddf68db75169cd8138eb98ea832971f1ba869ee8ffb50fc5b86451a382a58", 0x44}], 0x6, &(0x7f0000005400)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, r7}}}, @rights={{0xc}}], 0x24, 0x44000}}], 0x4, 0x894)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000140), &(0x7f00000001c0)=0x40)
sendfile(r9, r0, 0x0, 0x1002000ff)
close_range(r10, 0xffffffffffffffff, 0x2)
writev(0xffffffffffffffff, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="68df833fbebfdd542b4a5df0344353d1cd6e196dd1683178e5b36cb751d120c053f42c3dc0ab12db2deb57bfa5b85fbd63278b3237bd5fb4c0fe04ada109d94f8ed3ee635005c7d8c05248a9314dfeab0911c96b5a4339478020829470208a975da189527bcaa640bfcd93107219a1dbb9b9c377ba2c8ce0fd159df33a22bb0b62f137297d81ffc563ee0aec69d0740478818416de918dcfd23098660ec24cbacf0711", @ANYRESDEC=r12, @ANYRESOCT, @ANYRES16=r8, @ANYRESOCT=r11], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)

1.389280459s ago: executing program 0 (id=1399):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex, 0x2e, 0x1, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000340), &(0x7f00000003c0), 0x0}, 0x40)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0))
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5)
setreuid(0xee00, 0x0)
write$sequencer(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000440)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x54)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xf000, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x13)
chdir(0x0)
open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r1, 0x5, 0x80000})
unshare(0x6a040000)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
listen(r0, 0x6)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)

960.326009ms ago: executing program 0 (id=1409):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047ed, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
r1 = syz_io_uring_setup(0xb28, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3ab}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000180))
io_uring_enter(r1, 0x8a1, 0xb08a, 0x6, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000300)="f6", 0x1, 0x845, 0x0, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f00000002c0)=0x8f, 0x4)
sendto$inet(r2, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff850000000f000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3)
openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000680)="0ca5ac161ae2541e0ff5602427566e18598aec611c87996d108995edde93cac9842fbb23ace316d4ada7a614ef3590992b6dc78a0bac56d4e4ce20b98febcbdcf1bc280e96f6e195c8f13779742bd1355d09a4258efb8d3b6b0eb4e4f0efd1d6d73c0cd4d970d9c1ff6eb7bab6ba", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)='\b', 0x1}], 0x1, 0x0, 0xfe41}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)='Y', 0x1}, {&(0x7f00000000c0)="79a87031a35fedcf53b8b309123d910663f17a44fd754810d2e16d179f36c54cb949cc272e85a7f7b8ab37527180de101e57735de5056379c0404858883600ea472368e4c10a0844a42597586d294a0d2a6e15", 0x53}], 0x2}}], 0x4, 0x4000001)

669.124179ms ago: executing program 8 (id=1410):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x4, 0x7, 0xfffdfc01, 0xfffffffb, 0x9, '\a\x00\b\x00', 0x80000001, 0xf})
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x1, {0x2011}, 0x2})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r5 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x1000}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000))
r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
read(r6, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r8, 0x10c, 0x5, 0x0, &(0x7f0000000180))
sendmsg$nl_route_sched(r7, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x300, 0x200000, 0x104, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0xb228, 0x2, 0x8, 0x85}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

376.811109ms ago: executing program 8 (id=1411):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f00000013c0)={0x2020}, 0x2020)

150.591051ms ago: executing program 8 (id=1412):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
clock_gettime(0x1, &(0x7f0000000100))
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0xa, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x200000c2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x14000, 0x20)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0xc0003, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r2)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYRES16=r3, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x808}, 0x24040090)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
write$proc_mixer(r0, &(0x7f00000001c0)=[{'OGAIN', @void}], 0x6)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNISCRNMAP(r5, 0x5410, &(0x7f00000010c0)=""/4096)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="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", @ANYBLOB="dc70b75fa4b0", @ANYBLOB="001500430024273a5c5cd12b2d7b4028292d2d5e2800000000b45038e4ea0707c6efdf45717fd4c7aafd317ee88a629b425976e48913e14894f214ba5cbc9819098d36f00947a00e7dec9b7e9845388acd27107800000087234b808016e56eb9e01589bb3f82b802c966dc4dad641770ee243a02fdd4ad0d567262a3da499ccf6591f41119c284d165599e9120791efc566340dcb19cd8f4b756032d6fcc6ce3e5ce22fc7b12e15e6583b417e258312505ddf4898109b53937b5a0bbb2050ded5887132ca81768507bade0bd8ce0a20f911586775c"], 0x50d8}}, 0xc000)

0s ago: executing program 8 (id=1413):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x820080, &(0x7f00000006c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'upperdir'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@uid_lt}, {@fowner_gt}]})
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000100)={{0x1, 0x7ff}, 0x18}, 0x10)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000))
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7)
creat(&(0x7f00000001c0)='./file0/file1\x00', 0x80)
chdir(&(0x7f0000000000)='./bus\x00')
open$dir(&(0x7f0000000040)='./file1\x00', 0x200, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='net/anycast6\x00')
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa5a1, 0x42401}, [@IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x80000000}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000844)

kernel console output (not intermixed with test programs):

slave bond_slave_0): Enslaving as an active interface with an up link
[  229.433709][ T9263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.467265][ T9263] team0: Port device team_slave_0 added
[  229.470741][ T9263] team0: Port device team_slave_1 added
[  229.494376][ T9263] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.497461][ T9263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.508323][ T9263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.514631][ T9263] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.517953][ T9263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.529060][ T9263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.561260][ T9263] hsr_slave_0: entered promiscuous mode
[  229.563722][ T9263] hsr_slave_1: entered promiscuous mode
[  229.565961][ T9263] debugfs: 'hsr0' already exists in 'hsr'
[  229.567849][ T9263] Cannot create hsr debugfs directory
[  229.669189][ T9263] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  229.673672][ T9263] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  229.676426][ T9263] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  229.680326][ T9263] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  229.685789][ T9263] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  229.691197][ T9263] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  229.699546][ T9263] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  229.706271][ T9263] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  229.727037][ T9263] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.727129][ T9263] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.727252][ T9263] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.727309][ T9263] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.786744][ T9263] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.796462][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.799682][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.816254][ T9263] 8021q: adding VLAN 0 to HW filter on device team0
[  229.827655][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.829118][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.853490][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.853599][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.881573][    T9] usb usb40-port1: unable to enumerate USB device
[  230.032198][ T1345] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  230.051119][ T9247] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  230.063218][ T1345] zl10353_read_register: readreg error (reg=127, ret==-110)
[  230.071832][ T1345] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  230.125022][ T1345] usb 7-1: USB disconnect, device number 14
[  230.250705][ T9263] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.280216][   T11] block nbd0: Possible stuck request ffff8880275de000: control (read@0,1024B). Runtime 60 seconds
[  230.280289][   T11] block nbd0: Possible stuck request ffff8880275de1c0: control (read@1024,3072B). Runtime 60 seconds
[  230.405416][ T9263] veth0_vlan: entered promiscuous mode
[  230.418699][ T9263] veth1_vlan: entered promiscuous mode
[  230.439322][ T9263] veth0_macvtap: entered promiscuous mode
[  230.445337][ T9263] veth1_macvtap: entered promiscuous mode
[  230.455110][ T9263] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.460012][ T9263] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.501401][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.501476][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.501516][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.501535][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.645871][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.645909][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.751078][ T5739] Bluetooth: hci0: command tx timeout
[  230.871517][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.871551][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.591882][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.6.881'.
[  231.591969][ T9345] bond0: ARP target 8.0.0.0 is already present
[  231.591990][ T9345] bond0: option arp_ip_target: invalid value (8)
[  231.599987][ T9345] macvlan2: entered promiscuous mode
[  231.600578][ T9345] bridge0: entered promiscuous mode
[  231.876232][ T9352] netlink: 184 bytes leftover after parsing attributes in process `syz.2.884'.
[  232.830925][ T5739] Bluetooth: hci0: command tx timeout
[  233.935470][ T9370] netlink: 244 bytes leftover after parsing attributes in process `syz.6.888'.
[  234.172903][ T9375] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10)
[  234.172931][ T9375] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  234.173641][ T9375] vhci_hcd vhci_hcd.0: Device attached
[  234.341028][ T5839] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  234.461056][ T6808] usb 50-1: SetAddress Request (2) to port 0
[  234.461848][ T6808] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd
[  234.490933][ T5839] usb 9-1: Using ep0 maxpacket: 8
[  234.493210][ T5839] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  234.497329][ T5839] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  234.499876][ T5839] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  234.503506][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  234.503525][ T5839] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  234.503537][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  234.503549][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  234.503562][ T5839] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  234.503575][ T5839] usb 9-1: config 168 interface 0 has no altsetting 0
[  234.529987][ T5839] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  234.532862][ T5839] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  234.532913][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  234.532941][ T5839] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  234.532968][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  234.532994][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  234.533021][ T5839] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  234.533049][ T5839] usb 9-1: config 168 interface 0 has no altsetting 0
[  234.560331][ T5839] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  234.562784][ T5839] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  234.566115][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  234.569622][ T5839] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  234.573309][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  234.576781][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  234.580216][ T5839] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  234.585126][ T5839] usb 9-1: config 168 interface 0 has no altsetting 0
[  234.595193][ T5839] usb 9-1: string descriptor 0 read error: -22
[  234.597222][ T5839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.635218][ T5839] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  234.666688][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'.
[  234.794851][ T9396] net_ratelimit: 391 callbacks suppressed
[  234.794945][ T9396] netlink: zone id is out of range
[  234.794963][ T9396] netlink: zone id is out of range
[  234.794980][ T9396] netlink: zone id is out of range
[  234.794998][ T9396] netlink: zone id is out of range
[  234.795015][ T9396] netlink: zone id is out of range
[  234.795033][ T9396] netlink: zone id is out of range
[  234.795052][ T9396] netlink: zone id is out of range
[  234.795070][ T9396] netlink: zone id is out of range
[  234.795087][ T9396] netlink: zone id is out of range
[  234.795107][ T9396] netlink: zone id is out of range
[  234.912477][ T9378] vhci_hcd: connection reset by peer
[  234.914736][   T12] vhci_hcd vhci_hcd.6: stop threads
[  234.914778][   T12] vhci_hcd vhci_hcd.6: release socket
[  234.914814][   T12] vhci_hcd vhci_hcd.6: disconnect device
[  235.143658][ T9401] ntfs3(nullb0): Primary boot signature is not NTFS.
[  235.146783][ T9401] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  236.637178][ T9417] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  237.137698][ T6749] usb 9-1: USB disconnect, device number 12
[  237.458730][ T5839] wiimote 0005:057E:0306.000A: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  237.458893][ T5839] wiimote 0005:057E:0306.000A: New device registered
[  237.812295][ T9438] wiimote 0005:057E:0306.000A: Device removed
[  238.510972][ T5839] wiimote 0005:057E:0306.000A: detected device: Nintendo Wii Remote (Gen 1)
[  238.555419][ T5839] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input45
[  238.558973][ T5839] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input46
[  238.585173][ T5839] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input44
[  239.440962][ T9496] /dev/nullb0: Can't open blockdev
[  239.551221][ T6808] usb 50-1: device descriptor read/8, error -110
[  239.771538][ T7075] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  239.921743][ T7075] usb 6-1: Using ep0 maxpacket: 8
[  239.922271][ T7075] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  239.923176][ T7075] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.923197][ T7075] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  239.923210][ T7075] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  239.924989][ T7075] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  239.925001][ T7075] usb 6-1: Product: syz
[  239.925009][ T7075] usb 6-1: Manufacturer: syz
[  239.925016][ T7075] usb 6-1: SerialNumber: syz
[  239.927699][ T7075] usb 6-1: config 0 descriptor??
[  239.963435][ T6808] usb usb50-port1: attempt power cycle
[  239.991418][ T7075] rc_core: IR keymap rc-imon-rsc not found
[  239.991450][ T7075] Registered IR keymap rc-empty
[  239.993503][ T7075] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0
[  239.996115][ T7075] input: iMON Station as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input49
[  240.171440][ T9501] FAULT_INJECTION: forcing a failure.
[  240.171440][ T9501] name failslab, interval 1, probability 0, space 0, times 0
[  240.171609][ T9501] CPU: 2 UID: 0 PID: 9501 Comm: syz.1.918 Not tainted syzkaller #0 PREEMPT(full) 
[  240.171634][ T9501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  240.171642][ T9501] Call Trace:
[  240.171647][ T9501]  <TASK>
[  240.171651][ T9501]  dump_stack_lvl+0x100/0x190
[  240.171670][ T9501]  should_fail_ex.cold+0x5/0xa
[  240.171701][ T9501]  should_failslab+0xc2/0x120
[  240.171716][ T9501]  __kmalloc_noprof+0xfc/0x840
[  240.171728][ T9501]  ? tomoyo_encode2+0xfb/0x3c0
[  240.171748][ T9501]  tomoyo_encode2+0xfb/0x3c0
[  240.171766][ T9501]  tomoyo_encode+0x29/0x50
[  240.171782][ T9501]  tomoyo_realpath_from_path+0x18c/0x690
[  240.171802][ T9501]  tomoyo_path_number_perm+0x23c/0x580
[  240.171815][ T9501]  ? tomoyo_path_number_perm+0x22e/0x580
[  240.171830][ T9501]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  240.171845][ T9501]  ? get_pid_task+0x106/0x250
[  240.171860][ T9501]  ? __lock_acquire+0x4c5/0x1ec0
[  240.171881][ T9501]  ? __fget_files+0x34/0x3d0
[  240.171893][ T9501]  ? find_held_lock+0x2b/0x80
[  240.171903][ T9501]  ? __fget_files+0x215/0x3d0
[  240.171913][ T9501]  ? hook_file_ioctl_common+0x140/0x440
[  240.171927][ T9501]  ? __fget_files+0x215/0x3d0
[  240.171940][ T9501]  ? __fget_files+0x21f/0x3d0
[  240.171953][ T9501]  security_file_ioctl_compat+0xd3/0x230
[  240.171969][ T9501]  __ia32_compat_sys_ioctl+0xc2/0x360
[  240.171988][ T9501]  __do_fast_syscall_32+0x13a/0x8b0
[  240.172003][ T9501]  ? lockdep_hardirqs_on+0x7d/0x110
[  240.172018][ T9501]  do_fast_syscall_32+0x32/0x70
[  240.172032][ T9501]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  240.172046][ T9501] RIP: 0023:0xf7f68fec
[  240.172059][ T9501] Code: Unable to access opcode bytes at 0xf7f68fc2.
[  240.172064][ T9501] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  240.172093][ T9501] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040284504
[  240.172100][ T9501] RDX: 0000000080004e40 RSI: 0000000000000000 RDI: 0000000000000000
[  240.172107][ T9501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  240.172113][ T9501] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  240.172119][ T9501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  240.172133][ T9501]  </TASK>
[  240.175279][ T9501] ERROR: Out of memory at tomoyo_realpath_from_path.
[  240.250046][ T7075] usb 6-1: USB disconnect, device number 13
[  240.521414][ T6808] usb usb50-port1: unable to enumerate USB device
[  240.674801][ T9520] ntfs3(nullb0): Primary boot signature is not NTFS.
[  240.677171][ T9520] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  241.386639][   T43] audit: type=1800 audit(1788300561.050:323): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.921" name=10 dev="sda1" ino=2040 res=0 errno=0
[  242.042212][   T43] audit: type=1800 audit(1788300561.710:324): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.927" name="(" dev="sda1" ino=2038 res=0 errno=0
[  242.433289][ T9564] FAULT_INJECTION: forcing a failure.
[  242.433289][ T9564] name failslab, interval 1, probability 0, space 0, times 0
[  242.433331][ T9564] CPU: 2 UID: 0 PID: 9564 Comm: syz.6.934 Not tainted syzkaller #0 PREEMPT(full) 
[  242.433355][ T9564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  242.433363][ T9564] Call Trace:
[  242.433367][ T9564]  <TASK>
[  242.433372][ T9564]  dump_stack_lvl+0x100/0x190
[  242.433390][ T9564]  should_fail_ex.cold+0x5/0xa
[  242.433405][ T9564]  should_failslab+0xc2/0x120
[  242.433420][ T9564]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  242.433432][ T9564]  ? __alloc_skb+0x5b7/0x710
[  242.433443][ T9564]  ? __alloc_skb+0x140/0x710
[  242.433456][ T9564]  __alloc_skb+0x140/0x710
[  242.433467][ T9564]  ? __alloc_skb+0x5b7/0x710
[  242.433477][ T9564]  ? __pfx___alloc_skb+0x10/0x10
[  242.433493][ T9564]  netlink_alloc_large_skb+0x69/0x150
[  242.433505][ T9564]  netlink_sendmsg+0x680/0xda0
[  242.433518][ T9564]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.433530][ T9564]  ? apparmor_socket_sendmsg+0x165/0x280
[  242.433545][ T9564]  ____sys_sendmsg+0xa4d/0xbe0
[  242.433560][ T9564]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.433571][ T9564]  ? __pfx_____sys_sendmsg+0x10/0x10
[  242.433592][ T9564]  ___sys_sendmsg+0x190/0x1e0
[  242.433609][ T9564]  ? __pfx____sys_sendmsg+0x10/0x10
[  242.433636][ T9564]  ? find_held_lock+0x2b/0x80
[  242.433656][ T9564]  __sys_sendmsg+0x160/0x210
[  242.433669][ T9564]  ? __pfx___sys_sendmsg+0x10/0x10
[  242.433685][ T9564]  ? __pfx_ksys_write+0x10/0x10
[  242.433699][ T9564]  __do_fast_syscall_32+0x13a/0x8b0
[  242.433713][ T9564]  ? lockdep_hardirqs_on+0x7d/0x110
[  242.433728][ T9564]  do_fast_syscall_32+0x32/0x70
[  242.433742][ T9564]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  242.433756][ T9564] RIP: 0023:0xf702efec
[  242.433768][ T9564] Code: Unable to access opcode bytes at 0xf702efc2.
[  242.433773][ T9564] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  242.433784][ T9564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0
[  242.433791][ T9564] RDX: 0000000004040810 RSI: 0000000000000000 RDI: 0000000000000000
[  242.433797][ T9564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  242.433803][ T9564] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  242.433809][ T9564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  242.433823][ T9564]  </TASK>
[  242.940865][   T25] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  243.090885][   T25] usb 6-1: Using ep0 maxpacket: 32
[  243.091432][   T25] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  243.092332][   T25] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  243.092356][   T25] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  243.092370][   T25] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  243.092383][   T25] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  243.093983][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.093996][   T25] usb 6-1: Product: syz
[  243.094003][   T25] usb 6-1: Manufacturer: syz
[  243.094011][   T25] usb 6-1: SerialNumber: syz
[  243.110413][    C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  243.156571][   T25] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input51
[  243.332455][ T9577] netlink: 168 bytes leftover after parsing attributes in process `syz.1.937'.
[  243.339981][ T9577] Console: switching to colour dummy device 80x25
[  243.405903][ T9584] program syz.1.937 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  243.443134][   T25] imon:send_packet: packet tx failed (-71)
[  243.463875][   T25] imon 6-1:155.0: panel buttons/knobs setup failed
[  243.465229][   T25] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  243.465260][   T25]  (id 0x00)
[  243.520982][   T25] rc_core: IR keymap rc-imon-pad not found
[  243.521026][   T25] Registered IR keymap rc-empty
[  243.522354][   T25] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  243.522365][   T25] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  243.522592][   T25] imon:send_packet: packet tx failed (-71)
[  243.538418][ T9589] ntfs3(nullb0): Primary boot signature is not NTFS.
[  243.538522][ T9589] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  243.541965][   T25] imon 6-1:155.0: remote input dev register failed
[  243.544763][   T25] imon 6-1:155.0: imon_init_intf0: rc device setup failed
[  243.564330][   T25] imon 6-1:155.0: unable to initialize intf0, err 0
[  243.564381][   T25] imon:imon_probe: failed to initialize context!
[  243.564757][   T25] imon 6-1:155.0: unable to register, err -19
[  243.568213][   T25] usb 6-1: USB disconnect, device number 14
[  244.881553][ T9614] binder: 9612:9614 unknown command 4114231296
[  244.881601][ T9614] binder: 9612:9614 ioctl c0306201 800004c0 returned -22
[  245.134799][ T9626] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.134878][ T9626] bridge0: port 2(bridge_slave_1) entered listening state
[  245.135010][ T9626] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.135073][ T9626] bridge0: port 1(bridge_slave_0) entered listening state
[  245.148132][ T9626] 8021q: adding VLAN 0 to HW filter on device .`
[  245.302103][ T9629] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20000
[  245.689426][ T9634] jffs2: notice: (9634) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  246.685482][ T9653] netlink: 'syz.2.959': attribute type 1 has an invalid length.
[  246.685515][ T9653] netlink: 224 bytes leftover after parsing attributes in process `syz.2.959'.
[  247.475949][ T9658] jffs2: notice: (9658) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  247.854751][ T9680] Bluetooth: MGMT ver 1.23
[  248.184711][ T9684] netlink: 15143 bytes leftover after parsing attributes in process `syz.2.967'.
[  248.549460][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.972'.
[  248.584786][ T9695] FAULT_INJECTION: forcing a failure.
[  248.584786][ T9695] name failslab, interval 1, probability 0, space 0, times 0
[  248.584855][ T9695] CPU: 2 UID: 0 PID: 9695 Comm: syz.6.972 Not tainted syzkaller #0 PREEMPT(full) 
[  248.584880][ T9695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  248.584890][ T9695] Call Trace:
[  248.584895][ T9695]  <TASK>
[  248.584900][ T9695]  dump_stack_lvl+0x100/0x190
[  248.584920][ T9695]  should_fail_ex.cold+0x5/0xa
[  248.584936][ T9695]  should_failslab+0xc2/0x120
[  248.584953][ T9695]  __kmalloc_cache_noprof+0x91/0x6d0
[  248.584973][ T9695]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  248.584987][ T9695]  ? io_uring_alloc_task_context+0x1a3/0x656
[  248.585009][ T9695]  io_uring_alloc_task_context+0x1a3/0x656
[  248.585030][ T9695]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[  248.585051][ T9695]  ? alloc_file_pseudo+0x1ee/0x290
[  248.585069][ T9695]  __io_uring_add_tctx_node.cold+0x15/0x20a
[  248.585087][ T9695]  ? security_inode_init_security_anon+0x7b/0x230
[  248.585104][ T9695]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[  248.585125][ T9695]  ? __anon_inode_getfile+0x17c/0x280
[  248.585146][ T9695]  io_uring_setup.cold+0x1998/0x1c5e
[  248.585167][ T9695]  ? __pfx_io_uring_setup+0x10/0x10
[  248.585183][ T9695]  ? __pfx_do_futex+0x10/0x10
[  248.585203][ T9695]  ? xfd_validate_state+0x129/0x190
[  248.585226][ T9695]  __ia32_sys_io_uring_setup+0xc2/0x170
[  248.585242][ T9695]  __do_fast_syscall_32+0x13a/0x8b0
[  248.585260][ T9695]  do_fast_syscall_32+0x32/0x70
[  248.585276][ T9695]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  248.585292][ T9695] RIP: 0023:0xf702efec
[  248.585306][ T9695] Code: Unable to access opcode bytes at 0xf702efc2.
[  248.585312][ T9695] RSP: 002b:00000000f541d4bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9
[  248.585324][ T9695] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 0000000080000340
[  248.585332][ T9695] RDX: 00000000f7190fd7 RSI: 0000000000000001 RDI: 00000000f541d53c
[  248.585339][ T9695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  248.585346][ T9695] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  248.585353][ T9695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  248.585369][ T9695]  </TASK>
[  248.611120][ T7075] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  248.744937][ T9706] bond0: option arp_interval: invalid value ()
[  248.748471][ T9706] bond0: option arp_interval: allowed values 0 - 2147483647
[  248.762211][ T7075] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  248.762274][ T7075] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  248.763429][ T7075] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.763460][ T7075] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.763513][ T7075] usb 6-1: config 0 interface 0 has no altsetting 0
[  248.764303][ T7075] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.764325][ T7075] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.764338][ T7075] usb 6-1: config 0 interface 0 has no altsetting 0
[  248.772619][ T7075] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.772646][ T7075] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.772660][ T7075] usb 6-1: config 0 interface 0 has no altsetting 0
[  248.773527][ T7075] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.773551][ T7075] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.773564][ T7075] usb 6-1: config 0 interface 0 has no altsetting 0
[  248.774325][ T7075] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.774347][ T7075] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.774361][ T7075] usb 6-1: config 0 interface 0 has no altsetting 0
[  248.775135][ T7075] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.775158][ T7075] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.775172][ T7075] usb 6-1: config 0 interface 0 has no altsetting 0
[  248.780178][ T7075] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.780213][ T7075] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.780235][ T7075] usb 6-1: config 0 interface 0 has no altsetting 0
[  248.782846][ T7075] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.782869][ T7075] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.782883][ T7075] usb 6-1: config 0 interface 0 has no altsetting 0
[  248.784545][ T7075] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  248.784559][ T7075] usb 6-1: Product: syz
[  248.784567][ T7075] usb 6-1: Manufacturer: syz
[  248.784574][ T7075] usb 6-1: SerialNumber: syz
[  248.787796][ T7075] usb 6-1: config 0 descriptor??
[  248.805939][ T7075] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  249.234347][   T25] usb 6-1: USB disconnect, device number 15
[  249.237985][   T25] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  249.294392][ T9721] syzkaller0: entered promiscuous mode
[  249.297825][ T9721] syzkaller0: entered allmulticast mode
[  249.307730][ T9721] netlink: 14 bytes leftover after parsing attributes in process `syz.6.979'.
[  249.724150][ T9724] ntfs3(nullb0): Primary boot signature is not NTFS.
[  249.746725][ T9724] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  249.760520][ T9716] Process accounting resumed
[  249.870250][ T9727] ntfs3(nullb0): Primary boot signature is not NTFS.
[  249.870400][ T9727] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  250.483619][ T9741] futex_wake_op: syz.6.986 tries to shift op by 144; fix this program
[  250.501323][ T9741] netlink: 36 bytes leftover after parsing attributes in process `syz.6.986'.
[  251.498466][ T9772] FAULT_INJECTION: forcing a failure.
[  251.498466][ T9772] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  251.498511][ T9772] CPU: 2 UID: 0 PID: 9772 Comm: syz.2.996 Not tainted syzkaller #0 PREEMPT(full) 
[  251.498535][ T9772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  251.498544][ T9772] Call Trace:
[  251.498548][ T9772]  <TASK>
[  251.498552][ T9772]  dump_stack_lvl+0x100/0x190
[  251.498570][ T9772]  should_fail_ex.cold+0x5/0xa
[  251.498585][ T9772]  _copy_from_user+0x2e/0xd0
[  251.498598][ T9772]  move_addr_to_kernel+0x65/0x170
[  251.498616][ T9772]  __sys_bind+0x11d/0x260
[  251.498633][ T9772]  ? __pfx___sys_bind+0x10/0x10
[  251.498650][ T9772]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  251.498682][ T9772]  ? ksys_write+0x1ac/0x250
[  251.498700][ T9772]  ? __pfx_ksys_write+0x10/0x10
[  251.498712][ T9772]  __ia32_sys_bind+0x71/0xb0
[  251.498729][ T9772]  ? lockdep_hardirqs_on+0x7d/0x110
[  251.498743][ T9772]  __do_fast_syscall_32+0x13a/0x8b0
[  251.498758][ T9772]  ? lockdep_hardirqs_on+0x7d/0x110
[  251.498772][ T9772]  do_fast_syscall_32+0x32/0x70
[  251.498787][ T9772]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  251.498802][ T9772] RIP: 0023:0xf707efec
[  251.498814][ T9772] Code: Unable to access opcode bytes at 0xf707efc2.
[  251.498820][ T9772] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000169
[  251.498831][ T9772] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100
[  251.498839][ T9772] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  251.498845][ T9772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  251.498852][ T9772] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  251.498859][ T9772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  251.498872][ T9772]  </TASK>
[  251.581387][ T9776] netlink: 'syz.6.997': attribute type 4 has an invalid length.
[  251.882074][ T5810] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 17408 - 0
[  251.882121][ T5810] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.241026][ T1345] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  252.394774][ T1345] usb 11-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  252.398687][ T1345] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.398743][ T1345] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  252.398771][ T1345] usb 11-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  252.411650][ T1345] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  252.411685][ T1345] usb 11-1: Product: syz
[  252.411713][ T1345] usb 11-1: Manufacturer: syz
[  252.424841][ T9780] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  252.428196][ T1345] garmin_gps 11-1:1.0: Garmin GPS usb/tty converter detected
[  252.445732][ T1345] usb 11-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  252.738239][   T43] audit: type=1326 audit(1788300572.370:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.1.1005" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f68fec code=0x0
[  252.885739][ T1345] usb 11-1: USB disconnect, device number 2
[  252.898530][ T1345] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  252.903096][ T1345] garmin_gps 11-1:1.0: device disconnected
[  253.652444][   T43] audit: type=1326 audit(1788300573.320:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.6.1012" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0
[  253.690393][ T9820] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1011'.
[  254.657176][ T9830] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1015'.
[  255.234967][ T1439] ieee802154 phy0 wpan0: encryption failed: -22
[  255.892669][ T9852] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  255.892707][ T9852] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  255.897833][ T9852] vhci_hcd vhci_hcd.0: Device attached
[  255.917168][ T9853] vhci_hcd: connection closed
[  255.917338][   T12] vhci_hcd vhci_hcd.2: stop threads
[  255.917376][   T12] vhci_hcd vhci_hcd.2: release socket
[  255.917409][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  256.160323][ T6766] logitech-hidpp-device 0003:046D:C082.000B: hidraw1: USB HID v0.00 Device [syz0] on syz0
[  256.262280][ T9860] fido_id[9860]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  256.498644][ T9861] fuse: Bad value for 'fd'
[  257.378350][ T9873] rdma_rxe: rxe_newlink: failed to add lo
[  257.437044][ T1179] IPVS: starting estimator thread 0...
[  257.543664][ T9878] IPVS: using max 44 ests per chain, 105600 per kthread
[  257.992596][ T5739] Bluetooth: Unknown BR/EDR signaling command 0x10
[  257.992656][ T5739] Bluetooth: Wrong link type (-22)
[  257.996647][ T5739] Bluetooth: Unknown BR/EDR signaling command 0x11
[  257.996659][ T5739] Bluetooth: Wrong link type (-22)
[  258.050007][ T9896] FAULT_INJECTION: forcing a failure.
[  258.050007][ T9896] name failslab, interval 1, probability 0, space 0, times 0
[  258.059723][ T9896] CPU: 2 UID: 0 PID: 9896 Comm: syz.1.1035 Not tainted syzkaller #0 PREEMPT(full) 
[  258.059756][ T9896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  258.059766][ T9896] Call Trace:
[  258.059771][ T9896]  <TASK>
[  258.059776][ T9896]  dump_stack_lvl+0x100/0x190
[  258.059800][ T9896]  should_fail_ex.cold+0x5/0xa
[  258.059818][ T9896]  should_failslab+0xc2/0x120
[  258.059836][ T9896]  kmem_cache_alloc_noprof+0x92/0x6a0
[  258.059848][ T9896]  ? __pfx_map_id_range_down+0x10/0x10
[  258.059864][ T9896]  ? security_inode_alloc+0x3b/0x2c0
[  258.059881][ T9896]  security_inode_alloc+0x3b/0x2c0
[  258.059897][ T9896]  inode_init_always_gfp+0xc6f/0xfb0
[  258.059913][ T9896]  alloc_inode+0x8e/0x250
[  258.059930][ T9896]  new_inode+0x22/0x1c0
[  258.059947][ T9896]  devpts_pty_new+0xca/0x770
[  258.059960][ T9896]  ? __pfx_devpts_pty_new+0x10/0x10
[  258.059971][ T9896]  ? ptmx_open+0x1ad/0x360
[  258.060016][ T9896]  ptmx_open+0x1d9/0x360
[  258.060037][ T9896]  ? __pfx_ptmx_open+0x10/0x10
[  258.060056][ T9896]  chrdev_open+0x234/0x6a0
[  258.060069][ T9896]  ? __pfx_apparmor_file_open+0x10/0x10
[  258.060088][ T9896]  ? __pfx_chrdev_open+0x10/0x10
[  258.060103][ T9896]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  258.060122][ T9896]  do_dentry_open+0x6ab/0x14d0
[  258.060137][ T9896]  ? __pfx_chrdev_open+0x10/0x10
[  258.060156][ T9896]  vfs_open+0x82/0x3f0
[  258.060173][ T9896]  path_openat+0x19fa/0x2440
[  258.060243][ T9896]  ? __pfx_path_openat+0x10/0x10
[  258.060267][ T9896]  do_file_open+0x20e/0x430
[  258.060284][ T9896]  ? __pfx_do_file_open+0x10/0x10
[  258.060308][ T9896]  ? _raw_spin_unlock+0x28/0x50
[  258.060323][ T9896]  ? alloc_fd+0x471/0x7a0
[  258.060341][ T9896]  do_sys_openat2+0x10f/0x1e0
[  258.060357][ T9896]  ? __pfx_do_sys_openat2+0x10/0x10
[  258.060373][ T9896]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  258.060393][ T9896]  __ia32_compat_sys_openat+0x12d/0x210
[  258.060411][ T9896]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  258.060435][ T9896]  __do_fast_syscall_32+0x13a/0x8b0
[  258.060454][ T9896]  do_fast_syscall_32+0x32/0x70
[  258.060470][ T9896]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  258.060485][ T9896] RIP: 0023:0xf7f68fec
[  258.060500][ T9896] Code: Unable to access opcode bytes at 0xf7f68fc2.
[  258.060506][ T9896] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  258.060518][ T9896] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040
[  258.060526][ T9896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  258.060534][ T9896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  258.060541][ T9896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  258.060549][ T9896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  258.060564][ T9896]  </TASK>
[  258.580533][ T9904] zonefs (nullb1) ERROR: Not a zoned block device
[  258.849441][ T9908] FAULT_INJECTION: forcing a failure.
[  258.849441][ T9908] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  258.849494][ T9908] CPU: 0 UID: 0 PID: 9908 Comm: syz.1.1040 Not tainted syzkaller #0 PREEMPT(full) 
[  258.849528][ T9908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  258.849540][ T9908] Call Trace:
[  258.849547][ T9908]  <TASK>
[  258.849554][ T9908]  dump_stack_lvl+0x100/0x190
[  258.849579][ T9908]  should_fail_ex.cold+0x5/0xa
[  258.849663][ T9908]  _copy_from_user+0x2e/0xd0
[  258.849683][ T9908]  __sys_bpf+0x2f5/0x4a30
[  258.849712][ T9908]  ? __pfx___sys_bpf+0x10/0x10
[  258.849728][ T9908]  ? lock_acquire+0x1d1/0x380
[  258.849748][ T9908]  ? get_pid_task+0x2a/0x250
[  258.849765][ T9908]  ? find_held_lock+0x2b/0x80
[  258.849782][ T9908]  ? get_pid_task+0xfc/0x250
[  258.849798][ T9908]  ? get_pid_task+0xfc/0x250
[  258.849820][ T9908]  ? proc_fail_nth_write+0x9f/0x220
[  258.849838][ T9908]  ? find_held_lock+0x2b/0x80
[  258.849855][ T9908]  ? rcu_read_lock_any_held+0x6a/0x90
[  258.849874][ T9908]  ? find_held_lock+0x2b/0x80
[  258.849891][ T9908]  ? ksys_write+0x190/0x250
[  258.849908][ T9908]  ? ksys_write+0x190/0x250
[  258.849924][ T9908]  ? lock_acquire+0x1d1/0x380
[  258.849956][ T9908]  ? fput+0x7c/0x100
[  258.849978][ T9908]  ? __ia32_sys_bpf+0xcc/0x170
[  258.849994][ T9908]  __ia32_sys_bpf+0xcc/0x170
[  258.850012][ T9908]  ? __do_fast_syscall_32+0xb3/0x8b0
[  258.850056][ T9908]  __do_fast_syscall_32+0x13a/0x8b0
[  258.850081][ T9908]  ? lockdep_hardirqs_on+0x7d/0x110
[  258.850104][ T9908]  do_fast_syscall_32+0x32/0x70
[  258.850127][ T9908]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  258.850148][ T9908] RIP: 0023:0xf7f68fec
[  258.850165][ T9908] Code: Unable to access opcode bytes at 0xf7f68fc2.
[  258.850177][ T9908] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  258.850195][ T9908] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000480
[  258.850207][ T9908] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  258.850218][ T9908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  258.850229][ T9908] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  258.850238][ T9908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  258.850257][ T9908]  </TASK>
[  258.875351][   T43] audit: type=1800 audit(1788300578.530:327): pid=9897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1036" name=10 dev="sda1" ino=2040 res=0 errno=0
[  259.108699][ T9911] fuse: Unknown parameter '¶fd0x0000000000000009'
[  259.382662][ T9911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1041'.
[  260.070921][ T6766] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  260.231745][ T6766] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  260.235910][ T6766] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x6 has an invalid bInterval 0, changing to 4
[  260.235955][ T6766] usb 6-1: config 0 interface 0 has no altsetting 0
[  260.243708][ T6766] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  260.246623][ T6766] usb 6-1: Product: syz
[  260.248381][ T6766] usb 6-1: Manufacturer: syz
[  260.250076][ T6766] usb 6-1: SerialNumber: syz
[  260.255776][ T6766] usb 6-1: config 0 descriptor??
[  260.267947][ T6766] usb 6-1: selecting invalid altsetting 0
[  260.354991][   T11] block nbd0: Possible stuck request ffff8880275de000: control (read@0,1024B). Runtime 90 seconds
[  260.355034][   T11] block nbd0: Possible stuck request ffff8880275de1c0: control (read@1024,3072B). Runtime 90 seconds
[  260.381809][ T9936] net_ratelimit: 384 callbacks suppressed
[  260.381860][ T9936] netlink: zone id is out of range
[  260.381879][ T9936] netlink: zone id is out of range
[  260.381896][ T9936] netlink: zone id is out of range
[  260.381914][ T9936] netlink: zone id is out of range
[  260.381932][ T9936] netlink: zone id is out of range
[  260.381950][ T9936] netlink: zone id is out of range
[  260.381971][ T9936] netlink: zone id is out of range
[  260.381989][ T9936] netlink: zone id is out of range
[  260.382007][ T9936] netlink: zone id is out of range
[  260.382026][ T9936] netlink: zone id is out of range
[  260.748801][ T6766] usb 6-1: USB disconnect, device number 16
[  261.261027][ T5818] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  261.264320][ T9944] 9p: Bad value for 'rfdno'
[  261.433686][ T5818] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  261.437995][ T5818] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  261.438038][ T5818] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  261.438071][ T5818] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.450324][ T9940] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  261.464210][ T5818] usb 11-1: Quirk or no altset; falling back to MIDI 1.0
[  261.569641][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.569691][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.600859][ T6766] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  261.771814][ T6766] usb 9-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  261.773986][ T6766] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.774005][ T6766] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.774024][ T6766] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.808178][ T5818] usb 11-1: USB disconnect, device number 3
[  262.199898][ T6766] wacom 0003:056A:033B.000C: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[  262.242594][ T6766] wacom 0003:056A:033B.000C: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0
[  262.249686][ T6766] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/0003:056A:033B.000C/input/input53
[  262.482646][ T6766] usb 9-1: USB disconnect, device number 13
[  262.668451][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'.
[  262.673669][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'.
[  262.679952][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'.
[  263.170902][ T6749] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  263.323089][ T6749] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00
[  263.327431][ T6749] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  263.341896][ T6749] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.341937][ T6749] usb 7-1: Product: syz
[  263.341968][ T6749] usb 7-1: Manufacturer: syz
[  263.341994][ T6749] usb 7-1: SerialNumber: syz
[  263.375231][ T6749] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  263.379993][ T6749] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 87
[  263.388206][ T6749] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7
[  263.392723][ T6749] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81
[  263.399493][ T6749] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 82
[  263.403987][ T6749] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1
[  263.407126][ T6749] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[  263.407182][ T6749] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 85
[  263.407230][ T6749] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 5
[  263.417517][ T6749] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  263.424442][ T6749] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 83
[  263.427519][ T6749] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[  263.430298][ T6749] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 3
[  263.435156][ T6749] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4
[  263.438226][ T6749] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 86
[  263.438284][ T6749] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  263.449528][ T6749] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  263.457142][ T9991] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1068'.
[  263.486857][ T9991] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1068'.
[  263.486898][ T9991] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22)
[  263.524661][ T9990] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1068'.
[  263.524696][ T9990] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1068'.
[  263.531452][ T9990] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22)
[  263.578156][ T9981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.578437][ T9981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.805773][ T6749] usb 7-1: USB disconnect, device number 15
[  263.813729][ T6749] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  263.827235][ T6749] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  263.843836][ T6749] keyspan 7-1:1.0: device disconnected
[  264.148727][T10002] atomic_op ffff88802b05e1e0 conn xmit_atomic 0000000000000000
[  264.150181][T10002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1069'.
[  264.150248][T10002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1069'.
[  265.847877][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1076'.
[  266.076294][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'.
[  266.076408][T10027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  266.082743][T10027] batman_adv: batadv0: Removing interface: batadv_slave_0
[  266.121008][T10028] tipc: Started in network mode
[  266.121044][T10028] tipc: Node identity b6121ed3a54d, cluster identity 4711
[  266.121656][T10028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.240912][T10028] syzkaller0: entered promiscuous mode
[  266.240948][T10028] syzkaller0: entered allmulticast mode
[  266.243275][T10028] tipc: Resetting bearer <eth:syzkaller0>
[  266.515705][T10026] tipc: Resetting bearer <eth:syzkaller0>
[  268.416937][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'.
[  268.417025][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'.
[  268.540162][T10066] net_ratelimit: 782 callbacks suppressed
[  268.540213][T10066] netlink: zone id is out of range
[  268.540231][T10066] netlink: zone id is out of range
[  268.540249][T10066] netlink: zone id is out of range
[  268.540266][T10066] netlink: zone id is out of range
[  268.540284][T10066] netlink: zone id is out of range
[  268.540301][T10066] netlink: zone id is out of range
[  268.540322][T10066] netlink: zone id is out of range
[  268.540340][T10066] netlink: zone id is out of range
[  268.540358][T10066] netlink: zone id is out of range
[  268.540376][T10066] netlink: zone id is out of range
[  270.006149][ T1179] IPVS: starting estimator thread 0...
[  270.066687][T10095] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1097'.
[  270.103095][T10092] IPVS: using max 44 ests per chain, 105600 per kthread
[  270.531793][T10026] tipc: Disabling bearer <eth:syzkaller0>
[  270.546310][ T6749] tipc: Node number set to 325000915
[  271.320947][ T6749] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  271.471163][ T6749] usb 6-1: Using ep0 maxpacket: 8
[  271.476537][ T6749] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  271.480585][ T6749] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.480621][ T6749] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.480652][ T6749] usb 6-1: config 0 interface 0 has no altsetting 0
[  271.480683][ T6749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.498054][ T6749] usb 6-1: config 0 descriptor??
[  271.945554][T10118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.951225][T10125] jffs2: notice: (10125) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  271.970350][T10118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.995302][ T6749] usbhid 6-1:0.0: can't add hid device: -71
[  271.995405][ T6749] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  272.013391][ T6749] usb 6-1: USB disconnect, device number 17
[  272.312490][ T6766] usb 11-1: new high-speed USB device number 4 using dummy_hcd
[  272.462692][ T6766] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  272.467466][ T6766] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  272.471456][ T6766] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  272.475400][ T6766] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.490940][T10132] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  272.500975][ T6766] usb 11-1: Quirk or no altset; falling back to MIDI 1.0
[  272.927026][ T5839] usb 11-1: USB disconnect, device number 4
[  273.266443][T10146] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1115'.
[  275.101050][   T25] usb 11-1: new high-speed USB device number 5 using dummy_hcd
[  275.225307][T10177] netlink: 34 bytes leftover after parsing attributes in process `syz.4.1126'.
[  275.251382][   T25] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  275.255354][   T25] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  275.260954][   T25] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  275.264402][   T25] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.278962][T10175] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  275.296729][   T25] usb 11-1: Quirk or no altset; falling back to MIDI 1.0
[  275.487065][T10186] usb 1-1: USB disconnect, device number 2
[  275.498332][   T25] usb 11-1: USB disconnect, device number 5
[  275.557453][T10189] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1792.0), cmd(3)
[  275.581669][T10189] device-mapper: ioctl: Invalid ioctl structure: name m, dev eb000000000000
[  275.642018][T10186] hub 1-0:1.0: USB hub found
[  275.647325][T10186] hub 1-0:1.0: 6 ports detected
[  275.711614][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  275.713196][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  275.792025][ T1129] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  275.814142][ T1345] usb 1-1: new high-speed USB device number 3 using ehci-pci
[  275.827088][ T1129] ata1.00: configured for UDMA/100
[  275.843878][T10194] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1130'.
[  275.981768][ T1345] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  275.996011][ T1345] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  275.998750][ T1345] usb 1-1: Product: QEMU USB Tablet
[  276.000891][ T1345] usb 1-1: Manufacturer: QEMU
[  276.002692][ T1345] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  276.047970][ T1345] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000D/input/input58
[  276.126381][ T1345] hid-generic 0003:0627:0001.000D: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  276.166378][T10202] jffs2: notice: (10202) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  276.650317][T10210] input: syz1 as /devices/virtual/input/input59
[  276.897256][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'.
[  276.926773][T10219] bond1: entered allmulticast mode
[  276.928870][T10219] 8021q: adding VLAN 0 to HW filter on device bond1
[  277.316185][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'.
[  277.483760][T10229] netlink: 'syz.2.1138': attribute type 10 has an invalid length.
[  277.625268][T10229] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  277.638747][T10229] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  277.875696][T10232] futex_wake_op: syz.6.1140 tries to shift op by 144; fix this program
[  278.460922][ T5818] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[  278.642306][ T5818] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  278.644040][ T5818] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  278.644069][ T5818] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  278.644100][ T5818] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.647847][T10235] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  278.654381][ T5818] usb 11-1: Quirk or no altset; falling back to MIDI 1.0
[  278.862471][ T5818] usb 11-1: USB disconnect, device number 6
[  279.361839][T10261] futex_wake_op: syz.2.1150 tries to shift op by 144; fix this program
[  279.654033][ T6766] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  279.804719][ T6766] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  279.805618][ T6766] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  279.806404][ T6766] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  279.808037][ T6766] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.808050][ T6766] usb 11-1: Product: syz
[  279.808058][ T6766] usb 11-1: Manufacturer: syz
[  279.808066][ T6766] usb 11-1: SerialNumber: syz
[  279.815003][ T6766] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected
[  279.820531][ T6766] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  279.826266][ T6766] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  280.123852][T10277] jffs2: notice: (10277) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  280.513535][ T6766] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  280.681541][ T6766] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  280.698366][ T6766] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  280.703745][ T6766] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  280.851045][ T7075] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  280.934703][ T6766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.934810][ T6766] usb 6-1: Product: syz
[  280.934864][ T6766] usb 6-1: Manufacturer: syz
[  280.934873][ T6766] usb 6-1: SerialNumber: syz
[  281.002038][ T7075] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  281.006446][ T7075] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  281.010555][ T7075] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  281.014527][ T7075] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.113257][T10295] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  281.271978][ T7075] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  281.429351][ T7075] usb 7-1: USB disconnect, device number 16
[  281.543532][ T6766] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected
[  281.547099][ T6766] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2
[  281.550312][ T6766] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3
[  282.038493][T10305] jffs2: notice: (10305) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  282.276652][T10309] FAULT_INJECTION: forcing a failure.
[  282.276652][T10309] name fail_futex, interval 1, probability 0, space 0, times 1
[  282.281656][T10309] CPU: 2 UID: 0 PID: 10309 Comm: syz.2.1165 Not tainted syzkaller #0 PREEMPT(full) 
[  282.281687][T10309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  282.281697][T10309] Call Trace:
[  282.281703][T10309]  <TASK>
[  282.281711][T10309]  dump_stack_lvl+0x100/0x190
[  282.281734][T10309]  should_fail_ex.cold+0x5/0xa
[  282.281750][T10309]  ? bpf_lsm_mmap_addr+0x9/0x30
[  282.281770][T10309]  get_futex_key+0x1d0/0x14f0
[  282.281791][T10309]  ? __pfx_get_futex_key+0x10/0x10
[  282.281811][T10309]  ? lock_acquire+0x1d1/0x380
[  282.281830][T10309]  futex_wake+0xf4/0x5e0
[  282.281842][T10309]  ? bpf_lsm_current_getlsmprop_subj+0x9/0x10
[  282.281863][T10309]  ? __pfx_futex_wake+0x10/0x10
[  282.281878][T10309]  ? up_write+0x2dc/0x5b0
[  282.281899][T10309]  do_futex+0x2b2/0x440
[  282.281918][T10309]  ? __pfx_do_futex+0x10/0x10
[  282.281932][T10309]  ? __fget_files+0x21f/0x3d0
[  282.281948][T10309]  __ia32_sys_futex_time32+0x2f4/0x470
[  282.281965][T10309]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  282.281980][T10309]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  282.282000][T10309]  __do_fast_syscall_32+0x13a/0x8b0
[  282.282021][T10309]  do_fast_syscall_32+0x32/0x70
[  282.282036][T10309]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  282.282051][T10309] RIP: 0023:0xf707efec
[  282.282069][T10309] Code: Unable to access opcode bytes at 0xf707efc2.
[  282.282074][T10309] RSP: 002b:00000000f546d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  282.282086][T10309] RAX: ffffffffffffffda RBX: 00000000f7474f8c RCX: 0000000000000081
[  282.282094][T10309] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473
[  282.282101][T10309] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000
[  282.282108][T10309] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  282.282115][T10309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  282.282130][T10309]  </TASK>
[  282.434726][T10265] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110
[  282.434822][T10265] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110
[  282.435210][T10265] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32
[  282.439516][T10284] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -32
[  282.443010][T10284] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32
[  282.443076][T10284] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32
[  282.445154][T10284] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32
[  282.448392][ T6808] usb 11-1: USB disconnect, device number 7
[  282.465629][ T6808] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  282.468470][ T6808] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  282.468842][ T6808] ti_usb_3410_5052 11-1:2.0: device disconnected
[  283.535723][   T25] usb 6-1: USB disconnect, device number 18
[  283.550748][   T25] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2
[  283.561477][   T25] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3
[  283.561876][   T25] ti_usb_3410_5052 6-1:2.0: device disconnected
[  288.475037][T10413] jffs2: notice: (10413) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  289.030885][ T7075] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  289.181635][ T7075] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  289.186803][ T7075] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  289.186863][ T7075] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  289.186897][ T7075] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.197934][T10418] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  289.222401][ T7075] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  289.504162][ T6766] usb 7-1: USB disconnect, device number 17
[  290.445776][   T11] block nbd0: Possible stuck request ffff8880275de000: control (read@0,1024B). Runtime 120 seconds
[  290.445867][   T11] block nbd0: Possible stuck request ffff8880275de1c0: control (read@1024,3072B). Runtime 120 seconds
[  291.257004][T10440] net_ratelimit: 1172 callbacks suppressed
[  291.257073][T10440] netlink: zone id is out of range
[  291.257098][T10440] netlink: zone id is out of range
[  291.257117][T10440] netlink: zone id is out of range
[  291.257136][T10440] netlink: zone id is out of range
[  291.257154][T10440] netlink: zone id is out of range
[  291.257173][T10440] netlink: zone id is out of range
[  291.257194][T10440] netlink: zone id is out of range
[  291.257212][T10440] netlink: zone id is out of range
[  291.257230][T10440] netlink: zone id is out of range
[  291.257250][T10440] netlink: zone id is out of range
[  292.561173][ T6766] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  292.721849][ T6766] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  292.722809][ T6766] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  292.723635][ T6766] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  292.725628][ T6766] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.725644][ T6766] usb 7-1: Product: syz
[  292.725653][ T6766] usb 7-1: Manufacturer: syz
[  292.725662][ T6766] usb 7-1: SerialNumber: syz
[  292.736542][ T6766] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected
[  292.740002][ T6766] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  292.746148][ T6766] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  293.111222][ T6766] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  293.261112][ T6766] usb 11-1: Using ep0 maxpacket: 16
[  293.262920][ T6766] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  293.271771][ T6766] usb 11-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config
[  293.272065][ T6766] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  293.283062][ T6766] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  293.283105][ T6766] usb 11-1: Product: syz
[  293.283195][ T6766] usb 11-1: Manufacturer: syz
[  293.283220][ T6766] usb 11-1: SerialNumber: syz
[  293.298642][ T6766] usb 11-1: config 0 descriptor??
[  293.347347][T10462] netlink: 'syz.1.1204': attribute type 1 has an invalid length.
[  293.510935][ T1345] usb 11-1: USB disconnect, device number 8
[  295.075675][T10504] fuse: Bad value for 'rootmode'
[  295.351238][   T25] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  295.391585][T10452] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110
[  295.395176][T10452] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32
[  295.409147][T10452] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32
[  295.418361][T10452] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32
[  295.428433][ T1345] usb 7-1: USB disconnect, device number 18
[  295.441821][ T1345] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  295.457247][ T1345] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  295.464078][ T1345] ti_usb_3410_5052 7-1:2.0: device disconnected
[  295.501469][   T25] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  295.505893][   T25] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  295.510518][   T25] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  295.515983][   T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.518669][   T25] usb 9-1: Product: syz
[  295.520249][   T25] usb 9-1: Manufacturer: syz
[  295.520261][   T25] usb 9-1: SerialNumber: syz
[  295.528999][   T25] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected
[  295.536948][   T25] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  295.544656][   T25] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  297.632316][T10506] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110
[  297.654176][ T7075] usb 9-1: USB disconnect, device number 14
[  297.775921][ T7075] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  297.797403][ T7075] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  297.814656][ T7075] ti_usb_3410_5052 9-1:2.0: device disconnected
[  298.022456][ T5739] Bluetooth: Unknown BR/EDR signaling command 0x10
[  298.028803][ T5739] Bluetooth: Wrong link type (-22)
[  298.029219][ T5739] Bluetooth: Unknown BR/EDR signaling command 0x11
[  298.029243][ T5739] Bluetooth: Wrong link type (-22)
[  298.029314][ T5739] Bluetooth: hci0: link tx timeout
[  298.029408][ T5739] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  298.490234][T10532] net_ratelimit: 385 callbacks suppressed
[  298.490329][T10532] netlink: zone id is out of range
[  298.490355][T10532] netlink: zone id is out of range
[  298.490362][T10532] netlink: zone id is out of range
[  298.490368][T10532] netlink: zone id is out of range
[  298.490375][T10532] netlink: zone id is out of range
[  298.490381][T10532] netlink: zone id is out of range
[  298.490389][T10532] netlink: zone id is out of range
[  298.490394][T10532] netlink: zone id is out of range
[  298.490401][T10532] netlink: zone id is out of range
[  298.490408][T10532] netlink: zone id is out of range
[  300.111766][ T5739] Bluetooth: hci0: command 0x0419 tx timeout
[  300.198966][ T7075] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  300.352618][ T7075] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  300.361182][ T7075] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  300.361238][ T7075] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  300.361288][ T7075] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.379141][T10551] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  300.391323][ T7075] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  300.747559][ T7075] usb 7-1: USB disconnect, device number 19
[  301.293697][ T7075] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  301.448686][ T7075] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  301.453723][ T7075] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  301.458115][ T7075] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  301.463691][ T7075] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.463727][ T7075] usb 9-1: Product: syz
[  301.463757][ T7075] usb 9-1: Manufacturer: syz
[  301.463781][ T7075] usb 9-1: SerialNumber: syz
[  301.487065][ T7075] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected
[  301.494921][ T7075] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  301.500601][ T7075] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  301.556515][T10561] usb 1-1: USB disconnect, device number 3
[  301.607825][T10562] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1792.0), cmd(3)
[  301.633798][T10561] hub 1-0:1.0: USB hub found
[  301.635717][T10561] hub 1-0:1.0: 6 ports detected
[  301.800909][ T7075] usb 1-1: new high-speed USB device number 4 using ehci-pci
[  301.999783][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1230'.
[  302.191205][ T5094] Bluetooth: hci0: command 0x0419 tx timeout
[  302.828630][ T7075] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  303.448610][ T7075] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  303.448718][ T7075] usb 1-1: Product: QEMU USB Tablet
[  303.448730][ T7075] usb 1-1: Manufacturer: QEMU
[  303.448739][ T7075] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  303.595054][ T7075] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000E/input/input70
[  303.614403][ T7075] hid-generic 0003:0627:0001.000E: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  304.281003][ T5094] Bluetooth: hci0: command 0x0419 tx timeout
[  304.532298][T10555] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110
[  304.532660][T10555] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32
[  304.532784][T10555] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32
[  304.533949][T10555] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32
[  304.536789][   T25] usb 9-1: USB disconnect, device number 15
[  304.552069][   T25] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  304.559510][   T25] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  304.579920][   T25] ti_usb_3410_5052 9-1:2.0: device disconnected
[  304.813572][T10583] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  305.793367][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.793614][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  306.050556][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'.
[  306.222730][T10608] overlayfs: missing 'lowerdir'
[  309.925421][ T5739] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  309.938257][ T5739] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  309.943901][ T5739] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  309.947923][ T5739] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.951682][ T5739] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  310.772025][T10649] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.772112][T10649] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.772207][T10649] bridge_slave_0: entered allmulticast mode
[  310.773102][T10649] bridge_slave_0: entered promiscuous mode
[  310.788109][T10649] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.791207][T10649] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.794987][T10649] bridge_slave_1: entered allmulticast mode
[  310.799165][T10649] bridge_slave_1: entered promiscuous mode
[  310.897867][T10649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.903821][T10649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.986844][T10649] team0: Port device team_slave_0 added
[  310.996654][T10649] team0: Port device team_slave_1 added
[  311.066477][T10649] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.066526][T10649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  311.066574][T10649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.070042][T10649] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.070053][T10649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  311.070068][T10649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.226826][T10649] hsr_slave_0: entered promiscuous mode
[  311.232333][T10649] hsr_slave_1: entered promiscuous mode
[  311.235964][T10649] debugfs: 'hsr0' already exists in 'hsr'
[  311.239301][T10649] Cannot create hsr debugfs directory
[  311.445882][T10685] usb 1-1: USB disconnect, device number 4
[  311.775666][T10685] hub 1-0:1.0: USB hub found
[  311.778136][T10685] hub 1-0:1.0: 6 ports detected
[  311.814079][T10649] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  311.820344][T10649] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  311.821437][T10649] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  311.831798][T10649] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  311.832413][T10649] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  311.837620][T10649] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  311.839490][T10649] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  311.844674][T10649] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  311.896116][T10649] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.904804][T10649] 8021q: adding VLAN 0 to HW filter on device team0
[  311.913048][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.913118][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.916944][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.916987][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.950961][ T1345] usb 1-1: new high-speed USB device number 5 using ehci-pci
[  311.972164][ T6766] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  312.031183][ T5094] Bluetooth: hci5: command tx timeout
[  312.111070][ T6766] usb 11-1: device descriptor read/64, error -71
[  312.122086][ T1345] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  312.146142][ T1345] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  312.149991][ T1345] usb 1-1: Product: QEMU USB Tablet
[  312.152273][ T1345] usb 1-1: Manufacturer: QEMU
[  312.154114][ T1345] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  312.191928][ T1345] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000F/input/input75
[  312.308282][ T1345] hid-generic 0003:0627:0001.000F: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  312.364464][ T6766] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  312.464788][T10649] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.501430][ T6766] usb 11-1: device descriptor read/64, error -71
[  312.574029][T10722] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1268'.
[  312.612391][ T6766] usb usb11-port1: attempt power cycle
[  312.868879][T10649] veth0_vlan: entered promiscuous mode
[  312.886116][T10649] veth1_vlan: entered promiscuous mode
[  312.934591][T10649] veth0_macvtap: entered promiscuous mode
[  312.941646][T10649] veth1_macvtap: entered promiscuous mode
[  312.952431][T10649] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.970283][T10649] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.976132][ T5783] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.976345][ T5783] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.976489][ T5783] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.976539][ T5783] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.982453][ T6766] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[  313.013013][ T6766] usb 11-1: device descriptor read/8, error -71
[  313.037847][T10731] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1792.0), cmd(3)
[  313.119062][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.119113][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.219898][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.219938][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.251111][ T6766] usb 11-1: new high-speed USB device number 12 using dummy_hcd
[  313.272025][ T6766] usb 11-1: device descriptor read/8, error -71
[  313.381657][ T6766] usb usb11-port1: unable to enumerate USB device
[  313.511808][T10735] net_ratelimit: 384 callbacks suppressed
[  313.511875][T10735] netlink: zone id is out of range
[  313.511900][T10735] netlink: zone id is out of range
[  313.511920][T10735] netlink: zone id is out of range
[  313.511937][T10735] netlink: zone id is out of range
[  313.511955][T10735] netlink: zone id is out of range
[  313.511974][T10735] netlink: zone id is out of range
[  313.511995][T10735] netlink: zone id is out of range
[  313.512014][T10735] netlink: zone id is out of range
[  313.512032][T10735] netlink: zone id is out of range
[  313.512050][T10735] netlink: zone id is out of range
[  314.115780][ T5094] Bluetooth: hci5: command tx timeout
[  314.728836][T10756] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1792.0), cmd(3)
[  315.187377][T10777] smc: net device vlan1 applied user defined pnetid SYZ2
[  316.190992][ T5094] Bluetooth: hci5: command tx timeout
[  316.676618][ T1439] ieee802154 phy0 wpan0: encryption failed: -22
[  316.771120][ T6808] usb 11-1: new high-speed USB device number 13 using dummy_hcd
[  316.911352][ T6808] usb 11-1: device descriptor read/64, error -71
[  317.151961][ T6808] usb 11-1: new high-speed USB device number 14 using dummy_hcd
[  317.166591][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1291'.
[  317.407384][ T6808] usb 11-1: device descriptor read/64, error -71
[  317.638089][ T6808] usb usb11-port1: attempt power cycle
[  317.733997][T10807] FAULT_INJECTION: forcing a failure.
[  317.733997][T10807] name failslab, interval 1, probability 0, space 0, times 0
[  317.734065][T10807] CPU: 2 UID: 0 PID: 10807 Comm: syz.7.1292 Not tainted syzkaller #0 PREEMPT(full) 
[  317.734105][T10807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  317.734121][T10807] Call Trace:
[  317.734128][T10807]  <TASK>
[  317.734136][T10807]  dump_stack_lvl+0x100/0x190
[  317.734171][T10807]  should_fail_ex.cold+0x5/0xa
[  317.734203][T10807]  should_failslab+0xc2/0x120
[  317.734231][T10807]  __kmalloc_noprof+0xfc/0x840
[  317.734253][T10807]  ? __pfx_dynamic_dname+0x10/0x10
[  317.734285][T10807]  ? tomoyo_encode2+0xfb/0x3c0
[  317.734341][T10807]  tomoyo_encode2+0xfb/0x3c0
[  317.734378][T10807]  tomoyo_encode+0x29/0x50
[  317.734408][T10807]  tomoyo_realpath_from_path+0x18c/0x690
[  317.734446][T10807]  tomoyo_path_number_perm+0x23c/0x580
[  317.734472][T10807]  ? tomoyo_path_number_perm+0x22e/0x580
[  317.734503][T10807]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  317.734531][T10807]  ? get_pid_task+0x106/0x250
[  317.734563][T10807]  ? __lock_acquire+0x4c5/0x1ec0
[  317.734604][T10807]  ? __fget_files+0x34/0x3d0
[  317.734625][T10807]  ? find_held_lock+0x2b/0x80
[  317.734648][T10807]  ? __fget_files+0x215/0x3d0
[  317.734669][T10807]  ? hook_file_ioctl_common+0x140/0x440
[  317.734697][T10807]  ? __fget_files+0x215/0x3d0
[  317.734721][T10807]  ? __fget_files+0x21f/0x3d0
[  317.734749][T10807]  security_file_ioctl_compat+0xd3/0x230
[  317.734779][T10807]  __ia32_compat_sys_ioctl+0xc2/0x360
[  317.734815][T10807]  __do_fast_syscall_32+0x13a/0x8b0
[  317.734844][T10807]  ? lockdep_hardirqs_on+0x7d/0x110
[  317.734872][T10807]  do_fast_syscall_32+0x32/0x70
[  317.734902][T10807]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  317.734928][T10807] RIP: 0023:0xf7f07fec
[  317.734952][T10807] Code: Unable to access opcode bytes at 0xf7f07fc2.
[  317.734961][T10807] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  317.734983][T10807] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b1a
[  317.734995][T10807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  317.735009][T10807] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  317.735020][T10807] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  317.735034][T10807] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  317.735062][T10807]  </TASK>
[  317.742909][T10807] ERROR: Out of memory at tomoyo_realpath_from_path.
[  318.101077][ T6808] usb 11-1: new high-speed USB device number 15 using dummy_hcd
[  318.121527][ T6808] usb 11-1: device descriptor read/8, error -71
[  318.270927][ T5094] Bluetooth: hci5: command tx timeout
[  318.390968][ T6808] usb 11-1: new high-speed USB device number 16 using dummy_hcd
[  318.411361][ T6808] usb 11-1: device descriptor read/8, error -71
[  318.523979][ T6808] usb usb11-port1: unable to enumerate USB device
[  319.661274][T10822] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1792.0), cmd(3)
[  319.779695][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'.
[  319.854478][T10832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  320.080360][T10834] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  320.089309][T10834] block device autoloading is deprecated and will be removed.
[  320.522684][   T11] block nbd0: Possible stuck request ffff8880275de000: control (read@0,1024B). Runtime 150 seconds
[  320.522729][   T11] block nbd0: Possible stuck request ffff8880275de1c0: control (read@1024,3072B). Runtime 150 seconds
[  320.631023][T10831] syz.2.1300: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1
[  320.631171][T10831] CPU: 0 UID: 0 PID: 10831 Comm: syz.2.1300 Not tainted syzkaller #0 PREEMPT(full) 
[  320.631198][T10831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  320.631207][T10831] Call Trace:
[  320.631213][T10831]  <TASK>
[  320.631218][T10831]  dump_stack_lvl+0x100/0x190
[  320.631239][T10831]  warn_alloc.cold+0x9e/0xb2
[  320.631253][T10831]  ? __pfx_warn_alloc+0x10/0x10
[  320.631272][T10831]  ? find_held_lock+0x2b/0x80
[  320.631285][T10831]  ? psi_memstall_leave+0x19c/0x360
[  320.631301][T10831]  ? psi_memstall_leave+0x1e6/0x360
[  320.631317][T10831]  ? psi_memstall_leave+0x1eb/0x360
[  320.631330][T10831]  ? lockdep_hardirqs_on+0x7d/0x110
[  320.631353][T10831]  __alloc_frozen_pages_noprof+0xcb6/0x3300
[  320.631381][T10831]  ? rcu_is_watching+0x13/0xc0
[  320.631393][T10831]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  320.631413][T10831]  ? __schedule+0x126b/0x6920
[  320.631433][T10831]  ? irqentry_exit+0x24d/0xa10
[  320.631452][T10831]  ? preempt_schedule_irq+0x79/0x90
[  320.631467][T10831]  ? irqentry_exit+0x24d/0xa10
[  320.631482][T10831]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  320.631500][T10831]  ? policy_nodemask+0xed/0x4f0
[  320.631517][T10831]  alloc_pages_mpol+0x201/0x550
[  320.631534][T10831]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  320.631551][T10831]  ? alloc_pages_noprof+0x2b/0x160
[  320.631570][T10831]  alloc_pages_noprof+0x1a/0x160
[  320.631588][T10831]  kimage_alloc_pages+0x72/0x380
[  320.631606][T10831]  kimage_alloc_control_pages+0x157/0xa20
[  320.631626][T10831]  ? __pfx_kimage_alloc_control_pages+0x10/0x10
[  320.631647][T10831]  do_kexec_load+0x275/0x810
[  320.631666][T10831]  ? __pfx_do_kexec_load+0x10/0x10
[  320.631688][T10831]  __ia32_compat_sys_kexec_load+0x37f/0x400
[  320.631729][T10831]  ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10
[  320.631753][T10831]  __do_fast_syscall_32+0x13a/0x8b0
[  320.631769][T10831]  ? lockdep_hardirqs_on+0x7d/0x110
[  320.631786][T10831]  do_fast_syscall_32+0x32/0x70
[  320.631802][T10831]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  320.631817][T10831] RIP: 0023:0xf707efec
[  320.631832][T10831] Code: Unable to access opcode bytes at 0xf707efc2.
[  320.631838][T10831] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011b
[  320.631849][T10831] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003
[  320.631857][T10831] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000
[  320.631864][T10831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  320.631871][T10831] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  320.631878][T10831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  320.631893][T10831]  </TASK>
[  320.631910][T10831] Mem-Info:
[  320.631917][T10831] active_anon:177 inactive_anon:7507 isolated_anon:4
[  320.631917][T10831]  active_file:2350 inactive_file:12596 isolated_file:1
[  320.631917][T10831]  unevictable:0 dirty:128 writeback:0
[  320.631917][T10831]  slab_reclaimable:7973 slab_unreclaimable:61803
[  320.631917][T10831]  mapped:29655 shmem:538 pagetables:1620
[  320.631917][T10831]  sec_pagetables:296 bounce:0
[  320.631917][T10831]  kernel_misc_reclaimable:0
[  320.631917][T10831]  free:30742 free_pcp:633 free_cma:0
[  320.631946][T10831] Node 0 active_anon:0kB inactive_anon:56kB active_file:12kB inactive_file:508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9024kB pagetables:1232kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  320.631976][T10831] Node 1 active_anon:708kB inactive_anon:29972kB active_file:9388kB inactive_file:49876kB unevictable:0kB isolated(anon):16kB isolated(file):4kB mapped:118592kB dirty:512kB writeback:0kB shmem:2152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6392kB pagetables:5248kB sec_pagetables:60kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  320.632007][T10831] Node 0 DMA free:1964kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:256kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  320.632039][T10831] lowmem_reserve[]: 0 278 278 278 278
[  320.632059][T10831] Node 0 DMA32 free:13708kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:2048kB free_highatomic:1540kB active_anon:0kB inactive_anon:48kB active_file:12kB inactive_file:252kB unevictable:0kB writepending:0kB zspages:172kB present:1032196kB managed:284676kB mlocked:0kB bounce:0kB free_pcp:956kB local_pcp:956kB free_cma:0kB
[  320.632091][T10831] lowmem_reserve[]: 0 0 0 0 0
[  320.632110][T10831] Node 1 DMA32 free:107296kB boost:61440kB min:108580kB low:120364kB high:132148kB reserved_highatomic:0kB free_highatomic:0kB active_anon:708kB inactive_anon:29972kB active_file:9388kB inactive_file:49876kB unevictable:0kB writepending:512kB zspages:1924kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:1576kB local_pcp:944kB free_cma:0kB
[  320.632142][T10831] lowmem_reserve[]: 0 0 0 0 0
[  320.632161][T10831] Node 0 DMA: 22*4kB (E) 8*8kB (E) 6*16kB (E) 16*32kB (UE) 9*64kB (UE) 3*128kB (UE) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1976kB
[  320.632235][T10831] Node 0 DMA32: 11*4kB (MEH) 23*8kB (UMEH) 28*16kB (UMEH) 40*32kB (UMEH) 25*64kB (UME) 9*128kB (UM) 9*256kB (UMH) 9*512kB (UMH) 2*1024kB (U) 0*2048kB 0*4096kB = 13668kB
[  320.643789][T10831] Node 1 DMA32: 1641*4kB (UME) 925*8kB (UME) 488*16kB (UME) 361*32kB (UME) 240*64kB (UME) 162*128kB (UME) 74*256kB (UME) 35*512kB (UME) 1*1024kB (M) 0*2048kB 0*4096kB = 107308kB
[  320.643866][T10831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  320.643874][T10831] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  320.643883][T10831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  320.643891][T10831] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  320.643900][T10831] 14239 total pagecache pages
[  320.643904][T10831] 165 pages in swap cache
[  320.643908][T10831] Free swap  = 120812kB
[  320.643912][T10831] Total swap = 124996kB
[  320.643916][T10831] 524155 pages RAM
[  320.643920][T10831] 0 pages HighMem/MovableOnly
[  320.643923][T10831] 212094 pages reserved
[  320.643927][T10831] 0 pages cma reserved
[  321.103826][T10831] kexec: Could not allocate control_code_buffer
[  321.252961][T10845] net_ratelimit: 778 callbacks suppressed
[  321.253021][T10845] netlink: zone id is out of range
[  321.253041][T10845] netlink: zone id is out of range
[  321.253061][T10845] netlink: zone id is out of range
[  321.253080][T10845] netlink: zone id is out of range
[  321.253099][T10845] netlink: zone id is out of range
[  321.253144][T10845] netlink: zone id is out of range
[  321.253167][T10845] netlink: zone id is out of range
[  321.253186][T10845] netlink: zone id is out of range
[  321.253206][T10845] netlink: zone id is out of range
[  321.253225][T10845] netlink: zone id is out of range
[  321.350651][T10843] jffs2: notice: (10843) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  321.467732][T10853] netlink: 'syz.7.1305': attribute type 58 has an invalid length.
[  321.470721][T10853] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1305'.
[  321.622272][ T7075] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  321.751596][ T7075] usb 9-1: device descriptor read/64, error -71
[  321.897585][T10859] ntfs3(nullb0): Primary boot signature is not NTFS.
[  321.897780][T10859] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  321.990994][ T7075] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  322.121024][ T7075] usb 9-1: device descriptor read/64, error -71
[  322.232661][ T7075] usb usb9-port1: attempt power cycle
[  322.241947][T10867] /dev/nullb0: Can't open blockdev
[  322.571019][ T7075] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  322.592243][ T7075] usb 9-1: device descriptor read/8, error -71
[  322.831488][ T7075] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  322.851502][ T7075] usb 9-1: device descriptor read/8, error -71
[  322.972328][ T7075] usb usb9-port1: unable to enumerate USB device
[  323.194962][   T43] audit: type=1804 audit(1788300642.860:328): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1315" name="bus" dev="ramfs" ino=40103 res=1 errno=0
[  323.205464][   T43] audit: type=1804 audit(1788300642.870:329): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1315" name="bus" dev="ramfs" ino=40103 res=1 errno=0
[  323.635047][T10878] fuse: Unknown parameter 'group_i00000000000000000000'
[  325.882787][ T5818] usb 11-1: new high-speed USB device number 17 using dummy_hcd
[  326.031861][ T5818] usb 11-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  326.038302][ T5818] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.042067][ T5818] usb 11-1: Product: syz
[  326.043754][ T5818] usb 11-1: Manufacturer: syz
[  326.045668][ T5818] usb 11-1: SerialNumber: syz
[  326.231143][ T6766] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  326.279348][T10919] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1329'.
[  326.284550][ T5818] net_ratelimit: 384 callbacks suppressed
[  326.284599][ T5818] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  326.284637][ T5818] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  326.284662][ T5818] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  326.304089][ T5818] lan78xx 11-1:1.0: probe with driver lan78xx failed with error -71
[  326.311382][ T5818] usb 11-1: USB disconnect, device number 17
[  326.360890][ T6766] usb 7-1: device descriptor read/64, error -71
[  326.600921][ T6766] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  326.661109][ T5839] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  326.751000][ T6766] usb 7-1: device descriptor read/64, error -71
[  326.810994][ T5839] usb 9-1: Using ep0 maxpacket: 8
[  326.812128][ T5839] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  326.814179][ T5839] usb 9-1: config index 0 descriptor too short (expected 74, got 45)
[  326.814222][ T5839] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  326.814247][ T5839] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  326.814268][ T5839] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  326.814291][ T5839] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  326.814312][ T5839] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  326.814347][ T5839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.861651][ T6766] usb usb7-port1: attempt power cycle
[  327.024375][ T5839] usb 9-1: usb_control_msg returned -32
[  327.024443][ T5839] usbtmc 9-1:16.0: can't read capabilities
[  327.210919][ T6766] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  327.231307][ T6766] usb 7-1: device descriptor read/8, error -71
[  327.470914][ T6766] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  327.491513][ T6766] usb 7-1: device descriptor read/8, error -71
[  327.530925][ T5839] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  327.600996][ T6766] usb usb7-port1: unable to enumerate USB device
[  327.682253][ T5839] usb 12-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  327.683201][ T5839] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  327.684187][ T5839] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  327.685888][ T5839] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.685901][ T5839] usb 12-1: Product: syz
[  327.685947][ T5839] usb 12-1: Manufacturer: syz
[  327.685956][ T5839] usb 12-1: SerialNumber: syz
[  327.693495][ T5839] ti_usb_3410_5052 12-1:2.0: TI USB 5052 2 port adapter converter detected
[  327.701201][ T5839] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  327.704598][ T5839] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  327.985507][T10940] netlink: zone id is out of range
[  327.985552][T10940] netlink: zone id is out of range
[  327.985577][T10940] netlink: zone id is out of range
[  327.985582][T10940] netlink: zone id is out of range
[  327.985586][T10940] netlink: zone id is out of range
[  327.985590][T10940] netlink: zone id is out of range
[  327.985597][T10940] netlink: zone id is out of range
[  327.985601][T10940] netlink: zone id is out of range
[  327.985606][T10940] netlink: zone id is out of range
[  329.284555][ T1345] usb 9-1: USB disconnect, device number 20
[  330.062456][T10935] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110
[  330.069994][T10935] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32
[  330.070039][T10935] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32
[  330.072592][T10935] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32
[  330.088602][ T1345] usb 12-1: USB disconnect, device number 2
[  330.117450][ T1345] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  330.134134][ T1345] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  330.139789][ T1345] ti_usb_3410_5052 12-1:2.0: device disconnected
[  330.382854][T10959] random: crng reseeded on system resumption
[  330.527870][T10964] jffs2: notice: (10964) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  330.667789][T10970] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1342'.
[  330.668138][T10970] comedi comedi4: bad chanlist[1]=0x00000101 chan=257 range length=2
[  330.941773][T10976] fuse: Unknown parameter 'grou00000000000000000000'
[  331.190566][T10982] netlink: 'syz.7.1348': attribute type 1 has an invalid length.
[  333.200082][T11009] ntfs3(nullb0): Primary boot signature is not NTFS.
[  333.200282][T11009] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  333.263195][   T43] audit: type=1800 audit(1788300652.920:330): pid=11011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1358" name="(" dev="sda1" ino=2038 res=0 errno=0
[  333.465283][T11015] netlink: 'syz.2.1359': attribute type 1 has an invalid length.
[  335.034685][T11045] syzkaller0: entered promiscuous mode
[  335.038093][T11045] syzkaller0: entered allmulticast mode
[  335.205051][T11050] net_ratelimit: 779 callbacks suppressed
[  335.205128][T11050] netlink: zone id is out of range
[  335.205146][T11050] netlink: zone id is out of range
[  335.205163][T11050] netlink: zone id is out of range
[  335.205180][T11050] netlink: zone id is out of range
[  335.205186][T11050] netlink: zone id is out of range
[  335.205189][T11050] netlink: zone id is out of range
[  335.205196][T11050] netlink: zone id is out of range
[  335.205200][T11050] netlink: zone id is out of range
[  335.205204][T11050] netlink: zone id is out of range
[  335.205208][T11050] netlink: zone id is out of range
[  335.291244][ T5818] usb 11-1: new full-speed USB device number 18 using dummy_hcd
[  335.441389][ T5818] usb 11-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  335.441856][ T5818] usb 11-1: config 0 has no interfaces?
[  335.443469][ T5818] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  335.443483][ T5818] usb 11-1: Product: syz
[  335.443490][ T5818] usb 11-1: Manufacturer: syz
[  335.443497][ T5818] usb 11-1: SerialNumber: syz
[  335.459079][ T5818] usb 11-1: config 0 descriptor??
[  335.662354][T11045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.662600][T11045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.671325][ T6749] usb 11-1: USB disconnect, device number 18
[  335.774018][T11056] netlink: 'syz.4.1368': attribute type 1 has an invalid length.
[  336.686518][T11081] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  337.549791][T11098] jffs2: notice: (11098) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  340.580847][ T5818] usb 11-1: new high-speed USB device number 19 using dummy_hcd
[  340.732066][ T5818] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  340.732949][ T5818] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  340.733907][ T5818] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  340.735500][ T5818] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.735532][ T5818] usb 11-1: Product: syz
[  340.735554][ T5818] usb 11-1: Manufacturer: syz
[  340.735576][ T5818] usb 11-1: SerialNumber: syz
[  340.759084][ T5818] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected
[  340.764391][ T5818] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  340.769288][ T5818] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  342.350878][    C2] e1000e 0000:00:02.0 eth1: NETDEV WATCHDOG: CPU: 2: transmit queue 0 timed out 5090 ms
[  342.355841][ T1345] e1000e 0000:00:02.0 eth1: Reset adapter unexpectedly
[  343.071548][T11125] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110
[  343.072550][T11125] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32
[  343.072645][T11125] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32
[  343.073066][T11125] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32
[  343.075688][ T5818] usb 11-1: USB disconnect, device number 19
[  343.098433][ T5818] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  343.107219][ T5818] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  343.107688][ T5818] ti_usb_3410_5052 11-1:2.0: device disconnected
[  343.899376][T11146] jffs2: notice: (11146) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  344.552638][T11158] net_ratelimit: 384 callbacks suppressed
[  344.552690][T11158] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  344.715030][T11160] hpfs: hpfs_map_sector(): read error
[  344.878799][T11162] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  344.878857][T11162] CPU: 0 UID: 0 PID: 11162 Comm: syz.6.1389 Not tainted syzkaller #0 PREEMPT(full) 
[  344.878883][T11162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  344.878893][T11162] Call Trace:
[  344.878898][T11162]  <TASK>
[  344.878903][T11162]  dump_stack_lvl+0x100/0x190
[  344.878923][T11162]  sysfs_warn_dup.cold+0x1c/0x28
[  344.878942][T11162]  sysfs_create_dir_ns+0x24b/0x2b0
[  344.878956][T11162]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  344.878968][T11162]  ? find_held_lock+0x2b/0x80
[  344.878980][T11162]  ? kobject_add_internal+0x25f/0x930
[  344.878998][T11162]  ? kobject_add_internal+0x25f/0x930
[  344.879016][T11162]  ? class_dir_child_ns_type+0xd/0x60
[  344.879034][T11162]  kobject_add_internal+0x2c8/0x930
[  344.879054][T11162]  kobject_add+0x16a/0x1e0
[  344.879072][T11162]  ? __pfx_kobject_add+0x10/0x10
[  344.879090][T11162]  ? get_device_parent+0x1b3/0x4c0
[  344.879105][T11162]  ? kobject_put+0xb9/0x640
[  344.879139][T11162]  device_add+0x294/0x1970
[  344.879156][T11162]  ? lockdep_init_map_type+0x5c/0x250
[  344.879173][T11162]  ? __pfx_device_add+0x10/0x10
[  344.879188][T11162]  ? lockdep_init_map_type+0x5c/0x250
[  344.879204][T11162]  ? __init_waitqueue_head+0xca/0x150
[  344.879225][T11162]  tty_register_device_attr+0x388/0x7f0
[  344.879242][T11162]  ? lockdep_init_map_type+0x5c/0x250
[  344.879270][T11162]  ? __pfx_tty_register_device_attr+0x10/0x10
[  344.879290][T11162]  ? tty_port_init+0x156/0x1c0
[  344.879306][T11162]  gsm_activate_mux+0x155/0x2a0
[  344.879321][T11162]  gsmld_ioctl+0xbbc/0x15c0
[  344.879341][T11162]  ? __pfx_gsmld_ioctl+0x10/0x10
[  344.879370][T11162]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  344.879390][T11162]  ? __pfx_gsmld_ioctl+0x10/0x10
[  344.879406][T11162]  tty_compat_ioctl+0x396/0x420
[  344.879420][T11162]  ? __pfx_tty_compat_ioctl+0x10/0x10
[  344.879435][T11162]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  344.879455][T11162]  __do_fast_syscall_32+0x13a/0x8b0
[  344.879474][T11162]  do_fast_syscall_32+0x32/0x70
[  344.879490][T11162]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  344.879506][T11162] RIP: 0023:0xf702efec
[  344.879520][T11162] Code: Unable to access opcode bytes at 0xf702efc2.
[  344.879525][T11162] RSP: 002b:00000000f53db50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  344.879537][T11162] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000404c4701
[  344.879545][T11162] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  344.879552][T11162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  344.879558][T11162] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  344.879565][T11162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  344.879581][T11162]  </TASK>
[  344.899651][T11162] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  347.356354][ T5739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  347.364580][ T5739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  347.367168][ T5739] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  347.374694][ T5739] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  347.377339][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  347.967545][T11190] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[  347.967593][T11190] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  347.967681][T11190] vhci_hcd vhci_hcd.0: Device attached
[  348.158516][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.263110][ T1345] usb 50-1: SetAddress Request (6) to port 0
[  348.263182][ T1345] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd
[  348.348479][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.507486][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.618905][T11191] vhci_hcd: connection reset by peer
[  348.619778][ T5783] vhci_hcd vhci_hcd.6: stop threads
[  348.619794][ T5783] vhci_hcd vhci_hcd.6: release socket
[  348.619823][ T5783] vhci_hcd vhci_hcd.6: disconnect device
[  348.665245][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.898065][T11173] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.898595][T11173] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.898858][T11173] bridge_slave_0: entered allmulticast mode
[  348.899666][T11173] bridge_slave_0: entered promiscuous mode
[  348.902620][T11173] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.902693][T11173] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.902747][T11173] bridge_slave_1: entered allmulticast mode
[  348.903444][T11173] bridge_slave_1: entered promiscuous mode
[  348.968579][   T12] bridge_slave_1: left allmulticast mode
[  348.968617][   T12] bridge_slave_1: left promiscuous mode
[  348.968752][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.978933][   T12] bridge_slave_0: left allmulticast mode
[  348.981388][   T12] bridge_slave_0: left promiscuous mode
[  348.983537][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.214047][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  349.243431][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  349.249024][   T12] bond0 (unregistering): Released all slaves
[  349.259621][T11173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.276359][T11173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.337196][T11173] team0: Port device team_slave_0 added
[  349.346192][T11173] team0: Port device team_slave_1 added
[  349.412373][T11173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.414767][T11173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.425143][T11173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.432252][T11173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.434547][T11173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.443084][T11173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.470917][ T5094] Bluetooth: hci1: command tx timeout
[  349.513187][T11173] hsr_slave_0: entered promiscuous mode
[  349.529080][ T5739] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  349.536391][ T5739] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  349.538759][ T5739] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  349.538936][T11173] hsr_slave_1: entered promiscuous mode
[  349.539289][T11173] debugfs: 'hsr0' already exists in 'hsr'
[  349.539302][T11173] Cannot create hsr debugfs directory
[  349.549828][ T5739] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  349.570240][ T5739] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  350.077024][ T5839] syz1: Port: 1 Link DOWN
[  350.134815][ T5449] 8021q: adding VLAN 0 to HW filter on device eth11
[  350.167194][   T70] smbdirect: ib_dev[syz1] removed
[  350.591526][   T11] block nbd0: Possible stuck request ffff8880275de000: control (read@0,1024B). Runtime 180 seconds
[  350.591597][   T11] block nbd0: Possible stuck request ffff8880275de1c0: control (read@1024,3072B). Runtime 180 seconds
[  350.679545][ T5449] 8021q: adding VLAN 0 to HW filter on device eth10
[  350.702748][T11173] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  350.720725][T11173] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  350.722465][T11173] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  350.762403][T11173] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  350.789135][   T12] hsr_slave_0: left promiscuous mode
[  350.794926][   T12] hsr_slave_1: left promiscuous mode
[  350.795441][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.795454][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.797781][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.797792][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.813657][   T12] veth1_macvtap: left promiscuous mode
[  350.813906][   T12] veth0_macvtap: left promiscuous mode
[  350.813996][   T12] veth1_vlan: left promiscuous mode
[  350.815880][   T12] veth0_vlan: left promiscuous mode
[  350.852546][T11234] netlink: 'syz.6.1398': attribute type 1 has an invalid length.
[  351.151967][   T12] team0 (unregistering): Port device team_slave_1 removed
[  351.157134][   T12] team0 (unregistering): Port device team_slave_0 removed
[  351.228046][T11173] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  351.246411][T11173] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  351.246997][T11173] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  351.257174][T11173] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  351.285526][ T5449] 8021q: adding VLAN 0 to HW filter on device eth12
[  351.550039][T11173] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.560985][ T5094] Bluetooth: hci1: command tx timeout
[  351.578849][T11173] 8021q: adding VLAN 0 to HW filter on device team0
[  351.586385][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.586452][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.612361][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.612431][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.632469][ T5094] Bluetooth: hci5: command tx timeout
[  351.763967][T11173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  351.774593][T11207] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.774690][T11207] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.774776][T11207] bridge_slave_0: entered allmulticast mode
[  351.777597][T11207] bridge_slave_0: entered promiscuous mode
[  351.782605][T11207] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.784466][T11207] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.784625][T11207] bridge_slave_1: entered allmulticast mode
[  351.786924][T11207] bridge_slave_1: entered promiscuous mode
[  351.830178][T11207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.834470][T11207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.866629][ T5449] 8021q: adding VLAN 0 to HW filter on device eth13
[  351.870713][T11207] team0: Port device team_slave_0 added
[  351.877445][T11207] team0: Port device team_slave_1 added
[  351.927363][T11207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.927420][T11207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  351.927891][T11207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.936962][T11207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.936974][T11207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  351.936992][T11207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.026983][T11207] hsr_slave_0: entered promiscuous mode
[  352.030614][T11207] hsr_slave_1: entered promiscuous mode
[  352.031041][T11207] debugfs: 'hsr0' already exists in 'hsr'
[  352.031053][T11207] Cannot create hsr debugfs directory
[  352.056906][ T5739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  352.066646][ T5739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  352.067402][ T5739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  352.070560][ T5739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  352.071706][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  352.553340][T11207] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  352.561589][T11207] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  352.562275][T11207] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  352.571917][T11207] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  352.574337][T11207] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  352.577293][T11207] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  352.577830][T11207] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  352.588281][T11207] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  352.597249][T11173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.758285][T10734] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.880636][T10734] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.904995][T11207] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.978761][T10734] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.004277][T11207] 8021q: adding VLAN 0 to HW filter on device team0
[  353.017863][  T104] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.017939][  T104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.027849][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.027923][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.064972][T10734] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.082417][T11173] veth0_vlan: entered promiscuous mode
[  353.092537][T11173] veth1_vlan: entered promiscuous mode
[  353.190527][T11173] veth0_macvtap: entered promiscuous mode
[  353.205253][T11173] veth1_macvtap: entered promiscuous mode
[  353.313259][ T1345] usb 50-1: device descriptor read/8, error -110
[  353.320631][T11173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.327080][T11173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.385976][T11272] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.386052][T11272] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.386171][T11272] bridge_slave_0: entered allmulticast mode
[  353.396418][T11272] bridge_slave_0: entered promiscuous mode
[  353.400343][T11272] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.400470][T11272] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.400551][T11272] bridge_slave_1: entered allmulticast mode
[  353.412380][T11272] bridge_slave_1: entered promiscuous mode
[  353.489739][T11272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  353.495082][T11272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.595540][T10734] bridge_slave_1: left allmulticast mode
[  353.596025][T10734] bridge_slave_1: left promiscuous mode
[  353.596338][T10734] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.600446][T10734] bridge_slave_0: left allmulticast mode
[  353.600461][T10734] bridge_slave_0: left promiscuous mode
[  353.600572][T10734] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.641069][ T5094] Bluetooth: hci1: command tx timeout
[  353.721466][ T5094] Bluetooth: hci5: command tx timeout
[  353.735749][ T1345] usb usb50-port1: attempt power cycle
[  353.808808][T10734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  353.826195][T10734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  353.830264][T10734] bond0 (unregistering): Released all slaves
[  353.837301][T10734] bond2 (unregistering): Released all slaves
[  353.846879][T10734] bond1 (unregistering): Released all slaves
[  353.884194][T11272] team0: Port device team_slave_0 added
[  353.905721][T11272] team0: Port device team_slave_1 added
[  353.951283][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.952154][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.952189][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.023606][T10734] tipc: Left network mode
[  354.025769][T11272] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.025818][T11272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.025846][T11272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.074292][T11272] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.074343][T11272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.074381][T11272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.097464][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.097537][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.121663][ T5783] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.205099][ T5094] Bluetooth: hci3: command tx timeout
[  354.287946][T11272] hsr_slave_0: entered promiscuous mode
[  354.288464][T11272] hsr_slave_1: entered promiscuous mode
[  354.288742][T11272] debugfs: 'hsr0' already exists in 'hsr'
[  354.288754][T11272] Cannot create hsr debugfs directory
[  354.290858][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.290871][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.302235][ T1345] usb usb50-port1: unable to enumerate USB device
[  354.446551][ T5449] 8021q: adding VLAN 0 to HW filter on device eth14
[  354.516047][T11207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.591740][ T5094] Bluetooth: hci0: command 0x0419 tx timeout
[  354.677090][T11335] ntfs3(nullb0): Primary boot signature is not NTFS.
[  354.677445][T11335] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  355.096251][T10734] hsr_slave_0: left promiscuous mode
[  355.098167][T10734] hsr_slave_1: left promiscuous mode
[  355.098628][T10734] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  355.098653][T10734] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.099411][T10734] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.099421][T10734] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.106288][T10734] veth1_macvtap: left promiscuous mode
[  355.106311][T10734] veth0_macvtap: left promiscuous mode
[  355.106358][T10734] veth1_vlan: left promiscuous mode
[  355.106389][T10734] veth0_vlan: left promiscuous mode
[  355.356488][T10734] team0 (unregistering): Port device team_slave_1 removed
[  355.369613][T10734] team0 (unregistering): Port device team_slave_0 removed
[  355.497880][ T5449] 8021q: adding VLAN 0 to HW filter on device eth15
[  355.721069][ T5739] Bluetooth: hci1: command tx timeout
[  355.761165][T11207] veth0_vlan: entered promiscuous mode
[  355.766392][T11207] veth1_vlan: entered promiscuous mode
[  355.801055][ T5739] Bluetooth: hci5: command tx timeout
[  355.836193][T11207] veth0_macvtap: entered promiscuous mode
[  355.958915][T11207] veth1_macvtap: entered promiscuous mode
[  355.976374][T10734] IPVS: stop unused estimator thread 0...
[  355.979205][T11207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.996097][T11207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  356.024018][ T5783] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.024100][ T5783] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  356.024141][ T5783] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  356.024269][ T5783] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  356.094318][ T5449] 8021q: adding VLAN 0 to HW filter on device eth16
[  356.239883][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.239932][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.280871][ T5739] Bluetooth: hci3: command tx timeout
[  356.284048][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.284082][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.467252][T11272] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  356.494138][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  356.496836][T11272] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  356.525939][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  356.527210][T11272] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  356.534713][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  356.535174][T11272] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  356.549987][ T5739] Bluetooth: Unknown BR/EDR signaling command 0x10
[  356.550024][ T5739] Bluetooth: Wrong link type (-22)
[  356.550697][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  356.551286][ T5739] Bluetooth: Unknown BR/EDR signaling command 0x11
[  356.551311][ T5739] Bluetooth: Wrong link type (-22)
[  356.684878][ T5449] 8021q: adding VLAN 0 to HW filter on device eth17
[  356.689214][T11272] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.700459][T11272] 8021q: adding VLAN 0 to HW filter on device team0
[  356.709802][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.709885][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state
[  356.716857][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.717000][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state
[  356.741684][T11272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  356.745813][T11272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  356.868308][T11379] netlink: zone id is out of range
[  356.868345][T11379] netlink: zone id is out of range
[  356.868370][T11379] netlink: zone id is out of range
[  356.868387][T11379] netlink: zone id is out of range
[  356.868406][T11379] netlink: zone id is out of range
[  356.868423][T11379] netlink: zone id is out of range
[  356.868445][T11379] netlink: zone id is out of range
[  356.868463][T11379] netlink: zone id is out of range
[  356.868482][T11379] netlink: zone id is out of range
[  356.868499][T11379] netlink: zone id is out of range
[  357.874588][ T5739] Bluetooth: hci5: command tx timeout
[  357.936948][T11272] 8021q: adding VLAN 0 to HW filter on device batadv0
[  358.074054][T11272] veth0_vlan: entered promiscuous mode
[  358.111630][T11272] veth1_vlan: entered promiscuous mode
[  358.202184][T11272] veth0_macvtap: entered promiscuous mode
[  358.209561][T11272] veth1_macvtap: entered promiscuous mode
[  358.254096][T11272] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.277609][T11272] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.361026][ T5739] Bluetooth: hci3: command tx timeout
[  358.424286][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.424313][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.501532][   T43] audit: type=1800 audit(1788300678.160:331): pid=11420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1407" name="(" dev="sda1" ino=2038 res=0 errno=0
[  358.525770][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.525867][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.532141][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.532554][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.532576][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.532594][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.191452][   T44] INFO: task syz.5.777:8911 blocked in I/O wait for more than 143 seconds.
[  360.191492][   T44]       Not tainted syzkaller #0
[  360.191537][   T44] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  360.191556][   T44] task:syz.5.777       state:D stack:25024 pid:8911  tgid:8910  ppid:8194   task_flags:0x400140 flags:0x08080002
[  360.191614][   T44] Call Trace:
[  360.191631][   T44]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  360.191653][   T44]  __schedule+0x1259/0x6920
[  360.191683][   T44]  ? __lock_acquire+0x4c5/0x1ec0
[  360.191720][   T44]  ? lock_acquire+0x1d1/0x380
[  360.191789][   T44]  ? __pfx___schedule+0x10/0x10
[  360.191815][   T44]  ? find_held_lock+0x2b/0x80
[  360.191842][   T44]  ? schedule+0x225/0x2c0
[  360.191871][   T44]  schedule+0xdd/0x2c0
[  360.191898][   T44]  io_schedule+0x8a/0xf0
[  360.191925][   T44]  folio_wait_bit_common+0x414/0xa80
[  360.191955][   T44]  ? folio_wait_bit_common+0x2a0/0xa80
[  360.191986][   T44]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  360.192018][   T44]  ? __pfx_wake_page_function+0x10/0x10
[  360.192046][   T44]  ? __pfx___might_resched+0x10/0x10
[  360.192080][   T44]  ? compaction_free+0x17d/0x470
[  360.192109][   T44]  ? move_to_new_folio+0x1d1/0x4e0
[  360.192141][   T44]  migrate_pages_batch+0x165f/0x4680
[  360.192173][   T44]  ? __pfx_compaction_alloc+0x10/0x10
[  360.192200][   T44]  ? __pfx_compaction_free+0x10/0x10
[  360.192233][   T44]  ? __pfx_migrate_pages_batch+0x10/0x10
[  360.192267][   T44]  ? __pfx_clockevents_program_event+0x10/0x10
[  360.192295][   T44]  ? find_held_lock+0x2b/0x80
[  360.192321][   T44]  ? __hrtimer_rearm_deferred+0x23c/0x7b0
[  360.192349][   T44]  ? __hrtimer_rearm_deferred+0x23c/0x7b0
[  360.192377][   T44]  ? find_held_lock+0x2b/0x80
[  360.192406][   T44]  migrate_pages_sync+0x4db/0x880
[  360.192438][   T44]  ? __pfx_compaction_alloc+0x10/0x10
[  360.192465][   T44]  ? __pfx_compaction_free+0x10/0x10
[  360.192496][   T44]  ? __pfx_migrate_pages_sync+0x10/0x10
[  360.192533][   T44]  migrate_pages+0x1a83/0x2850
[  360.192565][   T44]  ? isolate_migratepages_block+0xd74/0x6200
[  360.192595][   T44]  ? __pfx_compaction_alloc+0x10/0x10
[  360.192622][   T44]  ? __pfx_compaction_free+0x10/0x10
[  360.192653][   T44]  ? __pfx_migrate_pages+0x10/0x10
[  360.192687][   T44]  ? __pfx_isolate_migratepages_block+0x10/0x10
[  360.192718][   T44]  ? putback_movable_pages+0x7f1/0xc00
[  360.192751][   T44]  compact_zone+0x2643/0x4640
[  360.192785][   T44]  ? debug_object_free+0x295/0x550
[  360.274685][   T44]  ? __pfx_compact_zone+0x10/0x10
[  360.275593][   T44]  ? __flush_work+0x928/0xcb0
[  360.275631][   T44]  ? __flush_work+0x928/0xcb0
[  360.275663][   T44]  compact_node+0x17f/0x2c0
[  360.275694][   T44]  ? __pfx_compact_node+0x10/0x10
[  360.275735][   T44]  ? __lru_add_drain_all+0x4a6/0x820
[  360.275768][   T44]  sysctl_compaction_handler+0x141/0x210
[  360.275799][   T44]  proc_sys_call_handler+0x47f/0x5a0
[  360.275829][   T44]  ? __pfx_proc_sys_call_handler+0x10/0x10
[  360.275859][   T44]  ? splice_from_pipe_next+0x1ec/0x5a0
[  360.275891][   T44]  iter_file_splice_write+0x830/0x10b0
[  360.275926][   T44]  ? __pfx_iter_file_splice_write+0x10/0x10
[  360.275956][   T44]  ? __pfx_copy_splice_read+0x10/0x10
[  360.275991][   T44]  ? __pfx_iter_file_splice_write+0x10/0x10
[  360.276020][   T44]  direct_splice_actor+0x192/0x690
[  360.276049][   T44]  splice_direct_to_actor+0x345/0xa30
[  360.276083][   T44]  ? __pfx_direct_splice_actor+0x10/0x10
[  360.276113][   T44]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  360.276143][   T44]  ? lock_acquire+0x1d1/0x380
[  360.276175][   T44]  do_splice_direct+0x174/0x240
[  360.276203][   T44]  ? __pfx_do_splice_direct+0x10/0x10
[  360.276231][   T44]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  360.276261][   T44]  ? rw_verify_area+0xce/0x6d0
[  360.276294][   T44]  do_sendfile+0xadc/0xe20
[  360.276329][   T44]  ? __pfx_do_sendfile+0x10/0x10
[  360.276360][   T44]  ? __might_fault+0xc5/0x140
[  360.276396][   T44]  __ia32_compat_sys_sendfile+0x162/0x220
[  360.276425][   T44]  ? __pfx___ia32_compat_sys_sendfile+0x10/0x10
[  360.276453][   T44]  ? trace_hardirqs_off+0x70/0x170
[  360.276489][   T44]  do_int80_emulation+0x166/0x650
[  360.276522][   T44]  asm_int80_emulation+0x1a/0x20
[  360.276548][   T44] RIP: 0023:0xf702efec
[  360.276572][   T44] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb
[  360.276610][   T44] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004
[  360.276631][   T44] RDX: 00000000800000c0 RSI: 0000000000000005 RDI: 0000000000000000
[  360.276652][   T44] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  360.276673][   T44] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  360.276694][   T44] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  360.276723][   T44]  </TASK>
[  360.276782][   T44] 
[  360.276782][   T44] Showing all locks held in the system:
[  360.276806][   T44] locks held by khungtaskd/44: 1, last CPU#2:
[  360.276829][   T44]  #0: ffffffff8edebe60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  360.276972][   T44] locks held by getty/5539: 2, on CPU#3:
[  360.276995][   T44]  #0: ffff88802ad0f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  360.356227][   T44]  #1: ffffc90002d832e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  360.356261][   T44] locks held by udevd/5748: 1, on CPU#0:
[  360.356272][   T44]  #0: ffff888026adb350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  360.356306][   T44] locks held by syz.5.777/8911: 1, on CPU#0:
[  360.356314][   T44]  #0: ffff88802afec460 (sb_
** replaying previous printk message **
[  360.356314][   T44]  #0: ffff88802afec460 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30
[  360.356344][   T44] locks held by syz-executor/9263: 2, last CPU#0:
[  360.356352][   T44]  #0: ffff8880258403b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  360.356380][   T44]  #1: ffffffff8edebe60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  360.356408][   T44] locks held by kworker/u32:4/10734: 3, on CPU#0:
[  360.356416][   T44]  #0: ffff88804b8bb140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  360.356444][   T44]  #1: ffffc900033c7d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  360.356471][   T44]  #2: ffffffff90cd21c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360
[  360.356498][   T44] locks held by syz-executor/11173: 3, last CPU#0:
[  360.356506][   T44]  #0: ffff88801c0d5038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  360.356532][   T44]  #1: ffffffff8edebe60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  360.356557][   T44]  #2: ffff88802aa6cb58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320
[  360.356587][   T44] locks held by syz-executor/11207: 2, last CPU#0:
[  360.356595][   T44]  #0: ffff888021cee9b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00
[  360.356621][   T44]  #1: ffffffff8edebe60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[  360.356650][   T44] locks held by syz-executor/11272: 2, last CPU#0:
[  360.356658][   T44]  #0: ffff88801c0d1d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  360.356684][   T44]  #1: ffffffff8edebe60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  360.356712][   T44] locks held by syz.0.1409/11445: 1, on CPU#0:
[  360.356720][   T44]  #0: ffffffff8edf7d68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  360.356748][   T44] locks held by iou-sqp-11446/11447: 1, last CPU#2:
[  360.356756][   T44]  #0: ffff88802aea0068 (&sqd->lock){+.+.}-{4:4}, at: io_sq_thread+0xdfd/0x1460
[  360.356792][   T44] locks held by syz.8.1413/11468: 2, last CPU#0:
[  360.356800][   T44]  #0: ffffffff90cd21c0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x331/0x1070
[  360.356826][   T44]  #1: ffffffff90092780 (e1000_eeprom_lock){+.+.}-{4:4}, at: e1000_init_hw+0xbbf/0x1280
[  360.356856][   T44] locks held by dhcpcd-run-hook/11469: 2, last CPU#0:
[  360.356864][   T44]  #0: ffff88804cbe9208 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590
[  360.356893][   T44]  #1: ffffffff8edebe60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  360.356975][   T44] 
[  360.356980][   T44] =============================================
[  360.356980][   T44] 
[  360.356985][   T44] NMI backtrace for cpu 2
[  360.356994][   T44] CPU: 2 UID: 0 PID: 44 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  360.357007][   T44] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  360.357014][   T44] Call Trace:
[  360.357018][   T44]  <TASK>
[  360.357023][   T44]  dump_stack_lvl+0x100/0x190
[  360.357039][   T44]  nmi_cpu_backtrace.cold+0x12d/0x151
[  360.357055][   T44]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  360.357073][   T44]  nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[  360.357087][   T44]  sys_info+0x141/0x190
[  360.357103][   T44]  watchdog+0xcb1/0x1030
[  360.357120][   T44]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  360.357134][   T44]  ? __pfx_watchdog+0x10/0x10
[  360.357149][   T44]  ? __kthread_parkme+0x18f/0x230
[  360.357181][   T44]  ? kthread+0x13a/0x450
[  360.357192][   T44]  ? __pfx_watchdog+0x10/0x10
[  360.357205][   T44]  kthread+0x373/0x450
[  360.357216][   T44]  ? __pfx_kthread+0x10/0x10
[  360.357229][   T44]  ret_from_fork+0x730/0xd60
[  360.357246][   T44]  ? __pfx_ret_from_fork+0x10/0x10
[  360.357264][   T44]  ? __switch_to+0x800/0x10f0
[  360.357279][   T44]  ? __pfx_kthread+0x10/0x10
[  360.357292][   T44]  ret_from_fork_asm+0x1a/0x30
[  360.357307][   T44]  </TASK>
[  360.357324][   T44] Sending NMI from CPU 2 to CPUs 0:
[  360.357356][    C0] NMI backtrace for cpu 0
[  360.357369][    C0] CPU: 0 UID: 0 PID: 9263 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  360.357380][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  360.357386][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70
[  360.357403][    C0] Code: 00 01 00 ff 74 1e f6 c4 01 74 44 a9 00 00 00 0f 75 3d f7 c1 00 00 00 f0 75 35 8b 82 3c 17 00 00 85 c0 74 2b 8b 82 10 17 00 00 <83> f8 02 75 20 48 8b 8a 18 17 00 00 8b 92 14 17 00 00 48 8b 01 48
[  360.357413][    C0] RSP: 0000:ffffc90003717410 EFLAGS: 00000246
[  360.357422][    C0] RAX: 0000000000000000 RBX: 000000000006290c RCX: 0000000000000002
[  360.357428][    C0] RDX: ffff888028f54b00 RSI: ffffffff82899fe8 RDI: ffff888028f54b00
[  360.357435][    C0] RBP: ffff88802fe2d180 R08: 0000000000000007 R09: 0000000000000000
[  360.357440][    C0] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000008
[  360.357446][    C0] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffea00018a4318
[  360.357453][    C0] FS:  0000000000000000(0000) GS:ffff888096967000(0000) knlGS:0000000000000000
[  360.357475][    C0] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  360.357484][    C0] CR2: 00007ff672970000 CR3: 000000004c094000 CR4: 0000000000352ef0
[  360.357490][    C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  360.357496][    C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  360.357502][    C0] Call Trace:
[  360.357506][    C0]  <TASK>
[  360.357509][    C0]  pfn_valid+0x1b8/0x4b0
[  360.357523][    C0]  page_table_check_clear+0x21/0x540
[  360.357536][    C0]  ? vm_normal_page+0x1d1/0x380
[  360.357547][    C0]  __page_table_check_pte_clear+0x10f/0x120
[  360.357578][    C0]  ? __pfx___page_table_check_pte_clear+0x10/0x10
[  360.357591][    C0]  ? folio_remove_rmap_ptes+0x7e0/0xdd0
[  360.357605][    C0]  ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550
[  360.357620][    C0]  __zap_vma_range+0x2c43/0x48e0
[  360.357636][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  360.357647][    C0]  ? mas_next_slot+0xc05/0x13a0
[  360.357665][    C0]  unmap_vmas+0x299/0x5f0
[  360.357677][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  360.357688][    C0]  ? mas_next_slot+0xc05/0x13a0
[  360.357705][    C0]  exit_mmap+0x1ef/0xa00
[  360.357717][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  360.357728][    C0]  ? rcu_is_watching+0x13/0xc0
[  360.357739][    C0]  ? find_held_lock+0x2b/0x80
[  360.357750][    C0]  ? uprobe_clear_state+0x5f/0x250
[  360.357765][    C0]  ? __mutex_unlock_slowpath+0x35d/0x930
[  360.357783][    C0]  __mmput+0x12a/0x410
[  360.357797][    C0]  mmput+0x67/0x80
[  360.357810][    C0]  do_exit+0x8b1/0x2ae0
[  360.357820][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  360.357833][    C0]  ? __pfx_do_exit+0x10/0x10
[  360.357843][    C0]  ? do_raw_spin_lock+0x128/0x260
[  360.357857][    C0]  ? find_held_lock+0x2b/0x80
[  360.357867][    C0]  ? get_signal+0x7e0/0x21e0
[  360.357882][    C0]  do_group_exit+0xd5/0x2a0
[  360.357893][    C0]  get_signal+0x1ec7/0x21e0
[  360.357909][    C0]  ? __pfx_get_signal+0x10/0x10
[  360.357926][    C0]  arch_do_signal_or_restart+0x91/0x7a0
[  360.357939][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  360.357956][    C0]  exit_to_user_mode_loop+0x139/0x700
[  360.357971][    C0]  ? rcu_is_watching+0x13/0xc0
[  360.357981][    C0]  __do_fast_syscall_32+0x59f/0x8b0
[  360.357994][    C0]  ? lockdep_hardirqs_on+0x7d/0x110
[  360.358006][    C0]  do_fast_syscall_32+0x32/0x70
[  360.358019][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  360.358032][    C0] RIP: 0023:0xf702efec
[  360.358039][    C0] Code: Unable to access opcode bytes at 0xf702efc2.
[  360.358044][    C0] RSP: 002b:00000000ffafb768 EFLAGS: 00000292 ORIG_RAX: 000000000000000a
[  360.358053][    C0] RAX: ffffffffffffffff RBX: 00000000ffafb810 RCX: 0000000000000000
[  360.358060][    C0] RDX: 00000000f73f7ff4 RSI: 0000000000003d85 RDI: 0000000057b4d470
[  360.358066][    C0] RBP: 00000000ffafb810 R08: 0000000000000000 R09: 0000000000000000
[  360.358071][    C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  360.358077][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  360.358087][    C0]  </TASK>
[  360.387595][   T44] Kernel panic - not syncing: hung_task: blocked tasks
[  360.639544][   T44] CPU: 0 UID: 0 PID: 44 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  360.642609][   T44] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  360.645814][   T44] Call Trace:
[  360.646878][   T44]  <TASK>
[  360.647827][   T44]  dump_stack_lvl+0x100/0x190
[  360.649321][   T44]  vpanic+0x553/0x970
[  360.650588][   T44]  ? __pfx_vpanic+0x10/0x10
[  360.652030][   T44]  panic+0xd1/0xe0
[  360.653249][   T44]  ? __pfx_panic+0x10/0x10
[  360.654626][   T44]  ? nmi_trigger_cpumask_backtrace+0x263/0x2a0
[  360.656444][   T44]  ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0
[  360.658365][   T44]  ? watchdog.cold+0x1ec/0x234
[  360.659890][   T44]  watchdog.cold+0x1fd/0x234
[  360.661365][   T44]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  360.663279][   T44]  ? __pfx_watchdog+0x10/0x10
[  360.664857][   T44]  ? __kthread_parkme+0x18f/0x230
[  360.666568][   T44]  ? kthread+0x13a/0x450
[  360.667969][   T44]  ? __pfx_watchdog+0x10/0x10
[  360.669469][   T44]  kthread+0x373/0x450
[  360.670761][   T44]  ? __pfx_kthread+0x10/0x10
[  360.672237][   T44]  ret_from_fork+0x730/0xd60
[  360.673689][   T44]  ? __pfx_ret_from_fork+0x10/0x10
[  360.675289][   T44]  ? __switch_to+0x800/0x10f0
[  360.677152][   T44]  ? __pfx_kthread+0x10/0x10
[  360.679122][   T44]  ret_from_fork_asm+0x1a/0x30
[  360.681097][   T44]  </TASK>
[  360.682976][   T44] Kernel Offset: disabled
[  360.684941][   T44] Rebooting in 86400 seconds..