last executing test programs:

2m52.900566072s ago: executing program 32 (id=2659):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"})
r5 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4})
connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5a", 0xcd)
r8 = fcntl$dupfd(r6, 0x406, r6)
setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
write$binfmt_elf64(r8, &(0x7f0000000400)=ANY=[@ANYRESOCT=r4, @ANYRES64=r6, @ANYRES16=r8, @ANYRES32=r6, @ANYRESDEC, @ANYRES8=r7, @ANYRES64=r5, @ANYRES64=r5], 0xfffffdcf)
connect$unix(r8, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

2m52.436295088s ago: executing program 1 (id=2670):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a000900000009040100000102300009040101010102300009"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb042, 0x1000, 0x2, 0x122}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16ae, 0x200, 0x0, 0x266}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5eb7, 0x0, 0x2, 0x1b6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7126, 0x8000, 0x0, 0x147}}], 0x4, &(0x7f0000002b00)={0x2e, 0x2a, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff7}, 0x0, 0x0, '\x00', {0x0, 0xc56, 0x0, &(0x7f0000001b00)=@buf_max_buf="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"}}, &(0x7f0000002b80))
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e8030000202000"/56}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl(r4, 0x4048aecb, &(0x7f0000000200)="0100"/71)
ioctl(r4, 0xc048aeca, &(0x7f0000000300)="0100"/72)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'nicvf0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x16, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x2c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x7, 0x6, 0x7, 0x10, 0x1e, 0x17, 0x4}}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x7f, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x58}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})

2m51.995611124s ago: executing program 0 (id=2673):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a000900000009040100000102300009040101010102300009"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb042, 0x1000, 0x2, 0x122}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16ae, 0x200, 0x0, 0x266}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5eb7, 0x0, 0x2, 0x1b6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7126, 0x8000, 0x0, 0x147}}], 0x4, &(0x7f0000002b00)={0x2e, 0x2a, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff7}, 0x0, 0x0, '\x00', {0x0, 0xc56, 0x0, &(0x7f0000001b00)=@buf_max_buf="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"}}, &(0x7f0000002b80))
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e8030000202000"/56}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl(r4, 0x4048aecb, &(0x7f0000000200)="0100"/71)
ioctl(r4, 0xc048aeca, &(0x7f0000000300)="0100"/72)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'nicvf0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x16, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x2c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x7, 0x6, 0x7, 0x10, 0x1e, 0x17, 0x4}}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x7f, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x58}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, 0x0)

2m50.17615886s ago: executing program 1 (id=2675):
syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmmsg(r1, 0x0, 0x0, 0x88c3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x5400032e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7})
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0)
r8 = memfd_secret(0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}})
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590)

2m48.934084995s ago: executing program 3 (id=2678):
r0 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[], 0x0}, 0x94)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x148}}, 0x4810)
getsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0)
setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x4)
write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffffffffffe44)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x239f, &(0x7f0000000380)=<r4=>0x0)
io_submit(r4, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r3, 0x0}])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x54, r6, 0x113, 0x0, 0x400, {0x41}, [{@nsim={{0xe}, {0xffffffffffffff08, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x87}, {0xc}, {0xc}}]}, 0x54}}, 0x800)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x3}}, 0x1c}}, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00')
read$FUSE(r7, &(0x7f0000000500)={0x2020}, 0x2020)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002540)={r10, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
keyctl$search(0xa, 0x0, &(0x7f0000000540)='keyring\x00', 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@getlink={0x20, 0x12, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x2000a004}, 0x40010)

2m48.20188359s ago: executing program 3 (id=2679):
pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00')
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x2, 0xa}}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
pread64(r5, &(0x7f0000000780)=""/185, 0xb9, 0x3c)
connect$inet(r5, &(0x7f00000005c0)={0x2, 0x4e21, @local}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88fb}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa00}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x1d, 0x7, 0x1, 0x0, "429e25552e9e1563eb6052dc94f4b2d86841e9b28c1c84619b"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r4, r2, 0x21, 0x10, 0x0, @void, @value=r2}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r3}, 0x38)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r1, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e21, 0x104, @loopback, 0x1}, @ib={0x1b, 0x40, 0x80000001, {"b35e601d9833f3973863a02ebc5b5dd3"}, 0x4, 0x7, 0x3663}}}, 0x118)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x20002)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0x80804120, &(0x7f00000022c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r9, 0xffffffffffffffff, 0x0)

2m48.040348477s ago: executing program 3 (id=2680):
r0 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r1, 0x0, 0x0)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x27, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x7, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff7, 0x2, 0x80000000, 0x3, 0xfffffffe, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x2, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x7, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x80000001, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0xffffffff, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x67, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x3, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f6, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x6, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x6, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000900000084"], 0x48)
r3 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000000c0)=0x4, 0x4)
readv(r0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/63, 0x3f}], 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
utimensat(r6, 0x0, 0x0, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc08c5334, &(0x7f0000000300)={0x0, 0x8, 0x0, 'queue0\x00', 0x2})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r2}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x5, r2}, 0x38)
r8 = syz_ublk_setup_io_uring(0x223e, &(0x7f0000000200)={0x0, 0x7442, 0x21a0, 0x0, 0x3c1, 0x0, r1}, &(0x7f0000000340), &(0x7f00000002c0), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_NAPI(r8, 0x1b, &(0x7f0000000740)={0x1, 0xfb, 0x2, '\x00', 0xd}, 0x1)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
pwritev2(r6, &(0x7f0000003000)=[{&(0x7f0000000640)="216f18c2fb78c2decd103dcab47928008333082b3ff84d7cd155dd5b7845c40764f9a20e9a3b9063edebe1b55582527fc5f423f42e", 0x35}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="81dc42a38914665cd3a86181ef910c93a624b6c9535786bd1dc24cfd75dddf91018598f90e8fb271b5dcbbc2d83ab1104af26d71b5037dd856d78c0afa8c28260706d1fedc568cc9fe14973aaa22ffb0098878a019eec0d3e221104cd8f0ff83b1bb2701738f0d09aeeb8568", 0x6c}, {&(0x7f0000002e80)="53b9effd62861d097105e84bdda4a0d8fd7a40099fd8d3852f0c5c6b32e1b01d091dc962b04e5392b46312e87ac24887287b4a3cde031918b982e0a721b3cd0109a26bc046b72e7f9e16f3da6fedb82fcb5df6a8", 0x54}, {&(0x7f0000002f00)="92640d5ce515476e25d9d84d176d8fdbc6b08057545e6430308fdf2fe60dc1f0823faa5539a33d0f0bf772e396f876455a1c6b9759f669d98dbd072c6317264e8fa7ae2fb0f11b1c7600d9e6a8340e036fc4aac66fa7c9d214d6bdc3bc432e8169b105b3a862380165827266ee4f5109931830883c251098d131de7d7e56aef9f69d6c0ce594007f354f8390ddd5570759138a1f7d219dc25366ed244635335c50135d8613b9a4c3f724e3c2c04a0ea4bb376984021c55155efc427c8decffbab1376ab60cce52cfb09073c6c1984cdfdb8643dcf076e07fdc56b35b01cb36e2b58a1efdd050e3994e", 0xe9}], 0x5, 0xb, 0x4, 0x6)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_ENABLE={{}, 0x1}}}, 0x7)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000009060104000000000000000000000006400008800c0007800500070021000000100007800c001b800a0011000000000000000000100007800a0011007b7ab6bcffb30000104000000000000000080000000000000000000000000000000000004b50eab23893fede3b54e94b84f31dd88c17a2a6c9"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x81)

2m48.032937419s ago: executing program 4 (id=2669):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x350, 0x3d8, 0x3d8, 0x350, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1dc, 0x244, 0x0, {}, [@common=@rt={{0x138}, {0x6, [0x400, 0x9], 0x1109442d, 0x2, 0x7, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x40}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @local, @rand_addr=' \x01\x00', @private0, @private1, @local, @empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback], 0xfc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xb, 0x911, 0x0, 0x5, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0x0, 0xff, 0xffffffff], [0xff, 0xff000000, 0x0, 0xff000000], 'netdevsim0\x00', 'ip_vti0\x00', {}, {0xff}, 0x21, 0xf4, 0x0, 0x5}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1d, 0x0, 0xfffffffc, 0x0, 'syz1\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x474)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf25210000000c000500000800000000000009001f0070687931000000000a0001007770616e33000000050020"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x64008000)
r5 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7})
recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
stat64(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000092d40000ffffffea000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYBLOB="000000000000f2ffb70300000000000a850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14010000300001000000000004000000010100800c00010002"], 0x114}], 0x1}, 0x0)

2m42.581844663s ago: executing program 4 (id=2681):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r3, 0x7}, &(0x7f0000000200)=0x8)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r7}, 0x38)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)

2m42.581442937s ago: executing program 3 (id=2682):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0)
sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8011}, 0x4051)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x9}}, './my_configfs/usb_gadget/g1/functions/uvc.usb0\x00'})
ioctl$VIDIOC_S_EDID(r2, 0xc0245629, &(0x7f0000000240)={0x0, 0x6, 0xc93, '\x00', &(0x7f00000001c0)=0xe})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000)
write(r5, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000080000000102020000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100"/28], 0x50)
writev(0xffffffffffffffff, 0x0, 0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00')
ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r3, 0x6f44, 0xb5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ef)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff)
symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00')

2m42.578425143s ago: executing program 0 (id=2689):
socket$inet(0x2, 0x2, 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10})
syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
pwritev(r4, &(0x7f00000001c0)=[{&(0x7f0000000180)="ee", 0x1}], 0x1, 0xffff, 0x3)
syz_io_uring_submit(0x0, 0x0, r3, &(0x7f00000005c0)=@IORING_OP_OPENAT2={0x1c, 0x20, 0x0, r4, &(0x7f0000000540)={0x200, 0x0, 0x25}, &(0x7f0000000580)='./file0\x00', 0x18, 0x0, 0x23456})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7df6165dc7f832e06000000ff4a70f3"}, 0x4000c, 0x5})
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r7, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0)
preadv(r5, &(0x7f0000003000)=[{&(0x7f00000014c0)=""/31, 0x1f}, {&(0x7f0000001500)=""/52, 0x34}, {0x0}], 0x3, 0x4, 0x8001)
eventfd(0xfffffff9)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {0x0, 0x27}], 0x2)
ioctl$BLKFRAGET(r6, 0x1265, &(0x7f00000002c0))
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc)
r11 = shmget$private(0x0, 0x800000, 0x800, &(0x7f0000173000/0x800000)=nil)
shmat(r11, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)

2m42.571985812s ago: executing program 1 (id=2683):
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x44842, 0x1ef)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="44010000100001002bbc700000000004fe800000000000000000200000000020ac14144300000000000000000000000000000008000300010a006000002d21d2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}}, 0x4050)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0ca93082f25d87755f4", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000000000008001b0000000000"], 0x3b}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0)
sendfile(r6, r6, 0x0, 0x8)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x0)
write(r7, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r8, &(0x7f00000091c0)=""/16384, 0x4000)

2m39.359845216s ago: executing program 0 (id=2684):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x500, 0x100)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000f81fc13c7ec7095ca6ff908a15f8af2391", @ANYRESHEX=r2, @ANYRES64], 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x8a, 0x8, 0x4}, 0x9c)
write$dsp(r1, 0x0, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000180)=0x4)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0x40045010, &(0x7f0000000080))
ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0)
fcntl$notify(r0, 0x402, 0x34)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

2m39.076258425s ago: executing program 3 (id=2685):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, 0x0, 0x880)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000020000000000006bb55a2a630bf7c045f9", 0x15, 0xffffffffffffffff)
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000540)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
ioctl$FIONREAD(r6, 0x80047456, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01000003000000020000c2ec614205c8b493"], &(0x7f0000000300)=""/133, 0x27, 0x85, 0x1, 0x1}, 0x28)
r7 = syz_io_uring_setup(0x20dc, &(0x7f0000000040)={0x0, 0x800000, 0x800, 0x0, 0xfffffffe}, &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000400)=<r10=>0x0)
openat(r5, &(0x7f0000000200)='./file0\x00', 0x2642, 0xcc)
io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001500)=""/4106, 0x100a}], 0x0}, 0x20)
syz_io_uring_submit(r8, r9, r10, &(0x7f0000000600)=@IORING_OP_READV_FIXED={0x3c, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0)
r11 = fcntl$dupfd(r0, 0x406, r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r11)

2m39.021051821s ago: executing program 1 (id=2686):
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f00000000c0)={0x1, "88f1a5cba41c8af902c6226cc92604e5cd02b679c0eaa5a869f54557f879cff5", 0x3, 0x8, 0x9, 0x20, 0x8})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
sendto$inet6(r7, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)

2m38.982254555s ago: executing program 4 (id=2687):
r0 = syz_open_dev$cec(0x0, 0x0, 0x103000)
r1 = epoll_create1(0x80000)
syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x200f})
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r3 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000240))
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000540)={'\x00', 0x6, 0x7, 0x1, 0x50, 0x47, r4})
syz_clone3(&(0x7f00000005c0)={0x1a000200, 0x0, 0x0, 0x0, {0x34}, &(0x7f0000000400)=""/27, 0x1b, 0x0, &(0x7f0000000580)}, 0x58)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02)
ioctl$CEC_TRANSMIT(r8, 0xc0386105, 0x0)

2m38.57466173s ago: executing program 0 (id=2688):
r0 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[], 0x0}, 0x94)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x148}}, 0x4810)
getsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0)
setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x4)
write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffffffffffe44)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x239f, &(0x7f0000000380)=<r4=>0x0)
io_submit(r4, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r3, 0x0}])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x54, r6, 0x113, 0x0, 0x400, {0x41}, [{@nsim={{0xe}, {0xffffffffffffff08, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x87}, {0xc}, {0xc}}]}, 0x54}}, 0x800)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x3}}, 0x1c}}, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00')
read$FUSE(r7, &(0x7f0000000500)={0x2020}, 0x2020)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002540)={r10, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
keyctl$search(0xa, 0x0, &(0x7f0000000540)='keyring\x00', 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@getlink={0x20, 0x12, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x2000a004}, 0x40010)

2m38.469787376s ago: executing program 3 (id=2690):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getgid()
sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005940)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r2, r1]}}, @cred={{0x18, 0x1, 0x2, {r0, 0x0, r3}}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}], 0x4c, 0x4000010}, 0x4840)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x3}, 0x50)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
chdir(&(0x7f0000000100)='./file0\x00')
unlink(&(0x7f00000002c0)='./file0\x00')
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2d)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="3bd900000a00462000000407ff0200000000000000000000000000017f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007"], 0x8c)
socket$packet(0x11, 0x3, 0x300)

2m37.853628603s ago: executing program 0 (id=2691):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x350, 0x3d8, 0x3d8, 0x350, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1dc, 0x244, 0x0, {}, [@common=@rt={{0x138}, {0x6, [0x400, 0x9], 0x1109442d, 0x2, 0x7, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x40}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @local, @rand_addr=' \x01\x00', @private0, @private1, @local, @empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback], 0xfc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xb, 0x911, 0x0, 0x5, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0x0, 0xff, 0xffffffff], [0xff, 0xff000000, 0x0, 0xff000000], 'netdevsim0\x00', 'ip_vti0\x00', {}, {0xff}, 0x21, 0xf4, 0x0, 0x5}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1d, 0x0, 0xfffffffc, 0x0, 'syz1\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x474)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf25210000000c000500000800000000000009001f0070687931000000000a0001007770616e33000000050020"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x64008000)
r5 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7})
recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
stat64(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000092d40000ffffffea000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYBLOB="000000000000f2ffb70300000000000a850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14010000300001000000000004000000010100800c00010002"], 0x114}], 0x1}, 0x0)

2m34.978370872s ago: executing program 1 (id=2692):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff}}, './sys/bus/pci/drivers/lpc_ich/new_id\x00'})
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000940)={{r0}, "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"})
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/comedi2\x00', 0x400, 0x0)
preadv2(r2, &(0x7f0000002d00)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0xa, 0xb4c, 0x1000000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 b', 0x29)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x400, 0x0, 0x9, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0x9, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0xfff2}, {0xfff3, 0xffff}, {0x7671693a61b9ff27, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, r3, 0x28f41000)
read(r1, &(0x7f0000000180)=""/145, 0x91)
r7 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xd, 0x13, r7, 0x0)
ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000, 0x1})
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r8, &(0x7f0000000000)='7', 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$packet(0x11, 0x3, 0x300)

2m34.29334082s ago: executing program 1 (id=2693):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='base=', 0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r6 = epoll_create1(0x80000)
r7 = epoll_create1(0x0)
socket(0xa, 0x3, 0x3a)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1f4, r6, &(0x7f0000000000)={0xa0000001})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20020800}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x4c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f00000001c0))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r5, 0x0, 0x25, 0x5, @val=@netfilter={0xa, 0x0, 0xd}}, 0x20)

2m33.803337365s ago: executing program 0 (id=2694):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000100)=0x7, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xac, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@x25={0x805, {0x1, 0x6, 0x27, "59ac4598d01b95aa4eba4c5b229c0dbd2b15ac347f24a91be1338a88e9bddd23ab14c0d5eeefb07045d980357d6b457c45bf6677eb252217ab0327b57a7141bf766cbbb3c86e41b68a4f90ea7e7d307f2c822e1456c5b37a5c7a37978567579d935243d7b037efabf79239aa0e160f7fac1a41e0f0a8235e1d96a4173e7ed358413b59c743e442bbf5911561ffbe3b7f6018bd93826dc3db74d05c"}}}}, 0x0)
recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x801, @local, 0x200}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000440))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r7, &(0x7f0000004000)=""/4099, 0x1003)
socket(0x1e, 0x1, 0x8)

2m31.082227366s ago: executing program 4 (id=2695):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_pidfd_open(r1, 0x0)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100)
ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xfffffffd}}]}}, 0x0, 0x4e}, 0x20)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r4, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0')
bind$x25(r4, &(0x7f0000000080), 0x12)
connect$x25(r4, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000340)='hybla', 0x5)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000})
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
r8 = socket(0x15, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000))
bind$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0xffffff62)
listen(r7, 0x0)
connect$vsock_stream(r7, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x9801, 0x802}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x13}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @loopback}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x84)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100039040200"/20, @ANYRES32=r2, @ANYBLOB="40103203b044ef1d280000000c8b47e316040012800898d870af107800fbe76672fe"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x400c001)

2m30.924866551s ago: executing program 4 (id=2696):
r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x0, 0x2c1})
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x1, 0x10000, 0x3, 0x40, 0x0, 0x5, 0x7, 0xc, 0x30, 0xe, [0x2, 0x1, 0x1ff, 0xec96, 0x5, 0xffffff7f, 0x6, 0x1]}})
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1})
syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r3=>0x0, 0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f00000002c0)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0xc, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300))
syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2)
r12 = gettid()
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000000140))
syz_io_uring_submit$UBLK(0x0, 0x0, r4, &(0x7f00000001c0)=@ublk_start_dev_sqe={0x2e, 0x10, 0x0, r1, 0xc0207506, 0x0, 0x0, 0x0, 0x1, 0x40ca, 0x0, r5, '\x00', {r11, 0xffff, 0x0, 0x0, r12}})
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r13, 0x6, 0x21, &(0x7f0000000240)="98750f50aade73db0f0100008005f4ea", 0x10)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r13, 0x6, 0x21, &(0x7f0000000000)="439e10b5498d94e3c3750f4f4afdc6b3", 0x10)
r14 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r15 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r14, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r14, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
sendmsg$inet(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}, 0x5)
recvmsg$unix(r16, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2)
recvmsg$unix(r16, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082)
close_range(r0, 0xffffffffffffffff, 0x0)

2m30.613178438s ago: executing program 4 (id=2697):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00')
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect(r0, &(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x87d4b69a72310a97)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x17c, 0x17c, 0x210, 0x2a4, 0xdc, 0x344, 0x344, 0x344, 0x344, 0x344, 0x6, 0x0, {[{{@ip={@private=0xa010102, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0xa4, 0x1}, 0x0, 0xa8, 0xdc, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x2}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x0, 0x6, 0x1}, {0xffffffffffffffff, 0x2, 0x7}, 0x4, 0x9}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'gretap0\x00', 'pim6reg\x00', {0xff}, {}, 0x36, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010103, @loopback, 0xffffffff, 0xff000000, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x434)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
process_vm_writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000d40)=""/149, 0x95}], 0x6, &(0x7f0000001240)=[{&(0x7f0000000e40)=""/85, 0x55}, {&(0x7f0000000ec0)=""/105, 0x69}, {&(0x7f0000000f40)=""/187, 0xbb}, {&(0x7f0000001000)=""/192, 0xc0}, {&(0x7f00000010c0)=""/144, 0x90}, {0x0}], 0x6, 0x0)
r6 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x8000002, 0xc1, &(0x7f000000cf3d)=""/193, 0x41100, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000000)=""/8, 0x8, 0x1, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10)
tkill(r6, 0xb)

2m23.027561308s ago: executing program 33 (id=2690):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getgid()
sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005940)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r2, r1]}}, @cred={{0x18, 0x1, 0x2, {r0, 0x0, r3}}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}], 0x4c, 0x4000010}, 0x4840)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x3}, 0x50)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
chdir(&(0x7f0000000100)='./file0\x00')
unlink(&(0x7f00000002c0)='./file0\x00')
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2d)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="3bd900000a00462000000407ff0200000000000000000000000000017f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007"], 0x8c)
socket$packet(0x11, 0x3, 0x300)

2m18.876615401s ago: executing program 34 (id=2694):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000100)=0x7, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xac, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@x25={0x805, {0x1, 0x6, 0x27, "59ac4598d01b95aa4eba4c5b229c0dbd2b15ac347f24a91be1338a88e9bddd23ab14c0d5eeefb07045d980357d6b457c45bf6677eb252217ab0327b57a7141bf766cbbb3c86e41b68a4f90ea7e7d307f2c822e1456c5b37a5c7a37978567579d935243d7b037efabf79239aa0e160f7fac1a41e0f0a8235e1d96a4173e7ed358413b59c743e442bbf5911561ffbe3b7f6018bd93826dc3db74d05c"}}}}, 0x0)
recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x801, @local, 0x200}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000440))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r7, &(0x7f0000004000)=""/4099, 0x1003)
socket(0x1e, 0x1, 0x8)

2m18.848140174s ago: executing program 35 (id=2693):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='base=', 0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r6 = epoll_create1(0x80000)
r7 = epoll_create1(0x0)
socket(0xa, 0x3, 0x3a)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1f4, r6, &(0x7f0000000000)={0xa0000001})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20020800}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x4c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f00000001c0))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r5, 0x0, 0x25, 0x5, @val=@netfilter={0xa, 0x0, 0xd}}, 0x20)

2m15.31999756s ago: executing program 36 (id=2697):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00')
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect(r0, &(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x87d4b69a72310a97)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x17c, 0x17c, 0x210, 0x2a4, 0xdc, 0x344, 0x344, 0x344, 0x344, 0x344, 0x6, 0x0, {[{{@ip={@private=0xa010102, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0xa4, 0x1}, 0x0, 0xa8, 0xdc, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x2}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x0, 0x6, 0x1}, {0xffffffffffffffff, 0x2, 0x7}, 0x4, 0x9}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'gretap0\x00', 'pim6reg\x00', {0xff}, {}, 0x36, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010103, @loopback, 0xffffffff, 0xff000000, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x434)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
process_vm_writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000d40)=""/149, 0x95}], 0x6, &(0x7f0000001240)=[{&(0x7f0000000e40)=""/85, 0x55}, {&(0x7f0000000ec0)=""/105, 0x69}, {&(0x7f0000000f40)=""/187, 0xbb}, {&(0x7f0000001000)=""/192, 0xc0}, {&(0x7f00000010c0)=""/144, 0x90}, {0x0}], 0x6, 0x0)
r6 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x8000002, 0xc1, &(0x7f000000cf3d)=""/193, 0x41100, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000000)=""/8, 0x8, 0x1, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10)
tkill(r6, 0xb)

2m7.07310252s ago: executing program 5 (id=2698):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r2 = getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r3, &(0x7f0000000100)='0fc5:1227:ol', 0xc)
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r6 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x5, 0x3, 0x0, 'queue1\x00', 0x2})
r8 = socket$key(0xf, 0x3, 0x2)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)

2m6.220639401s ago: executing program 6 (id=2699):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xe0042, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2, r4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4)
r6 = dup2(r5, r5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x61, 0x7, 0x0, 0x8000}]})
recvmmsg(r6, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
write(r7, &(0x7f0000000300)='!:*', 0x3)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff})
readv(r8, &(0x7f0000000080)=[{&(0x7f0000000400)=""/124, 0x7c}], 0x1)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c6bc135", @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22200, 0x0)

2m5.305087017s ago: executing program 6 (id=2702):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff}}, './sys/bus/pci/drivers/lpc_ich/new_id\x00'})
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000940)={{r0}, "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"})
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/comedi2\x00', 0x400, 0x0)
preadv2(r2, &(0x7f0000002d00)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0xa, 0xb4c, 0x1000000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 b', 0x29)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x400, 0x0, 0x9, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0x9, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0xfff2}, {0xfff3, 0xffff}, {0x7671693a61b9ff27, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, r3, 0x28f41000)
read(r1, &(0x7f0000000180)=""/145, 0x91)
r7 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xd, 0x13, r7, 0x0)
ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000, 0x1})
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r8, &(0x7f0000000000)='7', 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$packet(0x11, 0x3, 0x300)

2m5.065231716s ago: executing program 5 (id=2703):
r0 = syz_open_dev$cec(0x0, 0x0, 0x103000)
r1 = epoll_create1(0x80000)
syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x200f})
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r3 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000240))
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000540)={'\x00', 0x6, 0x7, 0x1, 0x50, 0x47, r4})
syz_clone3(&(0x7f00000005c0)={0x1a000200, 0x0, 0x0, 0x0, {0x34}, &(0x7f0000000400)=""/27, 0x1b, 0x0, &(0x7f0000000580)}, 0x58)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02)
ioctl$CEC_TRANSMIT(r8, 0xc0386105, 0x0)

2m4.46924497s ago: executing program 6 (id=2704):
socket$kcm(0x2b, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e306000000000000000000000085000000200000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000)
close(r0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
sendfile(r2, r1, 0x0, 0x20000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r3, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080))
sendfile(r2, r1, 0x0, 0x20000)
sendfile(r2, r1, 0x0, 0x20000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$USBDEVFS_RESET(r2, 0x5514)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a84d0", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)
sendfile(r2, r1, 0x0, 0x20000)

2m4.025195063s ago: executing program 6 (id=2705):
r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10})
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x58, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91705564e6f77c25"}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, 0x0)
write(r0, &(0x7f0000000cc0), 0x0)
r4 = syz_io_uring_setup(0x1ef8, &(0x7f0000000300)={0x0, 0x72b, 0x0, 0x1, 0xfbffffff}, &(0x7f0000000380), &(0x7f0000000480), &(0x7f0000000000))
r5 = epoll_create(0xaf2)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0xe000200f})

2m1.524742192s ago: executing program 5 (id=2706):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800)
fanotify_init(0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x14, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x14}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xc}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CDROMVOLCTRL(r4, 0x31f, &(0x7f0000000340)={0x23, 0x1, 0xc, 0x87})
symlink(0x0, &(0x7f0000000300)='./file0/file0\x00')
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r5, &(0x7f0000001080)={0x2020}, 0x2020)

1m54.161537194s ago: executing program 6 (id=2708):
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000280)={r6, r6, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'})
r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect(r8, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80)

1m45.739351004s ago: executing program 37 (id=2706):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800)
fanotify_init(0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x14, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x14}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xc}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CDROMVOLCTRL(r4, 0x31f, &(0x7f0000000340)={0x23, 0x1, 0xc, 0x87})
symlink(0x0, &(0x7f0000000300)='./file0/file0\x00')
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r5, &(0x7f0000001080)={0x2020}, 0x2020)

1m38.470021142s ago: executing program 38 (id=2708):
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000280)={r6, r6, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'})
r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect(r8, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80)

16.816542937s ago: executing program 9 (id=2829):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, &(0x7f0000000300))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$audio1(0xffffff9c, 0x0, 0x400, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)

13.6429144s ago: executing program 8 (id=2839):
pipe2$watch_queue(0x0, 0x80)
openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket(0x2, 0x80805, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
move_pages(r1, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x2, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r5, 0x6}}, 0x48)
write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2433f, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdffffffc}}], 0x1, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x3f00000000000000)

12.151089478s ago: executing program 9 (id=2842):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)="be33", 0x2)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x4048041)
syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r2, &(0x7f0000000580)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x58)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x7)
connect$inet6(r3, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x509840, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)

9.795936602s ago: executing program 2 (id=2844):
mmap(&(0x7f00008dd000/0x3000)=nil, 0x3000, 0xf, 0x400803f, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mmap$panthor(&(0x7f000026b000/0x1000)=nil, 0x1000, 0x300000c, 0x50, 0xffffffffffffffff, 0x2)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r0 = userfaultfd(0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00008ef000/0x3000)=nil, 0x3000}, 0x2})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
r2 = dup2(r1, r1)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)=0x2)
read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0xfffffffffffffe46)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="c4", 0x1}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I', 0x1}], 0x1}}], 0x2, 0x4050000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r5=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000380)={0xf, 0x2, 0x80000000, 0xffff, r5}, 0x10)
sendmmsg$unix(r4, &(0x7f0000001940)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000640)}, {&(0x7f0000001640)="572b5cf77425f525b3142624cee1a4da82a3dc72bf3f2a02c18ed76332bc5f63023421c62c0156db90365fb3389e01ab27", 0x31}, {&(0x7f0000001680)="9dec08772b3b029a6b80657dc0cca7b3f6b172", 0x13}, {&(0x7f00000016c0)="ab13719476a08030a50ae0e8c8c31d84a323d3e160b9add67ed3fbceeda2c8ca500e4452c7bb8f46936f49f75a09f295a2f247ecf5e81fc41cada4f564bdba042fc7ba0af8282f9404c66262d6d3cecef4927e88c58a830c80ec2a7f4aa5463f6a7b035e2bb508673f2484c720b50a75d941bdf24d21ed306ea405b3edd79f2a36c8232ce607867040b26d8c530c1bf311b0d32eb42f655a97f17e1edb55ffcd00f6abd4dc6e6a", 0xa7}, {&(0x7f0000001780)="bb2043b45a93c5", 0x7}, {&(0x7f00000017c0)="97ace88066b83b56f83038aa0e0373954dcf23673fe50056920dd90dce261dba9f237109368e0caabfb5600d23882bdf4e684ee350a97d213de1c798feb246ddbd38853e11ba3dc72a624f36e6bad7fc6ba9f0fa668718fada592f3a0de60877180eecf8688be4f8730d67de43b0c4eb2d36aa3a46925fee07fede53b2a1a977ec001ce35cb941df3807e328ae53b9789324248c95b7f715b7b9bd5e45bb006f9048031930f29429a39f1be2f37c9ed2aa9e6207cbf61462d0729c259a0fcf93630e02468af71f99099be056e655378856705807b8724d8bd65859227a", 0xdd}, {&(0x7f00000018c0)="7960257da5f2e5af56f390bfd9137b24fe1882c41758f29dd2", 0x19}], 0x7, 0x0, 0x0, 0x2000}}], 0x1, 0x800)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={r5, 0x0, 0x20}, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)

9.795256562s ago: executing program 8 (id=2846):
socket$inet_icmp(0x2, 0x2, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4c58, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffebc3ab6389d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c1214cf293b3df093d0630bc3073cbaffa025b1f5537"}, {0x0, 0x0, 0x1ff, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x3d7, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf40, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x4, 0x25000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendto$inet6(r1, &(0x7f0000000380)="4e81", 0x2, 0x24000045, 0x0, 0x0)

9.7898624s ago: executing program 9 (id=2847):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
sendfile(r0, r0, 0x0, 0x40008)

9.333140519s ago: executing program 7 (id=2848):
syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmmsg(r1, 0x0, 0x0, 0x88c3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x5400032e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7})
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0)
r8 = memfd_secret(0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}})
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590)
openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0)

9.218263025s ago: executing program 9 (id=2849):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0103070000002cbd7000fddbdf2105001a007f00000100000000000000000000000000ffff2700108aaa56f7369ba8"], 0x38}}, 0x40004)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001f40)='./file0\x00', 0x20842, 0x8e)
write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x0, 0x1000051}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0, 0x0)
syz_io_uring_submit(r7, r8, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680)
mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='hpfs\x00', 0x214003, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'ip6_vti0\x00', <r9=>0x0, 0x4, 0x96, 0x9, 0x7, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x80, 0x7800, 0x0, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0)
sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000480)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000004c0)="4bf63ec05dec541d12b9402e107e64db6c05c9f0a2cfc47ed4600fd6df1ccdd509583ee56c446c215d68f8dfeb33ea9ac6c32ae51e2cf07d76ab2a127782d314099b180146e316628ac161960aa8506105", 0x51}, {&(0x7f0000000540)="e48866b3d16d938bd07b77b25752d2b1a37ecb69ff1ce4030fc9aebf39a38aff183b02f3c1e2e224ea83b138dcc0b29aed39bf6f7a236c6be2e2c1a07e692414f96ec1c9651ccbae9e948daa6ef800b04ca1afe6c086ca44701efdf0f845017b7b3b1b8bd090ddf3f328519821bc06976664d965dfe444128760e9e627772cbaff960cb0ffff4f9b20cabd2c6364053446be", 0x92}, {&(0x7f0000000600)="ca941da0d5c3ebf6d8d3d3fce137cb99c8c9cc1e0cc1442e546dc11cebff6453a9097878f8f327bd506fb7b5d747d0856a31362aee44989f0da884087439441b3510ebe9473ae97d6fa0fdfd9575e3a244f5a5f62825f61bb56b08f7fac211863fa08b5f8730270bed9ad27cdc5ef5c85769df225a65adf6142691c582a4b48f21aa7280c3d20caade30713125b75191594d4a539bd0f5a86197adb75933bda049661d652c77ed8672a020e15eb7c057a59d", 0xb2}, {&(0x7f0000000700)="5a0bd11fa215dda8304d16860967c55ad84e337cdaef87bca6d7586e643e42131682205ba928292c8446ce90ecddf69b2dcb07a635ea0d243d65c95074986ee33838b05085be843b120f87f283196a996062a521a11d5a606167bc83c0a413146e6ed853f354f4310b", 0x69}, {&(0x7f0000000800)="7e3e3696b9d346b6d9a8d6aa68cb5cdea0394180889e73e603f7c04182b93ca7deb4dc73eef13c7ccf97434c8d4f04e7f6d18877ce8a929f", 0x38}, {&(0x7f0000000840)="d276efd42e6bc49de1d3d7169e456ab91cba3157675da1bf996789f25b9dfdb28e3aee8c3e8ce9caabed6be38a5a9fc0004a96b544", 0x35}, {&(0x7f0000000880)}, {0x0}], 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="ac141434ffffffff18000008000000000076e998d5000000", @ANYRES32, @ANYBLOB="ac1414aa00000000"], 0x168}}], 0x2, 0x20008000)

8.36584015s ago: executing program 8 (id=2850):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, &(0x7f0000000300))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$audio1(0xffffff9c, 0x0, 0x400, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)

6.638596698s ago: executing program 7 (id=2851):
r0 = syz_open_dev$cec(0x0, 0x0, 0x103000)
r1 = epoll_create1(0x80000)
syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x200f})
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r3 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000240))
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000540)={'\x00', 0x6, 0x7, 0x1, 0x50, 0x47, r4})
syz_clone3(&(0x7f00000005c0)={0x1a000200, 0x0, 0x0, 0x0, {0x34}, &(0x7f0000000400)=""/27, 0x1b, 0x0, &(0x7f0000000580)}, 0x58)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02)
ioctl$CEC_TRANSMIT(r9, 0xc0386105, 0x0)

6.402269557s ago: executing program 2 (id=2852):
syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmmsg(r1, 0x0, 0x0, 0x88c3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x5400032e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7})
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0)
r8 = memfd_secret(0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}})
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590)
openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0)

4.553036924s ago: executing program 2 (id=2853):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x5, 0x2, 0x4, 0x3}]})
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
close(r2)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=5'])
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e)
setns(0xc9, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0)
mount(0x0, 0x0, 0x0, 0x44021, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x88, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000400)=""/136}, &(0x7f0000000580)=0x50)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000140)=<r5=>0x0)
tkill(r5, 0x18)

3.690529344s ago: executing program 9 (id=2854):
gettid()
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)={0xb48, {{0xa, 0x4620, 0x407, @mcast2, 0x2007f}}}, 0x8c)
r6 = gettid()
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0)
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x80, @none, 0x7fff, 0x1}, 0xe)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='D', 0x1}], 0x1}, 0x4048841)
recvmsg(r8, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}, 0x1)
recvmsg$unix(r8, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x40000001)
listen(r7, 0x5)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x69}}}, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]})
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xb})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

3.650943651s ago: executing program 7 (id=2855):
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000049f000/0x3000)=nil, 0x3000, 0x2000, 0xd3c28bec76034d2a, &(0x7f0000452000/0x2000)=nil)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(0xffffffffffffffff, 0x8)
connect$inet(r0, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
preadv(r1, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x529043, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'pimreg1\x00', {0x1}, 0x7})
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
munmap(&(0x7f0000000000/0x1000)=nil, 0x1000)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @empty}, 0xc)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
mmap(&(0x7f0000f79000/0x3000)=nil, 0x3000, 0x300000c, 0x2010, 0xffffffffffffffff, 0x3165c000)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x3, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000b44000/0x1000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

2.30839541s ago: executing program 7 (id=2856):
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = io_uring_setup(0x1694, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x1, 0x0, 0x0, 0x4}, 0x20)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffff7}, 0x1c)
shutdown(r0, 0x1)
pipe(0x0)

2.30796519s ago: executing program 2 (id=2857):
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000a00)="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", 0x14c)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10)
listen(r3, 0x5)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
write(r5, &(0x7f0000000400)='PASV\r\n', 0x6)
r6 = accept4(r3, 0x0, 0x0, 0x0)
write(r6, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000700)={0x2, 0x1388, @loopback}, 0x10)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', <r10=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0)
unshare(0x26020480)
waitid$P_PIDFD(0x3, r0, 0x0, 0x40000004, 0x0)

2.307438916s ago: executing program 9 (id=2858):
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000000)=0xe4)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
socket(0x10, 0x3, 0x0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa0002014})
epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
setgroups(0x0, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$inet6_sctp(0xa, 0x5, 0x84)

1.928987795s ago: executing program 2 (id=2859):
syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmmsg(r1, 0x0, 0x0, 0x88c3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x5400032e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7})
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0, &(0x7f0000000180)=<r6=>0x0)
r7 = memfd_secret(0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r7, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590)
openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0)

1.804595775s ago: executing program 8 (id=2860):
syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmmsg(r1, 0x0, 0x0, 0x88c3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x5400032e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7})
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r5 = memfd_secret(0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r5, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}})
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590)
openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0)

1.75415083s ago: executing program 7 (id=2861):
syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmmsg(r1, 0x0, 0x0, 0x88c3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x5400032e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7})
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0)
r8 = memfd_secret(0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}})
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590)
openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0)

334.168587ms ago: executing program 8 (id=2862):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x400000000000004)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r8=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)
writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_OPEN(r10, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0xf8, 0x8}}, 0x20)
bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10)
bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10)
sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xfffc)

306.879075ms ago: executing program 7 (id=2863):
r0 = syz_open_dev$cec(0x0, 0x0, 0x103000)
r1 = epoll_create1(0x80000)
syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x200f})
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r3 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000240))
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000540)={'\x00', 0x6, 0x7, 0x1, 0x50, 0x47, r4})
syz_clone3(&(0x7f00000005c0)={0x1a000200, 0x0, 0x0, 0x0, {0x34}, &(0x7f0000000400)=""/27, 0x1b, 0x0, &(0x7f0000000580)}, 0x58)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02)
ioctl$CEC_TRANSMIT(r7, 0xc0386105, 0x0)

299.688717ms ago: executing program 2 (id=2864):
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r1 = socket$kcm(0x10, 0x2, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000000c0)=0x2c)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/ftrace_dump_on_oops\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
write$binfmt_script(r6, &(0x7f0000000540)={'#! ', './proc/sys/kernel/ftrace_dump_on_oops', [{}, {0x20, '\x00'}, {0x20, 'GPL\x00'}, {0x20, '}:!['}, {0x20, 'syz1\x00'}, {}, {0x20, '\x00'}, {0x20, 'syz1\x00'}, {0x20, '\x00'}, {0x20, '\x00'}], 0xa, "cf411a4c8a7452d0b5d4c3a8b56a0a7126680151c1b350850c1a97e3feac8c57b96fad7f087c8532549d4483ee515246d0a228139817391e4de3fa6881e358d42c66b3dbcd670ae09037060c4539775a64bfbfc333d0b083f563ed0aeea9814dc071e2066a4a5e9440bbeacb32018daa822d"}, 0xbb)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x45, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20)

0s ago: executing program 8 (id=2865):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x7fff0003}]})
close_range(r3, r3, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x20, 0x400)
fanotify_mark(r5, 0x51, 0x10000010, r4, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x61, 0x4]}})
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c06, 0x4)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
sendmsg$xdp(r8, &(0x7f0000003900)={0x0, 0x0, &(0x7f0000003880), 0x0, 0x0, 0x0, 0x80}, 0x4)
recvmsg$can_j1939(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001600)=""/4097, 0x1001}], 0x1}, 0x10021)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x8528, 0x7, 0x3, 0x6}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4})
r11 = getpid()
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
r12 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/reserved_size', 0x161002, 0x43)
socket$nl_route(0x10, 0x3, 0x0)
setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)="cf99c5727c0e6af44ce028c7f8c4cb61eb6eb0be9324f72b384882eda76b9ed19823503416aa82666de4a2d2371eb022f9245f69dd5056737d78b92ea059a066e39e6a87b1c669eaf0424d0a218a903d46662ce36f82d912f97c69238be732a04c8b30d9456477e8864c4ddb655e3e03c887846429438a1a7929cfa1f5825410e079ea8f26a8cd5c49e7e80c796788854dfd4372107e4d37f375479f92fc0064716f55a807722af3cac2074817a59232b66fcd995e6297cd0d1be0404ed020b1e7c11cf0cda6f4a8094b8b37d9a3e11f36954be3dcdb70f7833059a4fc5bd50a67c75947fc32fe4a212ee93a1f40", 0xee, 0x1)
kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r0, &(0x7f0000000300)={r12, 0xffffffffffffffff, 0x3})
syz_ublk_setup_io_uring(0x26, &(0x7f0000000440)={0x0, 0x10, 0x0, 0x0, 0x268}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000140))

kernel console output (not intermixed with test programs):

 Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  825.974060][T17753] udevd[17753]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  826.433832][T17761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[  826.437860][T17761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead
[  826.441731][T17761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead
[  826.445369][T17761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead
[  826.449112][T17761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead
[  826.449142][T17761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead
[  826.449155][T17761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead
[  826.449173][T17761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead
[  826.449184][T17761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead
[  826.449194][T17761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead
[  826.449204][T17761] jffs2: Further such events for this erase block will not be printed
[  826.449242][T17761] jffs2: Empty flash at 0x00000308 ends at 0x0000030c
[  826.449253][T17761] jffs2: Empty flash at 0x00000330 ends at 0x00000334
[  826.449262][T17761] jffs2: Empty flash at 0x0000034c ends at 0x00000350
[  826.491728][T17761] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  826.495260][T17761] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  826.891104][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  827.069566][ T1495] usb 8-1: new high-speed USB device number 103 using dummy_hcd
[  827.223084][ T1495] usb 8-1: unable to get BOS descriptor or descriptor too short
[  827.223181][ T1495] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  827.224692][ T1495] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  827.224711][ T1495] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  827.224751][ T1495] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  827.227315][ T1495] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.227357][ T1495] usb 8-1: Product: syz
[  827.227370][ T1495] usb 8-1: Manufacturer: syz
[  827.227382][ T1495] usb 8-1: SerialNumber: syz
[  827.700609][ T1495] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22
[  827.705619][ T1495] usb 8-1: USB disconnect, device number 103
[  827.810042][T17753] udevd[17753]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  827.947502][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  828.228218][   T43] audit: type=1326 audit(1788667996.778:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[  828.228712][   T43] audit: type=1326 audit(1788667996.778:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[  828.231642][   T43] audit: type=1326 audit(1788667996.778:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[  828.232103][   T43] audit: type=1326 audit(1788667996.778:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70befec code=0x7ffc0000
[  828.232445][   T43] audit: type=1326 audit(1788667996.778:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[  828.233049][   T43] audit: type=1326 audit(1788667996.778:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[  828.233293][   T43] audit: type=1326 audit(1788667996.778:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[  828.238777][   T43] audit: type=1326 audit(1788667996.778:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[  828.238814][   T43] audit: type=1326 audit(1788667996.778:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000
[  828.238847][   T43] audit: type=1326 audit(1788667996.778:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.0.2672" exe="/syz-executor" sig=0 arch=40000003 syscall=141 compat=1 ip=0xf70befec code=0x7ffc0000
[  828.934806][T17779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2664'.
[  828.937659][T17779] vlan5: entered allmulticast mode
[  828.937739][T17779] dummy0: entered allmulticast mode
[  828.937978][T17779] bridge0: port 3(vlan5) entered blocking state
[  828.938045][T17779] bridge0: port 3(vlan5) entered disabled state
[  828.938900][T17779] vlan5: entered promiscuous mode
[  828.938928][T17779] dummy0: entered promiscuous mode
[  828.970981][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  830.018142][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  831.049764][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  832.101629][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  833.147359][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  834.182304][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  835.213879][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  836.250852][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  837.302954][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  838.341939][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  839.389486][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  840.419205][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  841.459106][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  841.563015][T13450] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  841.732073][T13450] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  841.733469][T13450] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  841.735277][T13450] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  841.736274][T13450] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  841.929078][ T5848] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[  841.934032][T17812] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2671'.
[  842.052956][T17801] wg2 speed is unknown, defaulting to 1000
[  842.092956][ T5848] usb 6-1: unable to get BOS descriptor or descriptor too short
[  842.093077][ T5848] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  842.094418][ T5848] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  842.094446][ T5848] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  842.094490][ T5848] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  842.107920][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.107946][ T5848] usb 6-1: Product: syz
[  842.107962][ T5848] usb 6-1: Manufacturer: syz
[  842.107977][ T5848] usb 6-1: SerialNumber: syz
[  842.405800][T17801] wlan0 speed is unknown, defaulting to 1000
[  842.500868][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  842.600572][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2674'.
[  842.600658][T17826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2674'.
[  842.623549][   T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x7
[  842.623646][   T35] hid-generic 0000:0000:0000.0005: ignoring exceeding usage max
[  842.625252][   T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  842.625358][   T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  842.625381][   T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  842.625404][   T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  842.625425][   T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  842.625447][   T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  842.625468][   T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  842.625491][   T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  842.625513][   T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  842.632790][   T35] hid-generic 0000:0000:0000.0005: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  842.680637][ T5848] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  842.699115][ T5848] usb 6-1: USB disconnect, device number 95
[  842.845913][T17805] udevd[17805]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  842.869049][ T5827] usb 8-1: new high-speed USB device number 104 using dummy_hcd
[  843.030205][ T5827] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  843.030321][ T5827] usb 8-1: too many configurations: 9, using maximum allowed: 8
[  843.031977][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  843.032020][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11
[  843.032047][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024
[  843.032075][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0
[  843.033540][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  843.033582][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11
[  843.033608][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024
[  843.033634][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0
[  843.035344][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  843.035390][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11
[  843.035420][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024
[  843.035450][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0
[  843.037323][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  843.037369][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11
[  843.037399][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024
[  843.037428][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0
[  843.039374][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  843.039421][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11
[  843.039450][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024
[  843.039479][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0
[  843.041409][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  843.041447][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11
[  843.041471][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024
[  843.041495][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0
[  843.043148][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  843.043183][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11
[  843.043207][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024
[  843.043231][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0
[  843.044931][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  843.044968][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11
[  843.044991][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024
[  843.045014][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0
[  843.047427][ T5827] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  843.047449][ T5827] usb 8-1: Product: syz
[  843.047464][ T5827] usb 8-1: Manufacturer: syz
[  843.047478][ T5827] usb 8-1: SerialNumber: syz
[  843.051548][ T5827] usb 8-1: config 0 descriptor??
[  843.052808][T17826] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  843.057648][ T5827] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0
[  843.294005][T17801] bridge0: port 1(bridge_slave_0) entered blocking state
[  843.294227][T17801] bridge0: port 1(bridge_slave_0) entered disabled state
[  843.294451][T17801] bridge_slave_0: entered allmulticast mode
[  843.297220][T17801] bridge_slave_0: entered promiscuous mode
[  843.301571][T17801] bridge0: port 2(bridge_slave_1) entered blocking state
[  843.301871][T17801] bridge0: port 2(bridge_slave_1) entered disabled state
[  843.301970][T17801] bridge_slave_1: entered allmulticast mode
[  843.303381][T17801] bridge_slave_1: entered promiscuous mode
[  843.463111][T17801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  843.465943][T17801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  843.508352][T17801] team0: Port device team_slave_0 added
[  843.511319][T17801] team0: Port device team_slave_1 added
[  843.526535][    C3] usb 8-1: yurex_control_callback - control failed: -2
[  843.532317][   T35] usb 8-1: USB disconnect, device number 104
[  843.541234][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  843.543349][   T35] yurex 8-1:0.0: USB YUREX #0 now disconnected
[  843.562283][T17801] batman_adv: batadv0: Adding interface: batadv_slave_0
[  843.565479][T17801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  843.565603][T17801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  843.567305][T17801] batman_adv: batadv0: Adding interface: batadv_slave_1
[  843.567335][T17801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  843.567374][T17801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  843.615971][T17801] hsr_slave_0: entered promiscuous mode
[  843.617148][T17801] hsr_slave_1: entered promiscuous mode
[  843.619517][T17801] debugfs: 'hsr0' already exists in 'hsr'
[  843.619541][T17801] Cannot create hsr debugfs directory
[  843.849703][T15080] Bluetooth: hci4: command tx timeout
[  843.905028][T17801] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  843.918365][T17801] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  843.919539][T17801] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  843.925951][T17801] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  843.927660][T17801] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  843.942248][T17801] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  843.943276][T17801] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  843.952073][T17801] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  844.262978][T17851] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  844.331277][T17801] 8021q: adding VLAN 0 to HW filter on device bond0
[  844.425210][T14272] md_update_sb: can't update sb for read-only array md0
[  844.478893][T17801] 8021q: adding VLAN 0 to HW filter on device team0
[  844.544847][T10912] bridge0: port 1(bridge_slave_0) entered blocking state
[  844.545188][T10912] bridge0: port 1(bridge_slave_0) entered forwarding state
[  844.579035][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  844.591807][T10913] bridge0: port 2(bridge_slave_1) entered blocking state
[  844.591950][T10913] bridge0: port 2(bridge_slave_1) entered forwarding state
[  845.056225][T17801] 8021q: adding VLAN 0 to HW filter on device batadv0
[  845.170334][T17873] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  845.241998][T17873] serio: Serial port ptm0
[  845.303546][T17879] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2678'.
[  845.390673][T17801] veth0_vlan: entered promiscuous mode
[  845.442565][T17801] veth1_vlan: entered promiscuous mode
[  845.508899][T17801] veth0_macvtap: entered promiscuous mode
[  845.544944][T17801] veth1_macvtap: entered promiscuous mode
[  845.575064][T17801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  845.589506][T17801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  845.613344][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  845.621518][T10512] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  845.627822][T10512] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  845.632257][T10512] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  845.700364][T10513] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  845.849431][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  845.849554][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  845.922562][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  845.922819][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  845.939622][T15080] Bluetooth: hci4: command tx timeout
[  846.165911][T17892] ip6t_rt: too many addresses specified
[  846.515834][T17897] netlink: 'syz.4.2669': attribute type 1 has an invalid length.
[  846.520311][T17897] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2669'.
[  846.658798][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  847.698695][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  848.008962][T15080] Bluetooth: hci4: command tx timeout
[  848.730494][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  849.779506][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  850.089020][T15080] Bluetooth: hci4: command tx timeout
[  850.809907][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  851.563811][T17905] netlink: 'syz.3.2682': attribute type 4 has an invalid length.
[  851.563885][T17905] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2682'.
[  851.858751][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  851.912419][T17917] xt_CT: You must specify a L4 protocol and not use inversions on it
[  852.890032][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  853.938607][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  854.969435][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  855.552210][T17936] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  855.605441][T17936] serio: Serial port ptm0
[  855.664506][T17940] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2688'.
[  856.019259][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  856.261005][T17948] ip6t_rt: too many addresses specified
[  856.585076][T17952] netlink: 'syz.0.2691': attribute type 1 has an invalid length.
[  856.588311][T17952] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2691'.
[  857.058375][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  858.098139][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  859.139908][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  859.622489][T17956] FAULT_INJECTION: forcing a failure.
[  859.622489][T17956] name failslab, interval 1, probability 0, space 0, times 1
[  859.622593][T17956] CPU: 3 UID: 0 PID: 17956 Comm: syz.1.2692 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  859.622635][T17956] Tainted: [L]=SOFTLOCKUP
[  859.622645][T17956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  859.622657][T17956] Call Trace:
[  859.622666][T17956]  <TASK>
[  859.622675][T17956]  dump_stack_lvl+0x100/0x190
[  859.622708][T17956]  should_fail_ex.cold+0x5/0xa
[  859.622734][T17956]  should_failslab+0xc2/0x120
[  859.622811][T17956]  kmem_cache_alloc_noprof+0x92/0x6a0
[  859.622836][T17956]  ? __pfx_map_id_range_down+0x10/0x10
[  859.622864][T17956]  ? rcu_is_watching+0x13/0xc0
[  859.622885][T17956]  ? security_inode_alloc+0x3b/0x2c0
[  859.622916][T17956]  security_inode_alloc+0x3b/0x2c0
[  859.622941][T17956]  inode_init_always_gfp+0xc6f/0xfb0
[  859.622983][T17956]  alloc_inode+0x8e/0x250
[  859.623013][T17956]  sock_alloc+0x44/0x280
[  859.623040][T17956]  ? security_socket_create+0x7f/0x250
[  859.623067][T17956]  __sock_create+0xc2/0x860
[  859.623104][T17956]  __sys_socket+0x14d/0x260
[  859.623124][T17956]  ? xfd_validate_state+0x129/0x190
[  859.623153][T17956]  ? __pfx___sys_socket+0x10/0x10
[  859.623203][T17956]  __ia32_sys_socket+0x72/0xb0
[  859.623224][T17956]  ? lockdep_hardirqs_on+0x7d/0x110
[  859.623282][T17956]  __do_fast_syscall_32+0x13a/0x8b0
[  859.623311][T17956]  do_fast_syscall_32+0x32/0x70
[  859.623339][T17956]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  859.623366][T17956] RIP: 0023:0xf7fa6fec
[  859.623386][T17956] Code: Unable to access opcode bytes at 0xf7fa6fc2.
[  859.623396][T17956] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167
[  859.623418][T17956] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000003
[  859.623432][T17956] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000
[  859.623444][T17956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  859.623457][T17956] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  859.623470][T17956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  859.623495][T17956]  </TASK>
[  859.625960][T17956] socket: no more sockets
[  860.176896][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  861.219081][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  862.259900][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  863.271391][T17977] netlink: 'syz.4.2696': attribute type 10 has an invalid length.
[  863.274018][T17977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2696'.
[  863.278184][T17977] dummy0: entered promiscuous mode
[  863.285722][T17977] bridge0: port 3(dummy0) entered blocking state
[  863.285968][T17977] bridge0: port 3(dummy0) entered disabled state
[  863.286055][T17977] dummy0: entered allmulticast mode
[  863.287248][T17977] bridge0: port 3(dummy0) entered blocking state
[  863.287309][T17977] bridge0: port 3(dummy0) entered forwarding state
[  863.299365][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  863.310253][T17977] fuse: Bad value for 'group_id'
[  863.310305][T17977] fuse: Bad value for 'group_id'
[  864.328068][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  865.371341][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  866.425428][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  867.457886][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  868.497602][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  869.531884][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  870.570560][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  871.281046][T13450] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  871.297674][T13450] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  871.300193][T13450] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  871.301900][T13450] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  871.303825][T13450] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  871.616971][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  871.673571][T18004] wg2 speed is unknown, defaulting to 1000
[  871.824065][T18004] wlan0 speed is unknown, defaulting to 1000
[  872.180439][T18004] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.180661][T18004] bridge0: port 1(bridge_slave_0) entered disabled state
[  872.181008][T18004] bridge_slave_0: entered allmulticast mode
[  872.181794][T18004] bridge_slave_0: entered promiscuous mode
[  872.188110][T18004] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.188303][T18004] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.188385][T18004] bridge_slave_1: entered allmulticast mode
[  872.189265][T18004] bridge_slave_1: entered promiscuous mode
[  872.206250][T18004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  872.209119][T18004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  872.244845][T18004] team0: Port device team_slave_0 added
[  872.250577][T18004] team0: Port device team_slave_1 added
[  872.270954][T18004] batman_adv: batadv0: Adding interface: batadv_slave_0
[  872.271013][T18004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  872.272374][T18004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  872.273343][T18004] batman_adv: batadv0: Adding interface: batadv_slave_1
[  872.273354][T18004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  872.273373][T18004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  872.306002][T18004] hsr_slave_0: entered promiscuous mode
[  872.306497][T18004] hsr_slave_1: entered promiscuous mode
[  872.306811][T18004] debugfs: 'hsr0' already exists in 'hsr'
[  872.307448][T18004] Cannot create hsr debugfs directory
[  872.425079][T18004] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  872.649187][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  873.035279][T18004] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  873.367404][T15080] Bluetooth: hci3: command tx timeout
[  873.687714][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  874.727374][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  875.450576][T15080] Bluetooth: hci3: command tx timeout
[  875.770161][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  876.483240][T13450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  876.497895][T13450] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  876.505583][T13450] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  876.507134][T13450] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  876.507934][T13450] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  876.810027][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  877.432232][T18004] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  877.537017][T15080] Bluetooth: hci3: command tx timeout
[  877.615659][T18004] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  877.642534][T18004] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  877.684601][T13450] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  877.702609][T13450] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  877.718506][T13450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  877.726265][T13450] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  877.731828][T13450] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  877.862067][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  878.564640][T18004] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  878.565183][T18004] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  878.577976][T13450] Bluetooth: hci0: command tx timeout
[  878.594810][T18004] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  878.671372][T18004] 8021q: adding VLAN 0 to HW filter on device bond0
[  878.684694][T18004] 8021q: adding VLAN 0 to HW filter on device team0
[  878.688483][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.688571][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[  878.694844][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.694921][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[  878.891659][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  878.903538][T18025] wg2 speed is unknown, defaulting to 1000
[  879.095761][T18025] wlan0 speed is unknown, defaulting to 1000
[  879.617655][T13450] Bluetooth: hci3: command tx timeout
[  879.767951][T13450] Bluetooth: hci5: command tx timeout
[  879.938659][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  880.130195][T18029] wg2 speed is unknown, defaulting to 1000
[  880.341844][T15080] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  880.345991][T15080] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  880.349682][T15080] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  880.354234][T15080] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  880.357408][T15080] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  880.491981][T18029] wlan0 speed is unknown, defaulting to 1000
[  880.647409][T13450] Bluetooth: hci0: command tx timeout
[  880.684615][T18025] bridge0: port 1(bridge_slave_0) entered blocking state
[  880.684790][T18025] bridge0: port 1(bridge_slave_0) entered disabled state
[  880.684945][T18025] bridge_slave_0: entered allmulticast mode
[  880.685928][T18025] bridge_slave_0: entered promiscuous mode
[  880.709749][T18004] 8021q: adding VLAN 0 to HW filter on device batadv0
[  880.712835][T18025] bridge0: port 2(bridge_slave_1) entered blocking state
[  880.713834][T18025] bridge0: port 2(bridge_slave_1) entered disabled state
[  880.713961][T18025] bridge_slave_1: entered allmulticast mode
[  880.715537][T18025] bridge_slave_1: entered promiscuous mode
[  880.791464][T18025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  880.792920][T18025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  880.827142][T18025] team0: Port device team_slave_0 added
[  880.831538][T18025] team0: Port device team_slave_1 added
[  880.977582][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  881.093160][T18025] batman_adv: batadv0: Adding interface: batadv_slave_0
[  881.093232][T18025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  881.093290][T18025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  881.094363][T18025] batman_adv: batadv0: Adding interface: batadv_slave_1
[  881.094372][T18025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  881.094385][T18025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  881.159580][T18025] hsr_slave_0: entered promiscuous mode
[  881.160506][T18025] hsr_slave_1: entered promiscuous mode
[  881.161176][T18025] debugfs: 'hsr0' already exists in 'hsr'
[  881.161193][T18025] Cannot create hsr debugfs directory
[  881.724977][T18029] bridge0: port 1(bridge_slave_0) entered blocking state
[  881.732983][T18029] bridge0: port 1(bridge_slave_0) entered disabled state
[  881.733144][T18029] bridge_slave_0: entered allmulticast mode
[  881.734000][T18029] bridge_slave_0: entered promiscuous mode
[  881.762770][T18029] bridge0: port 2(bridge_slave_1) entered blocking state
[  881.762887][T18029] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.763024][T18029] bridge_slave_1: entered allmulticast mode
[  881.764012][T18029] bridge_slave_1: entered promiscuous mode
[  881.858794][T13450] Bluetooth: hci5: command tx timeout
[  882.016825][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  882.407215][T13450] Bluetooth: hci6: command tx timeout
[  882.736888][T13450] Bluetooth: hci0: command tx timeout
[  883.056823][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  883.926664][T13450] Bluetooth: hci5: command tx timeout
[  884.086957][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  884.398547][T18029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  884.402184][T18029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  884.497352][T13450] Bluetooth: hci6: command tx timeout
[  884.521038][T18025] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  884.543383][T18025] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  884.556964][T18025] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  884.590730][T18025] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  884.697272][T18029] team0: Port device team_slave_0 added
[  884.702934][T18025] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  884.711907][T18025] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  884.712698][T18025] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  884.721905][T18025] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  884.723883][T18029] team0: Port device team_slave_1 added
[  884.742865][T18057] wg2 speed is unknown, defaulting to 1000
[  884.764006][T18029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  884.764056][T18029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  884.764107][T18029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  884.785366][T18029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  884.785434][T18029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  884.785513][T18029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  884.806699][T13450] Bluetooth: hci0: command tx timeout
[  884.844586][T18029] hsr_slave_0: entered promiscuous mode
[  884.846697][T18029] hsr_slave_1: entered promiscuous mode
[  884.848339][T18029] debugfs: 'hsr0' already exists in 'hsr'
[  884.848353][T18029] Cannot create hsr debugfs directory
[  884.939911][T18057] wlan0 speed is unknown, defaulting to 1000
[  885.127840][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  885.325220][T18025] 8021q: adding VLAN 0 to HW filter on device bond0
[  885.410831][T18025] 8021q: adding VLAN 0 to HW filter on device team0
[  885.468504][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[  885.468584][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[  885.531407][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[  885.531563][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[  885.573915][T18029] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  885.583280][T18029] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  885.584125][T18029] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  885.592051][T18029] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  885.608685][T18057] bridge0: port 1(bridge_slave_0) entered blocking state
[  885.608894][T18057] bridge0: port 1(bridge_slave_0) entered disabled state
[  885.609004][T18057] bridge_slave_0: entered allmulticast mode
[  885.610825][T18057] bridge_slave_0: entered promiscuous mode
[  885.618296][T18029] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  885.628714][T18029] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  885.650297][T18057] bridge0: port 2(bridge_slave_1) entered blocking state
[  885.650473][T18057] bridge0: port 2(bridge_slave_1) entered disabled state
[  885.650729][T18057] bridge_slave_1: entered allmulticast mode
[  885.652086][T18057] bridge_slave_1: entered promiscuous mode
[  885.656484][T18029] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  885.839358][T18029] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  885.892204][T18057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  885.894278][T18057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  885.957088][T18057] team0: Port device team_slave_0 added
[  885.959223][T18057] team0: Port device team_slave_1 added
[  885.985620][T18057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  885.985677][T18057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  885.985738][T18057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  885.987102][T18057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  885.987113][T18057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  885.987132][T18057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  886.009589][T13450] Bluetooth: hci5: command tx timeout
[  886.013036][T18057] hsr_slave_0: entered promiscuous mode
[  886.013482][T18057] hsr_slave_1: entered promiscuous mode
[  886.013802][T18057] debugfs: 'hsr0' already exists in 'hsr'
[  886.013815][T18057] Cannot create hsr debugfs directory
[  886.084622][T18004] veth0_vlan: entered promiscuous mode
[  886.177962][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  886.198050][T18004] veth1_vlan: entered promiscuous mode
[  886.302212][T18004] veth0_macvtap: entered promiscuous mode
[  886.324044][T18029] 8021q: adding VLAN 0 to HW filter on device bond0
[  886.338087][T18004] veth1_macvtap: entered promiscuous mode
[  886.458622][T18004] batman_adv: batadv0: Interface activated: batadv_slave_0
[  886.461380][T18029] 8021q: adding VLAN 0 to HW filter on device team0
[  886.465386][T18004] batman_adv: batadv0: Interface activated: batadv_slave_1
[  886.509010][T10914] bridge0: port 1(bridge_slave_0) entered blocking state
[  886.509197][T10914] bridge0: port 1(bridge_slave_0) entered forwarding state
[  886.568879][T13450] Bluetooth: hci6: command tx timeout
[  886.598742][T10914] bridge0: port 2(bridge_slave_1) entered blocking state
[  886.598832][T10914] bridge0: port 2(bridge_slave_1) entered forwarding state
[  886.640444][T18057] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  886.663097][T18057] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  886.664569][T18057] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  886.673528][T18057] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  886.716405][T17723] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  886.716532][T17723] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  886.718915][T18025] 8021q: adding VLAN 0 to HW filter on device batadv0
[  886.734072][T18057] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  886.740944][T18057] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  886.758293][T17723] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  886.758364][T17723] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  886.765243][T18029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  886.771218][T18057] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  886.788352][T18057] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  886.862198][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  886.862286][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  886.890809][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  886.890927][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  887.001724][T18057] 8021q: adding VLAN 0 to HW filter on device bond0
[  887.039735][T18057] 8021q: adding VLAN 0 to HW filter on device team0
[  887.056603][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[  887.056692][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[  887.079907][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[  887.080037][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[  887.153099][T18025] veth0_vlan: entered promiscuous mode
[  887.201366][T18025] veth1_vlan: entered promiscuous mode
[  887.207017][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  887.253842][T18025] veth0_macvtap: entered promiscuous mode
[  887.265707][T18025] veth1_macvtap: entered promiscuous mode
[  887.310540][T18025] batman_adv: batadv0: Interface activated: batadv_slave_0
[  887.318338][T18025] batman_adv: batadv0: Interface activated: batadv_slave_1
[  887.484934][T10914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.485027][T10914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  887.594081][T10914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.594150][T10914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  887.603395][T17723] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  887.609500][T10512] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  887.609750][T10512] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  887.609898][T10512] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  888.045854][T18057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  888.251010][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  888.545068][T18057] veth0_vlan: entered promiscuous mode
[  888.587270][T18029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  888.587783][T18057] veth1_vlan: entered promiscuous mode
[  888.646679][T13450] Bluetooth: hci6: command tx timeout
[  888.698179][T18057] veth0_macvtap: entered promiscuous mode
[  888.706837][T18057] veth1_macvtap: entered promiscuous mode
[  888.749395][T18057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  888.822331][T18057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  888.898658][T17723] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  888.899006][T17723] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  888.899897][T17723] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  889.205858][T18173] FAULT_INJECTION: forcing a failure.
[  889.205858][T18173] name failslab, interval 1, probability 0, space 0, times 0
[  889.206093][T18173] CPU: 0 UID: 0 PID: 18173 Comm: syz.6.2702 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  889.206128][T18173] Tainted: [L]=SOFTLOCKUP
[  889.206135][T18173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  889.206145][T18173] Call Trace:
[  889.206150][T18173]  <TASK>
[  889.206157][T18173]  dump_stack_lvl+0x100/0x190
[  889.206181][T18173]  should_fail_ex.cold+0x5/0xa
[  889.206200][T18173]  should_failslab+0xc2/0x120
[  889.206220][T18173]  __kmalloc_noprof+0xfc/0x840
[  889.206237][T18173]  ? sk_prot_alloc+0x10b/0x2a0
[  889.206260][T18173]  sk_prot_alloc+0x10b/0x2a0
[  889.206286][T18173]  sk_alloc+0x36/0xe80
[  889.206304][T18173]  packet_create+0x127/0x8e0
[  889.206323][T18173]  __sock_create+0x339/0x860
[  889.206348][T18173]  __sys_socket+0x14d/0x260
[  889.206362][T18173]  ? __pfx___sys_socket+0x10/0x10
[  889.206380][T18173]  __ia32_sys_socket+0x72/0xb0
[  889.206392][T18173]  ? lockdep_hardirqs_on+0x7d/0x110
[  889.206411][T18173]  __do_fast_syscall_32+0x13a/0x8b0
[  889.206434][T18173]  do_fast_syscall_32+0x32/0x70
[  889.206455][T18173]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  889.206472][T18173] RIP: 0023:0xf703efec
[  889.206488][T18173] Code: Unable to access opcode bytes at 0xf703efc2.
[  889.206495][T18173] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167
[  889.206509][T18173] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000003
[  889.206518][T18173] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000
[  889.206527][T18173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  889.206535][T18173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  889.206543][T18173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  889.206560][T18173]  </TASK>
[  889.278451][T10513] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  889.296576][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  889.436704][T17997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  889.436797][T17997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  889.478808][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  889.478917][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  889.639616][T18184] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[  889.645640][T18184] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead
[  889.650925][T18184] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead
[  889.661084][T18184] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead
[  889.661214][T18184] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead
[  889.661254][T18184] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead
[  889.661286][T18184] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead
[  889.661329][T18184] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead
[  889.661367][T18184] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead
[  889.661399][T18184] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead
[  889.661428][T18184] jffs2: Further such events for this erase block will not be printed
[  889.661497][T18184] jffs2: Empty flash at 0x00000308 ends at 0x0000030c
[  889.661527][T18184] jffs2: Empty flash at 0x00000330 ends at 0x00000334
[  889.661553][T18184] jffs2: Empty flash at 0x0000034c ends at 0x00000350
[  889.719504][T18184] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  889.719619][T18184] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  889.783714][T10513] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  889.783826][T10513] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  889.947452][T18184] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  890.111734][T18029] veth0_vlan: entered promiscuous mode
[  890.124041][T18029] veth1_vlan: entered promiscuous mode
[  890.182914][T18029] veth0_macvtap: entered promiscuous mode
[  890.189151][T18029] veth1_macvtap: entered promiscuous mode
[  890.233076][T18029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  890.261375][T18029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  890.331172][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  891.371813][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  892.419225][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  893.456598][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  894.486368][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  895.529573][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  896.579703][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  896.711594][T17721] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  897.617863][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  898.661372][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  899.600345][T10512] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  899.600447][T10512] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  899.600545][T10512] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  899.623253][T18204] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  899.623341][T18204] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  899.623431][T18204] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  899.650142][T10513] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  899.650238][T10513] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  899.687146][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  899.723886][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  899.723964][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  900.059235][T10513] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  900.059344][T10513] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.726783][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  901.700349][T10912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  901.700429][T10912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  901.779217][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  902.817947][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  903.858331][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  904.892728][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  905.939904][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  906.966894][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  908.020689][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  908.692157][T15080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  908.705298][T15080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  908.706997][T15080] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  908.708784][T15080] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  908.709634][T15080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  909.058531][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  909.666111][T10513] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  909.666220][T10513] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.877165][T18217] wg2 speed is unknown, defaulting to 1000
[  910.106999][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  910.315956][T18217] wlan0 speed is unknown, defaulting to 1000
[  910.816146][T13450] Bluetooth: hci1: command tx timeout
[  911.017579][T18233] comedi comedi0: comedi_config --init_data is deprecated
[  911.145735][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  912.178578][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  912.902138][T13450] Bluetooth: hci1: command tx timeout
[  913.217882][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  914.257418][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  914.312820][T10513] vlan1: left promiscuous mode
[  914.341272][T10513] dummy0: left promiscuous mode
[  914.365641][T10513] bridge0: port 4(vlan1) entered disabled state
[  914.457890][T10513] bridge_slave_1: left allmulticast mode
[  914.458071][T10513] bridge_slave_1: left promiscuous mode
[  914.458392][T10513] bridge0: port 2(bridge_slave_1) entered disabled state
[  914.974880][T13450] Bluetooth: hci1: command tx timeout
[  914.977320][T10513] bridge_slave_0: left allmulticast mode
[  914.977343][T10513] bridge_slave_0: left promiscuous mode
[  914.977507][T10513] bridge0: port 1(bridge_slave_0) entered disabled state
[  915.285257][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  916.335087][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  917.044662][T13450] Bluetooth: hci1: command tx timeout
[  917.375065][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  918.416261][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  919.450685][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  919.899359][T15080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  919.913888][T15080] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  919.919590][T15080] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  919.935907][T15080] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  919.947572][T15080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  920.488525][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  920.797510][T10513] bond1 (unregistering): (slave bridge3): Releasing backup interface
[  920.797703][T10513] bridge3 (unregistering): left promiscuous mode
[  920.852537][T10513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  920.872112][T18260] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2714'.
[  920.880846][T10513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  920.902424][T10513] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  920.913538][T10513] bond0 (unregistering): Released all slaves
[  920.956502][T10513] bond1 (unregistering): Released all slaves
[  920.992204][T10513] bond2 (unregistering): Released all slaves
[  921.042703][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2
[  921.238967][T10513] tipc: Left network mode
[  921.538936][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  921.785837][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3
[  922.095349][T13450] Bluetooth: hci2: command tx timeout
[  922.186847][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4
[  922.565695][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  923.437924][ T5454] 8021q: adding VLAN 0 to HW filter on device eth5
[  923.614838][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  923.691055][T18217] bridge0: port 1(bridge_slave_0) entered blocking state
[  923.691873][T18217] bridge0: port 1(bridge_slave_0) entered disabled state
[  923.692691][T18217] bridge_slave_0: entered allmulticast mode
[  923.787261][T18217] bridge_slave_0: entered promiscuous mode
[  924.187234][T13450] Bluetooth: hci2: command tx timeout
[  924.524157][T18217] bridge0: port 2(bridge_slave_1) entered blocking state
[  924.524347][T18217] bridge0: port 2(bridge_slave_1) entered disabled state
[  924.524582][T18217] bridge_slave_1: entered allmulticast mode
[  924.526119][T18217] bridge_slave_1: entered promiscuous mode
[  924.618748][T18254] wg2 speed is unknown, defaulting to 1000
[  924.622331][T18217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  924.654868][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  924.676075][T18217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  924.843665][T18217] team0: Port device team_slave_0 added
[  924.846126][T18217] team0: Port device team_slave_1 added
[  924.922375][T18217] batman_adv: batadv0: Adding interface: batadv_slave_0
[  924.922432][T18217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  924.922495][T18217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  924.951937][T18217] batman_adv: batadv0: Adding interface: batadv_slave_1
[  924.952053][T18217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  924.952070][T18217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  925.058458][T18217] hsr_slave_0: entered promiscuous mode
[  925.059151][T18217] hsr_slave_1: entered promiscuous mode
[  925.065147][T18217] debugfs: 'hsr0' already exists in 'hsr'
[  925.065217][T18217] Cannot create hsr debugfs directory
[  925.131504][T18254] wlan0 speed is unknown, defaulting to 1000
[  925.699391][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  926.246186][T13450] Bluetooth: hci2: command tx timeout
[  926.663436][   T43] kauditd_printk_skb: 332 callbacks suppressed
[  926.663548][   T43] audit: type=1326 audit(1788668095.214:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.8.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000
[  926.663595][   T43] audit: type=1326 audit(1788668095.214:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.8.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000
[  926.664636][   T43] audit: type=1326 audit(1788668095.224:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.8.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f82fec code=0x7ffc0000
[  926.664687][   T43] audit: type=1326 audit(1788668095.224:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.8.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000
[  926.664748][   T43] audit: type=1326 audit(1788668095.224:6479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.8.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000
[  926.676807][   T43] audit: type=1326 audit(1788668095.234:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.8.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f82fec code=0x7ffc0000
[  926.676835][   T43] audit: type=1326 audit(1788668095.234:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.8.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000
[  926.676858][   T43] audit: type=1326 audit(1788668095.234:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.8.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000
[  926.680582][   T43] audit: type=1326 audit(1788668095.234:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.8.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f82fec code=0x7ffc0000
[  926.680616][   T43] audit: type=1326 audit(1788668095.234:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.8.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000
[  926.736503][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  927.774820][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  928.038753][T18217] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  928.060495][T18217] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  928.326102][T13450] Bluetooth: hci2: command tx timeout
[  928.435665][T18217] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  928.516606][T18217] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  928.814919][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  929.854522][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  929.901321][T18217] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  929.911818][T18217] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  929.928722][T18217] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  929.936996][T18217] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  929.946084][T18329] netdevsim0 speed is unknown, defaulting to 1000
[  929.953086][T18254] bridge0: port 1(bridge_slave_0) entered blocking state
[  929.955716][T18254] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.958435][T18254] bridge_slave_0: entered allmulticast mode
[  929.961827][T18254] bridge_slave_0: entered promiscuous mode
[  929.966961][T18254] bridge0: port 2(bridge_slave_1) entered blocking state
[  929.969664][T18254] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.972620][T18254] bridge_slave_1: entered allmulticast mode
[  929.976279][T18254] bridge_slave_1: entered promiscuous mode
[  929.994512][T18329] netdevsim0 speed is unknown, defaulting to 1000
[  930.043494][T18254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  930.046047][T18329] netdevsim0 speed is unknown, defaulting to 1000
[  930.047209][T18329] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  930.047246][T18329] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  930.047289][T18329] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  930.064917][T18329] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  930.078181][T18254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  930.347934][T18254] team0: Port device team_slave_0 added
[  930.351317][T18254] team0: Port device team_slave_1 added
[  930.816627][T18329] netdevsim0 speed is unknown, defaulting to 1000
[  930.894228][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  930.899465][T18329] netdevsim0 speed is unknown, defaulting to 1000
[  930.939292][T18254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  930.939370][T18254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  930.939479][T18254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  930.943364][T18254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  930.943379][T18254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  930.943402][T18254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  930.944017][T18329] netdevsim0 speed is unknown, defaulting to 1000
[  930.945554][T18329] netdevsim0 speed is unknown, defaulting to 1000
[  930.959965][T18329] netdevsim0 speed is unknown, defaulting to 1000
[  930.960841][T18329] netdevsim0 speed is unknown, defaulting to 1000
[  930.961664][T18329] netdevsim0 speed is unknown, defaulting to 1000
[  930.972607][T18329] netdevsim0 speed is unknown, defaulting to 1000
[  930.986529][T18329] netdevsim0 speed is unknown, defaulting to 1000
[  931.016307][T18329] netdevsim0 speed is unknown, defaulting to 1000
[  931.017257][T18329] netdevsim0 speed is unknown, defaulting to 1000
[  931.036242][T18254] hsr_slave_0: entered promiscuous mode
[  931.036940][T18254] hsr_slave_1: entered promiscuous mode
[  931.041614][T18254] debugfs: 'hsr0' already exists in 'hsr'
[  931.041715][T18254] Cannot create hsr debugfs directory
[  931.097080][T18217] 8021q: adding VLAN 0 to HW filter on device bond0
[  931.261598][T18217] 8021q: adding VLAN 0 to HW filter on device team0
[  931.280566][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[  931.280719][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[  931.323423][T10913] smbdirect: ib_dev[syz0] removed
[  931.332052][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[  931.332225][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[  931.491440][T17898] hid_parser_main: 12 callbacks suppressed
[  931.491638][T17898] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  931.491767][T17898] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  931.657933][T17898] hid-generic 0000:0000:0000.0006: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  931.907193][T18354] fido_id[18354]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  931.934620][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  932.066824][T10513] hsr_slave_0: left promiscuous mode
[  932.100253][T10513] hsr_slave_1: left promiscuous mode
[  932.127389][T18355] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2720'.
[  932.227959][T10513] veth1_macvtap: left promiscuous mode
[  932.228115][T10513] veth0_macvtap: left promiscuous mode
[  932.318260][T10513] smc: removing net device vlan1 with user defined pnetid SYZ2
[  932.755233][ T5827] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  932.905540][ T5827] usb 12-1: Using ep0 maxpacket: 32
[  932.908420][ T5827] usb 12-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  932.916139][ T5827] usb 12-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  932.916269][ T5827] usb 12-1: config 4 has 0 interfaces, different from the descriptor's value: 9
[  932.920519][ T5827] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  932.920544][ T5827] usb 12-1: Product: syz
[  932.920557][ T5827] usb 12-1: Manufacturer: syz
[  932.920568][ T5827] usb 12-1: SerialNumber: syz
[  932.965737][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  932.971823][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.008266][T18217] 8021q: adding VLAN 0 to HW filter on device batadv0
[  933.127241][T18254] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  933.136581][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.138115][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.138194][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.138377][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.138435][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.138502][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.138753][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.205562][T18363] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2722'.
[  933.213882][T18254] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  933.214895][T18254] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  933.275184][T18254] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  933.277628][T18254] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  933.287085][ T5827] usb 12-1: USB disconnect, device number 2
[  933.315754][T18254] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  933.316526][T18254] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  933.335502][T18254] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  933.605519][T18217] veth0_vlan: entered promiscuous mode
[  933.610085][T18217] veth1_vlan: entered promiscuous mode
[  933.685915][T18217] veth0_macvtap: entered promiscuous mode
[  933.690660][T18217] veth1_macvtap: entered promiscuous mode
[  933.699300][T18217] batman_adv: batadv0: Interface activated: batadv_slave_0
[  933.701984][T18217] batman_adv: batadv0: Interface activated: batadv_slave_1
[  933.741075][T10513] IPVS: stop unused estimator thread 0...
[  933.769907][T18254] 8021q: adding VLAN 0 to HW filter on device bond0
[  933.783733][T17721] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  933.914896][T17721] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  933.915423][T17721] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  933.915692][T17721] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  934.156382][T18254] 8021q: adding VLAN 0 to HW filter on device team0
[  934.179735][T10912] bridge0: port 1(bridge_slave_0) entered blocking state
[  934.179824][T10912] bridge0: port 1(bridge_slave_0) entered forwarding state
[  934.191152][T10912] bridge0: port 2(bridge_slave_1) entered blocking state
[  934.191245][T10912] bridge0: port 2(bridge_slave_1) entered forwarding state
[  934.220615][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  934.220676][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  934.265429][T10913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  934.265551][T10913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  934.592300][T10513] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.509100][T17898] Process accounting resumed
[  936.497912][T10513] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.123409][    C1] net_ratelimit: 67 callbacks suppressed
[  937.123567][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  937.232410][T18395] fuse: Bad value for 'fd'
[  937.855332][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  938.044827][T10513] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.098545][T18254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  938.155591][T18254] veth0_vlan: entered promiscuous mode
[  938.163302][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  938.239179][T10513] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.297094][T18254] veth1_vlan: entered promiscuous mode
[  938.390083][T18254] veth0_macvtap: entered promiscuous mode
[  938.401026][T18254] veth1_macvtap: entered promiscuous mode
[  938.426130][T18254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  938.706462][T18254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  938.908259][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  938.937153][T10512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  938.937515][T10512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  938.937550][T10512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  938.937582][T10512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  938.994866][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  939.142898][T10913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  939.142948][T10913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  939.167913][T10913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  939.167977][T10913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  939.203312][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  939.696646][T18460] CIFS: Attempting to mount //127.0.0.1/share
[  939.697862][T18460] CIFS: VFS: Error connecting to socket. Aborting operation.
[  939.725166][T10513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.739274][T18460] CIFS: VFS: cifs_mount failed w/return code = -111
[  939.807748][ T5454] 8021q: adding VLAN 0 to HW filter on device eth6
[  940.011494][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  940.092789][T10513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  940.183370][T18198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  940.243292][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  940.519889][T10513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  940.610029][T18459] gadgetfs: bound to dummy_udc driver
[  940.741758][ T1348] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[  940.791544][T10513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  940.807594][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  940.913590][ T1348] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  940.914354][ T1348] usb 13-1: config 0 has no interfaces?
[  940.917596][ T1348] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.917627][ T1348] usb 13-1: Product: syz
[  940.917644][ T1348] usb 13-1: Manufacturer: syz
[  940.917663][ T1348] usb 13-1: SerialNumber: syz
[  940.929952][ T1348] usb 13-1: config 0 descriptor??
[  940.937714][ T5454] 8021q: adding VLAN 0 to HW filter on device eth7
[  941.311816][T18440] gfs2: error -5 reading superblock
[  941.425035][T18479] mac80211_hwsim hwsim157 wlan0: entered promiscuous mode
[  942.323148][    C1] net_ratelimit: 4 callbacks suppressed
[  942.323244][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  942.413065][T10513] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.538376][ T5454] 8021q: adding VLAN 0 to HW filter on device eth8
[  942.629987][T10513] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.785386][T18492] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[  942.786345][T10513] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.796237][T18492] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead
[  942.801839][T18492] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead
[  942.813593][T18492] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead
[  942.813742][T18492] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead
[  942.813786][T18492] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead
[  942.813825][T18492] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead
[  942.813876][T18492] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead
[  942.813914][T18492] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead
[  942.813952][T18492] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead
[  942.813990][T18492] jffs2: Further such events for this erase block will not be printed
[  942.814069][T18492] jffs2: Empty flash at 0x00000308 ends at 0x0000030c
[  942.814105][T18492] jffs2: Empty flash at 0x00000330 ends at 0x00000334
[  942.814141][T18492] jffs2: Empty flash at 0x0000034c ends at 0x00000350
[  942.925583][T18492] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  942.932342][T18492] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  943.002502][T10513] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.134741][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  943.174780][ T5454] 8021q: adding VLAN 0 to HW filter on device eth9
[  943.363224][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  943.395477][T10513] bridge_slave_1: left allmulticast mode
[  943.395562][T10513] bridge_slave_1: left promiscuous mode
[  943.395733][T10513] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.429240][T10513] bridge_slave_0: left allmulticast mode
[  943.429345][T10513] bridge_slave_0: left promiscuous mode
[  943.432960][T10513] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.556241][T10513] dummy0: left allmulticast mode
[  943.556580][T10513] bridge0: port 3(dummy0) entered disabled state
[  943.885679][T10513] bridge_slave_1: left allmulticast mode
[  943.885802][T10513] bridge_slave_1: left promiscuous mode
[  943.886078][T10513] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.912585][T10513] bridge_slave_0: left allmulticast mode
[  943.912712][T10513] bridge_slave_0: left promiscuous mode
[  943.913461][T10513] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.940316][T18508] input: syz1 as /devices/virtual/input/input31
[  944.009165][T10513] bridge_slave_1: left allmulticast mode
[  944.009258][T10513] bridge_slave_1: left promiscuous mode
[  944.009490][T10513] bridge0: port 2(bridge_slave_1) entered disabled state
[  944.032795][T10513] bridge_slave_0: left allmulticast mode
[  944.033884][T10513] bridge_slave_0: left promiscuous mode
[  944.034187][T10513] bridge0: port 1(bridge_slave_0) entered disabled state
[  944.133015][T17898] usb 13-1: USB disconnect, device number 2
[  944.166826][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  944.402980][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  944.527838][T18510] input: syz0 as /devices/virtual/input/input32
[  944.540438][T18515] xt_connbytes: Forcing CT accounting to be enabled
[  944.541134][T18515] xt_TPROXY: Can be used only with -p tcp or -p udp
[  944.797581][T18515] ceph: No mds server is up or the cluster is laggy
[  945.141102][T18125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  945.152340][T14447] libceph: connect (1)[c::]:6789 error -101
[  945.152506][T14447] libceph: mon0 (1)[c::]:6789 connect error
[  945.223223][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  945.442902][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  945.500263][T18528] binder_alloc: 18523: binder_alloc_buf size 66480 failed, no address space
[  945.500414][T18528] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  945.708390][T10513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  945.726525][T10513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  945.738698][T10513] bond0 (unregistering): Released all slaves
[  946.214761][T10513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  946.255083][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  946.279882][T10513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  946.308673][T10513] bond0 (unregistering): Released all slaves
[  946.482903][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  946.517665][T18236] Bluetooth: hci0: Frame reassembly failed (-90)
[  946.821985][T10513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  946.840738][T10513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  946.871337][T10513] bond0 (unregistering): Released all slaves
[  946.899562][ T5454] 8021q: adding VLAN 0 to HW filter on device eth10
[  947.532821][    C1] net_ratelimit: 1 callbacks suppressed
[  947.533001][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  947.605837][T18099] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  947.759635][T18099] usb 12-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  947.770950][T18099] usb 12-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  947.771088][T18099] usb 12-1: Product: syz
[  947.771188][T18099] usb 12-1: Manufacturer: syz
[  947.771223][T18099] usb 12-1: SerialNumber: syz
[  947.785524][T18099] usb 12-1: config 0 descriptor??
[  947.807988][T18099] ch341 12-1:0.0: ch341-uart converter detected
[  948.168773][T18125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.323569][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.389546][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2741'.
[  948.511701][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2741'.
[  948.524994][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2741'.
[  948.537741][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2741'.
[  948.548379][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2741'.
[  948.562977][T13450] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  948.572742][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  948.896378][T18099] usb 12-1: failed to receive control message: -110
[  948.906253][T18099] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110
[  949.365411][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  949.612723][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  950.405751][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.415357][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.425048][ T5454] 8021q: adding VLAN 0 to HW filter on device eth11
[  950.471378][T18563] netlink: 'syz.2.2743': attribute type 1 has an invalid length.
[  950.471453][T18563] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2743'.
[  950.471826][T18563] netlink: 'syz.2.2743': attribute type 1 has an invalid length.
[  950.471886][T18563] netlink: 29 bytes leftover after parsing attributes in process `syz.2.2743'.
[  950.482213][T18563] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2743'.
[  950.489574][   T43] kauditd_printk_skb: 35 callbacks suppressed
[  950.489669][   T43] audit: type=1800 audit(1788668119.045:6520): pid=18558 uid=255 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2741" name="file0" dev="9p" ino=74469303 res=0 errno=0
[  950.642605][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  950.674133][  T854] usb 12-1: USB disconnect, device number 3
[  950.703061][  T854] ch341 12-1:0.0: device disconnected
[  951.120949][T18582] team0: Device ipip0 is up. Set it down before adding it as a team port
[  951.208664][T18125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  951.446950][ T5454] 8021q: adding VLAN 0 to HW filter on device eth12
[  951.659531][T10513] hsr_slave_0: left promiscuous mode
[  951.676537][T10513] hsr_slave_1: left promiscuous mode
[  951.679297][T10513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  951.688382][T10513] batman_adv: batadv0: Removing interface: batadv_slave_0
[  951.702116][T10513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  951.705632][T10513] batman_adv: batadv0: Removing interface: batadv_slave_1
[  951.807997][T18592] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  952.039194][T10513] hsr_slave_0: left promiscuous mode
[  952.092869][T10513] hsr_slave_1: left promiscuous mode
[  952.093800][T10513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  952.093819][T10513] batman_adv: batadv0: Removing interface: batadv_slave_0
[  952.124426][T10513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  952.124560][T10513] batman_adv: batadv0: Removing interface: batadv_slave_1
[  952.303320][T10513] hsr_slave_0: left promiscuous mode
[  952.320606][T10513] hsr_slave_1: left promiscuous mode
[  952.461248][T10513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  952.476482][T10513] batman_adv: batadv0: Removing interface: batadv_slave_0
[  952.732601][    C1] net_ratelimit: 2 callbacks suppressed
[  952.732727][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  952.771914][T10513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  952.774261][T10513] batman_adv: batadv0: Removing interface: batadv_slave_1
[  952.901831][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  953.547070][T10513] veth1_macvtap: left promiscuous mode
[  953.547209][T10513] veth0_macvtap: left promiscuous mode
[  953.548456][T10513] veth1_vlan: left promiscuous mode
[  953.548607][T10513] veth0_vlan: left promiscuous mode
[  953.596816][T10513] veth1_macvtap: left promiscuous mode
[  953.596991][T10513] veth0_macvtap: left promiscuous mode
[  953.597196][T10513] veth1_vlan: left promiscuous mode
[  953.597321][T10513] veth0_vlan: left promiscuous mode
[  953.616669][T10513] veth1_macvtap: left promiscuous mode
[  953.616754][T10513] veth0_macvtap: left promiscuous mode
[  953.616891][T10513] veth1_vlan: left promiscuous mode
[  953.616959][T10513] veth0_vlan: left promiscuous mode
[  953.762555][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  953.948949][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.242810][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.368563][T10513] team0 (unregistering): Port device team_slave_1 removed
[  954.382101][T10513] team0 (unregistering): Port device team_slave_0 removed
[  954.666781][T10513] team0 (unregistering): Port device team_slave_1 removed
[  954.687202][T10513] team0 (unregistering): Port device team_slave_0 removed
[  954.802388][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  954.968211][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.071679][T10513] team0 (unregistering): Port device team_slave_1 removed
[  955.096994][T10513] team0 (unregistering): Port device team_slave_0 removed
[  955.347698][T18608] macvlan0: entered promiscuous mode
[  955.710258][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2753'.
[  955.852337][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  956.005132][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  956.192853][ T5454] 8021q: adding VLAN 0 to HW filter on device eth13
[  956.882260][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  956.888901][ T5454] 8021q: adding VLAN 0 to HW filter on device eth14
[  957.396511][ T5454] 8021q: adding VLAN 0 to HW filter on device eth15
[  957.797309][T17997] IPVS: starting estimator thread 0...
[  957.797826][ T5454] 8021q: adding VLAN 0 to HW filter on device eth17
[  957.892619][T18664] IPVS: using max 26 ests per chain, 62400 per kthread
[  957.918118][T18666] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  957.932254][    C1] net_ratelimit: 2 callbacks suppressed
[  957.932426][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  958.082627][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  958.510774][T18671] vlan2: entered allmulticast mode
[  958.515264][T18671] bond0: entered allmulticast mode
[  958.517661][T18671] bond_slave_0: entered allmulticast mode
[  958.520545][T18671] bond_slave_1: entered allmulticast mode
[  958.529478][ T5454] 8021q: adding VLAN 0 to HW filter on device eth16
[  958.536368][T18671] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2758'.
[  958.750473][T18671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  958.757949][T18671] bond_slave_0: left allmulticast mode
[  958.799874][T18671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  958.811024][T18671] bond_slave_1: left allmulticast mode
[  958.821568][T18671] bond0 (unregistering): Released all slaves
[  958.972205][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  959.372320][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.433888][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.535730][T18688] Console: switching to colour dummy device 80x25
[  959.595631][T18691] team0: Device ipip0 is up. Set it down before adding it as a team port
[  960.012302][T18198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.012597][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  960.323928][T18125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  961.052026][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  961.088209][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  962.667341][T18734] macvlan0: entered promiscuous mode
[  963.121948][    C1] net_ratelimit: 3 callbacks suppressed
[  963.122032][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  963.362448][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  963.845812][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  963.857439][   T64] hid-multitouch 0005:0457:0009.0007: unknown main item tag 0x0
[  963.900954][   T64] hid-multitouch 0005:0457:0009.0007: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  964.102738][T18750] fido_id[18750]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory
[  964.173658][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  965.211743][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  965.519558][T18754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.519754][T18754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.520044][T18754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.534237][T18198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.537806][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  966.491242][T18771] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  966.554842][T17723] rtrs_client L1777: <s+>: Resolving route failed, err: -ENODEV
[  966.621200][T18771] rtrs_client L2636: <s+>: init_conns() failed: err=-ENODEV path=<invalid address family>@ip:127.0.0.1 [:0]
[  968.168620][T18795] fuse: Bad value for 'fd'
[  968.321898][    C1] net_ratelimit: 10 callbacks suppressed
[  968.322078][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  968.651314][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  968.672115][   T43] audit: type=1326 audit(1788668136.231:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.7.2777" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  968.672314][   T43] audit: type=1326 audit(1788668136.241:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.7.2777" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  968.687710][   T43] audit: type=1326 audit(1788668136.241:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.7.2777" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf706efec code=0x7ffc0000
[  968.706621][   T43] audit: type=1326 audit(1788668136.271:6524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.7.2777" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  968.706987][   T43] audit: type=1326 audit(1788668136.271:6525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.7.2777" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  968.721749][   T43] audit: type=1326 audit(1788668136.281:6526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.7.2777" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706efec code=0x7ffc0000
[  968.721842][   T43] audit: type=1326 audit(1788668136.281:6527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.7.2777" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  968.721931][   T43] audit: type=1326 audit(1788668136.281:6528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.7.2777" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  968.726882][   T43] audit: type=1326 audit(1788668136.291:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.7.2777" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706efec code=0x7ffc0000
[  968.727026][   T43] audit: type=1326 audit(1788668136.291:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.7.2777" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  969.302556][T18803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2775'.
[  969.357216][T18812] nvmet: adding nsid 1 to subsystem testnqn
[  969.371685][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  969.443741][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  969.539715][T18815] team0: Device ipip0 is up. Set it down before adding it as a team port
[  969.739823][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.411559][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  970.804502][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.441413][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  971.841916][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  972.481415][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  972.793805][T18891] xt_connbytes: Forcing CT accounting to be enabled
[  972.794296][T18891] Cannot find del_set index 0 as target
[  972.974086][T18891] ceph: No mds server is up or the cluster is laggy
[  972.987309][T14447] libceph: connect (1)[c::]:6789 error -101
[  972.989973][T14447] libceph: mon0 (1)[c::]:6789 connect error
[  973.531440][    C1] net_ratelimit: 2 callbacks suppressed
[  973.533244][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  973.984503][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  974.537779][T18912] fuse: Bad value for 'fd'
[  974.561777][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  975.031774][T17898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.042446][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.421004][T18913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.421999][T18913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.422180][T18913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.436938][T18913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.438788][T18913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  976.093475][T18899] input: syz0 as /devices/virtual/input/input33
[  976.895108][T18929] macvlan0: entered promiscuous mode
[  978.564813][T18125] net_ratelimit: 86 callbacks suppressed
[  978.564949][T18125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  978.579993][T18944] xt_connbytes: Forcing CT accounting to be enabled
[  978.580120][T18944] Cannot find del_set index 0 as target
[  978.731017][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  979.021742][T18944] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  979.116970][T14447] hid-multitouch 0005:0457:0009.0008: unknown main item tag 0x0
[  979.454439][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  979.761039][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  980.481464][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.810908][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  981.294706][T14447] hid-multitouch 0005:0457:0009.0008: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  981.526272][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  981.604639][ T6797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  981.682536][T18958] fido_id[18958]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory
[  981.840846][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  982.573249][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  983.536006][T15080] Bluetooth: hci6: command 0x206a tx timeout
[  983.536289][T13450] Bluetooth: hci6: Opcode 0x206a failed: -110
[  983.611853][ T5851] net_ratelimit: 1 callbacks suppressed
[  983.612002][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  983.920782][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  984.490232][T18995] ubi16: attaching mtd0
[  984.877345][T18997] netlink: 'syz.7.2806': attribute type 21 has an invalid length.
[  984.881505][T18997] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2806'.
[  984.881728][T18997] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2806'.
[  984.952097][T18125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  984.953383][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  984.960947][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  984.992623][T18995] ubi16: scanning is finished
[  984.992733][T18995] ubi16 error: ubi_read_volume_table: the layout volume was not found
[  985.198262][T19006] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  985.218376][T19006] IPv6: addrconf: prefix option has invalid lifetime
[  985.262078][T18995] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  985.600375][T18996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2805'.
[  985.604502][T17898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  986.001147][    C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  986.002470][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  987.040835][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  988.875268][T19036] macvlan0: entered promiscuous mode
[  989.120468][    C1] net_ratelimit: 38 callbacks suppressed
[  989.120683][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  989.365216][T19040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  989.365540][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  989.441832][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  989.885641][T19043] capability: warning: `syz.7.2814' uses 32-bit capabilities (legacy support in use)
[  990.160558][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  990.491762][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.533236][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2815'.
[  991.201118][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  991.526037][ T6797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  991.530683][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  992.250283][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  993.560490][T19066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  994.320398][    C1] net_ratelimit: 3 callbacks suppressed
[  994.320543][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  994.541713][T19078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  994.542448][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  994.677643][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  994.677684][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.243750][T16267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.352201][T19088] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[  995.352339][T19088] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead
[  995.360391][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  995.399541][T19088] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead
[  995.399655][T19088] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead
[  995.399691][T19088] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead
[  995.399731][T19088] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead
[  995.399767][T19088] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead
[  995.399815][T19088] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead
[  995.399849][T19088] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead
[  995.399884][T19088] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead
[  995.400069][T19088] jffs2: Further such events for this erase block will not be printed
[  995.400135][T19088] jffs2: Empty flash at 0x00000308 ends at 0x0000030c
[  995.400153][T19088] jffs2: Empty flash at 0x00000330 ends at 0x00000334
[  995.400168][T19088] jffs2: Empty flash at 0x0000034c ends at 0x00000350
[  995.501581][T19088] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  995.501597][T19088] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  995.680960][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.751705][T19091] overlay: ./file0 is not a directory
[  995.944713][   T43] kauditd_printk_skb: 7 callbacks suppressed
[  995.944904][   T43] audit: type=1807 audit(1788668162.466:6538): action=measure res=1
[  996.021249][T16267] hid-multitouch 0005:0457:0009.0009: unknown main item tag 0x0
[  996.118078][T19097] ima: policy update completed
[  996.120838][   T43] audit: type=1802 audit(1788668162.676:6539): pid=19097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.7.2827" res=1 errno=0
[  996.199441][   T43] audit: type=1800 audit(1788668162.756:6540): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16567 res=0 errno=0
[  996.209344][   T43] audit: type=1800 audit(1788668162.766:6541): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16567 res=0 errno=0
[  996.410149][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  996.414451][T16267] hid-multitouch 0005:0457:0009.0009: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  996.415690][   T43] audit: type=1800 audit(1788668162.976:6542): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=428425 res=0 errno=0
[  996.723921][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  996.750199][   T43] audit: type=1800 audit(1788668163.146:6543): pid=19103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=428405 res=0 errno=0
[  996.750349][   T43] audit: type=1800 audit(1788668163.166:6544): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=428403 res=0 errno=0
[  997.304195][   T43] audit: type=1800 audit(1788668163.866:6545): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0
[  997.327698][   T43] audit: type=1800 audit(1788668163.886:6546): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0
[  998.277030][   T43] audit: type=1800 audit(1788668164.836:6547): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0
[  999.519821][    C1] net_ratelimit: 5 callbacks suppressed
[  999.519891][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  999.833970][T19145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  999.834218][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  999.844743][T19136] Bluetooth: hci5: command 0x0406 tx timeout
[  999.920810][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  999.995959][T19147] netlink: 'syz.7.2838': attribute type 1 has an invalid length.
[ 1000.559814][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1000.880145][T15080] Bluetooth: hci2: command 0x2016 tx timeout
[ 1000.960690][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1001.012408][   T43] kauditd_printk_skb: 1 callbacks suppressed
[ 1001.012488][   T43] audit: type=1800 audit(1788668167.577:6549): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0
[ 1001.022772][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1001.116528][T19147] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1001.117917][T19149] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[ 1001.600133][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1001.938902][   T43] audit: type=1800 audit(1788668168.497:6550): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16567 res=0 errno=0
[ 1002.003618][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1002.174031][T13450] Bluetooth: hci2: link tx timeout
[ 1002.179789][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.203125][T13450] Bluetooth: hci2: link tx timeout
[ 1002.207011][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.207308][T13450] Bluetooth: hci2: link tx timeout
[ 1002.207359][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.207474][T13450] Bluetooth: hci2: link tx timeout
[ 1002.207574][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.208388][T13450] Bluetooth: hci2: link tx timeout
[ 1002.208437][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.220824][T13450] Bluetooth: hci2: link tx timeout
[ 1002.222327][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.222759][T13450] Bluetooth: hci2: link tx timeout
[ 1002.222809][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.230319][T13450] Bluetooth: hci2: link tx timeout
[ 1002.230579][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.230653][T13450] Bluetooth: hci2: link tx timeout
[ 1002.230853][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.231010][T13450] Bluetooth: hci2: link tx timeout
[ 1002.231053][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.231402][T13450] Bluetooth: hci2: link tx timeout
[ 1002.231444][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.231758][T13450] Bluetooth: hci2: link tx timeout
[ 1002.231769][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.233722][T13450] Bluetooth: hci2: link tx timeout
[ 1002.233825][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.235448][T13450] Bluetooth: hci2: link tx timeout
[ 1002.235490][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.235847][T13450] Bluetooth: hci2: link tx timeout
[ 1002.235997][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.236726][T13450] Bluetooth: hci2: link tx timeout
[ 1002.236768][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.237716][T13450] Bluetooth: hci2: link tx timeout
[ 1002.237762][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.238083][T13450] Bluetooth: hci2: link tx timeout
[ 1002.238347][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.238432][T13450] Bluetooth: hci2: link tx timeout
[ 1002.238672][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.239209][T13450] Bluetooth: hci2: link tx timeout
[ 1002.239221][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.241286][T13450] Bluetooth: hci2: link tx timeout
[ 1002.241333][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.241628][T13450] Bluetooth: hci2: link tx timeout
[ 1002.241677][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.242185][T13450] Bluetooth: hci2: link tx timeout
[ 1002.242228][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.242647][T13450] Bluetooth: hci2: link tx timeout
[ 1002.242690][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.243078][T13450] Bluetooth: hci2: link tx timeout
[ 1002.243170][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.243548][T13450] Bluetooth: hci2: link tx timeout
[ 1002.243559][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.243778][T13450] Bluetooth: hci2: link tx timeout
[ 1002.246676][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.247202][T13450] Bluetooth: hci2: link tx timeout
[ 1002.247245][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.247587][T13450] Bluetooth: hci2: link tx timeout
[ 1002.247633][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.248049][T13450] Bluetooth: hci2: link tx timeout
[ 1002.248162][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.248390][T13450] Bluetooth: hci2: link tx timeout
[ 1002.248430][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.248713][T13450] Bluetooth: hci2: link tx timeout
[ 1002.248755][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.249491][T13450] Bluetooth: hci2: link tx timeout
[ 1002.249681][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.250797][T13450] Bluetooth: hci2: link tx timeout
[ 1002.250839][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.252280][T13450] Bluetooth: hci2: link tx timeout
[ 1002.252321][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.252655][T13450] Bluetooth: hci2: link tx timeout
[ 1002.252757][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.253204][T13450] Bluetooth: hci2: link tx timeout
[ 1002.253245][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.253396][T13450] Bluetooth: hci2: link tx timeout
[ 1002.253407][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.253548][T13450] Bluetooth: hci2: link tx timeout
[ 1002.253644][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.254317][T13450] Bluetooth: hci2: link tx timeout
[ 1002.254358][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.254827][T13450] Bluetooth: hci2: link tx timeout
[ 1002.254871][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.255668][T13450] Bluetooth: hci2: link tx timeout
[ 1002.255713][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.261031][T13450] Bluetooth: hci2: link tx timeout
[ 1002.261049][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.262564][T13450] Bluetooth: hci2: link tx timeout
[ 1002.262758][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.263055][T13450] Bluetooth: hci2: link tx timeout
[ 1002.263073][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.263156][T13450] Bluetooth: hci2: link tx timeout
[ 1002.263254][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.263709][T13450] Bluetooth: hci2: link tx timeout
[ 1002.263754][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.264062][T13450] Bluetooth: hci2: link tx timeout
[ 1002.264555][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.265501][T13450] Bluetooth: hci2: link tx timeout
[ 1002.265547][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.265753][T13450] Bluetooth: hci2: link tx timeout
[ 1002.265764][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.266002][T13450] Bluetooth: hci2: link tx timeout
[ 1002.266090][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.266910][T13450] Bluetooth: hci2: link tx timeout
[ 1002.266921][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.267425][T13450] Bluetooth: hci2: link tx timeout
[ 1002.268073][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.268095][T13450] Bluetooth: hci2: link tx timeout
[ 1002.268104][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.268584][T13450] Bluetooth: hci2: link tx timeout
[ 1002.268596][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.268822][T13450] Bluetooth: hci2: link tx timeout
[ 1002.268948][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.274334][T13450] Bluetooth: hci2: link tx timeout
[ 1002.274348][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.277618][T13450] Bluetooth: hci2: link tx timeout
[ 1002.277777][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.277978][T13450] Bluetooth: hci2: link tx timeout
[ 1002.278023][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.278444][T13450] Bluetooth: hci2: link tx timeout
[ 1002.278766][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.280879][T13450] Bluetooth: hci2: link tx timeout
[ 1002.281250][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.281769][T13450] Bluetooth: hci2: link tx timeout
[ 1002.281785][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.282217][T13450] Bluetooth: hci2: link tx timeout
[ 1002.282429][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.283418][T13450] Bluetooth: hci2: link tx timeout
[ 1002.283524][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.284446][T13450] Bluetooth: hci2: link tx timeout
[ 1002.284613][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.285103][T13450] Bluetooth: hci2: link tx timeout
[ 1002.285307][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.285445][T13450] Bluetooth: hci2: link tx timeout
[ 1002.285633][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.285734][T13450] Bluetooth: hci2: link tx timeout
[ 1002.285938][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.286507][T13450] Bluetooth: hci2: link tx timeout
[ 1002.286670][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.287025][T13450] Bluetooth: hci2: link tx timeout
[ 1002.287194][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.287483][T13450] Bluetooth: hci2: link tx timeout
[ 1002.287630][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.288124][T13450] Bluetooth: hci2: link tx timeout
[ 1002.288166][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.294282][T13450] Bluetooth: hci2: link tx timeout
[ 1002.294365][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.294661][T13450] Bluetooth: hci2: link tx timeout
[ 1002.294701][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.294753][T13450] Bluetooth: hci2: link tx timeout
[ 1002.294876][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.295060][T13450] Bluetooth: hci2: link tx timeout
[ 1002.295323][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.295876][T13450] Bluetooth: hci2: link tx timeout
[ 1002.295888][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.296464][T13450] Bluetooth: hci2: link tx timeout
[ 1002.296476][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.296936][T13450] Bluetooth: hci2: link tx timeout
[ 1002.296980][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.297486][T13450] Bluetooth: hci2: link tx timeout
[ 1002.297628][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.297880][T13450] Bluetooth: hci2: link tx timeout
[ 1002.297924][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.299483][T13450] Bluetooth: hci2: link tx timeout
[ 1002.299655][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.300134][T13450] Bluetooth: hci2: link tx timeout
[ 1002.300146][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.300264][T13450] Bluetooth: hci2: link tx timeout
[ 1002.300309][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.300992][T13450] Bluetooth: hci2: link tx timeout
[ 1002.301036][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.301648][T13450] Bluetooth: hci2: link tx timeout
[ 1002.301693][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.302055][T13450] Bluetooth: hci2: link tx timeout
[ 1002.302100][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.302537][T13450] Bluetooth: hci2: link tx timeout
[ 1002.302713][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.312537][T13450] Bluetooth: hci2: link tx timeout
[ 1002.312596][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.312695][T13450] Bluetooth: hci2: link tx timeout
[ 1002.312946][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.313004][T13450] Bluetooth: hci2: link tx timeout
[ 1002.313048][T13450] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1002.641432][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1002.712432][   T43] audit: type=1800 audit(1788668169.277:6551): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0
[ 1002.903971][   T43] audit: type=1800 audit(1788668169.467:6552): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16567 res=0 errno=0
[ 1002.959730][T19136] Bluetooth: hci2: command 0x2016 tx timeout
[ 1004.451979][   T43] audit: type=1800 audit(1788668171.007:6553): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4812 res=0 errno=0
[ 1004.505883][T10912] IPVS: starting estimator thread 0...
[ 1004.516570][T19187] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[ 1004.591982][T19186] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1004.640473][T19181] net_ratelimit: 13 callbacks suppressed
[ 1004.640549][T19181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1004.719614][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1004.823455][T16267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1004.963284][T19136] Bluetooth: hci6: command 0x206a tx timeout
[ 1004.967077][   T43] audit: type=1800 audit(1788668171.527:6554): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16567 res=0 errno=0
[ 1005.174554][T13450] Bluetooth: hci2: command 0x2016 tx timeout
[ 1005.210886][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1005.714620][   T43] audit: type=1800 audit(1788668172.277:6555): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0
[ 1005.759585][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1006.472454][T19199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1006.472703][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1006.639752][T19187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1006.809527][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1007.446660][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1009.762150][ T5851] net_ratelimit: 4 callbacks suppressed
[ 1009.762236][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1009.919450][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1010.479600][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.574242][T19217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.574451][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.804249][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.959258][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1011.048103][   T43] audit: type=1800 audit(1788668177.607:6556): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16567 res=0 errno=0
[ 1011.313531][T15080] Bluetooth: hci1: hardware error 0x69
[ 1011.316902][T19223] new mount options do not match the existing superblock, will be ignored
[ 1011.321870][T19223] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[ 1011.832705][   T43] audit: type=1800 audit(1788668178.397:6557): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16567 res=0 errno=0
[ 1011.842872][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1011.987163][   T38] IPVS: starting estimator thread 0...
[ 1011.999290][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1011.999593][T19231] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[ 1012.069241][T19230] IPVS: using max 43 ests per chain, 103200 per kthread
[ 1012.253607][T19226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1012.321323][   T43] audit: type=1800 audit(1788668178.887:6558): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0
[ 1013.500873][   T43] audit: type=1800 audit(1788668180.067:6559): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=429001 res=0 errno=0
[ 1013.507041][   T43] audit: type=1800 audit(1788668180.067:6560): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=429016 res=0 errno=0
[ 1013.759054][T15080] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1013.792482][   T43] audit: type=1800 audit(1788668180.357:6561): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0
[ 1013.841166][   T43] audit: type=1800 audit(1788668180.397:6562): pid=19234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2858" name="attach" dev="sysfs" ino=36236 res=0 errno=0
[ 1013.867961][T19234] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11)
[ 1013.868012][T19234] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1013.868590][T19234] vhci_hcd vhci_hcd.0: Device attached
[ 1013.925636][   T43] audit: type=1800 audit(1788668180.487:6563): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=429031 res=0 errno=0
[ 1013.931000][   T43] audit: type=1800 audit(1788668180.497:6564): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=429043 res=0 errno=0
[ 1013.947411][   T43] audit: type=1800 audit(1788668180.507:6565): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=429055 res=0 errno=0
[ 1013.948306][T19257] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2862'.
[ 1014.129091][   T25] usb 56-1: SetAddress Request (2) to port 0
[ 1014.129212][   T25] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1014.135283][T19266] loop9: detected capacity change from 0 to 255852544
[ 1014.156312][T19267] 
[ 1014.163628][T19267] ======================================================
[ 1014.166113][T19267] WARNING: possible circular locking dependency detected
[ 1014.168407][T19267] syzkaller #0 Tainted: G             L     
[ 1014.170876][T19267] ------------------------------------------------------
[ 1014.173839][T19267] syz.2.2864/19267 is trying to acquire lock:
[ 1014.175863][T19267] ffff88806aecda70 (&p->frag_sem){++++}-{4:4}, at: __configfs_open_file+0xe8/0x9c0
[ 1014.178826][T19267] 
[ 1014.178826][T19267] but task is already holding lock:
[ 1014.181270][T19267] ffff88802679fa28 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350
[ 1014.184781][T19267] 
[ 1014.184781][T19267] which lock already depends on the new lock.
[ 1014.184781][T19267] 
[ 1014.188196][T19267] 
[ 1014.188196][T19267] the existing dependency chain (in reverse order) is:
[ 1014.191759][T19267] 
[ 1014.191759][T19267] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[ 1014.194745][T19267]        lock_acquire+0x1d1/0x380
[ 1014.196332][T19267]        __mutex_lock+0x1a4/0x1bd0
[ 1014.197936][T19267]        process_measurement+0x5ab/0x2350
[ 1014.199890][T19267]        ima_file_check+0xcc/0x120
[ 1014.201629][T19267]        security_file_post_open+0xc4/0x210
[ 1014.203781][T19267]        path_openat+0x5cd/0x2440
[ 1014.205435][T19267]        do_file_open+0x20e/0x430
[ 1014.207190][T19267]        do_sys_openat2+0x10f/0x1e0
[ 1014.209174][T19267]        __x64_sys_openat+0x12d/0x210
[ 1014.211103][T19267]        do_syscall_64+0x121/0x770
[ 1014.212880][T19267]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1014.215117][T19267] 
[ 1014.215117][T19267] -> #2 (sb_writers#5){.+.+}-{0:0}:
[ 1014.217649][T19267]        lock_acquire+0x1d1/0x380
[ 1014.219426][T19267]        mnt_want_write+0x6f/0x420
[ 1014.221362][T19267]        lookup_open+0x150/0x1990
[ 1014.223194][T19267]        path_openat+0xa2c/0x2440
[ 1014.224861][T19267]        do_file_open+0x20e/0x430
[ 1014.226562][T19267]        file_open_name+0x1c3/0x3e0
[ 1014.228300][T19267]        filp_open+0x2e/0x50
[ 1014.230089][T19267]        nvmet_file_ns_enable+0x95/0x420
[ 1014.232169][T19267]        nvmet_ns_enable+0x43b/0x650
[ 1014.233889][T19267]        nvmet_ns_enable_store+0x11e/0x160
[ 1014.235731][T19267]        configfs_write_iter+0x302/0x4e0
[ 1014.237608][T19267]        vfs_write+0x6af/0x1050
[ 1014.239161][T19267]        ksys_write+0x12a/0x250
[ 1014.240680][T19267]        __do_fast_syscall_32+0x13a/0x8b0
[ 1014.242719][T19267]        do_fast_syscall_32+0x32/0x70
[ 1014.244615][T19267]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1014.247451][T19267] 
[ 1014.247451][T19267] -> #1 (&subsys->lock){+.+.}-{4:4}:
[ 1014.250279][T19267]        lock_acquire+0x1d1/0x380
[ 1014.251971][T19267]        __mutex_lock+0x1a4/0x1bd0
[ 1014.253602][T19267]        nvmet_ns_buffered_io_store+0xc0/0x1e0
[ 1014.255528][T19267]        configfs_write_iter+0x302/0x4e0
[ 1014.257285][T19267]        vfs_write+0x6af/0x1050
[ 1014.258827][T19267]        ksys_write+0x12a/0x250
[ 1014.260415][T19267]        __do_fast_syscall_32+0x13a/0x8b0
[ 1014.262438][T19267]        do_fast_syscall_32+0x32/0x70
[ 1014.264508][T19267]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1014.266998][T19267] 
[ 1014.266998][T19267] -> #0 (&p->frag_sem){++++}-{4:4}:
[ 1014.269359][T19267]        check_prev_add+0xeb/0xe60
[ 1014.271026][T19267]        __lock_acquire+0x1492/0x1ec0
[ 1014.272741][T19267]        lock_acquire+0x1d1/0x380
[ 1014.274337][T19267]        down_read+0x99/0x4c0
[ 1014.275867][T19267]        __configfs_open_file+0xe8/0x9c0
[ 1014.277627][T19267]        do_dentry_open+0x6ab/0x14d0
[ 1014.279343][T19267]        vfs_open+0x82/0x3f0
[ 1014.281190][T19267]        dentry_open+0x71/0xd0
[ 1014.283015][T19267]        ima_calc_file_hash+0xe1/0x380
[ 1014.285152][T19267]        ima_collect_measurement+0x94f/0xb30
[ 1014.287062][T19267]        process_measurement+0xdfe/0x2350
[ 1014.289017][T19267]        ima_file_check+0xcc/0x120
[ 1014.290693][T19267]        security_file_post_open+0xc4/0x210
[ 1014.292823][T19267]        path_openat+0x5cd/0x2440
[ 1014.294427][T19267]        do_file_open+0x20e/0x430
[ 1014.296053][T19267]        do_sys_openat2+0x10f/0x1e0
[ 1014.297968][T19267]        __ia32_compat_sys_openat+0x12d/0x210
[ 1014.300763][T19267]        __do_fast_syscall_32+0x13a/0x8b0
[ 1014.303563][T19267]        do_fast_syscall_32+0x32/0x70
[ 1014.306096][T19267]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1014.308784][T19267] 
[ 1014.308784][T19267] other info that might help us debug this:
[ 1014.308784][T19267] 
[ 1014.312484][T19267] Chain exists of:
[ 1014.312484][T19267]   &p->frag_sem --> sb_writers#5 --> &ima_iint_mutex_key[depth]
[ 1014.312484][T19267] 
[ 1014.316760][T19267]  Possible unsafe locking scenario:
[ 1014.316760][T19267] 
[ 1014.319231][T19267]        CPU0                    CPU1
[ 1014.321194][T19267]        ----                    ----
[ 1014.323115][T19267]   lock(&ima_iint_mutex_key[depth]);
[ 1014.325569][T19267]                                lock(sb_writers#5);
[ 1014.328238][T19267]                                lock(&ima_iint_mutex_key[depth]);
[ 1014.331448][T19267]   rlock(&p->frag_sem);
[ 1014.333137][T19267] 
[ 1014.333137][T19267]  *** DEADLOCK ***
[ 1014.333137][T19267] 
[ 1014.336322][T19267] locks held by syz.2.2864/19267: 1, last CPU#1:
[ 1014.339162][T19267]  #0: ffff88802679fa28 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350
[ 1014.343636][T19267] 
[ 1014.343636][T19267] stack backtrace:
[ 1014.345601][T19267] CPU: 1 UID: 0 PID: 19267 Comm: syz.2.2864 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1014.349189][T19267] Tainted: [L]=SOFTLOCKUP
[ 1014.351165][T19267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1014.354640][T19267] Call Trace:
[ 1014.355923][T19267]  <TASK>
[ 1014.357242][T19267]  dump_stack_lvl+0x100/0x190
[ 1014.359312][T19267]  print_circular_bug.cold+0x178/0x1be
[ 1014.361930][T19267]  check_noncircular+0x146/0x160
[ 1014.365024][T19267]  ? kasan_save_stack+0x30/0x50
[ 1014.366999][T19267]  ? process_measurement+0xdfe/0x2350
[ 1014.369127][T19267]  check_prev_add+0xeb/0xe60
[ 1014.371010][T19267]  ? do_fast_syscall_32+0x32/0x70
[ 1014.373088][T19267]  __lock_acquire+0x1492/0x1ec0
[ 1014.375153][T19267]  lock_acquire+0x1d1/0x380
[ 1014.377298][T19267]  ? __configfs_open_file+0xe8/0x9c0
[ 1014.379581][T19267]  ? __pfx___might_resched+0x10/0x10
[ 1014.381685][T19267]  down_read+0x99/0x4c0
[ 1014.383051][T19267]  ? __configfs_open_file+0xe8/0x9c0
[ 1014.384701][T19267]  ? __pfx_down_read+0x10/0x10
[ 1014.386359][T19267]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[ 1014.388213][T19267]  ? __configfs_open_file+0xcb/0x9c0
[ 1014.390027][T19267]  __configfs_open_file+0xe8/0x9c0
[ 1014.391973][T19267]  do_dentry_open+0x6ab/0x14d0
[ 1014.393750][T19267]  ? __pfx_configfs_open_file+0x10/0x10
[ 1014.396034][T19267]  vfs_open+0x82/0x3f0
[ 1014.397325][T19267]  dentry_open+0x71/0xd0
[ 1014.398616][T19267]  ima_calc_file_hash+0xe1/0x380
[ 1014.400128][T19267]  ima_collect_measurement+0x94f/0xb30
[ 1014.401846][T19267]  ? __pfx_ima_collect_measurement+0x10/0x10
[ 1014.403745][T19267]  ? process_measurement+0x5ab/0x2350
[ 1014.405431][T19267]  ? is_bad_inode+0xd/0x40
[ 1014.406921][T19267]  ? xattr_resolve_name+0x27d/0x3f0
[ 1014.408606][T19267]  ? vfs_getxattr_alloc+0xec/0x350
[ 1014.410372][T19267]  ? ima_get_hash_algo+0x241/0x400
[ 1014.412262][T19267]  ? __pfx_ima_get_hash_algo+0x10/0x10
[ 1014.414264][T19267]  ? process_measurement+0xdfe/0x2350
[ 1014.416276][T19267]  process_measurement+0xdfe/0x2350
[ 1014.418101][T19267]  ? __pfx_process_measurement+0x10/0x10
[ 1014.419899][T19267]  ? lock_acquire+0x1d1/0x380
[ 1014.421413][T19267]  ? __configfs_open_file+0x6ca/0x9c0
[ 1014.423131][T19267]  ima_file_check+0xcc/0x120
[ 1014.424592][T19267]  ? __pfx_ima_file_check+0x10/0x10
[ 1014.426258][T19267]  security_file_post_open+0xc4/0x210
[ 1014.427970][T19267]  path_openat+0x5cd/0x2440
[ 1014.429431][T19267]  ? __pfx_path_openat+0x10/0x10
[ 1014.431313][T19267]  do_file_open+0x20e/0x430
[ 1014.433462][T19267]  ? __pfx_do_file_open+0x10/0x10
[ 1014.435566][T19267]  ? _raw_spin_unlock+0x28/0x50
[ 1014.437259][T19267]  ? alloc_fd+0x471/0x7a0
[ 1014.438639][T19267]  do_sys_openat2+0x10f/0x1e0
[ 1014.440194][T19267]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1014.441898][T19267]  __ia32_compat_sys_openat+0x12d/0x210
[ 1014.444031][T19267]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[ 1014.446288][T19267]  ? ksys_write+0x1ac/0x250
[ 1014.448028][T19267]  __do_fast_syscall_32+0x13a/0x8b0
[ 1014.449975][T19267]  do_fast_syscall_32+0x32/0x70
[ 1014.451608][T19267]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1014.453870][T19267] RIP: 0023:0xf700efec
[ 1014.455505][T19267] Code: Unable to access opcode bytes at 0xf700efc2.
[ 1014.458150][T19267] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[ 1014.461230][T19267] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000200
[ 1014.463849][T19267] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 1014.466452][T19267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1014.469084][T19267] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1014.471728][T19267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1014.474196][T19267]  </TASK>
[ 1015.000968][T16267] net_ratelimit: 13 callbacks suppressed
[ 1015.001064][T16267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.001392][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.029306][T19255] vhci_hcd: connection reset by peer
[ 1015.031267][T16950] vhci_hcd vhci_hcd.9: stop threads
[ 1015.031289][T16950] vhci_hcd vhci_hcd.9: release socket
[ 1015.031344][T16950] vhci_hcd vhci_hcd.9: disconnect device
[ 1015.128969][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1016.088981][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1016.168905][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1016.560070][ T6797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1017.119121][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1017.129963][T19187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1017.208995][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1018.161071][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1019.198911][   T25] usb 56-1: device descriptor read/8, error -110
[ 1019.589651][   T25] usb usb56-port1: attempt power cycle
[ 1020.149562][   T25] usb usb56-port1: unable to enumerate USB device
[ 1020.238866][T14447] net_ratelimit: 5 callbacks suppressed
[ 1020.238966][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.318702][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1021.278982][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1021.368784][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1022.318804][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1022.398616][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1022.638639][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1023.358733][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1023.438537][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available