last executing test programs:

8m37.78979847s ago: executing program 32 (id=40):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0100000000000000010001000000090001"], 0x110}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

7m48.9417172s ago: executing program 2 (id=153):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, r2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast2}], 0x30)
socket(0x10, 0x803, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r1, 0x8, {0x0, 0x0, 0x0, 0x4, 0x46a, 0x0, 0x4, 0x1b, 0x8, "a95a58f32104d637ff394587c90e66903bafcaf6280a11425d3c723eb8f221d32e84f87ad564feef806dd375a05a494eddc8423cde2ab9420ae5279de6ad3088", "c838b91cdd66a1e8919cb1869cc03b936e855536a2db86ed008f7be7b22e0e88c0b2678854ac1bdbfcb37047376ce936592cfaa7c1c6e1e211218c6ce076c619", "1513dba5174b50886c4733d463091d4c4b4dd712bdc518dd256545f211587d4a", [0x7, 0x8]}})
socket$unix(0x1, 0x5, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb00000908000140000000010800"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x20000044)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x0, @void}, 0x10)

7m48.107393038s ago: executing program 2 (id=156):
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x4000040)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18)
symlink(&(0x7f0000000880)='.\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x80000)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x98, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x40}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x2, 0x0, 0x2e}, @fda={0x66646185, 0x5, 0x1, 0x26}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}, 0x40}], 0x40, 0x0, &(0x7f0000001040)="305036fca5995765dc12a4d9dac26d7aefec64178d3006bdc6e7e21a4b43bb1cc0f8474f0225ede05848e3ca1601c4223212d4b740575953125a2134f147e789"})

7m45.708914912s ago: executing program 2 (id=160):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
timerfd_create(0x0, 0x80800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x2001, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x7, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0xa, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0x42, 0x2, 0x9, 0x9}, {0x3, 0xff, 0x4, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x3}, {0x6, 0x9c, 0x5, 0x80, 0x7fffdfff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x49}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0xdc8, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x20006, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x0, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x5}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x5, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x100004, 0x49354bbb, 0x2, 0x400, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x84, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x54, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0xc, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r6=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0xfbfb, 0x10200, 0x5, 0x115, r6}, 0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r6, 0x741, 0x0, 0x7}, 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101})

7m43.354945604s ago: executing program 2 (id=164):
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

7m41.243501829s ago: executing program 2 (id=169):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680))
getresuid(&(0x7f0000000280), &(0x7f0000000180), &(0x7f0000000300))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r3, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
open(&(0x7f0000000000)='.\x00', 0x0, 0x5d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
socket(0x10, 0x3, 0x3a9)

7m39.820802316s ago: executing program 2 (id=171):
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1000000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000040)={0xfffffffb, 0x80, 0x1, 'queue1\x00', 0x85})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x800, 0x1)
statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2000, 0x2dd8806920477201, &(0x7f00000003c0))

7m23.647370096s ago: executing program 33 (id=171):
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1000000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000040)={0xfffffffb, 0x80, 0x1, 'queue1\x00', 0x85})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x800, 0x1)
statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2000, 0x2dd8806920477201, &(0x7f00000003c0))

5m45.953050188s ago: executing program 0 (id=396):
socket(0x2, 0xa, 0x300)
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@phonet={0x23, 0x7f, 0x6, 0x9}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6}], 0x1}, 0x20000001)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001100050026bd7000feffffff07000000", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
getsockopt$nfc_llcp(r3, 0x118, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2)

5m45.597640153s ago: executing program 0 (id=397):
mount$binder(0x0, 0x0, 0x0, 0x20, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
getpriority(0x0, 0x0)

5m45.122966245s ago: executing program 0 (id=399):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0xf)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008004)

5m42.906088057s ago: executing program 0 (id=410):
r0 = gettid()
timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581)
ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d})
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x400006)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)

5m41.413778489s ago: executing program 0 (id=415):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000003a40)=""/4107, 0x100b}, {&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f0000000580)=""/87, 0x57}, {&(0x7f0000000680)=""/98, 0x62}], 0x4}, 0x12062)

5m40.53631582s ago: executing program 0 (id=418):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600000000018060100000000000000000000000000000000fe8000000000000000000000000000aa04004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="68c200009078000004"], 0x0)

5m25.176227653s ago: executing program 34 (id=418):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600000000018060100000000000000000000000000000000fe8000000000000000000000000000aa04004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="68c200009078000004"], 0x0)

5m9.77828548s ago: executing program 3 (id=482):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c500000000074af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x0, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

5m8.615973489s ago: executing program 3 (id=484):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x2001, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x7, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0xa, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0x42, 0x2, 0x9, 0x9}, {0x3, 0xff, 0x4, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x3}, {0x6, 0x9c, 0x5, 0x80, 0x7fffdfff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x49}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0xdc8, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x20006, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x0, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x5}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x5, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x100004, 0x49354bbb, 0x2, 0x400, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x84, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x54, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0xc, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r7=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0xfbfb, 0x10200, 0x5, 0x115, r7}, 0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r7, 0x741, 0x0, 0x7}, 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101})

5m6.411137431s ago: executing program 3 (id=487):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x8000000000001de, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xce)
ioctl$SIOCAX25ADDFWD(r5, 0x891b, &(0x7f00000002c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})

5m5.246155821s ago: executing program 3 (id=489):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000400048008000200030000000800010000"], 0x70}}, 0x4)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c)

5m4.359688432s ago: executing program 3 (id=491):
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x4000040)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18)
symlink(&(0x7f0000000880)='.\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x80000)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x98, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x40}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x2, 0x0, 0x2e}, @fda={0x66646185, 0x5, 0x1, 0x26}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}, 0x40}], 0x40, 0x0, &(0x7f0000001040)="305036fca5995765dc12a4d9dac26d7aefec64178d3006bdc6e7e21a4b43bb1cc0f8474f0225ede05848e3ca1601c4223212d4b740575953125a2134f147e789"})
syz_open_dev$vim2m(0x0, 0x7, 0x2)

5m3.256076678s ago: executing program 3 (id=494):
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x65, 0x100001}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
r3 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x10, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000c80)="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"})
close_range(r2, 0xffffffffffffffff, 0x2)

4m50.458379705s ago: executing program 7 (id=530):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, r2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r1, 0x8, {0x0, 0x0, 0x0, 0x4, 0x46a, 0x0, 0x4, 0x1b, 0x8, "a95a58f32104d637ff394587c90e66903bafcaf6280a11425d3c723eb8f221d32e84f87ad564feef806dd375a05a494eddc8423cde2ab9420ae5279de6ad3088", "c838b91cdd66a1e8919cb1869cc03b936e855536a2db86ed008f7be7b22e0e88c0b2678854ac1bdbfcb37047376ce936592cfaa7c1c6e1e211218c6ce076c619", "1513dba5174b50886c4733d463091d4c4b4dd712bdc518dd256545f211587d4a", [0x7, 0x8]}})
socket$unix(0x1, 0x5, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb00000908000140000000010800"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x20000044)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x0, @void}, 0x10)

4m48.074205059s ago: executing program 35 (id=494):
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x65, 0x100001}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
r3 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x10, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000c80)="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"})
close_range(r2, 0xffffffffffffffff, 0x2)

4m48.024778562s ago: executing program 7 (id=538):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002380)="fb904d54fe74bf8e9f31558a1c60c12f", 0x10}], 0x1}}], 0x1, 0x20000000)
read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

4m46.817424895s ago: executing program 7 (id=542):
r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs$namespace(0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x24000058)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x64010101, 0x4e24, 0x3, 'lc\x00', 0x4, 0x3237, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000d00)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0)

4m45.775460627s ago: executing program 7 (id=546):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={0x0, 0x0, 0x4000, r0}, 0x18)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, 0xffffffffffffffff, 0x0)
r4 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="2032e824000000000000"], 0x0, 0x0})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0xb})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"})
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)

4m42.689727458s ago: executing program 7 (id=553):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r1=>0x0})
r2 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r1, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4)

4m42.009325835s ago: executing program 7 (id=554):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00')
unshare(0x6a040000)
socket$packet(0x11, 0x3, 0x300)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto(r0, &(0x7f0000000080)="9c0facf9c0", 0x5, 0x0, 0x0, 0x0)

4m26.732832873s ago: executing program 36 (id=554):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00')
unshare(0x6a040000)
socket$packet(0x11, 0x3, 0x300)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto(r0, &(0x7f0000000080)="9c0facf9c0", 0x5, 0x0, 0x0, 0x0)

1m21.446617395s ago: executing program 1 (id=966):
r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs$namespace(0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0xcdc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x24000058)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)

1m19.633845719s ago: executing program 1 (id=971):
openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
times(0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0xc820)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r4, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10)

1m18.480486768s ago: executing program 1 (id=972):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
timerfd_create(0x0, 0x80800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x2001, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x7, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0xa, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0x42, 0x2, 0x9, 0x9}, {0x3, 0xff, 0x4, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x3}, {0x6, 0x9c, 0x5, 0x80, 0x7fffdfff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x49}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0xdc8, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x20006, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x0, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x5}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x5, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x100004, 0x49354bbb, 0x2, 0x400, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x84, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x54, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0xc, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r7=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0xfbfb, 0x10200, 0x5, 0x115, r7}, 0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r7, 0x741, 0x0, 0x7}, 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101})

1m18.085656625s ago: executing program 1 (id=973):
mount$binder(0x0, 0x0, 0x0, 0x20, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
getpriority(0x0, 0x0)

1m15.902315505s ago: executing program 1 (id=977):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r5, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}], 0x1}, 0x3b83}], 0x1, 0x20001000, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c)

1m14.001477865s ago: executing program 1 (id=979):
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x4000040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18)
symlink(&(0x7f0000000880)='.\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x80000)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x98, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x40}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x2, 0x0, 0x2e}, @fda={0x66646185, 0x5, 0x1, 0x26}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}, 0x40}], 0x40, 0x0, &(0x7f0000001040)="305036fca5995765dc12a4d9dac26d7aefec64178d3006bdc6e7e21a4b43bb1cc0f8474f0225ede05848e3ca1601c4223212d4b740575953125a2134f147e789"})
syz_open_dev$vim2m(0x0, 0x7, 0x2)

57.852111244s ago: executing program 37 (id=979):
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x4000040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18)
symlink(&(0x7f0000000880)='.\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x80000)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x98, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x40}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x2, 0x0, 0x2e}, @fda={0x66646185, 0x5, 0x1, 0x26}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}, 0x40}], 0x40, 0x0, &(0x7f0000001040)="305036fca5995765dc12a4d9dac26d7aefec64178d3006bdc6e7e21a4b43bb1cc0f8474f0225ede05848e3ca1601c4223212d4b740575953125a2134f147e789"})
syz_open_dev$vim2m(0x0, 0x7, 0x2)

27.801758795s ago: executing program 5 (id=1064):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @private1, 0x206}, {0xa, 0x4e20, 0x0, @local, 0x10001}, r3, 0x403}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r5}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @private1, 0x206}, {0xa, 0x4e20, 0x0, @loopback, 0x10001}, r5}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r5, 0x5}}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

26.160689947s ago: executing program 6 (id=1066):
r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235})
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(0x0, 0x1)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, <r7=>0xffffffffffffffff})
dup3(r7, 0xffffffffffffffff, 0x80000)
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x7)
close_range(r0, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

22.057092258s ago: executing program 6 (id=1072):
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf03000000090582"], 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffe, 0x2}, 0xe)
connect$packet(r0, &(0x7f00000001c0)={0x1f, 0x8, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f00000001c0)="0f58", 0x2, 0x0, 0x40, 0x2, 0xfffffffc, 0x0, 0x0})
socket(0x2, 0x80805, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}})
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="d551e07991ccda240866a1a4", 0xc}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)

19.468169476s ago: executing program 9 (id=1077):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r5, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}], 0x1}, 0x3b83}], 0x1, 0x20001000, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c)

18.216673722s ago: executing program 9 (id=1078):
mount$binder(0x0, 0x0, 0x0, 0x20, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
getpriority(0x0, 0x0)

18.144808427s ago: executing program 6 (id=1080):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000980)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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")
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000200)={'trans=virtio,', {[{@version_u}]}})
chdir(&(0x7f0000000380)='./file0\x00')
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x800002, &(0x7f0000000700)=ANY=[], 0x5, 0x57b, &(0x7f0000000140)="$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")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480))
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc000000", @ANYRES16, @ANYBLOB="000829bd7000fddbdf2504000000040006801c00098008000200f10b00000800020005000000080001002700000020000280040004000800010001"], 0xdc}}, 0x24000840)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

17.297721135s ago: executing program 5 (id=1081):
openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
times(0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0xc820)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r4, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10)

15.830739335s ago: executing program 5 (id=1083):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, 0x0)
timerfd_create(0x8, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0xf9, 0x7fffffff}]})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

14.376235195s ago: executing program 5 (id=1084):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x41)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0)
io_cancel(0x0, 0xfffffffffffffffc, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r4, 0x4068aea3, &(0x7f0000000180)={0x80, 0x0, 0x2})
setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000000)=0x200fd, 0x4)
dup(0xffffffffffffffff)
fanotify_init(0x40, 0x2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5)

14.100773784s ago: executing program 6 (id=1086):
mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x98)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000500)="d7")

12.727050968s ago: executing program 5 (id=1089):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r5, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}], 0x1}, 0x3b83}], 0x1, 0x20001000, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c)

11.071461411s ago: executing program 5 (id=1090):
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf03000000090582"], 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffe, 0x2}, 0xe)
connect$packet(r0, &(0x7f00000001c0)={0x1f, 0x8, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f00000001c0)="0f58", 0x2, 0x0, 0x40, 0x2, 0xfffffffc, 0x0, 0x0})
socket(0x2, 0x80805, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}})
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="d551e07991ccda240866a1a4", 0xc}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)

11.011557225s ago: executing program 6 (id=1091):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, 0x0, 0x0)
getrlimit(0xbae4224a16e49464, &(0x7f00000000c0))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x8000, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='stat\x00')
pread64(r3, &(0x7f0000000180)=""/158, 0x9e, 0x1)

10.699912517s ago: executing program 8 (id=1093):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r6, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept4$alg(r6, 0x0, 0x0, 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000071180b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x74010101}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @multicast2}, 0x4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0xe8e, 0x7})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190d6ec"], 0x1c}, 0x1, 0xfff0}, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd=r4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}})
io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0)

9.666200647s ago: executing program 8 (id=1094):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, 0x0)
timerfd_create(0x8, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0xf9, 0x7fffffff}]})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

8.546180684s ago: executing program 8 (id=1095):
r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs$namespace(0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0xcdc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x24000058)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000d00)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

8.425586752s ago: executing program 4 (id=1096):
creat(&(0x7f0000000080)='./bus\x00', 0xa5)
r0 = creat(0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x8d})
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x6, 0x3, 0x100000000], [0x1, 0x3, 0x4, 0x2ca, 0x4, 0x200, 0x5, 0x5631, 0x7, 0x5, 0xfffffffffffffff7, 0xaf, 0x100000001, 0x7, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff7, 0x7c, 0x8, 0x2ad6, 0x8, 0x157b84ad, 0x766, 0xa, 0x80000001, 0x9, 0x10001, 0xfffffffffffffff9, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x4, 0x3, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10000, 0x1000, 0x2, 0x8, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x2, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x5, 0xfc72, 0x9, 0x7, 0x7, 0x2, 0x6, 0x81, 0x2, 0x1, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x7f, 0x8, 0xeab5, 0xffffffffffffffff, 0xf000000000000000, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0xd13, 0x2c, 0x1ff, 0x1000, 0xd05, 0x1, 0x9e, 0x8000000000000000, 0x3, 0x0, 0x3, 0x5, 0xc, 0x6, 0x6281, 0x10, 0x7f, 0x7, 0x3, 0x3, 0x7]})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
clock_gettime(0xfffffffffffffffb, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000100))
r6 = open_tree(0xffffffffffffffff, &(0x7f0000000440)='./bus\x00', 0x1000)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x54, r7, 0x4b35c65e9956e69f, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048010}, 0x0)
sendfile(r5, r4, 0x0, 0x10000200000200)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
ioctl$TIOCOUTQ(r9, 0x5411, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
userfaultfd(0x80801)

8.255305124s ago: executing program 9 (id=1097):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_GET_INFO(r1, 0x80a86f3d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x594, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000008c0), &(0x7f0000000900)=0x4)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000300)={0x2, "acb632ef00833a502bb97d89bdf34ec0f9c214792571d432c5887dbe5f562e1c"})
ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000002c0)=0x3)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
connect$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780), &(0x7f0000000840)={[0x0, &(0x7f0000000640)=')\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='/,}:\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000800)='\xf2u\x19o\xcd\xd4o\xc4&\x90L\x06\x00', &(0x7f0000000340)='\x8b\xc3\xe6\x93\x01A\xb8\xc9FM\xeb/\xdc\xb6\xcd\x90\x9b;5\xfa\f\xb7\"\xdf\x03\xcc`t9\xba\xadO[^\xe4', &(0x7f0000000580)='\xe0\xd9\xc4%']}, 0x400)

7.511640975s ago: executing program 8 (id=1098):
syz_usb_connect(0x0, 0x3b, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
listen(r3, 0x3)

7.243924903s ago: executing program 4 (id=1099):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x41)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0)
io_cancel(0x0, 0xfffffffffffffffc, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r4, 0x4068aea3, &(0x7f0000000180)={0x80, 0x0, 0x2})
setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000000)=0x200fd, 0x4)
dup(0xffffffffffffffff)
fanotify_init(0x40, 0x2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5)

7.229184654s ago: executing program 9 (id=1100):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r5, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}], 0x1}, 0x3b83}], 0x1, 0x20001000, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c)

4.333226163s ago: executing program 9 (id=1101):
mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x98)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000500)="d7")

4.200871042s ago: executing program 4 (id=1102):
r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235})
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(0x0, 0x1)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r3, 0xffff)
fcntl$addseals(r3, 0x409, 0x7)
r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000001c0)=0x1)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, <r5=>0xffffffffffffffff})
dup3(r5, 0xffffffffffffffff, 0x80000)
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000000c0)=0x7)
close_range(r0, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

4.020219344s ago: executing program 8 (id=1103):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x10040004)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a310000000009000200", @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
socket$alg(0x26, 0x5, 0x0)
epoll_create(0x89a)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x600, 0x0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x108)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a00000000000600020001000000140020"], 0x5c}}, 0x0)

3.795003s ago: executing program 4 (id=1104):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r6, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept4$alg(r6, 0x0, 0x0, 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000071180b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x74010101}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @multicast2}, 0x4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0xe8e, 0x7})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190d6ec"], 0x1c}, 0x1, 0xfff0}, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd=r4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}})
io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0)

2.295062363s ago: executing program 8 (id=1105):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, 0x0)
timerfd_create(0x8, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0xf9, 0x7fffffff}]})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

2.223122367s ago: executing program 6 (id=1106):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x43, 0x5fe1, &(0x7f0000006e40)="$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")
rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

2.157866362s ago: executing program 4 (id=1107):
mount$binder(0x0, 0x0, 0x0, 0x20, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
getpriority(0x0, 0x0)

1.860861142s ago: executing program 4 (id=1108):
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000010c0)={[{@lazytime}, {@filestreams}, {@logbufs={'logbufs', 0x3d, 0x5}}, {@nogrpid}]}, 0x5, 0xb95a, &(0x7f000000c240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f00000001c0)={@desc={0x1, 0x0, @auto="964a62a2042db162"}})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0)
fallocate(r2, 0x41, 0x1, 0x2c)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./bus\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x4453, &(0x7f0000008900)="$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")
r3 = open(&(0x7f0000000200)='./bus\x00', 0x68042, 0x62)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r4, 0x2007ffb)
sendfile(r3, r4, 0x0, 0x1000000201005)

0s ago: executing program 9 (id=1109):
r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs$namespace(0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0xcdc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x24000058)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000d00)=@newtaction={0x44c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x44c}}, 0x0)

kernel console output (not intermixed with test programs):

 going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.084410][    C1] vkms_vblank_simulate: vblank timer overrun
[  317.248454][ T6507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.321106][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.348742][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.355696][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  317.414730][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.467107][ T6507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.606375][ T6507] device hsr_slave_0 entered promiscuous mode
[  317.624365][ T6507] device hsr_slave_1 entered promiscuous mode
[  317.642147][ T6507] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  317.672091][ T6507] Cannot create hsr debugfs directory
[  317.831041][ T4300] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  317.994551][ T4337] IPVS: stopping master sync thread 4845 ...
[  318.082072][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.476'.
[  318.212167][ T4300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  318.251360][ T4300] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  318.314364][ T4300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  318.352111][ T4300] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  318.371862][ T6507] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  318.632654][ T6507] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  318.695151][ T6507] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  318.717929][ T4300] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  318.743424][ T4300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.773431][ T4300] usb 6-1: Product: syz
[  318.777767][ T4300] usb 6-1: Manufacturer: syz
[  318.814645][ T4300] usb 6-1: SerialNumber: syz
[  318.847774][ T4300] usb 6-1: config 0 descriptor??
[  318.886525][ T4337] device hsr_slave_0 left promiscuous mode
[  318.903186][ T4300] ums-isd200 6-1:0.0: USB Mass Storage device detected
[  318.948944][ T4337] device hsr_slave_1 left promiscuous mode
[  318.960662][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  319.012459][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  319.058935][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  319.121483][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  319.400804][ T4337] device bridge_slave_1 left promiscuous mode
[  319.413383][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.464360][ T6630] binder: 6629:6630 ioctl c0306201 200000000280 returned -14
[  319.762503][ T4337] device bridge_slave_0 left promiscuous mode
[  319.769035][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.780305][ T4300] scsi host1: usb-storage 6-1:0.0
[  319.810812][ T4300] usb 6-1: USB disconnect, device number 10
[  319.939161][ T4337] device veth1_macvtap left promiscuous mode
[  319.949070][ T4337] device veth0_macvtap left promiscuous mode
[  319.982297][ T4337] device veth1_vlan left promiscuous mode
[  319.988895][ T4337] device veth0_vlan left promiscuous mode
[  319.998538][ T6670] fuse: Unknown parameter 'user_i00000000000000000000'
[  320.331230][ T4337] bond1 (unregistering): Released all slaves
[  323.036677][ T4337] team0 (unregistering): Port device team_slave_1 removed
[  323.088917][ T4337] team0 (unregistering): Port device team_slave_0 removed
[  323.114792][ T4337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  323.169714][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.486'.
[  323.187021][ T4337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  323.354705][ T4337] bond0 (unregistering): Released all slaves
[  323.443565][ T6507] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  324.268284][ T6507] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.326280][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  324.352516][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  324.412864][ T6507] 8021q: adding VLAN 0 to HW filter on device team0
[  324.472535][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  324.502136][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  324.541356][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.548826][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.605240][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  324.781681][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  324.924651][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  324.965555][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.973065][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.080662][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  325.222926][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  325.244948][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  325.410835][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  325.431510][ T6718] fuse: Unknown parameter 'user_i00000000000000000000'
[  325.502317][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  325.520513][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  325.541912][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  325.607581][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  325.656837][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  325.759581][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  325.842439][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  325.908411][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  326.143198][ T4300] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  326.433286][ T6729] device syzkaller0 entered promiscuous mode
[  326.498435][ T6729] tc action pedit offset 44640 out of bounds
[  326.506097][ T6729] tc action pedit offset 44640 out of bounds
[  326.512907][ T6729] tc action pedit offset 44640 out of bounds
[  326.519889][ T6729] tc action pedit offset 44640 out of bounds
[  326.526356][ T6729] tc action pedit offset 44640 out of bounds
[  326.532613][ T6729] tc action pedit offset 44640 out of bounds
[  326.538953][ T6729] tc action pedit offset 44640 out of bounds
[  326.546035][ T6729] tc action pedit offset 44640 out of bounds
[  326.552699][ T6729] tc action pedit offset 44640 out of bounds
[  326.559763][ T6729] tc action pedit offset 44640 out of bounds
[  326.566652][ T6729] tc action pedit offset 44640 out of bounds
[  326.572924][ T6729] tc action pedit offset 44640 out of bounds
[  326.579309][ T6729] tc action pedit offset 44640 out of bounds
[  326.586123][ T6729] tc action pedit offset 44640 out of bounds
[  326.592333][ T6729] tc action pedit offset 44640 out of bounds
[  326.599373][ T6729] tc action pedit offset 44640 out of bounds
[  326.605629][ T6729] tc action pedit offset 44640 out of bounds
[  326.612080][ T6729] 0: reclassify loop, rule prio 0, protocol 800
[  326.888666][ T6728] delete_channel: no stack
[  326.991955][ T4300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  327.042034][ T4300] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  327.109969][ T4300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  327.161127][ T4300] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  327.310010][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  327.310260][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  327.329842][ T6507] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.412155][ T4300] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  327.412210][ T4300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.412234][ T4300] usb 6-1: Product: syz
[  327.412251][ T4300] usb 6-1: Manufacturer: syz
[  327.412267][ T4300] usb 6-1: SerialNumber: syz
[  327.414540][ T4300] usb 6-1: config 0 descriptor??
[  327.463121][ T4300] ums-isd200 6-1:0.0: USB Mass Storage device detected
[  327.904420][ T6725] binder: 6722:6725 ioctl c0306201 200000000280 returned -14
[  327.917509][ T4300] scsi host1: usb-storage 6-1:0.0
[  327.928418][ T4300] usb 6-1: USB disconnect, device number 11
[  328.240725][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  328.241471][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  328.308715][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  328.309634][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  328.310516][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  328.311134][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  328.330403][ T6507] device veth0_vlan entered promiscuous mode
[  328.371243][ T6507] device veth1_vlan entered promiscuous mode
[  328.504946][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  328.505746][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  328.506655][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  328.507359][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  328.510381][ T6507] device veth0_macvtap entered promiscuous mode
[  328.524805][ T6507] device veth1_macvtap entered promiscuous mode
[  328.721393][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  328.774140][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  328.775169][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.775191][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.775202][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.775217][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.775231][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.775245][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.775258][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.775273][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.776601][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_0
[  328.787449][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.787474][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.787485][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.787500][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.787513][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.787528][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.787540][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.787555][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.802960][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_1
[  328.804192][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  328.805133][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  328.805875][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  328.806545][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  329.255842][ T6507] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.255934][ T6507] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.256017][ T6507] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.256048][ T6507] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  329.541138][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.541161][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.566469][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  329.636917][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.636941][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.637164][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  329.642945][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'.
[  330.283543][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.7.450'.
[  330.513709][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.499'.
[  330.544132][ T6797] device bond0 entered promiscuous mode
[  330.544153][ T6797] device bond_slave_0 entered promiscuous mode
[  330.544305][ T6797] device bond_slave_1 entered promiscuous mode
[  330.565328][ T6797] device gretap0 entered promiscuous mode
[  330.584118][ T6797] device hsr1 entered promiscuous mode
[  330.934330][ T6804] fuse: Unknown parameter 'user_id00000000000000000000'
[  332.332055][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'.
[  332.442466][ T4300] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  333.072018][ T4300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  333.072051][ T4300] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  333.072076][ T4300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  333.072099][ T4300] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  333.231954][ T4300] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  333.232006][ T4300] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.232065][ T4300] usb 7-1: Product: syz
[  333.232082][ T4300] usb 7-1: Manufacturer: syz
[  333.232141][ T4300] usb 7-1: SerialNumber: syz
[  333.239962][ T4300] usb 7-1: config 0 descriptor??
[  333.277604][ T4300] ums-isd200 7-1:0.0: USB Mass Storage device detected
[  333.501085][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.7.511'.
[  333.774279][ T6820] binder: 6819:6820 ioctl c0306201 200000000280 returned -14
[  333.812961][ T4300] scsi host1: usb-storage 7-1:0.0
[  334.290979][ T4300] usb 7-1: USB disconnect, device number 4
[  334.909710][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.7.518'.
[  337.442789][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.5.523'.
[  337.712936][ T6905] fuse: Unknown parameter 'user_id00000000000000000000'
[  338.701435][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.6.526'.
[  339.324222][ T4236] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  339.782128][ T4236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  340.558139][ T4236] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  340.569131][ T4236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  340.580065][ T4236] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  340.710745][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'.
[  340.830572][ T4236] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  340.851386][ T6944] netlink: 24 bytes leftover after parsing attributes in process `syz.7.530'.
[  341.334364][ T4236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.394291][ T4236] usb 6-1: Product: syz
[  341.408108][ T4236] usb 6-1: Manufacturer: syz
[  341.425707][ T4236] usb 6-1: SerialNumber: syz
[  341.461029][ T4236] usb 6-1: config 0 descriptor??
[  341.506996][ T6948] netlink: 'syz.1.533': attribute type 4 has an invalid length.
[  341.563010][ T4236] ums-isd200 6-1:0.0: USB Mass Storage device detected
[  341.705519][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.534'.
[  341.934597][ T4236] scsi host1: usb-storage 6-1:0.0
[  341.964946][ T4236] usb 6-1: USB disconnect, device number 12
[  342.067735][ T6975] fuse: Bad value for 'fd'
[  344.207956][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.543'.
[  344.248433][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.545'.
[  344.264357][ T4355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.388863][ T4355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.649868][ T7017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.547'.
[  345.135099][ T4355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.252944][ T4300] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  345.309403][ T7023] fuse: Bad value for 'fd'
[  345.759023][ T4355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.302248][ T4733] Bluetooth: hci0: command 0x0409 tx timeout
[  346.321962][ T4300] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  346.612237][ T4300] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  346.654991][ T4300] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  346.689732][ T4300] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  346.739056][ T6996] chnl_net:caif_netlink_parms(): no params data found
[  346.769230][ T7037] xt_TPROXY: Can be used only with -p tcp or -p udp
[  346.861946][ T4300] usb 8-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  346.874573][ T4300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.898906][ T4300] usb 8-1: Product: syz
[  346.922049][ T4300] usb 8-1: Manufacturer: syz
[  346.934508][ T4300] usb 8-1: SerialNumber: syz
[  346.951387][ T4300] usb 8-1: config 0 descriptor??
[  347.003068][ T4300] ums-isd200 8-1:0.0: USB Mass Storage device detected
[  347.316883][ T4300] scsi host1: usb-storage 8-1:0.0
[  347.892463][ T4300] usb 8-1: USB disconnect, device number 2
[  348.029252][ T7054] ieee802154 phy0 wpan0: encryption failed: -22
[  348.158006][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.166584][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.175943][ T6996] device bridge_slave_0 entered promiscuous mode
[  348.189702][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.202915][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.219296][ T6996] device bridge_slave_1 entered promiscuous mode
[  348.503354][ T4269] Bluetooth: hci0: command 0x041b tx timeout
[  349.263067][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.355780][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'.
[  349.389022][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.558'.
[  349.431043][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.667235][ T6996] team0: Port device team_slave_0 added
[  349.789190][ T6996] team0: Port device team_slave_1 added
[  349.820419][ T7083] netlink: 24 bytes leftover after parsing attributes in process `syz.6.559'.
[  350.411492][ T7086] fuse: Bad value for 'fd'
[  350.511144][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0
[  350.535223][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.572457][   T23] Bluetooth: hci0: command 0x040f tx timeout
[  350.645017][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  350.826525][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1
[  350.839442][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.061821][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.091719][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.562'.
[  352.709284][ T3520] Bluetooth: hci0: command 0x0419 tx timeout
[  353.631226][ T4355] IPVS: stopping master sync thread 5113 ...
[  354.639569][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.569'.
[  354.725764][ T6996] device hsr_slave_0 entered promiscuous mode
[  354.747004][ T6996] device hsr_slave_1 entered promiscuous mode
[  355.060120][ T6996] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  355.140698][ T6996] Cannot create hsr debugfs directory
[  355.991801][ T7134] xt_TPROXY: Can be used only with -p tcp or -p udp
[  356.364495][ T7137] fuse: Unknown parameter '0x0000000000000004'
[  356.428256][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.6.570'.
[  357.026079][ T4236] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  357.306855][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.575'.
[  357.331777][ T4355] device hsr_slave_0 left promiscuous mode
[  357.357942][ T4355] device hsr_slave_1 left promiscuous mode
[  357.392170][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  357.400106][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_0
[  357.450389][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  357.470052][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_1
[  357.491089][ T4355] device bridge_slave_1 left promiscuous mode
[  357.521076][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.544670][ T4355] device bridge_slave_0 left promiscuous mode
[  357.562264][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.611947][ T4236] usb 6-1: config index 0 descriptor too short (expected 51227, got 27)
[  357.621678][ T4355] device veth1_macvtap left promiscuous mode
[  357.638974][ T4355] device veth0_macvtap left promiscuous mode
[  357.659491][ T4236] usb 6-1: config 24 has too many interfaces: 199, using maximum allowed: 32
[  357.672515][ T4355] device veth1_vlan left promiscuous mode
[  357.682182][ T4355] device veth0_vlan left promiscuous mode
[  357.697419][ T4236] usb 6-1: config 24 has an invalid descriptor of length 111, skipping remainder of the config
[  357.731246][ T4236] usb 6-1: config 24 has 0 interfaces, different from the descriptor's value: 199
[  357.942404][ T4236] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  357.960546][ T4236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.984867][ T4236] usb 6-1: Product: syz
[  357.989107][ T4236] usb 6-1: Manufacturer: syz
[  358.017309][ T4236] usb 6-1: SerialNumber: syz
[  359.101837][ T4236] usb 6-1: USB disconnect, device number 13
[  359.269476][ T7175] netlink: 72 bytes leftover after parsing attributes in process `syz.6.578'.
[  360.039681][ T4355] team0 (unregistering): Port device team_slave_1 removed
[  360.101275][ T4355] team0 (unregistering): Port device team_slave_0 removed
[  360.145069][ T4355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  360.214230][ T4355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  360.439097][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.6.579'.
[  360.819105][ T4355] bond0 (unregistering): Released all slaves
[  360.845628][ T7184] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  361.101280][ T7187] xt_TPROXY: Can be used only with -p tcp or -p udp
[  361.146138][ T6996] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  361.271995][ T4236] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  361.280294][ T6996] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  361.324940][ T6996] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  361.521452][ T7194] netlink: 24 bytes leftover after parsing attributes in process `syz.5.584'.
[  361.942609][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  361.961678][ T4236] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  361.980089][ T6996] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  361.991092][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  362.033985][ T4236] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  362.119985][ T7199] fuse: Unknown parameter '0x0000000000000004'
[  362.202300][ T4236] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  362.460986][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.495151][ T4236] usb 2-1: Product: syz
[  362.499861][ T4236] usb 2-1: Manufacturer: syz
[  362.840808][ T6996] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.865214][ T4236] usb 2-1: SerialNumber: syz
[  362.883912][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  362.894084][ T4236] usb 2-1: config 0 descriptor??
[  362.915940][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.586'.
[  362.925023][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  362.953540][ T4236] ums-isd200 2-1:0.0: USB Mass Storage device detected
[  362.970164][ T6996] 8021q: adding VLAN 0 to HW filter on device team0
[  363.077449][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  363.118477][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  363.203733][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.211201][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.322034][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  363.330326][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  363.360121][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  363.370738][ T7182] binder: 7180:7182 ioctl c0306201 200000000280 returned -14
[  363.398295][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.405652][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.451363][ T4236] scsi host1: usb-storage 2-1:0.0
[  363.469851][ T4236] usb 2-1: USB disconnect, device number 8
[  363.500751][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  363.542684][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  363.587162][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  363.629594][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  363.679562][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  363.761262][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  363.787053][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  363.826267][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  363.858824][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  363.887703][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  364.113720][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.6.590'.
[  364.267473][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  364.309925][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  364.815253][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  365.392256][ T7241] xt_TPROXY: Can be used only with -p tcp or -p udp
[  365.726013][ T7225] chnl_net:caif_netlink_parms(): no params data found
[  365.743219][   T23] Bluetooth: hci2: command 0x0409 tx timeout
[  366.017960][ T4236] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  366.153181][ T7264] netlink: 24 bytes leftover after parsing attributes in process `syz.6.595'.
[  366.575364][ T7225] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.597042][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.621056][ T7225] device bridge_slave_0 entered promiscuous mode
[  366.666171][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  366.682114][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  366.708909][ T7225] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.732878][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.741343][ T7225] device bridge_slave_1 entered promiscuous mode
[  366.780586][ T6996] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.797154][ T7270] fuse: Unknown parameter '0x0000000000000004'
[  366.902821][ T7225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.922139][ T4236] usb 2-1: config index 0 descriptor too short (expected 51227, got 27)
[  366.951005][ T4236] usb 2-1: config 24 has too many interfaces: 199, using maximum allowed: 32
[  366.960838][ T7225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.982673][ T4236] usb 2-1: config 24 has an invalid descriptor of length 111, skipping remainder of the config
[  367.014556][ T4236] usb 2-1: config 24 has 0 interfaces, different from the descriptor's value: 199
[  367.122430][ T7225] team0: Port device team_slave_0 added
[  367.130735][ T7225] team0: Port device team_slave_1 added
[  367.382376][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.6.597'.
[  367.721794][ T4236] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  367.748491][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.771955][ T4236] usb 2-1: Product: syz
[  367.776209][ T4236] usb 2-1: Manufacturer: syz
[  367.802761][ T4236] usb 2-1: SerialNumber: syz
[  367.821777][   T23] Bluetooth: hci2: command 0x041b tx timeout
[  367.903207][ T7225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.910605][ T7225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.989586][ T7225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.020957][ T7225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.050459][ T7225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.108479][ T7225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.124484][ T7288] loop6: detected capacity change from 0 to 256
[  368.206414][ T4236] usb 2-1: USB disconnect, device number 9
[  368.290760][ T7288] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  368.320369][ T7288] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  368.324661][ T7288] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  368.355339][ T7225] device hsr_slave_0 entered promiscuous mode
[  368.367024][ T7225] device hsr_slave_1 entered promiscuous mode
[  368.367686][ T7225] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  368.367798][ T7225] Cannot create hsr debugfs directory
[  368.478466][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  368.479172][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  368.532169][   T23] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  368.621855][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  368.622627][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  368.623629][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  368.624265][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  368.670448][ T6996] device veth0_vlan entered promiscuous mode
[  368.713231][ T6996] device veth1_vlan entered promiscuous mode
[  368.751971][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  368.752769][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  368.790485][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  368.791161][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  368.829154][ T6996] device veth0_macvtap entered promiscuous mode
[  368.848416][ T6996] device veth1_macvtap entered promiscuous mode
[  368.905965][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  368.931978][   T23] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  368.943030][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  368.965805][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.981713][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  369.004270][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.019530][   T23] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  369.038158][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.073625][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.103046][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.144013][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.173867][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.209118][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.213826][   T23] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  369.240271][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  369.249319][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.263930][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  369.278705][   T23] usb 6-1: Product: syz
[  369.290832][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  369.295298][   T23] usb 6-1: Manufacturer: syz
[  369.321737][   T23] usb 6-1: SerialNumber: syz
[  369.330871][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  369.347608][   T23] usb 6-1: config 0 descriptor??
[  369.378247][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.393287][   T23] ums-isd200 6-1:0.0: USB Mass Storage device detected
[  369.409765][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.434183][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.456388][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.467601][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.498083][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.520495][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.531791][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.550935][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.565284][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  369.586184][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  369.613317][ T6996] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.633310][ T6996] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.661502][ T6996] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.692367][ T6996] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.732136][ T7225] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  369.757883][ T7225] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  369.797874][ T7225] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  369.806689][ T7291] binder: 7289:7291 ioctl c0306201 200000000280 returned -14
[  369.857763][ T7225] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  369.870341][   T23] scsi host1: usb-storage 6-1:0.0
[  369.888613][   T23] usb 6-1: USB disconnect, device number 14
[  369.914943][ T6476] Bluetooth: hci2: command 0x040f tx timeout
[  370.052132][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.072418][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.125924][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  370.185891][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.199953][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.243754][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  370.622180][ T7225] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.721213][ T7225] 8021q: adding VLAN 0 to HW filter on device team0
[  370.897166][ T7225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  371.337412][ T7225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  371.378503][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  371.398423][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  371.429409][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  371.453959][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  371.492417][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.499775][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.549385][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  371.572482][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  371.607240][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.614698][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.655228][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  371.683634][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  371.713058][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  371.737746][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  371.788789][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  371.819537][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  371.833421][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  371.855772][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  371.876754][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  371.942354][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  372.088775][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  372.108580][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  372.135895][ T7336] xt_TPROXY: Can be used only with -p tcp or -p udp
[  372.174873][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  372.298188][ T4355] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.513329][ T4355] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.580190][ T4269] Bluetooth: hci2: command 0x0419 tx timeout
[  372.666651][ T4355] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.781867][ T4355] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.863601][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  372.876001][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  373.147314][ T7225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.049877][ T7359] bridge0: port 3(syz_tun) entered blocking state
[  374.158434][ T7359] bridge0: port 3(syz_tun) entered disabled state
[  374.521809][ T7359] device syz_tun entered promiscuous mode
[  374.528651][ T7359] bridge0: port 3(syz_tun) entered blocking state
[  374.535987][ T7359] bridge0: port 3(syz_tun) entered forwarding state
[  374.702973][ T7342] loop5: detected capacity change from 0 to 32768
[  374.773694][ T7342] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.603 (7342)
[  374.947330][ T7342] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  374.983188][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.6.606'.
[  375.012639][ T7342] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  375.069647][ T7342] BTRFS info (device loop5): trying to use backup root at mount time
[  375.123061][ T7342] BTRFS info (device loop5): setting nodatasum
[  375.129630][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  375.150141][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  375.167394][ T7342] BTRFS info (device loop5): force zlib compression, level 3
[  375.195461][ T7342] BTRFS info (device loop5): setting nodatacow
[  375.227595][ T7342] BTRFS info (device loop5): disabling tree log
[  375.308235][ T7342] BTRFS info (device loop5): using free space tree
[  375.318233][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  375.322178][ T4269] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  375.341756][ T7342] BTRFS info (device loop5): has skinny extents
[  375.349099][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  375.406780][ T7225] device veth0_vlan entered promiscuous mode
[  375.441969][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  375.460837][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  375.510347][ T7225] device veth1_vlan entered promiscuous mode
[  375.629603][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  375.643665][ T7342] BTRFS info (device loop5): enabling ssd optimizations
[  375.655138][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  375.688571][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  375.702276][ T6082] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  375.711855][ T4269] usb 2-1: config index 0 descriptor too short (expected 51227, got 27)
[  375.720721][ T4269] usb 2-1: config 24 has too many interfaces: 199, using maximum allowed: 32
[  375.731763][ T4269] usb 2-1: config 24 has an invalid descriptor of length 111, skipping remainder of the config
[  375.742693][ T4269] usb 2-1: config 24 has 0 interfaces, different from the descriptor's value: 199
[  375.760789][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  375.829192][ T7225] device veth0_macvtap entered promiscuous mode
[  375.878081][ T7225] device veth1_macvtap entered promiscuous mode
[  375.918648][ T4269] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  375.948604][ T4269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.960460][ T4269] usb 2-1: Product: syz
[  375.965082][ T4269] usb 2-1: Manufacturer: syz
[  375.995305][ T4269] usb 2-1: SerialNumber: syz
[  376.045098][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  376.083346][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.112476][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  376.131648][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.142886][ T6082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  376.157967][ T6082] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  376.180663][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  376.198669][ T6082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  376.218921][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.232216][ T6082] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  376.251674][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  376.272513][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.302272][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  376.314115][ T4269] usb 2-1: USB disconnect, device number 10
[  376.347712][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.377993][ T7225] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.398114][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  376.415866][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  376.432960][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  376.453098][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  376.472948][ T6082] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  376.486834][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.507982][ T6082] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.508012][ T6082] usb 7-1: Product: syz
[  376.508029][ T6082] usb 7-1: Manufacturer: syz
[  376.508045][ T6082] usb 7-1: SerialNumber: syz
[  376.532158][ T6082] usb 7-1: config 0 descriptor??
[  376.539496][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.539526][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.539545][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.539576][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.539592][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.539614][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.539630][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.539650][ T7225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.539666][ T7225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.568673][ T7225] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.580008][ T6082] ums-isd200 7-1:0.0: USB Mass Storage device detected
[  376.616732][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  376.617606][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  376.739472][ T7225] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.739518][ T7225] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.739550][ T7225] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.739582][ T7225] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.827940][ T4355] device hsr_slave_0 left promiscuous mode
[  376.828551][ T4355] device hsr_slave_1 left promiscuous mode
[  376.829410][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  376.829461][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_0
[  376.830168][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  376.830199][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_1
[  376.830778][ T4355] device bridge_slave_1 left promiscuous mode
[  376.831076][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.835196][ T4355] device bridge_slave_0 left promiscuous mode
[  376.835336][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.860661][ T4355] device veth1_macvtap left promiscuous mode
[  376.860763][ T4355] device veth0_macvtap left promiscuous mode
[  376.860872][ T4355] device veth1_vlan left promiscuous mode
[  376.860946][ T4355] device veth0_vlan left promiscuous mode
[  377.014428][ T7387] binder: 7385:7387 ioctl c0306201 200000000280 returned -14
[  377.042961][ T6082] scsi host1: usb-storage 7-1:0.0
[  377.048017][ T6082] usb 7-1: USB disconnect, device number 5
[  378.785729][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.792306][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  379.529061][ T4355] team0 (unregistering): Port device team_slave_1 removed
[  379.548028][ T4355] team0 (unregistering): Port device team_slave_0 removed
[  379.705838][ T7452] xt_TPROXY: Can be used only with -p tcp or -p udp
[  379.919260][ T4355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  379.928805][ T7430] loop5: detected capacity change from 0 to 40427
[  379.957414][ T4355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.034373][ T7430] F2FS-fs (loop5): build fault injection attr: rate: 174, type: 0x1ffff
[  381.110674][ T4355] bond0 (unregistering): Released all slaves
[  381.447820][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.8.618'.
[  382.126857][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.187348][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.564030][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  382.709895][ T4810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.775598][ T4810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.838638][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  383.166502][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.8.620'.
[  385.041974][ T7502] xt_TPROXY: Can be used only with -p tcp or -p udp
[  385.504623][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.615'.
[  385.528397][ T7481] loop6: detected capacity change from 0 to 32768
[  386.299800][ T7481] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  386.370397][ T7481] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  386.574776][ T7481] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  386.614515][ T4269] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  386.631684][ T4269] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  386.793417][ T4269] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 161ms
[  386.833824][ T4269] gfs2: fsid=syz:syz.0: jid=0: Done
[  386.841143][ T7481] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  386.862154][ T7481] gfs2: fsid=syz:syz.0: can't start logd thread: -4
[  387.177794][ T7511] loop1: detected capacity change from 0 to 32768
[  387.199321][ T7517] loop5: detected capacity change from 0 to 2048
[  387.672543][ T7511] (syz.1.626,7511,1):ocfs2_initialize_super:2152 ERROR: couldn't mount because of unsupported optional features (4).
[  387.694837][ T7511] (syz.1.626,7511,1):ocfs2_fill_super:1177 ERROR: status = -22
[  387.932123][ T7522] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  387.946516][ T7520] netlink: 72 bytes leftover after parsing attributes in process `syz.8.628'.
[  388.698295][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.629'.
[  390.380679][ T7551] loop6: detected capacity change from 0 to 128
[  390.490366][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  392.311680][ T4247] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  392.712124][ T4247] usb 10-1: config 0 has no interfaces?
[  392.802762][ T4247] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  392.828180][ T4247] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  392.881986][ T4247] usb 10-1: Manufacturer: syz
[  392.948925][ T4247] usb 10-1: config 0 descriptor??
[  393.296366][ T7551] loop6: detected capacity change from 0 to 32768
[  393.304087][ T1108] usb 10-1: USB disconnect, device number 2
[  393.654096][ T7562] loop5: detected capacity change from 0 to 32768
[  393.771840][ T4269] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  393.788702][ T7562] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  393.946375][ T7589] netlink: 24 bytes leftover after parsing attributes in process `syz.8.636'.
[  393.998643][ T7562] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  394.342369][ T7562] gfs2: fsid=syz:syz.0: fatal: invalid metadata block
[  394.342369][ T7562]   bh = 53 (type: exp=5, found=8)
[  394.342369][ T7562]   function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493
[  394.481951][ T7562] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  394.881969][ T4269] usb 2-1: config index 0 descriptor too short (expected 51227, got 27)
[  394.890541][ T4269] usb 2-1: config 24 has too many interfaces: 199, using maximum allowed: 32
[  395.002032][ T4269] usb 2-1: config 24 has an invalid descriptor of length 111, skipping remainder of the config
[  395.178435][ T4269] usb 2-1: config 24 has 0 interfaces, different from the descriptor's value: 199
[  395.781918][ T4269] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  395.811067][ T4269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.429364][ T4269] usb 2-1: Product: syz
[  397.501609][ T4269] usb 2-1: Manufacturer: syz
[  397.506295][ T4269] usb 2-1: SerialNumber: syz
[  397.721667][ T4269] usb 2-1: can't set config #24, error -71
[  397.791102][ T4269] usb 2-1: USB disconnect, device number 11
[  398.871826][ T4269] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  399.161811][ T4269] usb 2-1: Using ep0 maxpacket: 32
[  399.311774][ T4269] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  399.386873][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.9.645'.
[  399.744158][ T7562] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  400.841984][ T7562] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  400.989597][ T4269] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping
[  401.000627][ T4269] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  401.083515][ T7562] gfs2: fsid=syz:syz.0: File system withdrawn
[  401.089772][ T7562] CPU: 0 PID: 7562 Comm: syz.5.634 Not tainted syzkaller #0
[  401.097312][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  401.107814][ T7562] Call Trace:
[  401.111139][ T7562]  <TASK>
[  401.114290][ T7562]  dump_stack_lvl+0x188/0x250
[  401.119292][ T7562]  ? kobject_uevent_env+0x371/0x890
[  401.124555][ T7562]  ? show_regs_print_info+0x20/0x20
[  401.130153][ T7562]  ? load_image+0x400/0x400
[  401.134704][ T7562]  ? kobject_uevent_env+0x371/0x890
[  401.140055][ T7562]  gfs2_withdraw+0x1149/0x1490
[  401.145046][ T7562]  ? gfs2_lm+0x240/0x240
[  401.149336][ T7562]  ? gfs2_meta_read+0x8a9/0xa60
[  401.154235][ T7562]  ? gfs2_meta_new+0x160/0x160
[  401.159048][ T7562]  gfs2_metatype_check_ii+0x74/0x90
[  401.164418][ T7562]  gfs2_meta_buffer+0x262/0x310
[  401.169333][ T7562]  __fillup_metapath+0x14d/0x340
[  401.174322][ T7562]  __gfs2_iomap_get+0x709/0x1400
[  401.179342][ T7562]  ? gfs2_alloc_extent+0x580/0x580
[  401.185520][ T7562]  ? rcu_is_watching+0x11/0xa0
[  401.190349][ T7562]  gfs2_block_map+0x2a0/0x740
[  401.195197][ T7562]  ? gfs2_iomap_end+0x7a0/0x7a0
[  401.200262][ T7562]  ? mark_lock+0x94/0x320
[  401.204827][ T7562]  ? verify_lock_unused+0x140/0x140
[  401.210184][ T7562]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  401.216332][ T7562]  ? release_firmware_map_entry+0x190/0x190
[  401.222308][ T7562]  ? preempt_schedule_common+0xa5/0xd0
[  401.227964][ T7562]  gfs2_write_alloc_required+0x3ae/0x680
[  401.233674][ T7562]  ? gfs2_map_journal_extents+0xb10/0xb10
[  401.239586][ T7562]  ? _raw_spin_unlock+0x24/0x40
[  401.244583][ T7562]  ? gfs2_glock_nq+0xcb0/0x1550
[  401.249522][ T7562]  gfs2_jdesc_check+0x1c3/0x290
[  401.254429][ T7562]  init_journal+0xd02/0x22f0
[  401.259092][ T7562]  ? end_bio_io_page+0x100/0x100
[  401.264179][ T7562]  ? vsnprintf+0x1b21/0x1c20
[  401.268933][ T7562]  ? snprintf+0xe5/0x140
[  401.273408][ T7562]  ? init_journal+0x74d/0x22f0
[  401.278414][ T7562]  ? vscnprintf+0x80/0x80
[  401.282882][ T7562]  ? gfs2_glock_nq_num+0x17a/0x1b0
[  401.288314][ T7562]  init_inodes+0xdb/0x320
[  401.292740][ T7562]  gfs2_fill_super+0x16b2/0x1f00
[  401.297932][ T7562]  ? gfs2_reconfigure+0xd30/0xd30
[  401.303035][ T7562]  ? gfs2_glock_nq_num+0x82/0x1b0
[  401.308228][ T7562]  ? sb_set_blocksize+0xa5/0xe0
[  401.313319][ T7562]  get_tree_bdev+0x3f1/0x610
[  401.317969][ T7562]  ? gfs2_reconfigure+0xd30/0xd30
[  401.323042][ T7562]  gfs2_get_tree+0x4d/0x1e0
[  401.327598][ T7562]  vfs_get_tree+0x88/0x270
[  401.332123][ T7562]  do_new_mount+0x24a/0xa40
[  401.336772][ T7562]  __se_sys_mount+0x2e3/0x3d0
[  401.341510][ T7562]  ? __x64_sys_mount+0xc0/0xc0
[  401.346457][ T7562]  ? lockdep_hardirqs_on+0x94/0x140
[  401.351820][ T7562]  ? __x64_sys_mount+0x1c/0xc0
[  401.356649][ T7562]  do_syscall_64+0x4c/0xa0
[  401.361236][ T7562]  ? clear_bhb_loop+0x30/0x80
[  401.366320][ T7562]  ? clear_bhb_loop+0x30/0x80
[  401.371057][ T7562]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  401.377017][ T7562] RIP: 0033:0x7f8fc3cd5a8a
[  401.381509][ T7562] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  401.401779][ T7562] RSP: 002b:00007f8fc1f2de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  401.410444][ T7562] RAX: ffffffffffffffda RBX: 00007f8fc1f2dee0 RCX: 00007f8fc3cd5a8a
[  401.418620][ T7562] RDX: 0000200000021180 RSI: 00002000000211c0 RDI: 00007f8fc1f2dea0
[  401.426867][ T7562] RBP: 0000200000021180 R08: 00007f8fc1f2dee0 R09: 0000000000000000
[  401.435239][ T7562] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000211c0
[  401.443773][ T7562] R13: 00007f8fc1f2dea0 R14: 000000000002114d R15: 0000200000021200
[  401.452171][ T7562]  </TASK>
[  401.464403][ T4269] usb 2-1: string descriptor 0 read error: -71
[  401.473341][ T4269] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  401.482979][ T4269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.506767][ T7562] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[  401.515008][ T4269] usb 2-1: can't set config #155, error -71
[  402.360929][ T4269] usb 2-1: USB disconnect, device number 12
[  403.113755][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.9.650'.
[  403.981819][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.8.649'.
[  405.662174][ T3520] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  406.510657][ T7678] loop1: detected capacity change from 0 to 32768
[  406.639170][ T7678] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.656 (7678)
[  406.696270][ T7678] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  406.733017][ T7678] BTRFS info (device loop1): force clearing of disk cache
[  406.761956][ T7678] BTRFS info (device loop1): enabling auto defrag
[  406.768624][ T7678] BTRFS info (device loop1): max_inline at 0
[  406.802261][ T7678] BTRFS info (device loop1): enabling disk space caching
[  406.819330][ T7683] loop5: detected capacity change from 0 to 40427
[  406.835987][ T7678] BTRFS info (device loop1): disk space caching is enabled
[  406.869056][ T7683] F2FS-fs (loop5): Unrecognized mount option "age_extent_cache" or missing value
[  406.879034][ T3520] usb 7-1: config index 0 descriptor too short (expected 51227, got 27)
[  406.891161][ T3520] usb 7-1: config 24 has too many interfaces: 199, using maximum allowed: 32
[  406.905386][ T7678] BTRFS info (device loop1): has skinny extents
[  406.921770][ T3520] usb 7-1: config 24 has an invalid descriptor of length 111, skipping remainder of the config
[  406.945935][ T3520] usb 7-1: config 24 has 0 interfaces, different from the descriptor's value: 199
[  407.171976][ T3520] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  407.181242][ T3520] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.199983][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.660'.
[  407.210473][ T1334] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  407.314025][ T3520] usb 7-1: Product: syz
[  407.323543][ T3520] usb 7-1: Manufacturer: syz
[  407.328322][ T3520] usb 7-1: SerialNumber: syz
[  407.351905][ T3520] usb 7-1: can't set config #24, error -71
[  407.371796][ T3520] usb 7-1: USB disconnect, device number 6
[  407.437012][ T7678] BTRFS info (device loop1): enabling ssd optimizations
[  407.447967][ T7678] BTRFS info (device loop1): clearing free space tree
[  407.455778][ T7678] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  407.466115][ T7678] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  407.612142][ T1334] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.674513][ T1334] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  407.889473][    T9] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  407.902167][ T1334] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  407.959321][ T1334] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.010035][ T1334] usb 10-1: Product: syz
[  408.042898][ T1334] usb 10-1: Manufacturer: syz
[  408.047781][ T1334] usb 10-1: SerialNumber: syz
[  408.783092][ T1334] cdc_mbim 10-1:1.0: skipping garbage
[  408.902502][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.663'.
[  408.988658][ T7699] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  409.692155][ T7699] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  409.731858][ T1334] cdc_mbim 10-1:1.0: setting tx_max = 184
[  409.762783][ T1334] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device
[  410.210728][ T7769] netlink: 24 bytes leftover after parsing attributes in process `syz.6.668'.
[  410.426584][ T1334] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, a2:0d:cd:a2:e6:5e
[  411.322658][ T1334] usb 10-1: USB disconnect, device number 3
[  411.329436][ T1334] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM
[  411.914560][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.672'.
[  413.078531][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.8.675'.
[  413.610745][ T7795] loop9: detected capacity change from 0 to 40427
[  413.917541][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.6.676'.
[  414.101903][ T7795] F2FS-fs (loop9): build fault injection attr: rate: 19, type: 0x1ffff
[  416.786681][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz.5.683'.
[  424.396079][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.9.695'.
[  428.097652][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'.
[  429.350944][ T7981] xt_TPROXY: Can be used only with -p tcp or -p udp
[  431.349180][ T7980] loop1: detected capacity change from 0 to 32768
[  431.529691][ T8005] attempt to access beyond end of device
[  431.529691][ T8005] loop1: rw=1, want=4680040, limit=32768
[  431.590242][ T7976] loop5: detected capacity change from 0 to 32768
[  431.600393][ T8005] metapage_write_end_io: I/O error
[  431.613420][  T277] blkno = 8ed2c, nblocks = 1
[  431.618324][  T277] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  431.618324][  T277] 
[  431.630081][ T8005] blkno = 8ed2c, nblocks = 1
[  431.643029][ T8005] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  431.643029][ T8005] 
[  431.649158][  T277] ERROR: (device loop1): remounting filesystem as read-only
[  431.681832][ T8005] ERROR: (device loop1): remounting filesystem as read-only
[  431.725151][ T8005] blkno = 8ed2c, nblocks = 1
[  431.730524][ T8005] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  431.730524][ T8005] 
[  431.753367][ T8005] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt
[  431.753367][ T8005] 
[  431.784875][ T7976] XFS (loop5): Mounting V5 Filesystem
[  431.819832][ T8005] jfs_mkdir: dtSearch returned -5
[  431.938324][ T4186] attempt to access beyond end of device
[  431.938324][ T4186] loop1: rw=1, want=4680040, limit=32768
[  431.951862][ T4186] metapage_write_end_io: I/O error
[  431.973323][ T4186] JFS: metapage_get_blocks failed
[  432.007465][ T4186] JFS: metapage_get_blocks failed
[  432.026630][ T7976] XFS (loop5): Ending clean mount
[  432.033191][ T4186] JFS: metapage_get_blocks failed
[  432.050323][ T4186] JFS: metapage_get_blocks failed
[  432.075974][ T7976] XFS (loop5): Quotacheck needed: Please wait.
[  432.237378][ T7976] XFS (loop5): Quotacheck: Done.
[  432.334784][ T4540] XFS (loop5): Unmounting Filesystem
[  433.349237][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.707'.
[  436.169283][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.8.715'.
[  436.494206][ T8052] loop1: detected capacity change from 0 to 32768
[  436.547766][ T8034] loop9: detected capacity change from 0 to 40427
[  436.631930][ T4269] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  436.845752][ T8052] JBD2: Ignoring recovery information on journal
[  437.931215][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz.5.719'.
[  438.381751][ T4269] usb 7-1: config index 0 descriptor too short (expected 51227, got 27)
[  438.390194][ T4269] usb 7-1: config 24 has too many interfaces: 199, using maximum allowed: 32
[  438.546021][ T8052] JBD2: recovery failed
[  438.566610][ T8052] (syz.1.712,8052,0):ocfs2_journal_load:1105 ERROR: Failed to load journal!
[  438.664350][ T4269] usb 7-1: config 24 has an invalid descriptor of length 111, skipping remainder of the config
[  438.674950][ T4269] usb 7-1: config 24 has 0 interfaces, different from the descriptor's value: 199
[  438.696076][ T8052] (syz.1.712,8052,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5
[  438.751671][ T8052] (syz.1.712,8052,1):ocfs2_check_volume:2493 ERROR: status = -5
[  438.762367][ T4269] usb 7-1: string descriptor 0 read error: -71
[  438.768852][ T4269] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  438.806721][ T8052] (syz.1.712,8052,1):ocfs2_mount_volume:1824 ERROR: status = -5
[  438.821737][ T4269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.983385][ T8052] (syz.1.712,8052,0):ocfs2_fill_super:1177 ERROR: status = -5
[  439.061875][ T4269] usb 7-1: can't set config #24, error -71
[  439.105216][ T4269] usb 7-1: USB disconnect, device number 7
[  439.636806][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.8.717'.
[  440.227232][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  440.234454][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  442.231396][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.727'.
[  444.931657][ T7760] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  448.041828][ T7760] usb 7-1: unable to read config index 0 descriptor/all
[  448.049638][ T7760] usb 7-1: can't read configurations, error -71
[  448.843887][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'.
[  454.985585][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.755'.
[  457.271676][ T1334] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  457.501669][ T1334] usb 2-1: device descriptor read/64, error -71
[  457.752827][ T8328] loop8: detected capacity change from 0 to 32768
[  457.781750][ T1334] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  458.031658][ T1334] usb 2-1: device descriptor read/64, error -71
[  458.045261][ T8328] JBD2: Ignoring recovery information on journal
[  458.127493][ T8334] bridge0: port 3(syz_tun) entered blocking state
[  458.151805][ T1334] usb usb2-port1: attempt power cycle
[  458.176396][ T8334] bridge0: port 3(syz_tun) entered disabled state
[  458.192755][ T8328] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  458.239722][ T8334] device syz_tun entered promiscuous mode
[  458.309645][ T8334] bridge0: port 3(syz_tun) entered blocking state
[  458.316428][ T8334] bridge0: port 3(syz_tun) entered forwarding state
[  458.400574][ T8344] (syz.8.760,8344,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount
[  458.413280][ T4884] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  458.571708][ T1334] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  458.666159][ T8347] loop9: detected capacity change from 0 to 4096
[  458.682009][ T1334] usb 2-1: device descriptor read/8, error -71
[  458.731007][ T6996] ocfs2: Unmounting device (7,8) on (node local)
[  458.811913][ T4884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.836838][ T4884] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  458.961688][ T1334] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  459.052668][ T4884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  459.062506][ T1334] usb 2-1: device descriptor read/8, error -71
[  459.079883][ T4884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.126198][ T4884] usb 6-1: Product: syz
[  459.149681][ T4884] usb 6-1: Manufacturer: syz
[  459.185403][ T4884] usb 6-1: SerialNumber: syz
[  459.192308][ T1334] usb usb2-port1: unable to enumerate USB device
[  459.293013][ T4884] cdc_mbim 6-1:1.0: skipping garbage
[  459.512667][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'.
[  461.991793][ T4884] cdc_mbim 6-1:1.0: bind() failure
[  462.000029][ T4884] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  462.738078][ T4884] cdc_ncm 6-1:1.1: bind() failure
[  462.761877][ T4884] usb 6-1: USB disconnect, device number 15
[  464.291676][ T4884] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  464.881993][ T4884] usb 6-1: config index 0 descriptor too short (expected 51227, got 27)
[  465.771694][ T4884] usb 6-1: config 24 has too many interfaces: 199, using maximum allowed: 32
[  465.781304][ T4884] usb 6-1: config 24 has an invalid descriptor of length 111, skipping remainder of the config
[  465.891832][ T4884] usb 6-1: config 24 has 0 interfaces, different from the descriptor's value: 199
[  465.941703][ T4884] usb 6-1: string descriptor 0 read error: -71
[  465.948021][ T4884] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  465.957730][ T4884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.018685][ T4884] usb 6-1: can't set config #24, error -71
[  466.046479][ T4884] usb 6-1: USB disconnect, device number 16
[  466.452783][ T7423] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  466.641889][ T7423] usb 2-1: device descriptor read/64, error -71
[  466.931808][ T7423] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  467.121763][ T7423] usb 2-1: device descriptor read/64, error -71
[  467.236873][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.9.780'.
[  467.251794][ T7423] usb usb2-port1: attempt power cycle
[  468.072338][ T8425] program syz.6.781 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  468.411690][ T7423] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  468.508811][ T8417] loop8: detected capacity change from 0 to 32768
[  468.527357][ T8401] loop5: detected capacity change from 0 to 32768
[  468.551795][ T7423] usb 2-1: device descriptor read/8, error -71
[  468.659140][ T8401] XFS (loop5): Mounting V5 Filesystem
[  468.696368][ T8417] XFS (loop8): Mounting V5 Filesystem
[  468.831727][ T7423] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  468.940673][ T8417] XFS (loop8): Ending clean mount
[  468.944553][ T7423] usb 2-1: device descriptor read/8, error -71
[  468.966005][ T8431] loop6: detected capacity change from 0 to 32768
[  468.984175][ T8401] XFS (loop5): Starting recovery (logdev: internal)
[  469.029994][ T8431] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.783 (8431)
[  469.072024][ T7423] usb usb2-port1: unable to enumerate USB device
[  469.127041][ T8431] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  469.141383][ T8401] XFS (loop5): Ending recovery (logdev: internal)
[  469.160936][ T8431] BTRFS info (device loop6): allowing degraded mounts
[  469.218506][ T8431] BTRFS info (device loop6): metadata ratio 4
[  469.251048][ T8431] BTRFS info (device loop6): turning on sync discard
[  469.270302][ T4540] XFS (loop5): Unmounting Filesystem
[  469.294582][ T8429] loop9: detected capacity change from 0 to 32768
[  469.309603][ T8431] BTRFS info (device loop6): turning off discard
[  469.401934][ T8431] BTRFS info (device loop6): turning on sync discard
[  469.409051][ T8431] BTRFS info (device loop6): disabling tree log
[  469.442147][ T6996] XFS (loop8): Unmounting Filesystem
[  469.517463][ T8431] BTRFS info (device loop6): using free space tree
[  469.524131][ T8431] BTRFS info (device loop6): has skinny extents
[  469.610064][ T8429] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop9 scanned by syz.9.782 (8429)
[  469.683575][ T8429] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  469.731829][ T8429] BTRFS info (device loop9): force zlib compression, level 3
[  469.739730][ T8429] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  469.880745][ T8429] BTRFS info (device loop9): use zstd compression, level 3
[  469.888784][ T8429] BTRFS info (device loop9): enabling ssd optimizations
[  469.929325][ T8429] BTRFS info (device loop9): using free space tree
[  469.951366][ T8429] BTRFS info (device loop9): has skinny extents
[  470.184949][ T8431] BTRFS info (device loop6): enabling ssd optimizations
[  471.066101][ T8503] overlayfs: failed to create directory ./bus/work (errno: 30); mounting read-only
[  471.691567][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.789'.
[  472.946284][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.792'.
[  476.131875][ T4247] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  476.331396][ T8573] loop5: detected capacity change from 0 to 256
[  476.413474][ T8573] exfat: Deprecated parameter 'namecase'
[  476.440816][ T8573] exfat: Deprecated parameter 'namecase'
[  476.594062][ T4247] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  476.657533][ T4247] usb 10-1: config 0 interface 0 altsetting 32 endpoint 0x8D has an invalid bInterval 0, changing to 10
[  476.710310][ T8573] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d)
[  476.865910][ T4247] usb 10-1: config 0 interface 0 altsetting 32 endpoint 0x8D has invalid maxpacket 200, setting to 64
[  477.253914][ T4247] usb 10-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  477.268562][ T8573] capability: warning: `syz.5.794' uses 32-bit capabilities (legacy support in use)
[  477.321733][ T4247] usb 10-1: config 0 interface 0 has no altsetting 0
[  477.329253][ T4247] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  477.404156][ T4247] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.442582][ T4247] usb 10-1: config 0 descriptor??
[  477.788770][ T4247] usb 10-1: USB disconnect, device number 4
[  477.924142][ T8576] loop1: detected capacity change from 0 to 40427
[  477.990710][ T8576] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  478.041039][ T8576] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  478.126912][ T8576] F2FS-fs (loop1): invalid crc value
[  478.238291][ T8576] F2FS-fs (loop1): Found nat_bits in checkpoint
[  478.521668][ T8576] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  478.546432][ T8576] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  478.876247][ T4186] attempt to access beyond end of device
[  478.876247][ T4186] loop1: rw=2049, want=45104, limit=40427
[  478.891415][ T1334] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  479.281860][ T1334] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  479.321677][ T1334] usb 10-1: config 0 has no interfaces?
[  479.327324][ T1334] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  479.418390][ T1334] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.452232][ T1334] usb 10-1: config 0 descriptor??
[  479.719978][ T4194] Bluetooth: hci0: unexpected event for opcode 0x0c14
[  479.862991][ T8650] loop1: detected capacity change from 0 to 16
[  479.980877][ T8650] erofs: (device loop1): mounted with root inode @ nid 36.
[  480.066209][ T8628] loop5: detected capacity change from 0 to 32768
[  480.077285][ T8650] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89
[  480.133026][ T8628] XFS (loop5): Mounting V5 Filesystem
[  480.146344][ T4194] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192]
[  480.184321][ T8650] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192]
[  480.273953][   T26] audit: type=1800 audit(1775596428.336:3): pid=8650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.803" name="file3" dev="loop1" ino=89 res=0 errno=0
[  480.560096][ T8628] XFS (loop5): Starting recovery (logdev: internal)
[  480.689918][ T8628] XFS (loop5): Ending recovery (logdev: internal)
[  481.651797][ T8628] overlayfs: conflicting lowerdir path
[  482.227435][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.811'.
[  482.735681][ T7751] usb 10-1: USB disconnect, device number 5
[  483.670334][ T8679] XFS (loop5): User initiated shutdown received.
[  483.916713][ T8679] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:485).  Shutting down filesystem.
[  484.015858][ T8718] xt_TPROXY: Can be used only with -p tcp or -p udp
[  484.241659][ T8679] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  484.406054][ T4540] XFS (loop5): Unmounting Filesystem
[  485.527221][ T8727] device syzkaller0 entered promiscuous mode
[  487.892155][ T8756] 8021q: adding VLAN 0 to HW filter on device bond0
[  487.961908][ T8756] bond0: (slave rose0): Enslaving as an active interface with an up link
[  487.999477][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  488.415190][ T8566] Bluetooth: hci2: command 0x0406 tx timeout
[  489.361114][ T8744] loop9: detected capacity change from 0 to 40427
[  489.489102][ T8744] F2FS-fs (loop9): Unrecognized mount option "errors=continue" or missing value
[  492.386915][ T7762] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  492.680114][ T8823] loop9: detected capacity change from 0 to 512
[  492.855356][ T7762] usb 7-1: device descriptor read/64, error -71
[  493.173536][ T8823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003]
[  493.201137][ T8823] System zones: 1-2, 4-12, 8-8
[  493.296946][ T8823] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.837: iget: bad i_size value: 38620345925642
[  493.361612][ T7762] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  493.402256][ T8823] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.837: couldn't read orphan inode 15 (err -117)
[  493.478554][ T8823] EXT4-fs (loop9): mounted filesystem without journal. Opts: quota,delalloc,data_err=ignore,debug,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[  493.556507][ T7762] usb 7-1: device descriptor read/64, error -71
[  493.681104][ T8855] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.837: bg 0: block 5: invalid block bitmap
[  493.694628][ T7762] usb usb7-port1: attempt power cycle
[  493.775695][ T8855] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 348 with error 28
[  493.838569][ T8855] EXT4-fs (loop9): This should not happen!! Data will be lost
[  493.838569][ T8855] 
[  493.903621][ T8855] EXT4-fs (loop9): Total free blocks count 0
[  493.910017][ T8855] EXT4-fs (loop9): Free/Dirty block details
[  493.925801][ T8855] EXT4-fs (loop9): free_blocks=0
[  493.931168][ T8855] EXT4-fs (loop9): dirty_blocks=364
[  493.938215][ T8855] EXT4-fs (loop9): Block reservation details
[  493.945650][ T8855] EXT4-fs (loop9): i_reserved_data_blocks=364
[  494.190526][ T4386] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 348 with max blocks 16 with error 28
[  494.632124][ T4386] EXT4-fs (loop9): This should not happen!! Data will be lost
[  494.632124][ T4386] 
[  494.851662][ T7762] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  495.021843][ T7762] usb 7-1: device descriptor read/8, error -71
[  496.481348][ T8873] device syzkaller0 entered promiscuous mode
[  498.647363][ T8921] loop8: detected capacity change from 0 to 4096
[  498.689007][ T8921] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512)
[  498.823641][ T8921] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  498.920362][   T26] audit: type=1800 audit(1775596446.976:4): pid=8921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.857" name="file1" dev="loop8" ino=24 res=0 errno=0
[  499.011941][ T8568] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  499.026397][ T8907] loop1: detected capacity change from 0 to 32768
[  499.082445][ T8907] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.853 (8907)
[  499.180169][ T8907] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  499.232071][ T8907] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  499.281865][ T8907] BTRFS info (device loop1): trying to use backup root at mount time
[  499.295635][ T8907] BTRFS info (device loop1): disabling free space tree
[  499.321221][ T8907] BTRFS error (device loop1): cannot disable free space tree
[  499.407434][ T8907] BTRFS error (device loop1): open_ctree failed: -22
[  499.461894][ T8568] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.486384][ T8568] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  499.553807][ T8907] loop1: detected capacity change from 32768 to 0
[  499.701920][ T8568] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  499.719824][ T8568] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.748459][ T8568] usb 7-1: Product: syz
[  499.762681][ T8568] usb 7-1: Manufacturer: syz
[  499.780269][ T8568] usb 7-1: SerialNumber: syz
[  499.811280][ T8568] usb 7-1: config 0 descriptor??
[  501.684277][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  501.690905][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  501.811714][ T8568] usb 7-1: USB disconnect, device number 14
[  501.963247][ T8977] device syzkaller0 entered promiscuous mode
[  504.895720][ T8996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.871'.
[  505.441677][ T7423] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  506.052069][ T7423] usb 6-1: config index 0 descriptor too short (expected 51227, got 27)
[  506.068855][ T7423] usb 6-1: config 24 has too many interfaces: 199, using maximum allowed: 32
[  506.078142][ T7423] usb 6-1: config 24 has an invalid descriptor of length 111, skipping remainder of the config
[  506.096378][ T7423] usb 6-1: config 24 has 0 interfaces, different from the descriptor's value: 199
[  506.261903][ T7423] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  506.280876][ T7423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.306754][ T7423] usb 6-1: Product: syz
[  506.311995][ T7423] usb 6-1: Manufacturer: syz
[  506.316959][ T7423] usb 6-1: SerialNumber: syz
[  506.357394][ T9055] device syzkaller0 entered promiscuous mode
[  506.832652][ T7423] usb 6-1: USB disconnect, device number 17
[  507.592197][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'.
[  511.196887][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.8.885'.
[  513.851653][ T7762] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  514.099446][ T9095] loop8: detected capacity change from 0 to 32768
[  514.240573][ T7762] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  514.438341][ T7762] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  514.474805][ T9095] XFS (loop8): Mounting V5 Filesystem
[  515.289736][ T9095] XFS (loop8): log mount failed
[  515.300959][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.9.897'.
[  515.681808][ T7762] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  516.520495][ T7762] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.528839][ T7762] usb 7-1: Product: syz
[  516.533296][ T7762] usb 7-1: Manufacturer: syz
[  516.538891][ T7762] usb 7-1: SerialNumber: syz
[  516.546169][ T7762] usb 7-1: config 0 descriptor??
[  516.582097][ T7762] usb 7-1: can't set config #0, error -71
[  516.601984][ T7762] usb 7-1: USB disconnect, device number 15
[  517.275348][ T8569] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  517.674915][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'.
[  517.921701][ T8569] usb 6-1: config index 0 descriptor too short (expected 51227, got 27)
[  517.936965][ T8569] usb 6-1: config 24 has too many interfaces: 199, using maximum allowed: 32
[  518.389767][ T8569] usb 6-1: config 24 has an invalid descriptor of length 111, skipping remainder of the config
[  518.411575][ T8569] usb 6-1: config 24 has 0 interfaces, different from the descriptor's value: 199
[  518.611930][ T8569] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  518.641576][ T8569] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.671105][ T8569] usb 6-1: Product: syz
[  518.698528][ T8569] usb 6-1: Manufacturer: syz
[  518.724453][ T8569] usb 6-1: SerialNumber: syz
[  518.831758][ T8569] usb 6-1: can't set config #24, error -71
[  518.843554][ T8569] usb 6-1: USB disconnect, device number 18
[  521.981986][ T8569] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  522.412140][ T8569] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  522.524571][ T8569] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  524.051706][ T8569] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  524.060910][ T8569] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.103562][ T9240] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0
[  524.153967][ T8569] usb 6-1: Product: syz
[  524.158205][ T8569] usb 6-1: Manufacturer: syz
[  524.194916][ T9243] device syzkaller0 entered promiscuous mode
[  524.201069][ T8569] usb 6-1: SerialNumber: syz
[  524.216101][ T8569] usb 6-1: config 0 descriptor??
[  524.815015][ T9227] loop1: detected capacity change from 0 to 32768
[  524.988794][ T9227] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.916 (9227)
[  525.120129][ T9227] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  525.168058][ T9227] BTRFS info (device loop1): using free space tree
[  525.175022][ T9227] BTRFS info (device loop1): has skinny extents
[  525.257990][ T9227] BTRFS info (device loop1): enabling ssd optimizations
[  525.299141][ T9253] loop6: detected capacity change from 0 to 32768
[  525.361748][ T9253] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.922 (9253)
[  525.397717][ T9253] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  525.422923][ T9253] BTRFS info (device loop6): setting nodatacow, compression disabled
[  525.432438][ T9253] BTRFS info (device loop6): setting datasum, datacow enabled
[  525.440210][ T9253] BTRFS info (device loop6): force clearing of disk cache
[  525.448395][ T9253] BTRFS info (device loop6): enabling disk space caching
[  525.456251][ T9253] BTRFS info (device loop6): turning on sync discard
[  525.463612][ T9253] BTRFS info (device loop6): turning off barriers
[  525.470230][ T9253] BTRFS info (device loop6): enabling auto defrag
[  525.478793][ T9253] BTRFS info (device loop6): enabling ssd optimizations
[  525.512359][ T9253] BTRFS info (device loop6): using spread ssd allocation scheme
[  525.522308][ T9253] BTRFS info (device loop6): not using ssd optimizations
[  525.531036][ T9253] BTRFS info (device loop6): not using spread ssd allocation scheme
[  525.539928][ T9253] BTRFS info (device loop6): enabling ssd optimizations
[  525.547598][ T9253] BTRFS info (device loop6): using spread ssd allocation scheme
[  525.555786][ T9253] BTRFS info (device loop6): disk space caching is enabled
[  525.563758][ T9253] BTRFS info (device loop6): has skinny extents
[  525.666080][ T9253] BTRFS info (device loop6): clearing free space tree
[  525.675397][ T9253] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  525.753410][ T9253] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  525.754161][ T7754] usb 6-1: USB disconnect, device number 19
[  526.878174][ T9261] loop8: detected capacity change from 0 to 32768
[  526.946671][ T9261] BTRFS warning: duplicate device /dev/loop8 devid 1 generation 8 scanned by syz.8.923 (9261)
[  527.030914][   T26] audit: type=1800 audit(1775596475.086:5): pid=9253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.922" name="file1" dev="loop6" ino=260 res=0 errno=0
[  527.255971][ T4384] BTRFS warning: duplicate device /dev/loop8 devid 1 generation 8 scanned by udevd (4384)
[  527.347168][ T9253] BTRFS info (device loop6): balance: start -sconvert=raid0,soft
[  527.535472][ T6040] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (6040)
[  527.548612][ T9253] BTRFS info (device loop6): relocating block group 1048576 flags system
[  527.899477][ T9253] BTRFS info (device loop6): balance: ended with status: 0
[  528.116913][ T9318] loop9: detected capacity change from 0 to 32768
[  528.192064][ T9318] BTRFS warning: duplicate device /dev/loop9 devid 1 generation 8 scanned by syz.9.926 (9318)
[  528.398441][ T4277] BTRFS warning: duplicate device /dev/loop9 devid 1 generation 8 scanned by udevd (4277)
[  530.812446][ T9342] device syzkaller0 entered promiscuous mode
[  533.170333][ T9362] autofs4:pid:9362:autofs_fill_super: called with bogus options
[  537.792160][ T4174] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  538.568623][ T4174] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  538.664839][ T4174] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  538.729966][ T4174] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  539.911643][ T4174] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  540.081755][ T4174] usb 10-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  540.091121][ T4174] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.118668][ T4174] usb 10-1: Product: syz
[  540.137362][ T4174] usb 10-1: Manufacturer: syz
[  540.153008][ T4174] usb 10-1: SerialNumber: syz
[  540.166804][ T4174] usb 10-1: config 0 descriptor??
[  540.233074][ T4174] ums-isd200 10-1:0.0: USB Mass Storage device detected
[  541.214669][ T4174] scsi host1: usb-storage 10-1:0.0
[  541.611772][ T4174] usb 10-1: USB disconnect, device number 6
[  544.411694][ T4174] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  545.601748][ T4174] usb 10-1: device descriptor read/all, error -71
[  546.076322][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.9.960'.
[  547.050559][ T9486] binder: 9485:9486 ioctl c0306201 200000000280 returned -14
[  549.663488][  T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.838420][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.239304][ T4386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.248342][ T4386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.269178][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.280150][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.311852][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.404754][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.223213][ T4355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.855453][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.522933][ T4340] net_ratelimit: 15 callbacks suppressed
[  555.522952][ T4340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.854624][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.898399][ T7760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.907049][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.916403][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.993299][ T9543] binder: 9542:9543 ioctl c0306201 200000000280 returned -14
[  556.582192][ T9547] device syzkaller0 entered promiscuous mode
[  557.243651][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.562656][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.712763][  T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.724975][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.747066][ T4733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.681287][ T7419] net_ratelimit: 4 callbacks suppressed
[  561.681305][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.821993][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.728481][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.143705][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  563.182635][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  563.843835][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.855404][ T9604] binder: 9603:9604 ioctl c0306201 200000000280 returned -14
[  564.986215][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.054018][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.271708][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.352770][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.426652][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.8.998'.
[  568.064604][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.623576][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.642448][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.398906][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.071429][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.022339][ T7419] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  573.108683][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.170256][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1009'.
[  573.252196][ T7419] usb 7-1: device descriptor read/64, error -71
[  573.592083][ T7419] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  575.005174][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.016811][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.495377][ T4386] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.611937][ T4386] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.878466][ T4386] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.974957][ T4386] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.031397][ T9673] chnl_net:caif_netlink_parms(): no params data found
[  576.174705][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.182933][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.248032][ T6082] Bluetooth: hci4: command 0x0409 tx timeout
[  577.500947][ T9673] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.610852][ T9673] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.662728][ T9673] device bridge_slave_0 entered promiscuous mode
[  577.749893][ T9673] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.780849][ T9673] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.798714][ T9673] device bridge_slave_1 entered promiscuous mode
[  578.015687][ T9673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  578.052369][ T8540] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  578.070220][ T9673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.127634][ T7758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.226600][ T9673] team0: Port device team_slave_0 added
[  578.233154][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.251937][ T8540] usb 6-1: device descriptor read/64, error -71
[  578.296964][ T9673] team0: Port device team_slave_1 added
[  578.354965][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_0
[  578.388246][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  578.436065][ T9673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  578.531719][ T8540] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  578.734379][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_1
[  578.770543][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  578.797880][ T8540] usb 6-1: device descriptor read/64, error -71
[  578.922186][ T8540] usb usb6-port1: attempt power cycle
[  579.683628][ T8540] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  580.562044][ T8540] usb 6-1: device descriptor read/8, error -71
[  580.660118][ T9673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  580.763635][ T8539] Bluetooth: hci4: command 0x041b tx timeout
[  581.172397][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.191976][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.201832][ T7758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.925494][ T9673] device hsr_slave_0 entered promiscuous mode
[  581.977800][ T9673] device hsr_slave_1 entered promiscuous mode
[  582.039817][ T9673] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  582.067666][ T9673] Cannot create hsr debugfs directory
[  582.275685][ T8540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.541802][ T7760] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  582.971742][ T7760] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959
[  583.016792][ T8540] Bluetooth: hci4: command 0x040f tx timeout
[  583.626723][ T7760] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  583.775600][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.371829][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.431736][ T7760] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  584.446844][ T7760] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.460344][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1027'.
[  584.483406][ T7760] usb 7-1: Product: syz
[  584.496358][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1032'.
[  584.513751][ T7760] usb 7-1: Manufacturer: syz
[  584.521558][ T7760] usb 7-1: SerialNumber: syz
[  584.853945][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.001087][ T7760] usb 7-1: config 0 descriptor??
[  585.041959][ T9753] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  585.101635][ T8539] Bluetooth: hci4: command 0x0419 tx timeout
[  585.155911][ T8539] usb 7-1: USB disconnect, device number 18
[  585.902599][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.950706][ T8540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.092201][ T4386] IPVS: stopping master sync thread 5487 ...
[  587.474171][ T7751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.893193][ T4386] device hsr_slave_0 left promiscuous mode
[  587.914630][ T4386] device hsr_slave_1 left promiscuous mode
[  587.974428][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  588.008034][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.025894][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0
[  588.054894][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  588.078246][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_1
[  588.101002][ T9804] binder_alloc: 9803: binder_alloc_buf, no vma
[  588.110103][ T4386] device bridge_slave_1 left promiscuous mode
[  588.120471][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.152953][ T4386] device bridge_slave_0 left promiscuous mode
[  588.168916][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.250669][ T4386] device veth1_macvtap left promiscuous mode
[  588.396050][ T4386] device veth0_macvtap left promiscuous mode
[  588.402541][ T4386] device veth1_vlan left promiscuous mode
[  588.409529][ T4386] device veth0_vlan left promiscuous mode
[  589.292280][ T8540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.731669][ T7751] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  589.891663][ T7758] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  590.090790][ T4386] team0 (unregistering): Port device team_slave_1 removed
[  590.101956][ T7751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  590.121605][ T7751] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  590.151165][ T7751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  590.162252][ T7751] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  590.185590][ T4386] team0 (unregistering): Port device team_slave_0 removed
[  590.256277][ T4386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  590.265771][ T7758] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959
[  590.282034][ T7758] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  590.316591][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.331919][ T7751] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  590.385745][ T7751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.396847][ T7751] usb 6-1: Product: syz
[  590.403496][ T7751] usb 6-1: Manufacturer: syz
[  590.413437][ T7751] usb 6-1: SerialNumber: syz
[  590.442205][ T4386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  590.461693][ T7758] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  590.472126][ T7751] usb 6-1: config 0 descriptor??
[  590.477558][ T7758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.498536][ T7758] usb 7-1: Product: syz
[  590.503581][ T7758] usb 7-1: Manufacturer: syz
[  590.522529][ T7751] ums-isd200 6-1:0.0: USB Mass Storage device detected
[  590.540215][ T7758] usb 7-1: SerialNumber: syz
[  590.558103][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.579214][ T7758] usb 7-1: config 0 descriptor??
[  590.611952][ T9816] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  590.622727][ T4174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.469760][ T9814] binder: 9812:9814 ioctl c0306201 200000000280 returned -14
[  591.499558][ T8566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.778151][ T4386] bond0 (unregistering): Released all slaves
[  592.598744][ T9830] 9pnet_virtio: no channels available for device syz
[  592.611624][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.802317][ T4235] usb 7-1: USB disconnect, device number 19
[  593.092682][ T7751] scsi host1: usb-storage 6-1:0.0
[  593.111021][ T7751] usb 6-1: USB disconnect, device number 25
[  593.218293][ T9673] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  593.671986][ T7760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.993878][ T9673] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  594.005419][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.165009][ T9673] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  594.272832][ T9673] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  596.800579][ T7758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.833292][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.046789][ T8540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.055004][ T9673] 8021q: adding VLAN 0 to HW filter on device bond0
[  598.127647][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  598.153013][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  598.243714][ T9673] 8021q: adding VLAN 0 to HW filter on device team0
[  598.286618][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  598.311972][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  598.331663][ T4733] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  598.353591][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  598.360893][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  598.427631][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  598.461168][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  598.510901][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  598.554495][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state
[  598.561760][ T4253] bridge0: port 2(bridge_slave_1) entered forwarding state
[  598.634240][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  598.672526][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  598.717877][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  598.751885][ T4733] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959
[  598.765898][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  598.782895][ T4733] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  598.800993][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  598.865980][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  598.899067][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  598.929113][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  598.974529][ T9673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  599.013425][ T4733] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  599.034639][ T4733] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.049056][ T9673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  599.066992][ T4733] usb 10-1: Product: syz
[  599.077145][ T4733] usb 10-1: Manufacturer: syz
[  599.088609][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  599.097452][ T4733] usb 10-1: SerialNumber: syz
[  599.116554][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  599.175059][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  599.288377][ T4733] usb 10-1: config 0 descriptor??
[  599.298931][ T8540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.321923][ T9871] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  599.461731][ T8539] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  599.822361][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.854637][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  599.866037][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  599.900757][ T9673] 8021q: adding VLAN 0 to HW filter on device batadv0
[  600.001847][ T8539] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  600.032849][ T8539] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  600.087270][ T8539] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  600.146419][ T8539] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  600.222053][ T7758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.312051][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.392158][ T8539] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  600.407934][ T8539] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.434028][ T8539] usb 6-1: Product: syz
[  600.450976][ T8539] usb 6-1: Manufacturer: syz
[  600.476064][ T8539] usb 6-1: SerialNumber: syz
[  600.495670][ T8539] usb 6-1: config 0 descriptor??
[  600.542748][ T8539] ums-isd200 6-1:0.0: USB Mass Storage device detected
[  600.698746][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  600.721044][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  600.803780][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  600.825213][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  600.859070][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  600.889881][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  600.909017][ T9673] device veth0_vlan entered promiscuous mode
[  600.955107][ T9888] binder: 9886:9888 ioctl c0306201 200000000280 returned -14
[  600.965497][ T9673] device veth1_vlan entered promiscuous mode
[  601.005503][ T8539] scsi host1: usb-storage 6-1:0.0
[  601.025379][ T8539] usb 6-1: USB disconnect, device number 26
[  601.093470][ T6082] usb 10-1: USB disconnect, device number 9
[  601.142496][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  601.152877][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  601.257941][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  601.285308][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  601.316850][ T9673] device veth0_macvtap entered promiscuous mode
[  601.347290][ T8566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.368138][ T9673] device veth1_macvtap entered promiscuous mode
[  601.502006][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  601.735463][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.924953][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  602.101186][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.135445][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  602.146802][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.156819][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  602.168407][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.180685][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_0
[  602.191077][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  602.222804][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.251695][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  602.296557][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.388649][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  602.402154][ T8540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.427702][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.451542][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  602.477634][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.521927][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_1
[  602.610400][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  602.653977][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  602.783962][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  602.915737][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  602.935411][ T9905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  603.068022][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  603.236085][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  603.413729][ T9673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  603.535517][ T9673] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  603.677937][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.731408][ T9673] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  603.885229][ T9673] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  604.059427][ T4733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.139106][ T8569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.709907][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  605.738636][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  605.796229][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  605.834290][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  605.872451][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  605.898717][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  606.161587][ T9932] infiniband syz1: set active
[  606.187924][ T9932] infiniband syz1: added syz_tun
[  606.305024][ T4733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.234959][ T9932] infiniband syz1: Couldn't open port 1
[  607.245998][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.392623][ T4733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.542628][ T9932] RDS/IB: syz1: added
[  607.547703][ T9932] smc: adding ib device syz1 with port count 1
[  607.592032][ T9932] smc:    ib device syz1 port 1 has pnetid 
[  608.151712][ T7760] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  608.241709][ T4733] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  609.036725][ T8539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.271957][ T7760] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959
[  609.301602][ T7760] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  609.391786][ T4733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  609.431533][ T4733] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  609.476615][ T4733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  609.502281][ T7760] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  609.513286][ T7760] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.513862][ T4733] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  609.742662][ T4733] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  609.769085][ T4733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.171613][ T4733] usb 5-1: Product: syz
[  610.192634][ T7760] usb 7-1: Product: syz
[  610.196873][ T7760] usb 7-1: Manufacturer: syz
[  610.202195][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1075'.
[  610.221762][ T7760] usb 7-1: SerialNumber: syz
[  610.222105][ T4733] usb 5-1: Manufacturer: syz
[  610.226770][ T4733] usb 5-1: SerialNumber: syz
[  610.257702][ T4733] usb 5-1: config 0 descriptor??
[  610.292442][ T7760] usb 7-1: config 0 descriptor??
[  610.298011][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.306505][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.317251][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.326210][ T9976] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  610.334010][ T4733] ums-isd200 5-1:0.0: USB Mass Storage device detected
[  611.690324][ T8569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.721790][ T4237] usb 7-1: USB disconnect, device number 20
[  611.742803][ T4733] scsi host1: usb-storage 5-1:0.0
[  611.811362][T10020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.820808][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.886641][ T4733] usb 5-1: USB disconnect, device number 2
[  612.990820][T10024] loop6: detected capacity change from 0 to 1024
[  613.012195][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.342637][ T7751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.062268][ T8569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.088488][T10024] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none.
[  614.222722][T10024] 9pnet_virtio: no channels available for device syz
[  614.302220][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.749696][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.479998][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.576970][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1087'.
[  617.133733][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.686193][ T4733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.945131][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1088'.
[  619.277585][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.287111][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.296878][T10069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.429841][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.438816][ T7758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.502964][ T7751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.996935][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.071126][T10067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.081789][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.160922][T10067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.857313][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  624.874424][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  625.550959][ T6476] net_ratelimit: 9 callbacks suppressed
[  625.550976][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.572582][ T7760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.671850][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.972434][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1102'.
[  626.404227][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1103'.
[  626.735518][ T4733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.750356][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.031604][ T4236] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  628.391880][ T4236] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959
[  628.433919][ T4236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  628.596332][T10127] loop6: detected capacity change from 0 to 32768
[  629.304028][ T7758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.322002][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.491696][ T4236] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  629.507407][T10127] ERROR: (device loop6): dtSearch: stack overrun!
[  629.507407][T10127] 
[  629.512233][ T4236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.537658][ T4236] usb 6-1: Product: syz
[  629.546039][T10127] ERROR: (device loop6): remounting filesystem as read-only
[  629.561977][ T4236] usb 6-1: Manufacturer: syz
[  629.577202][ T4236] usb 6-1: SerialNumber: syz
[  629.590296][T10127] btstack dump:
[  629.656017][ T4236] usb 6-1: config 0 descriptor??
[  629.670514][T10127] bn = 0, index = 0
[  629.678716][T10131] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  629.689318][T10127] bn = 72c, index = 96
[  629.710937][T10127] bn = 0, index = 0
[  629.736356][T10127] bn = 72c, index = 96
[  629.760920][T10127] bn = 0, index = 0
[  629.801211][T10127] bn = 72c, index = 96
[  629.831614][T10127] bn = 0, index = 0
[  629.835583][T10127] bn = 0, index = 0
[  629.898559][T10127] general protection fault, probably for non-canonical address 0xdffffc0000000037: 0000 [#1] PREEMPT SMP KASAN
[  629.910516][T10127] KASAN: null-ptr-deref in range [0x00000000000001b8-0x00000000000001bf]
[  629.919077][T10127] CPU: 0 PID: 10127 Comm: syz.6.1106 Not tainted syzkaller #0
[  629.926680][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  629.936783][T10127] RIP: 0010:write_one_page+0x2a6/0x660
[  629.942488][T10127] Code: 04 00 00 00 e8 eb 0d 1d 00 f0 41 ff 06 48 8b 44 24 10 48 8d 98 b8 01 00 00 48 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df <42> 80 3c 28 00 74 08 48 89 df e8 1b 0c 1d 00 48 8b 1b 48 89 d8 48
[  629.962433][T10127] RSP: 0018:ffffc9000345f800 EFLAGS: 00010202
[  629.968659][T10127] RAX: 0000000000000037 RBX: 00000000000001b8 RCX: ffffffff81a12025
[  629.976677][T10127] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea00006af0b4
[  629.984978][T10127] RBP: ffffc9000345f918 R08: ffffea00006af0b7 R09: 1ffffd40000d5e16
[  629.993253][T10127] R10: dffffc0000000000 R11: fffff940000d5e17 R12: ffffea00006af088
[  630.001348][T10127] R13: dffffc0000000000 R14: ffffea00006af0b4 R15: 1ffff9200068bf04
[  630.009440][T10127] FS:  00007f483d6c26c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  630.018494][T10127] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  630.025313][T10127] CR2: 000055d150ac4950 CR3: 000000006934b000 CR4: 00000000003506f0
[  630.033619][T10127] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  630.041629][T10127] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  630.050142][T10127] Call Trace:
[  630.053464][T10127]  <TASK>
[  630.056415][T10127]  ? do_writepages+0x6e0/0x6e0
[  630.061303][T10127]  ? page_mapping+0x30e/0x440
[  630.066151][T10127]  ? set_page_dirty+0x4a5/0x5b0
[  630.071144][T10127]  ? release_metapage+0x357/0xe10
[  630.076426][T10127]  release_metapage+0x654/0xe10
[  630.081331][T10127]  dtSearch+0x1b43/0x2050
[  630.085692][T10127]  ? remove_wait_queue+0x120/0x120
[  630.090842][T10127]  jfs_symlink+0x851/0xfb0
[  630.095337][T10127]  ? jfs_unlink+0xa00/0xa00
[  630.099993][T10127]  ? make_kgid+0x660/0x660
[  630.104452][T10127]  ? apparmor_path_symlink+0x1ac/0x230
[  630.109945][T10127]  ? lookup_one_qstr_excl+0x11c/0x240
[  630.115340][T10127]  ? generic_permission+0x230/0x510
[  630.120570][T10127]  ? inode_permission+0xef/0x480
[  630.125533][T10127]  ? bpf_lsm_inode_symlink+0x5/0x10
[  630.130758][T10127]  ? security_inode_symlink+0xb2/0x100
[  630.136344][T10127]  vfs_symlink+0x247/0x3d0
[  630.140798][T10127]  do_symlinkat+0x1ab/0x6b0
[  630.145412][T10127]  ? vfs_symlink+0x3d0/0x3d0
[  630.150205][T10127]  ? getname_flags+0x1fe/0x500
[  630.155070][T10127]  __x64_sys_symlink+0x7a/0x90
[  630.160028][T10127]  do_syscall_64+0x4c/0xa0
[  630.164489][T10127]  ? clear_bhb_loop+0x30/0x80
[  630.169269][T10127]  ? clear_bhb_loop+0x30/0x80
[  630.174155][T10127]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  630.180068][T10127] RIP: 0033:0x7f483f468819
[  630.184590][T10127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  630.204314][T10127] RSP: 002b:00007f483d6c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  630.212929][T10127] RAX: ffffffffffffffda RBX: 00007f483f6e1fa0 RCX: 00007f483f468819
[  630.220919][T10127] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000001640
[  630.228929][T10127] RBP: 00007f483f4fec91 R08: 0000000000000000 R09: 0000000000000000
[  630.237170][T10127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  630.245167][T10127] R13: 00007f483f6e2038 R14: 00007f483f6e1fa0 R15: 00007fffdc3d40d8
[  630.253368][T10127]  </TASK>
[  630.256736][T10127] Modules linked in:
[  630.391505][T10127] ---[ end trace fc25bda61c5fa014 ]---
[  630.404610][T10127] RIP: 0010:write_one_page+0x2a6/0x660
[  630.433475][ T4733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.445551][T10127] Code: 04 00 00 00 e8 eb 0d 1d 00 f0 41 ff 06 48 8b 44 24 10 48 8d 98 b8 01 00 00 48 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df <42> 80 3c 28 00 74 08 48 89 df e8 1b 0c 1d 00 48 8b 1b 48 89 d8 48
[  630.509566][T10127] RSP: 0018:ffffc9000345f800 EFLAGS: 00010202
[  630.530521][T10127] RAX: 0000000000000037 RBX: 00000000000001b8 RCX: ffffffff81a12025
[  630.571117][T10127] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea00006af0b4
[  630.593068][T10127] RBP: ffffc9000345f918 R08: ffffea00006af0b7 R09: 1ffffd40000d5e16
[  630.611764][T10127] R10: dffffc0000000000 R11: fffff940000d5e17 R12: ffffea00006af088
[  630.632062][T10127] R13: dffffc0000000000 R14: ffffea00006af0b4 R15: 1ffff9200068bf04
[  630.656183][T10127] FS:  00007f483d6c26c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  630.679697][T10127] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  630.696935][T10127] CR2: 000055d150ac4950 CR3: 000000006934b000 CR4: 00000000003506f0
[  630.719364][T10127] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  630.739050][T10127] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  630.759985][T10127] Kernel panic - not syncing: Fatal exception
[  630.766714][T10127] Kernel Offset: disabled
[  630.771061][T10127] Rebooting in 86400 seconds..