last executing test programs:

4m5.185805552s ago: executing program 1 (id=46):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, 0x0)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @loopback}, 0x0, 0x8000004, 0x4, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, 0x0, 0x30)
r4 = syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x10480, 0x0)
openat$incfs(r4, &(0x7f0000000280)='.log\x00', 0x602080, 0x70)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x4)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r6 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
read$FUSE(r6, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x97c, 0x800, 0x20000}, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f00000001c0)=[{0x5, 0x4, 0x4}]})
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)

4m3.668775529s ago: executing program 1 (id=49):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x1, 0x635e, 0x5, 0x0, 0x407}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
io_uring_setup(0x9, 0x0)
close(0x3)
fcntl$setlease(r5, 0x400, 0x2)
r6 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07})
mq_getsetattr(r6, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r7=>0x0, <r8=>0x0})
mq_timedreceive(r6, &(0x7f00000002c0)=""/98, 0x62, 0x2008001, &(0x7f0000000240)={r7, r8+60000000})
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)}, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1)
r9 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOGET_VSCREENINFO(r9, 0x4600, &(0x7f0000000100))
close(0x3)
openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x2100c2, 0x0)

4m3.059699016s ago: executing program 1 (id=51):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @private=0xa010102}, 0x501, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x300})
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
socket$nl_route(0x10, 0x3, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000001a80)=0x1, 0x4)
setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000005040)=0x1, 0x4)
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f0000000b00))
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r8=>0x0})
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010)

4m1.287503739s ago: executing program 1 (id=55):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x1, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0xffffffffffffffc7, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12e5, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000015}, 0xc844)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
write$nci(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df43f04fb6a3bcc1a6632b89f49f93df860cfc"], 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r4 = inotify_init()
inotify_add_watch(r4, 0x0, 0x850003d1)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000880)=""/246)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)

3m59.802129175s ago: executing program 1 (id=56):
socket$inet6_tcp(0xa, 0x1, 0x0)
memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
syz_clone3(0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000011000/0x2000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000016000/0x1000)=nil, &(0x7f0000000100)}, 0x68)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r1 = io_uring_setup(0x5940, &(0x7f0000000440)={0x0, 0x800000, 0x400, 0x2, 0x12a})
syz_open_dev$dri(&(0x7f0000000000), 0x1000000000000000, 0x410000)
dup(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x5, 0x7, 0x4, 0x8, 0x16, "ad82f944bd8da7c5"})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
r5 = fcntl$dupfd(r4, 0x0, r1)
ioctl$TCFLSH(r5, 0x400455c8, 0x2)
ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0x7)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080))
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000100))

3m58.913634575s ago: executing program 1 (id=59):
clock_gettime(0x7, &(0x7f00000009c0))
io_setup(0x6, &(0x7f00000000c0)=<r0=>0x0)
io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r6, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28)
syz_open_procfs(0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)

3m58.809583159s ago: executing program 32 (id=59):
clock_gettime(0x7, &(0x7f00000009c0))
io_setup(0x6, &(0x7f00000000c0)=<r0=>0x0)
io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r6, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28)
syz_open_procfs(0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)

3m31.596663947s ago: executing program 0 (id=120):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}}, 0x24}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ptrace$peekuser(0x3, 0x0, 0x4)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCSETAW(r3, 0x5407, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x3a, 0x5d, 0x40, 0x5f9, 0xffff, 0x619f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xbd, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x7f, 0xc7, 0x0, 0xff, 0x2, 0xc1, 0x6}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r5, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xffffffe4, 0x2, 0xce, 0x5}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2004000}, 0x4000000)
openat$ttyS3(0xffffff9c, 0x0, 0x105200, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {0x0, 0x9}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003ac0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000)
sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84010001}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0xf, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004001)

3m28.653949072s ago: executing program 0 (id=126):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38)
syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00')
syz_open_dev$tty20(0xc, 0x4, 0x1)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}})
r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x403, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x567edf1e112c951d}]}}}]}, 0x38}}, 0x4008844)
ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000)
socket$nl_sock_diag(0x10, 0x3, 0x4)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x400, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x8, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x2, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x1ff, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x28, 0x8, 0x7, 0x9, 0x2, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x78, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x4a, 0x1e, 0x5, 0x81}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0)

3m21.425219261s ago: executing program 0 (id=145):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
sendfile(r2, r2, 0x0, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804)
write$binfmt_script(r0, &(0x7f0000000440)={'#! ', 'dir0/tracing_on/file0', [], 0xa, "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"}, 0xfd7)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
exit(0x5)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')
read$FUSE(r5, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8)
syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d000905", @ANYRES16, @ANYRESHEX], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x541b, 0x0)

3m16.698317466s ago: executing program 0 (id=147):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x1, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0xffffffffffffffc7, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12e5, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000015}, 0xc844)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
write$nci(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df43f04fb6a3bcc1a6632b89f49f93df860cfc"], 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r4 = inotify_init()
inotify_add_watch(r4, 0x0, 0x850003d1)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000880)=""/246)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)

3m15.998422056s ago: executing program 0 (id=150):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x99, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x1, 0x8b, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x3, 0x74}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
munmap(&(0x7f0000583000/0x4000)=nil, 0x4000)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3m15.604861017s ago: executing program 0 (id=151):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001800400dd808c000380850004"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
close(r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x1f)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r6 = userfaultfd(0x1)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
r7 = syz_open_pts(r4, 0x101400)
sendfile(r3, r7, &(0x7f0000000300)=0x6, 0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000000)={@private=0xa010101, @loopback}, 0xc)
r9 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r9, 0x80045500, &(0x7f0000000000))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605)

3m15.184501587s ago: executing program 33 (id=151):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001800400dd808c000380850004"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
close(r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x1f)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r6 = userfaultfd(0x1)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
r7 = syz_open_pts(r4, 0x101400)
sendfile(r3, r7, &(0x7f0000000300)=0x6, 0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000000)={@private=0xa010101, @loopback}, 0xc)
r9 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r9, 0x80045500, &(0x7f0000000000))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605)

2m39.883212543s ago: executing program 2 (id=214):
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x1}, 0x30, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000019000910001d0cf70400020000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040880}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000000000008000100080000000c00018008000100050000002d0002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1)
ioctl$TCSETS(r3, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000d00)=r5, 0x4)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000100)=0x8, 0x4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800800050000000000080006000000000008000600db"], 0xd0}, 0x1, 0x0, 0x0, 0xb51fe8ad78ecd414}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000020}}, 0x1c}}, 0x4810)
r9 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r9, &(0x7f0000000180)=@file={0x1}, 0x6e)
r10 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x0, 0x2}, 0x30, 0x0)
landlock_restrict_self(r10, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r11, &(0x7f0000000080)=@file={0x1}, 0x6e)

2m39.579864019s ago: executing program 2 (id=217):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8040480)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r3 = syz_open_dev$mtd(&(0x7f0000000040), 0x0, 0x20000)
ioctl$MTDFILEMODE(r3, 0x4d13, 0x2)
madvise(&(0x7f000018d000/0x1000)=nil, 0x1000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
sendfile(r6, r5, 0x0, 0x7ffffffd)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8})
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r4)
fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x3)
openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0)
syz_open_dev$dvb_demux(0x0, 0x0, 0x2000)
ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000200))

2m36.376335754s ago: executing program 2 (id=221):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='127.0.0.1:/\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400039b275cc645fbd8f5000007000000b2aa030073797a32bf0500f40800020073797a2400000000cb06b29abcc705b254b41b002fe35491cbdcb53e6b99a7c9a8297a7251053b5c4b4ef75b397588535e5c1038d35a42d1ecadaae1c9a552e32b2d7a21d4692a560877f299d8cc7d90fc4ce6874aa81c80a587bd65e48d911efc75c6f7f598704446"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
fchownat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1000)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)

2m34.072628633s ago: executing program 2 (id=228):
r0 = openat$cdrom(0xffffff9c, &(0x7f0000000240), 0xdb51993b4ffa90f, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0)
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000000)=0x1000000010)
ioctl$BLKRRPART(r2, 0x125f, 0x0)
r3 = semget$private(0x0, 0x6, 0x3b1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0)
io_submit(0x0, 0x0, &(0x7f0000002680))
semctl$GETZCNT(r3, 0x0, 0xf, 0x0)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0x2710, @local}, 0x6)
r5 = socket(0x23, 0x5, 0x81)
connect$vsock_stream(r5, 0x0, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0), 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
ioctl$BLKFLSBUF(r2, 0x1261, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r6, 0x400c4d04, &(0x7f0000000a00))
ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0xfffff0bf)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x3b8, 0x0, 0xa, 0x148, 0x0, 0x10, 0x328, 0x2a8, 0x2a8, 0x328, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff000000, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x134, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x5, 0x18f, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'pimreg1\x00', 'tunl0\x00', {}, {}, 0x20, 0x2}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x2, 0x5}, {0xffffffffffffffff, 0x6, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x414)

2m32.399811448s ago: executing program 2 (id=232):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c00050001000000"], 0xc0}}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

2m32.200578405s ago: executing program 2 (id=234):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x127d01, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0)
syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e1f0a0088edee0d4eab3ee503f5292c2c0d48fae2c11f9477c479dd8d26460261a048cee207ec3cd36d97461bb32abb68f3fc202e0eae16874e797196ba0f494aae9ca90f9f3efc61025c6cd042a2c0a906eefacec02d6f680d33f44e0497559aa427335c9d499bbbd85ddcaa02569d09b3e4d1b0842d1043d9eea68a70dd8c9387ae25530b15b03a8e88ed6745ac694684ddfbc6522290e5fc5afd4d36b7fbd86997c24ef298bb22c9cb5c43fb9fc982c5339273f2655a76c52c1b8d1059e39bcc54187693753e6f0e6d4292766af927e066291d17c640b2d8ef67e7482ad5f2b671eb0ebc7e032aa6b45162", @ANYRES64, @ANYRES8, @ANYRES32], 0x22)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000012c0)={0xffffffffffffeab})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8002, 0x6, 0x8000, 0x9, 0xfff, 0x0, 0xfffffffe}, 0x1c)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000000)={0xa, 0x4f21, 0x8007, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x200400c4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000007911c000000000000500000000000000950074000000000015164a46c84cf8bcbd372a87bc1777ba3427bbde9f099255aa495e16f45103c7a5ceadcb7a712d75489f54"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
shutdown(r4, 0x1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a14"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)
r6 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000001440)={&(0x7f00000014c0)=[{0x9, 0x10, 0x0, 0x0}, {0x15, 0x0, 0x2, &(0x7f0000001600)="77ca"}], 0x2})
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/keys\x00', 0x0, 0x0)
sendfile(r7, r7, 0x0, 0xdfff)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000200), 0x8001, 0x400901)
finit_module(r7, &(0x7f0000000100)='!\x00', 0x0)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000006c0))

2m31.897368859s ago: executing program 34 (id=234):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x127d01, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0)
syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e1f0a0088edee0d4eab3ee503f5292c2c0d48fae2c11f9477c479dd8d26460261a048cee207ec3cd36d97461bb32abb68f3fc202e0eae16874e797196ba0f494aae9ca90f9f3efc61025c6cd042a2c0a906eefacec02d6f680d33f44e0497559aa427335c9d499bbbd85ddcaa02569d09b3e4d1b0842d1043d9eea68a70dd8c9387ae25530b15b03a8e88ed6745ac694684ddfbc6522290e5fc5afd4d36b7fbd86997c24ef298bb22c9cb5c43fb9fc982c5339273f2655a76c52c1b8d1059e39bcc54187693753e6f0e6d4292766af927e066291d17c640b2d8ef67e7482ad5f2b671eb0ebc7e032aa6b45162", @ANYRES64, @ANYRES8, @ANYRES32], 0x22)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000012c0)={0xffffffffffffeab})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8002, 0x6, 0x8000, 0x9, 0xfff, 0x0, 0xfffffffe}, 0x1c)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000000)={0xa, 0x4f21, 0x8007, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x200400c4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000007911c000000000000500000000000000950074000000000015164a46c84cf8bcbd372a87bc1777ba3427bbde9f099255aa495e16f45103c7a5ceadcb7a712d75489f54"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
shutdown(r4, 0x1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a14"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)
r6 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000001440)={&(0x7f00000014c0)=[{0x9, 0x10, 0x0, 0x0}, {0x15, 0x0, 0x2, &(0x7f0000001600)="77ca"}], 0x2})
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/keys\x00', 0x0, 0x0)
sendfile(r7, r7, 0x0, 0xdfff)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000200), 0x8001, 0x400901)
finit_module(r7, &(0x7f0000000100)='!\x00', 0x0)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000006c0))

10.239745661s ago: executing program 3 (id=806):
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000049f000/0x3000)=nil, 0x3000, 0x2000, 0xd3c28bec76034d2a, &(0x7f0000452000/0x2000)=nil)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(0xffffffffffffffff, 0x8)
connect$inet(r0, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
preadv(r1, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x529043, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'pimreg1\x00', {0x1}, 0x7})
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
munmap(&(0x7f0000000000/0x1000)=nil, 0x1000)
socket$inet(0x2, 0x3, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
mmap(&(0x7f0000f79000/0x3000)=nil, 0x3000, 0x300000c, 0x2010, 0xffffffffffffffff, 0x3165c000)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x3, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000b44000/0x1000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

9.342749065s ago: executing program 3 (id=807):
futex(0x0, 0x615f757d33a3e2e, 0x1, &(0x7f0000000100)={0x77359400}, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x57da, &(0x7f0000000400)={0x0, 0x3e49, 0x40, 0x2, 0x17}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f00000001c0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)

8.208109614s ago: executing program 6 (id=812):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

7.317311249s ago: executing program 6 (id=815):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000a, 0x30, 0xffffffffffffffff, 0x2bebc000)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r3})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="73656375726974790000000000007a000000000040000000000000000000000048000000a266a4f6a10cd6b1a28f44f204a4f7e4a845d3255a814e9e715ae6bfb94714a09497922df77a57868e39ddc1c1282613cc9388062e0c00c9963a0f72459b6fabbb94cbad605566cb"], &(0x7f0000000280)=0x6c)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x0, 0x0)
lseek(r8, 0x9, 0x0)
r9 = socket(0x1e, 0x1, 0x0)
connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r9, &(0x7f0000000340), 0x2000011a)
socket$nl_generic(0x10, 0x3, 0x10)

6.883119945s ago: executing program 3 (id=816):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000004c0)=""/65, &(0x7f0000000540)=0x41)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = memfd_secret(0x80000)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f00000001c0)=@arm64)
syz_usbip_server_init(0x6)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000340)="aefdda9d240040005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011d52f436dd2a", 0x2a}], 0x1)
socket$inet(0x2, 0x6, 0xc)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_AUDOUT(r7, 0x40345632, &(0x7f0000000000)={0x1, "b53f165acb3df7b331b5a31d147fd1d2fd14849296109de06865f319e1ffb2d8", 0x2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x82b0ad10b47e480a, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58)
socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4)

5.394319996s ago: executing program 5 (id=820):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r1, 0x0, 0x0, 0x1c)

5.207548098s ago: executing program 3 (id=821):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0)
ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x2000403, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x100000002)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='mydomain / -147483647 0x2400 0 0 1\n', 0x23)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0xda, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x8001, 0x30, 0x80000000, 0x53b}, &(0x7f0000000280)=0x18)
shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000400)=""/249)
shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x7000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_LABELS_MASK={0x28, 0x17, [0xfffff000, 0x0, 0x2, 0x80000001, 0xb, 0x2, 0x3, 0x7, 0x9]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x100000}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10b1b4f4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_TUPLE_ORIG={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x118}}, 0x20008800)
futex(&(0x7f0000000dc0), 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, &(0x7f0000000e40)=0x1, 0x2)

4.517314413s ago: executing program 5 (id=823):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

4.377184591s ago: executing program 6 (id=824):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0xfffffffc, 0x1, 0x100}})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000000)="18000000010000", 0x7)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r6)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r10, 0x901, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x404c0e4}, 0x20000804)
setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f)
getsockopt$inet_opts(r8, 0x0, 0x4, 0x0, &(0x7f0000000040))
sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fdc7df250600000008000d000291000008000100d0"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20040010)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r11=>0x0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x44, r7, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x336}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xca}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) (async)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x200d}}}, 0x7)
syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0x42, 0x0, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0x0, 0x200}}}}, 0x16)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000012002126000000000006000028001a00e0000001000000000000000000000000fe8000000000000000000000000000000200ff"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x44, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x44}}, 0x20000000)

3.131440342s ago: executing program 5 (id=825):
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc00)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0)
syz_emit_vhci(&(0x7f0000005740)=ANY=[@ANYBLOB="040e04060304"], 0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan0\x00'})
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001a80)={0x6, 'tunl0\x00', {0x2}, 0x5})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000001ac0)={0x0, 'bridge_slave_1\x00', {0x4}, 0x5})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r4], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r7, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r7}}, 0x1c)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8005)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x38, r10, 0x537, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88)

2.874126866s ago: executing program 6 (id=827):
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r3, 0x0, r4, r5, 0x0, &(0x7f0000000300))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
fcntl$notify(r7, 0x402, 0x40000029)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r9=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000340)=0x2c, r9, 0x0, 0x0, 0x1}}, 0x20)
getdents64(r7, 0x0, 0x0)
dup(r6)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r10, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r10, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

2.433659968s ago: executing program 5 (id=828):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0))
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
recvmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x9}, 0xfffffffd}], 0x1, 0x2000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket(0x14, 0x2, 0x4)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2)
socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r4=>0x0})
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket(0x2d, 0x2, 0x0)
bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, r4, 0xc}, 0x10)
r6 = socket(0x2d, 0x2, 0x0)
bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
close(r6)

2.191780899s ago: executing program 4 (id=829):
r0 = socket$inet6(0xa, 0x1, 0x8005)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00')
sendfile(r2, r2, 0x0, 0x8f)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000140)={@id={0x2, 0x0, @auto="f46953869efc8f1465e082bef9cd35cd"}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r5, &(0x7f0000000380))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
set_mempolicy(0x2002, &(0x7f0000000000)=0x100000000, 0x4004)
write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
shmctl$IPC_RMID(0x0, 0xfffffffffffff)
fdatasync(r10)
close_range(r0, 0xffffffffffffffff, 0x0)

1.589182483s ago: executing program 3 (id=830):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, 0xb, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084)
fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x77, 0x7)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50)
r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
setns(0xc9, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
sendfile(r3, r4, &(0x7f0000000100)=0xa5, 0xff)
syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r5, &(0x7f00000017c0)=[{&(0x7f00000049c0)="bc", 0x1}], 0x1)
ioctl$OCFS2_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000000)={0x2, 0x2, 0x5, 0x8001, 0x2, 0x10000})
close(r1)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28843, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0xffffffffffffffff)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0xe1c0, 0x0)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r9, 0x330f, 0x8)

1.58816513s ago: executing program 6 (id=831):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r1, 0x0, 0x0, 0x1c)

1.517444683s ago: executing program 5 (id=832):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1\n', 0x2)
close(r1)
write(0xffffffffffffffff, &(0x7f00000001c0)='4\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='1\n', 0x2)
nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
writev(r6, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="b5ae4164202bad", 0x7}, {&(0x7f0000000c40)="28f155dcb9497aec74", 0x9}], 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'macsec0\x00', <r7=>0x0})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
openat(0xffffffffffffffff, &(0x7f00000003c0)='./dev\x00', 0x2, 0x0)

1.517040714s ago: executing program 4 (id=833):
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x1}, 0x30, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000019000910001d0cf70400020000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040880}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000000000008000100080000000c00018008000100050000002d0002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1)
ioctl$TCSETS(r3, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000d00)=r4, 0x4)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000100)=0x8, 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800800050000000000080006000000000008000600db"], 0xd0}, 0x1, 0x0, 0x0, 0xb51fe8ad78ecd414}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000020}}, 0x1c}}, 0x4810)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f0000000180)=@file={0x1}, 0x6e)
r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x0, 0x2}, 0x30, 0x0)
landlock_restrict_self(r9, 0x0)
listen(r8, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r10, &(0x7f0000000080)=@file={0x1}, 0x6e)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002440)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x6}, {0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x3}, 0x400, 0x1, 0x1, 0x1, 0x0, 0x3}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x1}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040084}, 0x24048840)

1.458693538s ago: executing program 4 (id=834):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x440040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_AIE_OFF(r2, 0x7002)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x1, 0x26000, 0x1000, &(0x7f0000001000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc)
epoll_create1(0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f0000000200)={0x1, @vbi={0x7, 0x1, 0x1, 0x3a324152, [0xfffffffb, 0xdeee], [0x4, 0x4], 0x13a}})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r4=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x31bec0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f0000000140)="94", 0x1}, {0x0}], 0x53)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x0, @remote, 'wg1\x00'}}, 0x1e)
sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4814)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r6, 0x0, 0x11, &(0x7f0000000880)="50985cd3baad0be6a3f42c443af29c8238500bfcee38ff73921861daa76438cab539db44cba23aa57a8164325d30be2564c6ebd5c1f37a4f5474c7ca2ec0984f28dce4dc83fdee987b0d06e40ddf2288fba3bd7bc22cc4f30c3f7a7a4ca1f05310abdcea6b9951d381bbfb4617abbd701a4f8d64564fbe2d3497e7fca4e2f1c270bf9775ad6cfc", 0x87)
r7 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x48f, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x34, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)

1.314712592s ago: executing program 4 (id=835):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00000018000180140002006e657464657673696d30200000004ae2359e3b010fd5aabb6b"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = epoll_create1(0x80000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r3, &(0x7f00000005c0)=""/151, 0x97)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0xef, 0xe, 0x4, 0x40, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x8001, 0x81, 0x6}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000001000ffff2e3c7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="170c0000000000004400128009000100766c616e0000000034000280280003800c00010001000000030000000c00010001000000060000000c0001000100000040000000060001000400000008000500", @ANYRES32=r5, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x10, 0x1d, 0x5, 0x27, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x80, 0x700, 0x0, 0x9}})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7)
getsockname$packet(r7, &(0x7f0000000440)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r9 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r11, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000000)=[{r10, 0x9044}, {r11, 0x2600}, {r11, 0x1089}], 0x3, 0x0, 0x0, 0x0)
close(r9)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x3e, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010)
sendmmsg$inet(r6, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r8, @empty, @multicast2}}}], 0x18}}], 0x1, 0x4880)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x700, 0x323e, 0x6}})

815.227785ms ago: executing program 3 (id=836):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7)
ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, 0x0)
r3 = userfaultfd(0x801)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x3000)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6a0})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5)
sendmsg$NBD_CMD_CONNECT(r5, 0x0, 0x4000)
socket$kcm(0xa, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x43e)
r7 = syz_io_uring_setup(0x34b8, &(0x7f0000000440)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r8, r9, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1})
io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa)

718.54157ms ago: executing program 6 (id=837):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff00000000000109022400000000090400000203000000092100000501221800090581930000000000"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r2, 0x400c4820, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r3 = getpid()
msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x2000, 0x8cff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x1f, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
fcntl$setlease(r6, 0x400, 0x1)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x25)
rename(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00')
r7 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

290.202962ms ago: executing program 5 (id=838):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r5 = openat$vmci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@any, 0x1})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x571, 0x0, 0x2}]})
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)

181.592048ms ago: executing program 4 (id=839):
syz_ublk_setup_io_uring(0x7878, &(0x7f0000000140)={0x0, 0x5d17, 0x0, 0x0, 0x26f}, 0x0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = syz_open_dev$vim2m(0x0, 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r2, 0x5)
connect$inet(r3, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"})
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x100000000000000)

0s ago: executing program 4 (id=840):
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x400, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000208007042542673c10000000000000000000000867e"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000b4100001d81761e000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)=ANY=[])
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0)
setuid(0xee01)
socket(0x18, 0x3, 0xf9)
r4 = semget(0x0, 0x1, 0x206)
semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000140)=""/77)
ppoll(&(0x7f0000000040)=[{r3, 0xb00}], 0x1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6}, 0x8)
r5 = dup2(r2, r0)
getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)

kernel console output (not intermixed with test programs):

[  166.008294][  T855] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  166.008314][  T855] usb 9-1: config 0 has no interface number 0
[  166.008345][  T855] usb 9-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  166.008366][  T855] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10
[  166.008387][  T855] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024
[  166.008420][  T855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.010711][  T855] usb 9-1: config 0 descriptor??
[  166.173413][  T855] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  166.257294][ T7611] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.304993][ T7619] Trying to write to read-only block-device nullb0
[  166.476826][ T7611] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.627224][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.795710][ T6354] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.822149][ T7619] MTRR 1 not used
[  166.855851][ T5611] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.856033][ T5611] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.856203][ T5611] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.075762][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  167.113134][ T7629] input: syz1 as /devices/virtual/input/input16
[  167.185592][    T0] NOHZ tick-stop error: local softirq work is pending, handler #188!!!
[  167.665631][ T5611] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.676091][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.682302][  T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.827849][ T7637] fuse: Bad value for 'fd'
[  167.872090][ T5611] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.930287][ T7639] random: crng reseeded on system resumption
[  167.953433][ T5611] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.044501][ T5611] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.293162][   T12] netdevsim netdevsim2 eth13: set [0, 0] type 1 family 0 port 8472 - 0
[  168.329271][ T5611] bridge_slave_1: left allmulticast mode
[  168.329298][ T5611] bridge_slave_1: left promiscuous mode
[  168.332011][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.351416][ T5611] bridge_slave_0: left allmulticast mode
[  168.351441][ T5611] bridge_slave_0: left promiscuous mode
[  168.351629][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.361679][ T5611] dummy0: left allmulticast mode
[  168.411281][   T25] usb 9-1: USB disconnect, device number 4
[  168.431115][   T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  168.434217][   T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  168.436097][   T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  168.436983][   T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  168.437553][   T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  168.706913][ T5611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.711180][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.725155][ T5611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.739375][ T5611] bond0 (unregistering): Released all slaves
[  168.763414][ T5611] bond1 (unregistering): Released all slaves
[  168.803177][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.865999][ T6354] netdevsim netdevsim2 eth12: set [0, 0] type 1 family 0 port 8472 - 0
[  168.866046][ T6354] netdevsim netdevsim2 eth11: set [0, 0] type 1 family 0 port 8472 - 0
[  168.866071][ T6354] netdevsim netdevsim2 eth14: set [0, 0] type 1 family 0 port 8472 - 0
[  168.990460][ T5611] tipc: Left network mode
[  169.075570][ T5822] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  169.086692][ T7662] netlink: 20 bytes leftover after parsing attributes in process `syz.5.236'.
[  169.294314][ T5450] 8021q: adding VLAN 0 to HW filter on device eth11
[  169.414502][ T5822] usb 9-1: Using ep0 maxpacket: 8
[  169.448250][ T5822] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  169.521049][ T5822] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  169.521103][ T5822] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  169.521126][ T5822] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  169.521149][ T5822] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  169.521172][ T5822] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  169.521211][ T5822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.756542][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.825587][ T5844] usb 42-1: device descriptor read/8, error -110
[  170.060650][ T7653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.060844][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.060981][ T7653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.061384][ T6354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.075537][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.101204][ T5450] 8021q: adding VLAN 0 to HW filter on device eth13
[  170.219708][ T5844] usb usb42-port1: attempt power cycle
[  170.283324][ T7684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.284124][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.291448][ T5822] usb 9-1: usb_control_msg returned -32
[  170.291481][ T5822] usbtmc 9-1:16.0: can't read capabilities
[  170.390683][ T5450] 8021q: adding VLAN 0 to HW filter on device eth12
[  170.545582][ T5746] Bluetooth: hci3: command tx timeout
[  170.788185][ T5844] usb usb42-port1: unable to enumerate USB device
[  170.893354][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.893673][ T7644] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.893832][ T7644] bridge_slave_0: entered allmulticast mode
[  170.907631][ T7644] bridge_slave_0: entered promiscuous mode
[  171.010696][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.011627][ T7644] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.011750][ T7644] bridge_slave_1: entered allmulticast mode
[  171.012720][ T7644] bridge_slave_1: entered promiscuous mode
[  171.131723][ T7644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.140421][ T7644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.284631][ T5611] hsr_slave_0: left promiscuous mode
[  171.288939][ T5611] hsr_slave_1: left promiscuous mode
[  171.289788][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.289807][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.291100][ T7702] fuse: Unknown parameter 'group_i00000000000000000000'
[  171.291226][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.291240][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.319748][ T5611] veth1_macvtap: left promiscuous mode
[  171.319819][ T5611] veth0_macvtap: left promiscuous mode
[  171.320865][ T5611] veth1_vlan: left promiscuous mode
[  171.320970][ T5611] veth0_vlan: left promiscuous mode
[  171.382651][ T7703] random: crng reseeded on system resumption
[  171.972373][ T7692] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  172.336949][ T5611] team0 (unregistering): Port device team_slave_1 removed
[  172.350748][ T5629] usb 9-1: USB disconnect, device number 5
[  172.376580][ T5611] team0 (unregistering): Port device team_slave_0 removed
[  172.540964][ T7644] team0: Port device team_slave_0 added
[  172.544396][ T7644] team0: Port device team_slave_1 added
[  172.547876][ T5450] 8021q: adding VLAN 0 to HW filter on device eth14
[  172.584883][ T7644] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.584907][ T7644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.584932][ T7644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.592567][ T7644] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.592584][ T7644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.592606][ T7644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.625822][ T5746] Bluetooth: hci3: command tx timeout
[  172.654940][ T7644] hsr_slave_0: entered promiscuous mode
[  172.658996][ T7644] hsr_slave_1: entered promiscuous mode
[  172.870283][ T7644] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  172.873809][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  172.874837][ T7644] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  172.888800][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  172.890904][ T7644] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  172.896369][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  172.897380][ T7644] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  172.902145][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  172.987893][ T7644] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.003423][ T7644] 8021q: adding VLAN 0 to HW filter on device team0
[  173.013020][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.013107][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.024027][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.024098][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.388708][ T7644] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.606271][ T7644] veth0_vlan: entered promiscuous mode
[  173.610898][ T7644] veth1_vlan: entered promiscuous mode
[  173.641504][ T7644] veth0_macvtap: entered promiscuous mode
[  173.644726][ T7644] veth1_macvtap: entered promiscuous mode
[  173.664473][ T7644] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.671243][ T7644] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.759442][ T1041] net_ratelimit: 4 callbacks suppressed
[  173.759463][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.759822][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.759835][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.788521][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.788534][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.795398][ T7202] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.795449][ T7202] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.795481][ T7202] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.795511][ T7202] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.947842][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'.
[  173.963307][ T7749] bond0: (slave bond_slave_1): Releasing backup interface
[  174.145738][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.715293][ T5746] Bluetooth: hci3: command tx timeout
[  175.199195][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.544696][ T7783] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint
[  175.718984][ T7783] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]
[  175.719092][ T7783] pci 0000:00:03.0: BAR 1 [mem 0x81085000-0x81085fff]
[  175.719349][ T7783] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]
[  175.757406][ T7783] pci 0000:00:03.0: Adding to iommu group 3
[  176.225430][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.241900][ T7783] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned
[  176.244152][ T7783] pci 0000:00:03.0: BAR 1 [mem 0x81085000-0x81085fff]: assigned
[  176.244764][ T7783] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]: assigned
[  176.295809][ T7783] hwrng_fill thread creation failed
[  176.350425][ T7789] netlink: 'syz.3.241': attribute type 1 has an invalid length.
[  176.350440][ T7789] netlink: 200 bytes leftover after parsing attributes in process `syz.3.241'.
[  176.350448][ T7789] netlink: 'syz.3.241': attribute type 1 has an invalid length.
[  176.350453][ T7789] netlink: 29 bytes leftover after parsing attributes in process `syz.3.241'.
[  176.352888][ T7789] netlink: 128 bytes leftover after parsing attributes in process `syz.3.241'.
[  176.438476][ T7798] fuse: Bad value for 'fd'
[  176.524576][ T7803] random: crng reseeded on system resumption
[  176.612669][ T7807] netlink: 16 bytes leftover after parsing attributes in process `syz.5.254'.
[  176.785036][ T5746] Bluetooth: hci3: command tx timeout
[  176.787397][ T7810] Invalid ELF header magic: != ELF
[  176.992738][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.265751][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.459520][ T7818] netlink: 27 bytes leftover after parsing attributes in process `syz.3.251'.
[  178.214364][ T7836] input: syz1 as /devices/virtual/input/input17
[  178.354698][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.395526][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.026508][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.067252][ T7643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.430845][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.747736][ T7851] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint
[  179.756950][ T7851] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]
[  179.757117][ T7851] pci 0000:00:03.0: BAR 1 [mem 0x81085000-0x81085fff]
[  179.757618][ T7851] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]
[  179.830224][ T7851] pci 0000:00:03.0: Adding to iommu group 3
[  179.881798][ T7851] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned
[  179.886217][ T7851] pci 0000:00:03.0: BAR 1 [mem 0x81085000-0x81085fff]: assigned
[  179.886670][ T7851] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]: assigned
[  180.064821][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  180.480660][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.185616][ T7872] Invalid ELF header magic: != ELF
[  181.701097][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.856091][ T7868] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  181.856121][ T7868] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  181.856713][ T7868] vhci_hcd vhci_hcd.0: Device attached
[  181.868995][ T7877] fuse: Bad value for 'fd'
[  181.977544][ T7878] random: crng reseeded on system resumption
[  182.146495][  T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.229419][   T25] Process accounting resumed
[  182.244786][   T62] usb 50-1: SetAddress Request (2) to port 0
[  182.244842][   T62] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd
[  182.370255][ T7874] vhci_hcd: connection reset by peer
[  182.376040][ T6354] vhci_hcd vhci_hcd.6: stop threads
[  182.376067][ T6354] vhci_hcd vhci_hcd.6: release socket
[  182.376163][ T6354] vhci_hcd vhci_hcd.6: disconnect device
[  182.737813][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.911742][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.174961][ T5109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.954916][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.199497][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.386979][ T7908] binder_alloc: 7906: binder_alloc_buf size 66480 failed, no address space
[  185.402390][ T7908] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  185.985080][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.006800][ T7939] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint
[  187.017452][ T7954] comedi comedi0: comedi_config --init_data is deprecated
[  187.025011][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.058366][ T7939] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]
[  187.058480][ T7939] pci 0000:00:03.0: BAR 1 [mem 0x81085000-0x81085fff]
[  187.058827][ T7939] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]
[  187.178354][ T7939] pci 0000:00:03.0: Adding to iommu group 3
[  187.221651][ T7939] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned
[  187.224108][ T7939] pci 0000:00:03.0: BAR 1 [mem 0x81085000-0x81085fff]: assigned
[  187.224255][ T7939] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]: assigned
[  187.797516][   T62] usb 50-1: device descriptor read/8, error -110
[  188.065811][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.169178][   T57] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  188.229966][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.245936][ T7971] netlink: 'syz.3.275': attribute type 10 has an invalid length.
[  188.248972][ T7971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.275'.
[  188.396411][   T57] usb 10-1: not running at top speed; connect to a high speed hub
[  188.396471][   T57] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  188.397730][   T57] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  188.514599][   T57] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.514616][   T57] usb 10-1: Product: syz
[  188.514623][   T57] usb 10-1: Manufacturer: syz
[  188.514630][   T57] usb 10-1: SerialNumber: syz
[  188.604811][   T62] usb usb50-port1: attempt power cycle
[  189.286196][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.332346][   T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.348931][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.389240][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.449116][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.449262][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.458083][   T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.622254][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.791774][   T57] oti6858 10-1:1.0: oti6858 converter detected
[  189.878609][   T62] usb usb50-port1: unable to enumerate USB device
[  189.986932][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.008475][   T57] usb 10-1: oti6858 converter now attached to ttyUSB0
[  190.063171][   T57] usb 10-1: USB disconnect, device number 2
[  190.150538][   T57] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  190.151536][   T57] oti6858 10-1:1.0: device disconnected
[  190.555781][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.704251][ T5822] usb 9-1: new low-speed USB device number 6 using dummy_hcd
[  191.465050][ T5822] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  191.466914][ T5822] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  191.466937][ T5822] usb 9-1: config 0 has no interface number 0
[  191.466989][ T5822] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  191.467012][ T5822] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  191.467044][ T5822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.472324][ T5822] usb 9-1: config 0 descriptor??
[  191.473260][ T7988] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  191.480742][ T5822] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  192.004815][ T8013] Invalid ELF header magic: != ELF
[  192.456907][ T5845] libceph: connect (1)[c::]:6789 error -101
[  192.834125][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  192.914081][ T5845] libceph: mon0 (1)[c::]:6789 connect error
[  192.929584][ T5845] libceph: connect (1)[c::]:6789 error -101
[  192.929723][ T8010] ceph: No mds server is up or the cluster is laggy
[  192.929835][ T5845] libceph: mon0 (1)[c::]:6789 connect error
[  193.073429][   T25] usb 9-1: USB disconnect, device number 6
[  193.894733][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'.
[  193.930594][ T8032] bond0: (slave bond_slave_1): Releasing backup interface
[  194.292315][   T25] bond_slave_0: entered promiscuous mode
[  194.293853][   T25] bond_slave_1: entered promiscuous mode
[  194.336017][   T25] bond_slave_0: left promiscuous mode
[  194.336068][   T25] bond_slave_1: left promiscuous mode
[  194.355797][ T8040] netlink: 16 bytes leftover after parsing attributes in process `syz.6.288'.
[  194.395682][ T1439] ieee802154 phy0 wpan0: encryption failed: -22
[  194.395720][ T1439] ieee802154 phy1 wpan1: encryption failed: -22
[  195.024260][ T5823] net_ratelimit: 4 callbacks suppressed
[  195.024275][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.036650][  T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.037458][ T1478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.084149][ T7643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.394309][ T7643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.399009][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.399094][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.399191][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.399249][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.399341][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.727678][ T8075] netlink: 'syz.3.299': attribute type 1 has an invalid length.
[  195.727699][ T8075] netlink: 200 bytes leftover after parsing attributes in process `syz.3.299'.
[  195.727713][ T8075] netlink: 'syz.3.299': attribute type 1 has an invalid length.
[  195.727725][ T8075] netlink: 29 bytes leftover after parsing attributes in process `syz.3.299'.
[  195.733716][ T8075] netlink: 128 bytes leftover after parsing attributes in process `syz.3.299'.
[  195.762406][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.300'.
[  195.833618][ T8084] bond0: (slave bond_slave_1): Releasing backup interface
[  197.161549][ T8094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  198.300150][ T8110] loop5: detected capacity change from 0 to 4095
[  198.332793][ T6618] buffer_io_error: 10 callbacks suppressed
[  198.332821][ T6618] Buffer I/O error on dev loop5, logical block 511, async page read
[  198.538053][ T5752] Buffer I/O error on dev loop5, logical block 511, async page read
[  198.695342][ T8118] netlink: 44 bytes leftover after parsing attributes in process `syz.6.316'.
[  198.697865][ T8117] netlink: 'syz.5.308': attribute type 1 has an invalid length.
[  198.697879][ T8117] netlink: 200 bytes leftover after parsing attributes in process `syz.5.308'.
[  198.697887][ T8117] netlink: 'syz.5.308': attribute type 1 has an invalid length.
[  198.697893][ T8117] netlink: 29 bytes leftover after parsing attributes in process `syz.5.308'.
[  198.710732][ T8117] netlink: 128 bytes leftover after parsing attributes in process `syz.5.308'.
[  198.972816][ T8139] fuse: Bad value for 'rootmode'
[  198.977696][ T8141] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  199.047240][ T8141] netlink: 48 bytes leftover after parsing attributes in process `syz.6.311'.
[  199.096177][ T8145] random: crng reseeded on system resumption
[  199.908191][ T8168] fuse: Bad value for 'fd'
[  200.062777][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.317'.
[  200.093015][ T8178] vlan0: entered allmulticast mode
[  200.093126][ T8178] dummy0: entered allmulticast mode
[  200.109255][ T8178] bridge0: port 3(vlan0) entered blocking state
[  200.109563][ T8178] bridge0: port 3(vlan0) entered disabled state
[  200.121615][ T8178] vlan0: entered promiscuous mode
[  200.121634][ T8178] dummy0: entered promiscuous mode
[  200.319689][ T5823] net_ratelimit: 371 callbacks suppressed
[  200.319715][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.134913][ T8191] overlayfs: failed to clone upperpath
[  201.343835][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.576155][ T8200] fuse: Bad value for 'rootmode'
[  201.584332][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.650526][ T8201] random: crng reseeded on system resumption
[  202.394085][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.395942][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.397957][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.398567][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.506650][ T8206] fuse: Bad value for 'fd'
[  202.570186][ T8217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[  202.570202][ T8217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead
[  202.570214][ T8217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead
[  202.570224][ T8217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead
[  202.570272][ T8217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead
[  202.570284][ T8217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead
[  202.570294][ T8217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead
[  202.570309][ T8217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead
[  202.570318][ T8217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead
[  202.570327][ T8217] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead
[  202.570336][ T8217] jffs2: Further such events for this erase block will not be printed
[  202.570369][ T8217] jffs2: Empty flash at 0x00000308 ends at 0x0000030c
[  202.570377][ T8217] jffs2: Empty flash at 0x00000330 ends at 0x00000334
[  202.570384][ T8217] jffs2: Empty flash at 0x0000034c ends at 0x00000350
[  202.573258][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.327'.
[  202.580246][ T8217] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  202.580266][ T8217] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  202.586428][ T8215] random: crng reseeded on system resumption
[  202.616508][ T8210] bond0: (slave bond_slave_1): Releasing backup interface
[  202.696827][ T8217] overlayfs: failed to resolve './file1': -2
[  202.720764][ T8217] Illegal XDP return value 4294967294 on prog  (id 45) dev N/A, expect packet loss!
[  203.061748][ T8225] Invalid ELF header magic: != ELF
[  203.423758][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  203.732824][ T8230] fuse: Bad value for 'rootmode'
[  203.767789][ T8231] vlan0: entered allmulticast mode
[  203.767811][ T8231] bond0: entered allmulticast mode
[  203.767824][ T8231] bond_slave_0: entered allmulticast mode
[  203.771038][ T8231] netlink: 14 bytes leftover after parsing attributes in process `syz.6.335'.
[  203.798846][ T8231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.799895][ T8231] bond_slave_0: left allmulticast mode
[  203.801793][ T8231] bond0 (unregistering): Released all slaves
[  203.875687][ T8236] random: crng reseeded on system resumption
[  204.076885][ T8242] input: syz1 as /devices/virtual/input/input18
[  204.127249][ T8243] netlink: 44 bytes leftover after parsing attributes in process `syz.4.338'.
[  204.216247][   T74] IPVS: starting estimator thread 0...
[  204.303577][ T8246] IPVS: using max 31 ests per chain, 74400 per kthread
[  204.464180][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.630341][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.846805][ T8251] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  205.165501][ T8265] mmap: syz.3.344 (8265) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  205.278051][ T8261] netlink: 16 bytes leftover after parsing attributes in process `syz.6.342'.
[  205.372820][   T43] audit: type=1326 audit(2000000148.196:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.6.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  205.372873][   T43] audit: type=1326 audit(2000000148.196:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.6.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  205.372910][   T43] audit: type=1326 audit(2000000148.196:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.6.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  205.372946][   T43] audit: type=1326 audit(2000000148.196:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.6.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  205.372983][   T43] audit: type=1326 audit(2000000148.196:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.6.342" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  205.373019][   T43] audit: type=1326 audit(2000000148.196:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.6.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  205.373057][   T43] audit: type=1326 audit(2000000148.196:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.6.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  205.373093][   T43] audit: type=1326 audit(2000000148.206:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.6.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  205.373130][   T43] audit: type=1326 audit(2000000148.206:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.6.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  205.373166][   T43] audit: type=1326 audit(2000000148.206:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.6.342" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  205.574568][ T5823] net_ratelimit: 1 callbacks suppressed
[  205.574620][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.909329][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.969774][ T8282] futex_wake_op: syz.4.350 tries to shift op by 144; fix this program
[  205.980902][ T8280] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  206.104239][ T8280] IPv6: addrconf: prefix option has invalid lifetime
[  206.623925][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.663666][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.895380][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[  207.895399][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead
[  207.895453][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead
[  207.895464][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead
[  207.895474][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead
[  207.895486][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead
[  207.895495][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead
[  207.895512][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead
[  207.895521][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead
[  207.895531][ T8325] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead
[  207.895540][ T8325] jffs2: Further such events for this erase block will not be printed
[  207.895620][ T8325] jffs2: Empty flash at 0x00000308 ends at 0x0000030c
[  207.895630][ T8325] jffs2: Empty flash at 0x00000330 ends at 0x00000334
[  207.895638][ T8325] jffs2: Empty flash at 0x0000034c ends at 0x00000350
[  207.924118][ T8328] bond1: entered promiscuous mode
[  207.982101][ T8325] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  207.982118][ T8325] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  208.664918][ T7643] libceph: connect (1)[c::]:6789 error -101
[  208.670377][ T7643] libceph: mon0 (1)[c::]:6789 connect error
[  208.687389][ T7643] libceph: connect (1)[c::]:6789 error -101
[  208.688532][ T7643] libceph: mon0 (1)[c::]:6789 connect error
[  208.703558][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.713775][ T8347] ceph: No mds server is up or the cluster is laggy
[  208.986641][ T7643] libceph: connect (1)[c::]:6789 error -101
[  208.989676][ T7643] libceph: mon0 (1)[c::]:6789 connect error
[  208.989999][ T7643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.426740][ T8368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.368'.
[  209.743408][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.289491][ T8372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.289621][ T8372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.297980][ T8372] netlink: 36 bytes leftover after parsing attributes in process `syz.3.369'.
[  210.298007][ T8372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.369'.
[  210.298026][ T8372] netlink: 36 bytes leftover after parsing attributes in process `syz.3.369'.
[  210.442006][ T8378] capability: warning: `syz.5.371' uses deprecated v2 capabilities in a way that may be insecure
[  210.586101][ T8378] usb 1-1: USB disconnect, device number 2
[  210.783691][ T5823] net_ratelimit: 6 callbacks suppressed
[  210.783714][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.524909][ T8371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.836992][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.889251][ T8408] binder_alloc: 8397: binder_alloc_buf size 66480 failed, no address space
[  211.889273][ T8408] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  212.064851][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.819675][ T8449] netlink: 312 bytes leftover after parsing attributes in process `syz.6.380'.
[  212.863300][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.106900][ T8455] trusted_key: syz.6.380 sent an empty control message without MSG_MORE.
[  213.907545][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.224827][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.351751][   T43] kauditd_printk_skb: 29 callbacks suppressed
[  214.351766][   T43] audit: type=1804 audit(2000000157.196:41): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.386" name="bus" dev="ramfs" ino=23102 res=1 errno=0
[  214.373823][   T43] audit: type=1804 audit(2000000157.226:42): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.386" name="bus" dev="ramfs" ino=23102 res=1 errno=0
[  214.380577][ T8480] futex_wake_op: syz.3.387 tries to shift op by 144; fix this program
[  214.646499][ T8483] tipc: Started in network mode
[  214.646621][ T8483] tipc: Node identity 0010000000000000002, cluster identity 1
[  214.659381][ T8483] Invalid ELF header magic: != ELF
[  214.669715][ T8483] overlayfs: failed to clone lowerpath
[  214.943238][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.115049][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.585341][ T8493] fuse: Invalid rootmode
[  215.588975][ T8494] No such timeout policy "syz1"
[  215.598789][ T8494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.617593][ T8494] netlink: 'syz.3.392': attribute type 2 has an invalid length.
[  215.617616][ T8494] netlink: 'syz.3.392': attribute type 2 has an invalid length.
[  215.636410][ T8487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.667076][ T8495] random: crng reseeded on system resumption
[  215.993274][ T5845] net_ratelimit: 2 callbacks suppressed
[  215.993293][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.528079][ T8491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.530799][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.539107][ T8491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.546943][ T8491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.652572][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'.
[  216.700321][ T8517] netlink: 'syz.5.397': attribute type 1 has an invalid length.
[  216.700348][ T8517] netlink: 200 bytes leftover after parsing attributes in process `syz.5.397'.
[  216.700361][ T8517] netlink: 'syz.5.397': attribute type 1 has an invalid length.
[  216.700373][ T8517] netlink: 29 bytes leftover after parsing attributes in process `syz.5.397'.
[  216.714174][ T8517] netlink: 128 bytes leftover after parsing attributes in process `syz.5.397'.
[  216.842051][ T8412] syz.5.371 (8412) used greatest stack depth: 18600 bytes left
[  216.922806][ T5822] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  216.970525][ T8527] warning: `syz.5.398' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  217.033205][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.073046][ T5822] usb 8-1: Using ep0 maxpacket: 8
[  217.075895][ T5822] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  217.076817][ T5822] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  217.076854][ T5822] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  217.076874][ T5822] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  217.076895][ T5822] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  217.076910][ T5822] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  217.076930][ T5822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.285638][ T5822] usb 8-1: usb_control_msg returned -32
[  217.285664][ T5822] usbtmc 8-1:16.0: can't read capabilities
[  217.354226][    C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  217.390020][ T1173] IPVS: starting estimator thread 0...
[  217.472882][ T8543] IPVS: using max 26 ests per chain, 62400 per kthread
[  218.063428][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.150918][ T8556] netlink: 16 bytes leftover after parsing attributes in process `syz.5.401'.
[  218.184378][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.486442][   T43] audit: type=1326 audit(2000000161.337:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8550 comm="syz.5.401" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000
[  218.487034][   T43] audit: type=1326 audit(2000000161.337:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8550 comm="syz.5.401" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000
[  218.487316][   T43] audit: type=1326 audit(2000000161.337:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8550 comm="syz.5.401" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000
[  218.490830][   T43] audit: type=1326 audit(2000000161.337:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8550 comm="syz.5.401" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000
[  218.491227][   T43] audit: type=1326 audit(2000000161.337:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8550 comm="syz.5.401" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fe4fec code=0x7ffc0000
[  218.491922][   T43] audit: type=1326 audit(2000000161.337:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8550 comm="syz.5.401" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000
[  218.556699][   T43] audit: type=1326 audit(2000000161.337:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8550 comm="syz.5.401" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000
[  218.556749][   T43] audit: type=1326 audit(2000000161.347:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8550 comm="syz.5.401" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000
[  218.593692][ T8556] FAULT_INJECTION: forcing a failure.
[  218.593692][ T8556] name failslab, interval 1, probability 0, space 0, times 1
[  218.593717][ T8556] CPU: 3 UID: 0 PID: 8556 Comm: syz.5.401 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  218.593772][ T8556] Tainted: [L]=SOFTLOCKUP
[  218.593780][ T8556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  218.593788][ T8556] Call Trace:
[  218.593793][ T8556]  <TASK>
[  218.593799][ T8556]  dump_stack_lvl+0x100/0x190
[  218.593822][ T8556]  should_fail_ex.cold+0x5/0xa
[  218.593838][ T8556]  should_failslab+0xc2/0x120
[  218.593858][ T8556]  __kmalloc_cache_noprof+0x91/0x6d0
[  218.593883][ T8556]  ? audit_log_d_path+0xed/0x210
[  218.593904][ T8556]  audit_log_d_path+0xed/0x210
[  218.593920][ T8556]  audit_log_d_path_exe+0x46/0x80
[  218.593937][ T8556]  audit_log_task+0x2fe/0x3a0
[  218.593957][ T8556]  ? __pfx_audit_log_task+0x10/0x10
[  218.593976][ T8556]  ? rcu_read_lock_any_held+0x6a/0x90
[  218.593992][ T8556]  ? ksys_write+0x190/0x250
[  218.594005][ T8556]  ? ksys_write+0x190/0x250
[  218.594019][ T8556]  audit_seccomp+0x79/0x190
[  218.594034][ T8556]  __seccomp_filter+0x88c/0x1130
[  218.594050][ T8556]  ? __pfx___seccomp_filter+0x10/0x10
[  218.594071][ T8556]  __seccomp_permit_syscall+0x207/0x2d0
[  218.594087][ T8556]  __do_fast_syscall_32+0x420/0x8b0
[  218.594110][ T8556]  do_fast_syscall_32+0x32/0x70
[  218.594128][ T8556]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  218.594144][ T8556] RIP: 0023:0xf7fe4fec
[  218.594161][ T8556] Code: Unable to access opcode bytes at 0xf7fe4fc2.
[  218.594166][ T8556] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  218.594180][ T8556] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000c0105512
[  218.594189][ T8556] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000
[  218.594196][ T8556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  218.594203][ T8556] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  218.594210][ T8556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  218.594225][ T8556]  </TASK>
[  218.842635][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  219.103153][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.342729][ T8514] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  219.344647][ T5845] usb 8-1: USB disconnect, device number 7
[  219.975047][ T8578] profile_transition: unconfined exec no attachment
[  219.996456][ T8575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[  219.996550][ T8575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead
[  219.996577][ T8575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead
[  219.996593][ T8575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead
[  219.996609][ T8575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead
[  219.996630][ T8575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead
[  219.996648][ T8575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead
[  219.996677][ T8575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead
[  219.996694][ T8575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead
[  219.996710][ T8575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead
[  219.996725][ T8575] jffs2: Further such events for this erase block will not be printed
[  219.996780][ T8575] jffs2: Empty flash at 0x00000308 ends at 0x0000030c
[  219.996800][ T8575] jffs2: Empty flash at 0x00000330 ends at 0x00000334
[  219.996815][ T8575] jffs2: Empty flash at 0x0000034c ends at 0x00000350
[  220.020041][ T8575] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  220.020060][ T8575] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  220.021553][ T8583] profile_transition: unconfined exec no attachment
[  220.068232][ T8580] overlayfs: failed to clone upperpath
[  220.144285][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.483743][ T8588] syz.5.410 (8588): drop_caches: 3
[  220.818928][ T8592] profile_transition: unconfined exec no attachment
[  220.977046][ T8598] profile_transition: unconfined exec no attachment
[  221.142737][ T5844] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  221.172303][ T8604] profile_transition: unconfined exec no attachment
[  221.192671][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.201502][ T8605] profile_transition: unconfined exec no attachment
[  221.251163][ T8603] netlink: 'syz.5.415': attribute type 10 has an invalid length.
[  221.251407][ T8603] netlink: 40 bytes leftover after parsing attributes in process `syz.5.415'.
[  221.265248][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.268714][ T8603] bridge0: port 4(dummy0) entered blocking state
[  221.268855][ T8603] bridge0: port 4(dummy0) entered disabled state
[  221.270804][ T8603] bridge0: port 4(dummy0) entered blocking state
[  221.270920][ T8603] bridge0: port 4(dummy0) entered forwarding state
[  221.293713][ T5844] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  221.295197][ T5844] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.295226][ T5844] usb 8-1: config 0 has no interfaces?
[  221.295258][ T5844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.299556][ T5844] usb 8-1: config 0 descriptor??
[  221.305167][ T8603] fuse: Bad value for 'group_id'
[  221.305186][ T8603] fuse: Bad value for 'group_id'
[  221.585696][ T8618] profile_transition: unconfined exec no attachment
[  221.617890][ T8620] profile_transition: unconfined exec no attachment
[  222.222696][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.533020][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.6.419'.
[  222.534136][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.6.419'.
[  222.534148][ T8617] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22)
[  222.784964][ T1173] Bluetooth: hci4: Frame reassembly failed (-84)
[  222.869426][   T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.870601][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.882982][ T8638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.883201][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.965886][ T8641] xt_connbytes: Forcing CT accounting to be enabled
[  222.966112][ T8641] xt_TPROXY: Can be used only with -p tcp or -p udp
[  222.995750][   T30] libceph: connect (1)[c::]:6789 error -101
[  222.996107][   T30] libceph: mon0 (1)[c::]:6789 connect error
[  223.033285][ T8641] ceph: No mds server is up or the cluster is laggy
[  223.210085][ T8650] profile_transition: unconfined exec no attachment
[  223.264568][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.716814][ T8657] team0: Device ipip0 is up. Set it down before adding it as a team port
[  223.822858][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.302714][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.782531][   T66] Bluetooth: hci4: command 0x1003 tx timeout
[  224.783331][ T5746] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  224.844873][   T30] usb 8-1: USB disconnect, device number 8
[  224.978694][ T8666] netlink: 36 bytes leftover after parsing attributes in process `syz.4.430'.
[  224.978721][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.430'.
[  224.978739][ T8666] netlink: 36 bytes leftover after parsing attributes in process `syz.4.430'.
[  225.239016][ T8680] profile_transition: unconfined exec no attachment
[  225.501120][ T8684] profile_transition: unconfined exec no attachment
[  225.546196][   T43] kauditd_printk_skb: 169 callbacks suppressed
[  225.546218][   T43] audit: type=1800 audit(2000000168.387:220): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.431" name="file0" dev="overlay" ino=596 res=0 errno=0
[  225.860273][ T8687] profile_transition: unconfined exec no attachment
[  226.326936][ T8692] profile_transition: unconfined exec no attachment
[  226.385537][ T5822] net_ratelimit: 2 callbacks suppressed
[  226.385557][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.483935][ T8695] profile_transition: unconfined exec no attachment
[  226.852597][ T8712] tipc: Cannot configure node identity twice
[  226.864429][ T8712] Invalid ELF header magic: != ELF
[  226.870192][ T8712] overlayfs: overlapping lowerdir path
[  227.422667][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  227.423683][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  227.889014][ T8726] profile_transition: unconfined exec no attachment
[  227.945621][ T8729] profile_transition: unconfined exec no attachment
[  228.007682][ T8731] profile_transition: unconfined exec no attachment
[  228.056430][ T8733] profile_transition: unconfined exec no attachment
[  228.180986][ T8742] profile_transition: unconfined exec no attachment
[  228.242903][ T8741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.451'.
[  228.287354][   T43] audit: type=1326 audit(2000000171.137:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8740 comm="syz.4.451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000
[  228.287475][   T43] audit: type=1326 audit(2000000171.137:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8740 comm="syz.4.451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000
[  228.288060][   T43] audit: type=1326 audit(2000000171.137:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8740 comm="syz.4.451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000
[  228.288313][   T43] audit: type=1326 audit(2000000171.137:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8740 comm="syz.4.451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000
[  228.288337][   T43] audit: type=1326 audit(2000000171.137:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8740 comm="syz.4.451" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf704efec code=0x7ffc0000
[  228.288418][   T43] audit: type=1326 audit(2000000171.137:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8740 comm="syz.4.451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000
[  228.288557][   T43] audit: type=1326 audit(2000000171.137:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8740 comm="syz.4.451" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf704efec code=0x7ffc0000
[  228.288639][   T43] audit: type=1326 audit(2000000171.137:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8740 comm="syz.4.451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000
[  228.288661][   T43] audit: type=1326 audit(2000000171.137:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8740 comm="syz.4.451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000
[  228.468594][ T8750] netlink: 'syz.6.453': attribute type 10 has an invalid length.
[  228.468609][ T8750] netlink: 40 bytes leftover after parsing attributes in process `syz.6.453'.
[  228.468673][ T8750] dummy0: entered promiscuous mode
[  228.469052][ T8750] bridge0: port 3(dummy0) entered blocking state
[  228.469126][ T8750] bridge0: port 3(dummy0) entered disabled state
[  228.469192][ T8750] dummy0: entered allmulticast mode
[  228.470342][ T8750] bridge0: port 3(dummy0) entered blocking state
[  228.470385][ T8750] bridge0: port 3(dummy0) entered forwarding state
[  228.472327][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.488024][ T8750] fuse: fd is not a fuse device
[  228.764533][ T8767] fuse: fd is not a fuse device
[  229.502997][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.734027][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.460'.
[  229.748706][ T8793] vlan0: entered allmulticast mode
[  229.749218][ T8793] bridge0: port 4(vlan0) entered blocking state
[  229.749304][ T8793] bridge0: port 4(vlan0) entered disabled state
[  229.754202][ T8793] vlan0: entered promiscuous mode
[  229.982030][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  230.002028][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  230.474565][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.552568][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.619847][ T8820] profile_transition: 19 callbacks suppressed
[  230.619872][ T8820] profile_transition: unconfined exec no attachment
[  230.657053][ T8821] profile_transition: unconfined exec no attachment
[  230.948102][ T8825] profile_transition: unconfined exec no attachment
[  231.025591][ T8827] fuse: fd is not a fuse device
[  231.144763][ T8830] profile_transition: unconfined exec no attachment
[  231.582310][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.949330][ T8842] fuse: Bad value for 'fd'
[  232.333254][ T8850] netlink: 20 bytes leftover after parsing attributes in process `syz.5.474'.
[  232.835435][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.432691][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.502895][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.636016][ T8867] profile_transition: unconfined exec no attachment
[  233.690651][ T8869] profile_transition: unconfined exec no attachment
[  233.714482][ T8871] profile_transition: unconfined exec no attachment
[  233.824860][ T8873] profile_transition: unconfined exec no attachment
[  233.904721][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.337172][ T8886] 9p: Bad value for 'rfdno'
[  234.372661][ T8886] sit0: entered promiscuous mode
[  234.396242][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'.
[  235.210867][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.691205][ T8900] tipc: Started in network mode
[  235.692370][ T8900] tipc: Node identity 0010000000000000002, cluster identity 1
[  235.695979][ T8900] Invalid ELF header magic: != ELF
[  235.699137][ T8900] overlayfs: failed to clone lowerpath
[  236.544122][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.687740][ T7643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.891292][ T8905] ceph: No mds server is up or the cluster is laggy
[  236.950717][ T8851] syz.6.473 (8851) used greatest stack depth: 17832 bytes left
[  237.448458][ T8924] profile_transition: unconfined exec no attachment
[  237.489134][ T8926] No such timeout policy "syz1"
[  237.500057][ T8928] profile_transition: unconfined exec no attachment
[  237.537010][ T8929] profile_transition: unconfined exec no attachment
[  237.553446][ T8930] netlink: 'syz.4.496': attribute type 2 has an invalid length.
[  237.553466][ T8930] netlink: 'syz.4.496': attribute type 2 has an invalid length.
[  237.565132][ T8931] profile_transition: unconfined exec no attachment
[  237.582255][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.692514][ T8933] fuse: Bad value for 'fd'
[  237.878566][ T8939] profile_transition: unconfined exec no attachment
[  238.003617][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.056841][ T8942] profile_transition: unconfined exec no attachment
[  238.199191][ T8945] profile_transition: unconfined exec no attachment
[  238.251906][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.356509][ T8947] profile_transition: unconfined exec no attachment
[  238.622714][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.743174][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.789401][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.580792][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'.
[  240.692233][ T8964] null_blk: nullb1: using native zone append
[  241.154566][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.652983][ T8982] profile_transition: unconfined exec no attachment
[  241.671728][ T8980] netlink: 'syz.5.507': attribute type 1 has an invalid length.
[  241.671750][ T8980] netlink: 200 bytes leftover after parsing attributes in process `syz.5.507'.
[  241.671954][ T8980] netlink: 'syz.5.507': attribute type 1 has an invalid length.
[  241.671973][ T8980] netlink: 29 bytes leftover after parsing attributes in process `syz.5.507'.
[  241.676143][ T8980] netlink: 128 bytes leftover after parsing attributes in process `syz.5.507'.
[  241.694220][ T8986] profile_transition: unconfined exec no attachment
[  242.064085][ T8998] fuse: Unknown parameter '0x0000000000000004'
[  242.143008][ T9002] random: crng reseeded on system resumption
[  242.221527][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.252360][ T9010] No such timeout policy "syz1"
[  242.321150][ T9019] netlink: 'syz.6.512': attribute type 2 has an invalid length.
[  242.321178][ T9019] netlink: 'syz.6.512': attribute type 2 has an invalid length.
[  242.902139][ T7643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  243.032090][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  243.112468][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.518'.
[  243.270537][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  243.287818][   T43] kauditd_printk_skb: 32 callbacks suppressed
[  243.287837][   T43] audit: type=1804 audit(2000000186.138:262): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=invalid_pcr cause=open_writers comm="syz.5.520" name="bus" dev="ramfs" ino=27180 res=1 errno=0
[  243.288342][   T43] audit: type=1804 audit(2000000186.138:263): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=invalid_pcr cause=ToMToU comm="syz.5.520" name="bus" dev="ramfs" ino=27180 res=1 errno=0
[  243.519263][ T9052] profile_transition: 14 callbacks suppressed
[  243.519346][ T9052] profile_transition: unconfined exec no attachment
[  243.696596][ T9059] profile_transition: unconfined exec no attachment
[  244.311593][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  244.586483][ T9068] fuse: Unknown parameter '0x0000000000000004'
[  244.923145][ T9079] xt_connbytes: Forcing CT accounting to be enabled
[  244.923192][ T9079] xt_TPROXY: Can be used only with -p tcp or -p udp
[  244.957833][   T30] libceph: connect (1)[c::]:6789 error -101
[  244.959237][   T30] libceph: mon0 (1)[c::]:6789 connect error
[  245.011955][ T9079] ceph: No mds server is up or the cluster is laggy
[  245.208990][ T9089] profile_transition: unconfined exec no attachment
[  245.229695][ T9090] profile_transition: unconfined exec no attachment
[  245.264307][ T9093] profile_transition: unconfined exec no attachment
[  245.293065][ T9094] profile_transition: unconfined exec no attachment
[  245.341554][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.375348][ T9097] profile_transition: unconfined exec no attachment
[  245.478647][ T9103] profile_transition: unconfined exec no attachment
[  245.491567][ T9100] profile_transition: unconfined exec no attachment
[  245.563660][ T9107] profile_transition: unconfined exec no attachment
[  245.988710][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.384121][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.378646][ T9168] fuse: Unknown parameter '0x0000000000000004'
[  247.425636][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.663878][   T66] Bluetooth: hci1: command 0x0406 tx timeout
[  247.708303][ T9174] netlink: 312 bytes leftover after parsing attributes in process `syz.4.547'.
[  248.461594][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.521846][ T9199] profile_transition: 35 callbacks suppressed
[  248.521862][ T9199] profile_transition: unconfined exec no attachment
[  249.031355][ T7643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.038948][ T9203] overlayfs: failed to clone upperpath
[  249.511323][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.577612][ T9204] profile_transition: unconfined exec no attachment
[  249.577984][ T9205] profile_transition: unconfined exec no attachment
[  249.608773][ T9207] profile_transition: unconfined exec no attachment
[  249.625350][ T9208] profile_transition: unconfined exec no attachment
[  249.660567][ T9209] profile_transition: unconfined exec no attachment
[  249.674024][ T9210] profile_transition: unconfined exec no attachment
[  249.714305][ T9211] profile_transition: unconfined exec no attachment
[  249.977592][ T9225] profile_transition: unconfined exec no attachment
[  250.175627][ T9222] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  250.176661][ T9222] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  250.203415][ T9222] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  250.203573][ T9222] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  250.209648][ T9222] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  250.541570][  T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.541981][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.546324][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.911134][ T9241] profile_transition: unconfined exec no attachment
[  251.134225][ T9247] syz_tun: entered allmulticast mode
[  251.198742][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.560'.
[  251.205922][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.6.560'.
[  251.205951][ T9248] openvswitch: netlink: Missing key (keys=c0, expected=40280)
[  251.343386][ T9246] syz_tun: left allmulticast mode
[  251.581720][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.851780][ T9273] fuse: Unknown parameter '0x0000000000000004'
[  251.978577][ T9277] random: crng reseeded on system resumption
[  252.071395][   T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.220999][ T5746] Bluetooth: hci3: command 0x0405 tx timeout
[  252.221061][ T5746] Bluetooth: hci1: command 0x0406 tx timeout
[  252.621065][ T5823] net_ratelimit: 2 callbacks suppressed
[  252.621083][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.621774][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.626323][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.627388][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.771255][ T5844] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  252.919721][  T106] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  252.923775][ T9309] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  252.933739][ T5844] usb 10-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  252.936107][ T5844] usb 10-1: config 0 interface 0 has no altsetting 0
[  252.936140][ T5844] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.938467][ T5844] usb 10-1: config 0 descriptor??
[  253.140832][ T7643] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  253.291041][ T9318] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  253.303394][ T7643] usb 8-1: Using ep0 maxpacket: 8
[  253.304723][ T7643] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  253.305678][ T7643] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.305694][ T7643] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  253.305741][ T7643] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  253.307704][ T7643] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.307722][ T7643] usb 8-1: Product: syz
[  253.307733][ T7643] usb 8-1: Manufacturer: syz
[  253.307744][ T7643] usb 8-1: SerialNumber: syz
[  253.335420][ T5844] usb 10-1: string descriptor 0 read error: -71
[  253.337819][ T5844] usbhid 10-1:0.0: can't add hid device: -71
[  253.337875][ T5844] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  253.349076][ T5844] usb 10-1: USB disconnect, device number 3
[  253.531501][ T9309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.531792][ T9309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.549770][ T7643] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  253.549786][ T7643] usb 8-1: clock source 0 is not valid, cannot use
[  253.550451][ T7643] usb 8-1: 1:1: cannot get freq (v2/v3): err -71
[  253.551480][ T7643] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  253.611459][ T7643] usb 8-1: USB disconnect, device number 9
[  253.663209][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.666829][ T9327] profile_transition: 21 callbacks suppressed
[  253.666846][ T9327] profile_transition: unconfined exec no attachment
[  254.012185][ T9333] profile_transition: unconfined exec no attachment
[  254.024996][ T9335] netlink: 312 bytes leftover after parsing attributes in process `syz.5.579'.
[  254.144342][ T9337] profile_transition: unconfined exec no attachment
[  254.207896][ T9339] profile_transition: unconfined exec no attachment
[  254.258946][ T9329] profile_transition: name lookup ix on error
[  254.289376][ T9341] profile_transition: unconfined exec no attachment
[  254.300932][ T5746] Bluetooth: hci3: command 0x0405 tx timeout
[  254.300992][   T66] Bluetooth: hci1: command 0x0406 tx timeout
[  254.822426][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.850183][ T9347] profile_transition: unconfined exec no attachment
[  254.881271][ T9345] profile_transition: unconfined exec no attachment
[  254.884235][ T9346] profile_transition: unconfined exec no attachment
[  254.885291][ T9348] profile_transition: unconfined exec no attachment
[  254.886292][ T9349] profile_transition: unconfined exec no attachment
[  255.143622][ T9354] fuse: Unknown parameter '0x0000000000000004'
[  255.214000][ T9355] random: crng reseeded on system resumption
[  255.421166][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.657022][ T9367] xt_connbytes: Forcing CT accounting to be enabled
[  255.657416][ T9367] Cannot find del_set index 0 as target
[  255.780246][ T9367] ceph: No mds server is up or the cluster is laggy
[  255.872184][ T1439] ieee802154 phy0 wpan0: encryption failed: -22
[  255.872296][ T1439] ieee802154 phy1 wpan1: encryption failed: -22
[  255.915966][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.921188][ T9369] overlayfs: failed to clone upperpath
[  255.935817][ T9369] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[  255.935833][ T9369] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead
[  255.935895][ T9369] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead
[  255.935906][ T9369] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead
[  255.935915][ T9369] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead
[  255.935926][ T9369] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead
[  255.935934][ T9369] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead
[  255.935948][ T9369] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead
[  255.935956][ T9369] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead
[  255.935964][ T9369] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead
[  255.935972][ T9369] jffs2: Further such events for this erase block will not be printed
[  255.936040][ T9369] jffs2: Empty flash at 0x00000308 ends at 0x0000030c
[  255.936050][ T9369] jffs2: Empty flash at 0x00000330 ends at 0x00000334
[  255.936057][ T9369] jffs2: Empty flash at 0x0000034c ends at 0x00000350
[  255.947622][ T9369] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  255.947633][ T9369] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  256.149403][ T9379] fuse: Unknown parameter 'user_i00000000000000000000'
[  256.222318][ T9382] random: crng reseeded on system resumption
[  256.380644][ T5746] Bluetooth: hci3: command 0x0405 tx timeout
[  256.529953][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'.
[  256.581736][ T9397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[  256.581764][ T9397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead
[  256.581786][ T9397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead
[  256.581804][ T9397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead
[  256.581821][ T9397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead
[  256.581843][ T9397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead
[  256.581860][ T9397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead
[  256.581887][ T9397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead
[  256.581903][ T9397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead
[  256.581920][ T9397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead
[  256.581936][ T9397] jffs2: Further such events for this erase block will not be printed
[  256.581991][ T9397] jffs2: Empty flash at 0x00000308 ends at 0x0000030c
[  256.582007][ T9397] jffs2: Empty flash at 0x00000330 ends at 0x00000334
[  256.582021][ T9397] jffs2: Empty flash at 0x0000034c ends at 0x00000350
[  256.593641][ T9397] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  256.593655][ T9397] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  256.873547][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.873778][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.922088][ T9408] fuse: Bad value for 'fd'
[  257.641258][ T9426] fuse: Unknown parameter 'fd0x0000000000000004'
[  257.709861][ T9427] random: crng reseeded on system resumption
[  257.980676][   T35] net_ratelimit: 3 callbacks suppressed
[  257.980693][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.460674][ T7643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.460829][   T66] Bluetooth: hci3: command 0x0405 tx timeout
[  258.588352][ T9459] fuse: Unknown parameter 'fd0x0000000000000004'
[  258.664776][ T9463] random: crng reseeded on system resumption
[  258.848346][ T9468] netlink: 13 bytes leftover after parsing attributes in process `syz.6.601'.
[  258.850615][ T9468] fuse: fd is not a fuse device
[  258.857866][ T9471] tipc: Cannot configure node identity twice
[  258.868580][ T9471] Invalid ELF header magic: != ELF
[  258.875610][ T9471] overlayfs: overlapping lowerdir path
[  259.013837][ T9473] fuse: fd is not a fuse device
[  259.022002][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.253755][   T43] audit: type=1326 audit(2000000202.109:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9478 comm="syz.6.604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  259.253941][   T43] audit: type=1326 audit(2000000202.109:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9478 comm="syz.6.604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  259.254540][   T43] audit: type=1326 audit(2000000202.109:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9478 comm="syz.6.604" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  259.255172][   T43] audit: type=1326 audit(2000000202.109:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9478 comm="syz.6.604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  259.255201][   T43] audit: type=1326 audit(2000000202.109:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9478 comm="syz.6.604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  259.255751][   T43] audit: type=1326 audit(2000000202.109:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9478 comm="syz.6.604" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  259.255906][   T43] audit: type=1326 audit(2000000202.109:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9478 comm="syz.6.604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  259.256231][   T43] audit: type=1326 audit(2000000202.109:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9478 comm="syz.6.604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  259.256256][   T43] audit: type=1326 audit(2000000202.109:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9478 comm="syz.6.604" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  259.256966][   T43] audit: type=1326 audit(2000000202.109:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9478 comm="syz.6.604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000
[  259.524367][ T9484] fuse: Bad value for 'fd'
[  259.706815][ T9491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.706960][ T9491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.707129][ T9491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.708237][ T9491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.708365][ T9491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.711154][ T9491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.718431][ T9491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.782307][ T9490] vimc link validate: Sensor A:src:16x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  260.108139][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'.
[  260.108157][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'.
[  260.562737][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.611'.
[  261.392812][ T9516] profile_transition: 35 callbacks suppressed
[  261.392829][ T9516] profile_transition: unconfined exec no attachment
[  261.625061][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'.
[  261.924441][ T9518] fuse: Unknown parameter 'fd0x0000000000000004'
[  262.185327][ T9525] fuse: Unknown parameter 'user_id00000000000000000000'
[  262.258262][ T9526] random: crng reseeded on system resumption
[  262.268536][ T9529] loop9: detected capacity change from 0 to 255852544
[  262.457592][ T5822] libceph: connect (1)[c::]:6789 error -101
[  262.457677][ T5822] libceph: mon0 (1)[c::]:6789 connect error
[  262.563599][ T9538] ceph: No mds server is up or the cluster is laggy
[  263.426778][ T9550] Invalid ELF header type: 3 != 1
[  263.506506][ T9554] netlink: 'syz.3.625': attribute type 1 has an invalid length.
[  263.506526][ T9554] netlink: 200 bytes leftover after parsing attributes in process `syz.3.625'.
[  263.506539][ T9554] netlink: 'syz.3.625': attribute type 1 has an invalid length.
[  263.506549][ T9554] netlink: 29 bytes leftover after parsing attributes in process `syz.3.625'.
[  263.524324][ T9556] profile_transition: unconfined exec no attachment
[  263.561438][ T9557] profile_transition: unconfined exec no attachment
[  263.666093][ T9563] profile_transition: unconfined exec no attachment
[  263.725766][ T9565] profile_transition: unconfined exec no attachment
[  263.796187][ T9566] profile_transition: unconfined exec no attachment
[  263.874377][ T9567] profile_transition: unconfined exec no attachment
[  263.954855][ T9571] profile_transition: unconfined exec no attachment
[  263.986772][ T5822] net_ratelimit: 11 callbacks suppressed
[  263.986793][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.091898][ T9575] profile_transition: unconfined exec no attachment
[  264.133526][ T9576] profile_transition: unconfined exec no attachment
[  264.285323][ T9584] IPVS: lc: SCTP 172.20.20.187:0 - no destination available
[  264.647327][ T9584] Bluetooth: MGMT ver 1.23
[  264.940425][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.022516][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.064692][ T9615] netlink: 'syz.5.632': attribute type 1 has an invalid length.
[  265.064714][ T9615] netlink: 200 bytes leftover after parsing attributes in process `syz.5.632'.
[  265.064726][ T9615] netlink: 'syz.5.632': attribute type 1 has an invalid length.
[  265.064736][ T9615] netlink: 29 bytes leftover after parsing attributes in process `syz.5.632'.
[  265.922490][ T9629] fuse: Unknown parameter 'user_id00000000000000000000'
[  266.121731][ T9649] random: crng reseeded on system resumption
[  266.208546][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.461644][ T9656] netlink: 'syz.3.638': attribute type 1 has an invalid length.
[  266.461670][ T9656] netlink: 200 bytes leftover after parsing attributes in process `syz.3.638'.
[  266.461680][ T9656] netlink: 'syz.3.638': attribute type 1 has an invalid length.
[  266.461687][ T9656] netlink: 29 bytes leftover after parsing attributes in process `syz.3.638'.
[  266.492422][ T9662] profile_transition: 27 callbacks suppressed
[  266.492435][ T9662] profile_transition: unconfined exec no attachment
[  266.528084][ T9661] netlink: 'syz.5.639': attribute type 1 has an invalid length.
[  266.528100][ T9661] netlink: 200 bytes leftover after parsing attributes in process `syz.5.639'.
[  266.528108][ T9661] netlink: 'syz.5.639': attribute type 1 has an invalid length.
[  266.528114][ T9661] netlink: 29 bytes leftover after parsing attributes in process `syz.5.639'.
[  266.535694][ T9661] netlink: 128 bytes leftover after parsing attributes in process `syz.5.639'.
[  266.584196][ T9667] netlink: 36 bytes leftover after parsing attributes in process `syz.6.640'.
[  266.617110][ T9669] profile_transition: unconfined exec no attachment
[  266.693920][ T9671] syz_tun: entered allmulticast mode
[  266.696230][ T9674] profile_transition: unconfined exec no attachment
[  266.715136][ T9670] syz_tun: left allmulticast mode
[  266.745879][ T9677] profile_transition: unconfined exec no attachment
[  266.775885][ T9678] profile_transition: unconfined exec no attachment
[  266.810599][ T9680] profile_transition: unconfined exec no attachment
[  266.843968][ T9681] profile_transition: unconfined exec no attachment
[  266.864842][ T9683] profile_transition: unconfined exec no attachment
[  266.909044][ T9689] profile_transition: unconfined exec no attachment
[  266.925294][ T9690] profile_transition: unconfined exec no attachment
[  267.404412][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.748404][ T9708] fuse: Bad value for 'fd'
[  267.774075][ T9709] netlink: 36 bytes leftover after parsing attributes in process `syz.5.651'.
[  267.774102][ T9709] netlink: 16 bytes leftover after parsing attributes in process `syz.5.651'.
[  267.774118][ T9709] netlink: 36 bytes leftover after parsing attributes in process `syz.5.651'.
[  268.041347][ T9716] xt_connbytes: Forcing CT accounting to be enabled
[  268.041550][ T9716] xt_TPROXY: Can be used only with -p tcp or -p udp
[  268.250381][ T9716] ceph: No mds server is up or the cluster is laggy
[  268.329341][   T30] libceph: connect (1)[c::]:6789 error -101
[  268.334330][   T30] libceph: mon0 (1)[c::]:6789 connect error
[  268.540091][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.837326][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.019940][ T9734] syz.3.649: vmalloc error: size 4284481866, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  269.020093][ T9734] CPU: 1 UID: 0 PID: 9734 Comm: syz.3.649 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  269.020120][ T9734] Tainted: [L]=SOFTLOCKUP
[  269.020127][ T9734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  269.020140][ T9734] Call Trace:
[  269.020147][ T9734]  <TASK>
[  269.020155][ T9734]  dump_stack_lvl+0x100/0x190
[  269.020187][ T9734]  warn_alloc.cold+0x9e/0xb2
[  269.020209][ T9734]  ? __pfx_warn_alloc+0x10/0x10
[  269.020229][ T9734]  ? __lock_acquire+0x5c0/0x1f40
[  269.020280][ T9734]  __vmalloc_node_range_noprof+0x123b/0x1420
[  269.020310][ T9734]  ? rcu_is_watching+0x13/0xc0
[  269.020329][ T9734]  ? trace_contention_end+0x126/0x160
[  269.020357][ T9734]  ? __mutex_lock+0x26c/0x1bd0
[  269.020385][ T9734]  ? dvb_demux_do_ioctl+0x929/0x1200
[  269.020407][ T9734]  ? dvb_demux_do_ioctl+0x9e0/0x1200
[  269.020429][ T9734]  ? find_held_lock+0x2b/0x80
[  269.020449][ T9734]  ? __pfx___mutex_lock+0x10/0x10
[  269.020476][ T9734]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  269.020504][ T9734]  ? tomoyo_path_number_perm+0x188/0x580
[  269.020536][ T9734]  ? dvb_demux_do_ioctl+0x9e0/0x1200
[  269.020557][ T9734]  __vmalloc_node_noprof+0xad/0xf0
[  269.020582][ T9734]  ? dvb_demux_do_ioctl+0x9e0/0x1200
[  269.020606][ T9734]  dvb_demux_do_ioctl+0x9e0/0x1200
[  269.020630][ T9734]  ? do_vfs_ioctl+0x226/0x13e0
[  269.020663][ T9734]  dvb_usercopy+0x167/0x340
[  269.020681][ T9734]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  269.020704][ T9734]  ? __pfx_dvb_usercopy+0x10/0x10
[  269.020721][ T9734]  ? __fget_files+0x34/0x3d0
[  269.020750][ T9734]  ? __fget_files+0x21f/0x3d0
[  269.020774][ T9734]  dvb_demux_ioctl+0x29/0x40
[  269.020793][ T9734]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  269.020812][ T9734]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  269.020845][ T9734]  __do_fast_syscall_32+0x13a/0x8b0
[  269.020873][ T9734]  ? lockdep_hardirqs_on+0x7d/0x110
[  269.020901][ T9734]  do_fast_syscall_32+0x32/0x70
[  269.020930][ T9734]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  269.020953][ T9734] RIP: 0023:0xf7f47fec
[  269.020972][ T9734] Code: Unable to access opcode bytes at 0xf7f47fc2.
[  269.020980][ T9734] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  269.020996][ T9734] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000006f2d
[  269.021008][ T9734] RDX: 00000000ff60014a RSI: 0000000000000000 RDI: 0000000000000000
[  269.021019][ T9734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  269.021029][ T9734] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  269.021040][ T9734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  269.021065][ T9734]  </TASK>
[  269.021071][ T9734] Mem-Info:
[  269.021079][ T9734] active_anon:5115 inactive_anon:5756 isolated_anon:0
[  269.021079][ T9734]  active_file:4378 inactive_file:10122 isolated_file:0
[  269.021079][ T9734]  unevictable:2723 dirty:551 writeback:0
[  269.021079][ T9734]  slab_reclaimable:6107 slab_unreclaimable:61342
[  269.021079][ T9734]  mapped:26382 shmem:4003 pagetables:1723
[  269.021079][ T9734]  sec_pagetables:310 bounce:0
[  269.021079][ T9734]  kernel_misc_reclaimable:0
[  269.021079][ T9734]  free:27197 free_pcp:15628 free_cma:0
[  269.021126][ T9734] Node 0 active_anon:4kB inactive_anon:60kB active_file:16kB inactive_file:120kB unevictable:432kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:8kB writeback:0kB shmem:436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9600kB pagetables:1580kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  269.021174][ T9734] Node 1 active_anon:20456kB inactive_anon:22964kB active_file:17496kB inactive_file:40368kB unevictable:10460kB isolated(anon):0kB isolated(file):0kB mapped:105496kB dirty:2196kB writeback:0kB shmem:15576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5328kB pagetables:5312kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  269.021222][ T9734] Node 0 DMA free:2052kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:372kB local_pcp:116kB free_cma:0kB
[  269.021285][ T9734] lowmem_reserve[]: 0 277 277 277 277
[  269.021318][ T9734] Node 0 DMA32 free:15728kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:48kB active_file:16kB inactive_file:120kB unevictable:432kB writepending:8kB zspages:12kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:10928kB local_pcp:3316kB free_cma:0kB
[  269.021373][ T9734] lowmem_reserve[]: 0 0 0 0 0
[  269.021405][ T9734] Node 1 DMA32 free:91008kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20456kB inactive_anon:22964kB active_file:17496kB inactive_file:40368kB unevictable:10460kB writepending:2196kB zspages:2516kB present:1048432kB managed:948208kB mlocked:6948kB bounce:0kB free_pcp:51248kB local_pcp:22724kB free_cma:0kB
[  269.021463][ T9734] lowmem_reserve[]: 0 0 0 0 0
[  269.021494][ T9734] Node 0 DMA: 51*4kB (UM) 5*8kB (UM) 5*16kB (UM) 12*32kB (UM) 11*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2052kB
[  269.021638][ T9734] Node 0 DMA32: 16*4kB (ME) 42*8kB (ME) 74*16kB (UME) 72*32kB (UME) 33*64kB (UME) 20*128kB (UME) 12*256kB (ME) 2*512kB (UM) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 15728kB
[  269.023553][ T9734] Node 1 DMA32: 73*4kB (UE) 203*8kB (UME) 68*16kB (UE) 118*32kB (UE) 76*64kB (UME) 118*128kB (UME) 85*256kB (UME) 33*512kB (UME) 17*1024kB (M) 4*2048kB (UM) 0*4096kB = 91004kB
[  269.023698][ T9734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  269.023713][ T9734] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  269.023727][ T9734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  269.023740][ T9734] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  269.023753][ T9734] 19424 total pagecache pages
[  269.023759][ T9734] 924 pages in swap cache
[  269.023765][ T9734] Free swap  = 115884kB
[  269.023771][ T9734] Total swap = 124996kB
[  269.023778][ T9734] 524155 pages RAM
[  269.023783][ T9734] 0 pages HighMem/MovableOnly
[  269.023789][ T9734] 212121 pages reserved
[  269.023794][ T9734] 0 pages cma reserved
[  269.902161][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.328203][ T9760] random: crng reseeded on system resumption
[  270.595334][ T9777] fuse: Bad value for 'fd'
[  270.669176][ T9778] random: crng reseeded on system resumption
[  270.691125][ T9783] netlink: 36 bytes leftover after parsing attributes in process `syz.6.658'.
[  270.951948][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.584586][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.727643][ T9815] netlink: 'syz.5.661': attribute type 1 has an invalid length.
[  271.727666][ T9815] __nla_validate_parse: 2 callbacks suppressed
[  271.727677][ T9815] netlink: 200 bytes leftover after parsing attributes in process `syz.5.661'.
[  271.727692][ T9815] netlink: 'syz.5.661': attribute type 1 has an invalid length.
[  271.727704][ T9815] netlink: 29 bytes leftover after parsing attributes in process `syz.5.661'.
[  271.742650][ T9816] profile_transition: 40 callbacks suppressed
[  271.742667][ T9816] profile_transition: unconfined exec no attachment
[  271.820408][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.846322][ T9821] profile_transition: unconfined exec no attachment
[  271.911598][ T9823] profile_transition: unconfined exec no attachment
[  272.012639][ T9829] profile_transition: unconfined exec no attachment
[  272.079039][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.664'.
[  272.080262][ T9831] bridge0: port 4(dummy0) entered disabled state
[  272.178069][ T9833] profile_transition: unconfined exec no attachment
[  272.386240][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.421506][ T9831] vlan0: left promiscuous mode
[  272.426874][ T9831] bridge0: port 3(vlan0) entered disabled state
[  272.472942][ T9831] bridge_slave_1: left allmulticast mode
[  272.473183][ T9831] bridge_slave_1: left promiscuous mode
[  272.474916][ T9831] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.584269][ T9836] profile_transition: unconfined exec no attachment
[  272.640115][ T9831] bridge_slave_0: left allmulticast mode
[  272.640227][ T9831] bridge_slave_0: left promiscuous mode
[  272.641113][ T9831] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.719776][ T9838] profile_transition: unconfined exec no attachment
[  273.426318][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.518231][ T9845] profile_transition: unconfined exec no attachment
[  273.544349][ T9848] profile_transition: unconfined exec no attachment
[  273.545217][ T9849] profile_transition: unconfined exec no attachment
[  274.470264][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.620172][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.196133][ T9860] fuse: Bad value for 'fd'
[  275.285069][ T9863] random: crng reseeded on system resumption
[  275.500053][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.588749][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.364070][ T9897] xt_TPROXY: Can be used only with -p tcp or -p udp
[  277.638803][ T9909] profile_transition: 17 callbacks suppressed
[  277.638842][ T9909] profile_transition: unconfined exec no attachment
[  277.646131][ T9897] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  277.696478][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.879353][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.882703][ T9913] profile_transition: unconfined exec no attachment
[  277.883974][ T9914] profile_transition: unconfined exec no attachment
[  277.909420][ T9916] profile_transition: unconfined exec no attachment
[  277.911943][ T9915] profile_transition: unconfined exec no attachment
[  277.912322][ T9917] profile_transition: unconfined exec no attachment
[  277.915055][ T9918] profile_transition: unconfined exec no attachment
[  278.570774][ T9931] netlink: 'syz.5.680': attribute type 1 has an invalid length.
[  278.570801][ T9931] netlink: 200 bytes leftover after parsing attributes in process `syz.5.680'.
[  278.570812][ T9931] netlink: 'syz.5.680': attribute type 1 has an invalid length.
[  278.570821][ T9931] netlink: 29 bytes leftover after parsing attributes in process `syz.5.680'.
[  278.605020][ T9931] netlink: 128 bytes leftover after parsing attributes in process `syz.5.680'.
[  278.773466][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.773815][ T9934] profile_transition: unconfined exec no attachment
[  278.799090][ T9937] profile_transition: unconfined exec no attachment
[  278.870244][ T9942] profile_transition: unconfined exec no attachment
[  279.249322][ T9954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.683'.
[  279.321165][   T66] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  279.517180][ T9962] fuse: Unknown parameter '0x0000000000000004'
[  279.697262][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.685'.
[  279.697291][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.685'.
[  279.822553][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.449369][ T5887] usb 8-1: new low-speed USB device number 10 using dummy_hcd
[  280.600091][ T5887] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  280.602741][ T5887] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  280.602763][ T5887] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  280.602799][ T5887] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.602829][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.612109][ T5887] hub 8-1:1.0: bad descriptor, ignoring hub
[  280.612133][ T5887] hub 8-1:1.0: probe with driver hub failed with error -5
[  280.612627][ T5887] cdc_wdm 8-1:1.0: skipping garbage
[  280.612641][ T5887] cdc_wdm 8-1:1.0: skipping garbage
[  280.616984][ T5887] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[  280.783315][T10022] syz_tun: entered allmulticast mode
[  280.784086][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'.
[  280.794626][T10022] IPv4: Oversized IP packet from 172.20.20.24
[  280.798950][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  280.799468][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  280.851704][T10026] 9p: Bad value for 'rfdno'
[  280.859819][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.940150][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.243290][ T5887] usb 8-1: reset low-speed USB device number 10 using dummy_hcd
[  281.422525][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.553204][ T5887] usb 8-1: device firmware changed
[  281.575801][ T5887] usb 8-1: USB disconnect, device number 10
[  281.665345][T10043] fuse: Unknown parameter 'fd0x0000000000000004'
[  281.893359][ T5887] usb 8-1: new low-speed USB device number 11 using dummy_hcd
[  281.902356][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.937256][T10053] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  281.937256][T10053] 
[  281.937431][T10053] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  281.943594][T10053] CIFS: Attempting to mount //127.0.0.1/share
[  282.040006][ T5887] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  282.040566][ T5887] usb 8-1: config 0 has no interfaces?
[  282.040592][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.044936][ T5887] usb 8-1: config 0 descriptor??
[  282.265505][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.700'.
[  282.588122][T10062] netlink: 'syz.6.701': attribute type 21 has an invalid length.
[  282.588148][T10062] IPv6: NLM_F_CREATE should be specified when creating new route
[  282.772461][T10067] profile_transition: 51 callbacks suppressed
[  282.772480][T10067] profile_transition: unconfined exec no attachment
[  282.798807][T10053] CIFS: VFS: cifs_mount failed w/return code = -112
[  282.827466][ T5887] usb 8-1: USB disconnect, device number 11
[  282.951723][T10071] profile_transition: unconfined exec no attachment
[  282.952656][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.009909][T10076] netlink: 'syz.3.703': attribute type 2 has an invalid length.
[  283.009936][T10076] netlink: 260 bytes leftover after parsing attributes in process `syz.3.703'.
[  283.054865][T10070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.055044][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.057666][T10070] nvme nvme0: failed to connect socket: -111
[  283.222327][T10076] : entered promiscuous mode
[  283.284023][T10083] profile_transition: unconfined exec no attachment
[  283.400314][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'.
[  283.407848][T10088] profile_transition: unconfined exec no attachment
[  283.429412][T10089] profile_transition: unconfined exec no attachment
[  283.459785][T10090] profile_transition: unconfined exec no attachment
[  283.534148][T10094] fuse: Unknown parameter 'fd0x0000000000000004'
[  283.549209][T10095] profile_transition: unconfined exec no attachment
[  283.598159][T10099] profile_transition: unconfined exec no attachment
[  283.629036][T10100] profile_transition: unconfined exec no attachment
[  283.709741][T10103] profile_transition: unconfined exec no attachment
[  286.418013][T10180] fuse: Unknown parameter 'fd0x0000000000000004'
[  286.457952][T10179] netlink: 'syz.5.726': attribute type 1 has an invalid length.
[  286.458015][T10179] netlink: 200 bytes leftover after parsing attributes in process `syz.5.726'.
[  286.458030][T10179] netlink: 'syz.5.726': attribute type 1 has an invalid length.
[  286.458043][T10179] netlink: 29 bytes leftover after parsing attributes in process `syz.5.726'.
[  286.468068][T10179] netlink: 128 bytes leftover after parsing attributes in process `syz.5.726'.
[  286.543724][ T5822] net_ratelimit: 8 callbacks suppressed
[  286.543741][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.831327][T10198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.831548][T10198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.831907][T10198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.835773][T10198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.836004][T10198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.836731][T10198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.836912][T10198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.837500][T10198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.837635][T10198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.153939][T10196] random: crng reseeded on system resumption
[  288.364819][T10225] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  288.381031][T10225] netlink: 48 bytes leftover after parsing attributes in process `syz.4.734'.
[  288.852226][T10234] profile_transition: 24 callbacks suppressed
[  288.852246][T10234] profile_transition: unconfined exec no attachment
[  288.989507][T10237] profile_transition: unconfined exec no attachment
[  289.403974][T10243] fuse: fd is not a fuse device
[  289.721640][T10251] profile_transition: unconfined exec no attachment
[  289.727263][T10250] gadgetfs: bound to dummy_udc driver
[  289.979106][   T62] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  289.979300][    C1] gadgetfs: connected
[  289.979374][   T62] gadgetfs: disconnected
[  290.100167][T10252] profile_transition: unconfined exec no attachment
[  290.149142][T10254] profile_transition: unconfined exec no attachment
[  290.172496][T10257] profile_transition: unconfined exec no attachment
[  290.199708][T10258] profile_transition: unconfined exec no attachment
[  290.227933][T10259] profile_transition: unconfined exec no attachment
[  290.294406][T10264] profile_transition: unconfined exec no attachment
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[  290.328776][T10265] profile_transition: unconfined exec no attachment
[  290.537958][T10272] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.663989][T10272] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.845114][    T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  290.877442][T10272] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.923652][T10272] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.008644][    T9] usb 8-1: Using ep0 maxpacket: 8
[  291.009137][    T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  291.009938][    T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  291.009951][    T9] usb 8-1: config 0 has no interface number 0
[  291.009968][    T9] usb 8-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  291.009980][    T9] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10
[  291.009993][    T9] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024
[  291.010012][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.012052][    T9] usb 8-1: config 0 descriptor??
[  291.055945][    T9] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  291.088646][ T6354] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.088681][ T6354] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.088698][ T6354] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.098804][ T5611] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.260573][T10278] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32
[  291.595778][T10293] netlink: 14 bytes leftover after parsing attributes in process `syz.6.749'.
[  291.607507][T10293] bridge0: port 3(dummy0) entered disabled state
[  291.654696][T10293] bridge0: port 3(dummy0) entered disabled state
[  291.656981][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.750'.
[  291.670128][T10293] vlan0 (unregistering): left promiscuous mode
[  291.670194][T10293] bridge0: port 4(vlan0) entered disabled state
[  291.739486][ T5823] net_ratelimit: 81 callbacks suppressed
[  291.739500][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.082201][T10312] fuse: fd is not a fuse device
[  292.210864][T10302] random: crng reseeded on system resumption
[  292.374838][T10318] batadv_slave_1: entered promiscuous mode
[  292.781010][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.421903][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.678307][    T9] usb 8-1: USB disconnect, device number 12
[  293.810659][T10335] netlink: 'syz.3.760': attribute type 1 has an invalid length.
[  293.810680][T10335] netlink: 200 bytes leftover after parsing attributes in process `syz.3.760'.
[  293.811687][T10335] netlink: 'syz.3.760': attribute type 1 has an invalid length.
[  293.811700][T10335] netlink: 29 bytes leftover after parsing attributes in process `syz.3.760'.
[  293.824209][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.847208][T10335] netlink: 128 bytes leftover after parsing attributes in process `syz.3.760'.
[  293.998143][T10341] profile_transition: 9 callbacks suppressed
[  293.998159][T10341] profile_transition: unconfined exec no attachment
[  294.393873][T10342] profile_transition: unconfined exec no attachment
[  294.456641][T10345] profile_transition: unconfined exec no attachment
[  294.483573][T10346] profile_transition: unconfined exec no attachment
[  294.513939][T10347] profile_transition: unconfined exec no attachment
[  294.748230][T10317] batadv_slave_1: left promiscuous mode
[  294.843504][T10355] profile_transition: unconfined exec no attachment
[  294.860736][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.895364][T10356] profile_transition: unconfined exec no attachment
[  295.058871][T10348] profile_transition: unconfined exec no attachment
[  295.124478][T10364] profile_transition: unconfined exec no attachment
[  295.150653][T10365] profile_transition: unconfined exec no attachment
[  295.392297][T10370] fuse: fd is not a fuse device
[  296.139942][T10383] gadgetfs: bound to dummy_udc driver
[  296.379320][ T1041] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  296.379581][    C0] gadgetfs: connected
[  296.379703][ T1041] gadgetfs: disconnected
[  296.497685][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.738465][ T7649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.748397][T10382] gadgetfs: suspended from state 2
[  296.759473][ T1041] usb 6-1: device descriptor read/all, error -71
[  297.498661][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.241310][T10419] netlink: 'syz.4.778': attribute type 1 has an invalid length.
[  298.253299][T10419] bond2: entered promiscuous mode
[  298.253521][T10419] 8021q: adding VLAN 0 to HW filter on device bond2
[  298.258291][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'.
[  298.258322][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'.
[  298.284305][T10419] bond2: (slave bridge1): making interface the new active one
[  298.284327][T10419] bridge1: entered promiscuous mode
[  298.286216][T10419] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  298.538578][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.632640][T10431] MTD: Couldn't look up './dev/mtdblock0': -2
[  298.655939][T10431] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  299.025607][T10439] profile_transition: 7 callbacks suppressed
[  299.025625][T10439] profile_transition: unconfined exec no attachment
[  299.151829][T10441] netlink: 'syz.5.782': attribute type 1 has an invalid length.
[  299.151845][T10441] netlink: 200 bytes leftover after parsing attributes in process `syz.5.782'.
[  299.151854][T10441] netlink: 'syz.5.782': attribute type 1 has an invalid length.
[  299.151860][T10441] netlink: 29 bytes leftover after parsing attributes in process `syz.5.782'.
[  299.165449][T10442] profile_transition: unconfined exec no attachment
[  299.175688][T10441] netlink: 128 bytes leftover after parsing attributes in process `syz.5.782'.
[  299.227292][T10446] profile_transition: unconfined exec no attachment
[  299.330523][T10449] netlink: 48 bytes leftover after parsing attributes in process `syz.5.783'.
[  299.350438][T10450] profile_transition: unconfined exec no attachment
[  299.407111][T10452] profile_transition: unconfined exec no attachment
[  299.487735][T10454] profile_transition: unconfined exec no attachment
[  299.543653][T10457] profile_transition: unconfined exec no attachment
[  299.591263][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.609785][T10459] profile_transition: unconfined exec no attachment
[  299.621385][T10461] profile_transition: unconfined exec no attachment
[  299.650900][T10463] profile_transition: unconfined exec no attachment
[  300.043270][ T5887] Process accounting resumed
[  300.466540][T10480] overlayfs: failed to clone upperpath
[  300.618551][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.618588][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.919800][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.321279][T10490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.791'.
[  301.658545][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.698680][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.738388][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.614535][T10515] profile_transition: 5 callbacks suppressed
[  304.614592][T10515] profile_transition: unconfined exec no attachment
[  304.829424][  T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.020522][T10519] profile_transition: unconfined exec no attachment
[  305.466932][T10520] profile_transition: unconfined exec no attachment
[  305.560916][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.562044][T10525] profile_transition: unconfined exec no attachment
[  305.562365][T10526] profile_transition: unconfined exec no attachment
[  305.563261][T10523] profile_transition: unconfined exec no attachment
[  305.566355][T10527] profile_transition: unconfined exec no attachment
[  305.569717][T10528] profile_transition: unconfined exec no attachment
[  305.572359][T10522] profile_transition: unconfined exec no attachment
[  305.884517][T10535] profile_transition: unconfined exec no attachment
[  306.619785][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.018282][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.052155][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.194454][T10553] netlink: 'syz.3.800': attribute type 1 has an invalid length.
[  307.194473][T10553] netlink: 200 bytes leftover after parsing attributes in process `syz.3.800'.
[  307.194483][T10553] netlink: 'syz.3.800': attribute type 1 has an invalid length.
[  307.194492][T10553] netlink: 29 bytes leftover after parsing attributes in process `syz.3.800'.
[  307.196049][T10553] netlink: 128 bytes leftover after parsing attributes in process `syz.3.800'.
[  307.750709][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.778211][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.818743][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.921121][T10563] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  309.921595][T10563] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  309.922012][T10563] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  309.922590][T10563] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  309.927760][T10563] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  309.928481][T10563] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  309.929173][T10563] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  309.929929][T10563] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  309.930686][T10563] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  309.931362][T10563] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  309.957905][T10604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.958024][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.022510][T10601] profile_transition: 27 callbacks suppressed
[  310.022536][T10601] profile_transition: unconfined exec no attachment
[  310.070036][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.225271][ T5109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.352855][T10609] profile_transition: unconfined exec no attachment
[  310.675468][T10612] netlink: 48 bytes leftover after parsing attributes in process `syz.6.808'.
[  310.904997][T10618] profile_transition: unconfined exec no attachment
[  310.933649][T10619] profile_transition: unconfined exec no attachment
[  310.975849][T10622] profile_transition: unconfined exec no attachment
[  311.012558][T10623] profile_transition: unconfined exec no attachment
[  311.014236][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.066867][T10626] profile_transition: unconfined exec no attachment
[  311.114020][T10628] profile_transition: unconfined exec no attachment
[  311.151325][T10630] profile_transition: unconfined exec no attachment
[  311.186597][T10631] profile_transition: unconfined exec no attachment
[  311.371653][T10638] netlink: 'syz.5.811': attribute type 1 has an invalid length.
[  311.371673][T10638] netlink: 200 bytes leftover after parsing attributes in process `syz.5.811'.
[  311.371685][T10638] netlink: 'syz.5.811': attribute type 1 has an invalid length.
[  311.371695][T10638] netlink: 29 bytes leftover after parsing attributes in process `syz.5.811'.
[  311.374089][T10638] netlink: 128 bytes leftover after parsing attributes in process `syz.5.811'.
[  311.495106][T10643] lo speed is unknown, defaulting to 1000
[  311.514422][T10643] lo speed is unknown, defaulting to 1000
[  311.692305][T10643] lo speed is unknown, defaulting to 1000
[  311.846012][T10643] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  311.846041][T10643] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  311.846600][T10643] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  312.068282][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.166746][T10643] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  312.490207][T10643] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  312.606684][T10643] lo speed is unknown, defaulting to 1000
[  312.609664][T10643] lo speed is unknown, defaulting to 1000
[  312.657555][T10643] lo speed is unknown, defaulting to 1000
[  312.739769][T10643] lo speed is unknown, defaulting to 1000
[  313.112724][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.112752][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.808403][T10686] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  313.808430][T10686] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  313.824256][T10686] vhci_hcd vhci_hcd.0: Device attached
[  313.960690][T10676] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.986182][T10689] netlink: 14 bytes leftover after parsing attributes in process `syz.4.818'.
[  314.093462][ T5844] usb 44-1: SetAddress Request (6) to port 0
[  314.093559][ T5844] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd
[  314.100207][T10676] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.146187][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.281364][T10687] vhci_hcd: connection reset by peer
[  314.281794][ T6354] vhci_hcd vhci_hcd.3: stop threads
[  314.281816][ T6354] vhci_hcd vhci_hcd.3: release socket
[  314.281863][ T6354] vhci_hcd vhci_hcd.3: disconnect device
[  314.801330][T10676] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.040749][T10719] profile_transition: 36 callbacks suppressed
[  315.040771][T10719] profile_transition: unconfined exec no attachment
[  315.186974][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.208818][T10676] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.224128][T10730] profile_transition: unconfined exec no attachment
[  315.319643][T10737] profile_transition: unconfined exec no attachment
[  315.403975][T10739] profile_transition: unconfined exec no attachment
[  315.405001][T10740] profile_transition: unconfined exec no attachment
[  315.406273][T10741] profile_transition: unconfined exec no attachment
[  315.408610][T10742] profile_transition: unconfined exec no attachment
[  315.428191][   T43] kauditd_printk_skb: 63 callbacks suppressed
[  315.430452][   T43] audit: type=1326 audit(2000000257.291:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10743 comm="syz.3.821" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000
[  315.438216][   T43] audit: type=1326 audit(2000000257.291:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10743 comm="syz.3.821" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000
[  315.445688][   T43] audit: type=1326 audit(2000000257.301:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10743 comm="syz.3.821" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f47fec code=0x7ffc0000
[  315.456107][   T43] audit: type=1326 audit(2000000257.301:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10743 comm="syz.3.821" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000
[  315.484613][   T43] audit: type=1326 audit(2000000257.301:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10743 comm="syz.3.821" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000
[  315.484844][   T43] audit: type=1326 audit(2000000257.301:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10743 comm="syz.3.821" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f47fec code=0x7ffc0000
[  315.484909][   T43] audit: type=1326 audit(2000000257.301:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10743 comm="syz.3.821" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000
[  315.485336][   T43] audit: type=1326 audit(2000000257.301:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10743 comm="syz.3.821" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000
[  315.489102][   T43] audit: type=1326 audit(2000000257.311:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10743 comm="syz.3.821" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71475ab code=0x7ffc0000
[  315.489332][   T43] audit: type=1326 audit(2000000257.311:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10743 comm="syz.3.821" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f47fec code=0x7ffc0000
[  315.537090][T10738] profile_transition: unconfined exec no attachment
[  315.688172][ T5611] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.703838][ T7202] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.703884][ T7202] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.707770][ T5611] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.710456][    T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  315.828260][T10750] profile_transition: unconfined exec no attachment
[  315.848385][T10752] profile_transition: unconfined exec no attachment
[  316.020500][    T9] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  316.127266][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.127294][    T9] usb 8-1: Product: syz
[  316.127306][    T9] usb 8-1: Manufacturer: syz
[  316.127318][    T9] usb 8-1: SerialNumber: syz
[  316.178783][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.185014][    T9] usb 8-1: USB2VGA dongle found at address 13
[  316.191436][    T9] usb 8-1: Allocated 8 output buffers
[  316.218211][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.811825][T10744] netlink: 'syz.3.821': attribute type 30 has an invalid length.
[  316.949553][   T74] Bluetooth: (null): Invalid header checksum
[  316.949845][   T74] Bluetooth: (null): Invalid header checksum
[  317.019691][   T74] Bluetooth: (null): Invalid header checksum
[  317.087291][   T66] Bluetooth: hci1: unexpected event for opcode 0x0403
[  317.111129][T10778] netlink: 'syz.5.825': attribute type 1 has an invalid length.
[  317.147991][T10778] bond1: entered promiscuous mode
[  317.148222][T10778] 8021q: adding VLAN 0 to HW filter on device bond1
[  317.190825][    T9] usb 8-1: Failed to early initialize device
[  317.199411][    T9] usb 8-1: USB disconnect, device number 13
[  317.259203][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.259670][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.261162][ T1439] ieee802154 phy0 wpan0: encryption failed: -22
[  317.261208][ T1439] ieee802154 phy1 wpan1: encryption failed: -22
[  317.319573][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.825'.
[  317.319600][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.825'.
[  317.338035][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.350146][T10778] bond1: (slave bridge0): making interface the new active one
[  317.350162][T10778] bridge0: entered promiscuous mode
[  317.351206][T10778] bond1: (slave bridge0): Enslaving as an active interface with an up link
[  318.193337][T10792] fuse: fd is not a fuse device
[  318.309101][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.416480][T10790] random: crng reseeded on system resumption
[  318.649324][T10813] null_blk: nullb1: using native zone append
[  318.860746][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.832'.
[  319.130836][T10813] null_blk: disk nullb1 created
[  319.177170][ T5844] usb 44-1: device descriptor read/8, error -110
[  319.177223][   T66] Bluetooth: hci3: command 0x0405 tx timeout
[  319.362441][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.628163][ T5844] usb usb44-port1: attempt power cycle
[  320.229753][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'.
[  320.231655][T10849] bridge_slave_1: left allmulticast mode
[  320.234444][T10849] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.260377][ T5844] usb usb44-port1: unable to enumerate USB device
[  320.282837][T10849] bridge_slave_0: left allmulticast mode
[  320.283069][T10849] bridge_slave_0: left promiscu
** replaying previous printk message **
[  320.283069][T10849] bridge_slave_0: left promiscuous mode
[  320.289122][T10849] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.292684][T10849] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN NOPTI
[  320.301803][T10849] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127]
[  320.304885][T10849] CPU: 2 UID: 0 PID: 10849 Comm: syz.4.840 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  320.308559][T10849] Tainted: [L]=SOFTLOCKUP
[  320.310056][T10849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  320.313432][T10849] RIP: 0010:br_del_frame+0x106/0x1a0
[  320.315426][T10849] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 18 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 76 49 89 1c 24 48 85 db 74 24 e8 c6 21 6b f7 48 8d
[  320.321637][T10849] RSP: 0018:ffffc90004ed7268 EFLAGS: 00010a06
[  320.323716][T10849] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90006e21000
[  320.326416][T10849] RDX: 1bd5a00000000024 RSI: ffffffff8aa03f9f RDI: ffffffff914730b8
[  320.329695][T10849] RBP: ffffffff914730a0 R08: 0000000055474603 R09: 000000000000002c
[  320.332963][T10849] R10: 0000000000000200 R11: 0000000000000001 R12: dead000000000122
[  320.336220][T10849] R13: ffff88802af0a000 R14: 000000000000001c R15: ffff88802af0a000
[  320.339527][T10849] FS:  0000000000000000(0000) GS:ffff888096b60000(0063) knlGS:00000000f543db40
[  320.343175][T10849] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  320.346289][T10849] CR2: 0000000080001000 CR3: 00000000256d8000 CR4: 0000000000352ef0
[  320.349718][T10849] Call Trace:
[  320.351095][T10849]  <TASK>
[  320.352329][T10849]  mep_delete_implementation+0x292/0x340
[  320.354750][T10849]  br_cfm_port_del+0x14f/0x1e0
[  320.356793][T10849]  del_nbp+0x168/0xd50
[  320.358569][T10849]  br_dev_delete+0x96/0x1c0
[  320.360515][T10849]  rtnl_dellink+0x463/0xb40
[  320.362589][T10849]  ? __pfx_br_dev_delete+0x10/0x10
[  320.364740][T10849]  ? kasan_save_track+0x14/0x30
[  320.366928][T10849]  ? kasan_save_free_info+0x3b/0x70
[  320.369664][T10849]  ? __kasan_slab_free+0x5f/0x80
[  320.372030][T10849]  ? __pfx_rtnl_dellink+0x10/0x10
[  320.374184][T10849]  ? nlmon_xmit+0xa5/0xe0
[  320.376017][T10849]  ? dev_hard_start_xmit+0x121/0x760
[  320.378328][T10849]  ? __dev_queue_xmit+0x1bbf/0x4970
[  320.380544][T10849]  ? netlink_sendmsg+0x8b0/0xda0
[  320.382645][T10849]  ? sock_write_iter+0x53a/0x5b0
[  320.384758][T10849]  ? __lock_acquire+0x5c0/0x1f40
[  320.386914][T10849]  ? lock_acquire+0x1d1/0x380
[  320.388938][T10849]  ? rtnetlink_rcv_msg+0x1f6/0xe90
[  320.391219][T10849]  ? find_held_lock+0x2b/0x80
[  320.393015][T10849]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  320.394807][T10849]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  320.396447][T10849]  ? __pfx_rtnl_dellink+0x10/0x10
[  320.398065][T10849]  rtnetlink_rcv_msg+0x95e/0xe90
[  320.399637][T10849]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  320.401741][T10849]  ? ref_tracker_free+0x37e/0x6c0
[  320.403901][T10849]  netlink_rcv_skb+0x159/0x420
[  320.405517][T10849]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  320.407404][T10849]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  320.409141][T10849]  ? netlink_deliver_tap+0x1ae/0xcc0
[  320.410823][T10849]  ? netlink_unicast+0x3e0/0x850
[  320.412382][T10849]  netlink_unicast+0x585/0x850
[  320.413824][T10849]  ? __pfx_netlink_unicast+0x10/0x10
[  320.415447][T10849]  netlink_sendmsg+0x8b0/0xda0
[  320.417304][T10849]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.419450][T10849]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.421178][T10849]  sock_write_iter+0x53a/0x5b0
[  320.422848][T10849]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.424666][T10849]  ? __pfx_sock_write_iter+0x10/0x10
[  320.426455][T10849]  ? bpf_lsm_file_permission+0x9/0x10
[  320.428155][T10849]  ? security_file_permission+0x76/0x210
[  320.429912][T10849]  ? rw_verify_area+0xce/0x6d0
[  320.431736][T10849]  vfs_write+0x6af/0x1050
[  320.433573][T10849]  ? __pfx_sock_write_iter+0x10/0x10
[  320.435574][T10849]  ? __pfx_vfs_write+0x10/0x10
[  320.437096][T10849]  ? find_held_lock+0x2b/0x80
[  320.438841][T10849]  ksys_write+0x1f8/0x250
[  320.440574][T10849]  ? __pfx_ksys_write+0x10/0x10
[  320.442437][T10849]  __do_fast_syscall_32+0x13a/0x8b0
[  320.444346][T10849]  do_fast_syscall_32+0x32/0x70
[  320.445883][T10849]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  320.448310][T10849] RIP: 0023:0xf704efec
[  320.450029][T10849] Code: Unable to access opcode bytes at 0xf704efc2.
[  320.452576][T10849] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  320.455206][T10849] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000
[  320.457658][T10849] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000
[  320.460226][T10849] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  320.463052][T10849] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  320.466411][T10849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  320.468944][T10849]  </TASK>
[  320.469930][T10849] Modules linked in:
[  320.481696][T10849] ---[ end trace 0000000000000000 ]---
[  320.485276][T10849] RIP: 0010:br_del_frame+0x106/0x1a0
[  320.485337][T10849] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 00 00 00 48 b8 00 00 00 
** replaying previous printk message **
[  320.485337][T10849] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 18 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 76 49 89 1c 24 48 85 db 74 24 e8 c6 21 6b f7 48 8d
[  320.485404][T10849] RSP: 0018:ffffc90004ed7268 EFLAGS: 00010a06
[  320.485615][T10849] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90006e21000
[  320.485671][T10849] RDX: 1bd5a00000000024 RSI: ffffffff8aa03f9f RDI: ffffffff914730b8
[  320.485733][T10849] RBP: ffffffff914730a0 R08: 0000000055474603 R09: 000000000000002c
[  320.485827][T10849] R10: 0000000000000200 R11: 0000000000000001 R12: dead000000000122
[  320.485859][T10849] R13: ffff88802af0a000 R14: 000000000000001c R15: ffff88802af0a000
[  320.485892][T10849] FS:  0000000000000000(0000) GS:ffff888096b60000(0063) knlGS:00000000f543db40
[  320.487337][T10849] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  320.489603][T10849] CR2: 00000000f704f000 CR3: 00000000256d8000 CR4: 0000000000352ef0
[  320.492928][T10849] Kernel panic - not syncing: Fatal exception
[  320.527565][T10849] Kernel Offset: disabled
[  320.529275][T10849] Rebooting in 86400 seconds..