last executing test programs:

3m3.771335475s ago: executing program 3 (id=22):
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket(0x15, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
mkdir(0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r2}, 0x38)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc})

3m2.959650537s ago: executing program 3 (id=24):
r0 = socket(0x10, 0x80002, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newtaction={0x98, 0x13, 0x53b, 0x0, 0x25dfdbf8, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x18, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x6, 0x6, 0x4, 0x1ff}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x30, 0x1, [@m_ct={0x2c, 0xc, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x98}}, 0x488c0)

3m1.995305288s ago: executing program 3 (id=26):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
pread64(r4, &(0x7f0000000080)=""/75, 0x8e, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5}, &(0x7f0000000700), &(0x7f0000000740), 0x3}, 0x20)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
eventfd(0x100)
r6 = syz_open_dev$vcsu(&(0x7f0000000180), 0x29, 0x0)
read$alg(r6, &(0x7f00000001c0)=""/68, 0x44)
unshare(0x20060000)
socket$nl_crypto(0x10, 0x3, 0x15)

2m58.061255103s ago: executing program 3 (id=30):
creat(&(0x7f00000056c0)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c)
creat(0x0, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0x0)

2m53.759864739s ago: executing program 3 (id=33):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f080008"], 0xa0}}, 0x0)

2m52.989655448s ago: executing program 3 (id=35):
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240))
r1 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x4})
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800, 0x700, 0x1}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000240)=[0x2], 0x0, 0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
rseq(0x0, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000040)={0x0, 0xff, 0x0, 0x4}, 0xc)
unshare(0x28000600)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0x9e0000, 0x3, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9aa4eb910d4c35c8, 0x5ef, '\x00', @p_u16=&(0x7f0000000100)=0x2}})
recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0)

2m43.025617613s ago: executing program 32 (id=46):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
pwrite64(r0, 0x0, 0x0, 0x0)

2m37.358203682s ago: executing program 33 (id=35):
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240))
r1 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x4})
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800, 0x700, 0x1}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000240)=[0x2], 0x0, 0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
rseq(0x0, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000040)={0x0, 0xff, 0x0, 0x4}, 0xc)
unshare(0x28000600)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0x9e0000, 0x3, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9aa4eb910d4c35c8, 0x5ef, '\x00', @p_u16=&(0x7f0000000100)=0x2}})
recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0)

1m30.691962847s ago: executing program 2 (id=221):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0)

1m30.335216411s ago: executing program 2 (id=224):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x2, 0x0, 0x0, r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
close_range(r2, 0xffffffffffffffff, 0x0)

1m27.979633557s ago: executing program 2 (id=234):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0)

1m27.638059883s ago: executing program 1 (id=235):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100000000000600d, 0x1)
mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0)

1m27.606810013s ago: executing program 4 (id=236):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x208a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1800, &(0x7f00000007c0)='b'})

1m26.740600413s ago: executing program 2 (id=242):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket(0x2, 0x3, 0xff)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

1m26.121530761s ago: executing program 4 (id=243):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e", 0xcb}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

1m25.346494027s ago: executing program 4 (id=245):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000085}, 0x40)
close(r1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

1m24.940647681s ago: executing program 2 (id=246):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
socket$inet6(0xa, 0xa, 0x0)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x500, 0x0}}], 0x40000cf, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000070100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x31}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40a755c0}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x40004)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)="1c0000005e000faeefc0a6fa998757b6f17d700800f60b17d4090c93", 0x1c}], 0x1}, 0x4000)
recvmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x100)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3b, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000001740)={r7, 0x0, 0x0}, 0x20)

1m24.647149216s ago: executing program 4 (id=247):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
unshare(0x2a020400)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0x0)

1m23.98508505s ago: executing program 2 (id=249):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
semget$private(0x0, 0x3, 0x24)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0)={[], [{@pcr={'pcr', 0x3d, 0x11}}, {@fowner_eq}, {@fowner_gt={'fowner>', 0xee01}}, {@flag='nomand'}, {@smackfsfloor={'smackfsfloor', 0x3d, ',\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '@'}}, {@subj_type={'subj_type', 0x3d, 'cpuset'}}]})
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x3a1280, 0x0)
lseek(r3, 0x5, 0x0)
getdents(r3, 0x0, 0x58)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000840)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_DQEVENT(r4, 0x80885659, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$nci(r1, 0x0, 0x0)

1m23.895126637s ago: executing program 4 (id=251):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x3c1}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)

1m23.417107965s ago: executing program 4 (id=253):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x208a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1800, &(0x7f00000007c0)='b'})

1m20.341410734s ago: executing program 34 (id=253):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x208a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1800, &(0x7f00000007c0)='b'})

1m20.228228859s ago: executing program 1 (id=257):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000085}, 0x40)
close(r1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

1m19.719581448s ago: executing program 1 (id=259):
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000200)=""/58, 0x3a, <r1=>0x0, &(0x7f0000000240)=""/111, 0x6f}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10)
r3 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000080)=0xb9f2)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x4a}, 0x2c)
shmget(0xffffffffffffffff, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000140)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x7, 0x37}, {@remote, 0x4e23, 0x10000, 0xc2, 0x12d5c, 0x6}}, 0x44)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000580)={0x1})
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x2008}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2800000, 0x0, 0x0, 0x0, 0x99}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @alu={0x4, 0x1, 0x5, 0x5, 0x2, 0x18, 0x8}, @jmp={0x5, 0x0, 0x1, 0x0, 0xb, 0x20}, @generic={0x8, 0x8, 0x0, 0x1, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x23, &(0x7f00000000c0)=""/35, 0x41100, 0x3c621c24dd3a59ba, '\x00', 0x0, @fallback=0x5f, r0, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x5, 0xd3, 0x1}, 0x10, r1, r2, 0x2, &(0x7f0000000440)=[0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x4, 0x9, 0xa}, {0x2, 0x3, 0x10, 0x2}], 0x10, 0x7, @void, @value}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newnexthop={0x4c, 0x68, 0x1, 0x3, 0x80000000, {0x0, 0x0, 0x1}, [@NHA_GROUP={0x34, 0x2, [{0x0, 0x6}, {0x0, 0x22}, {0x1, 0x9}, {0x2, 0x5}, {0x0, 0x99}, {}]}]}, 0x4c}}, 0x4000)

1m17.953141221s ago: executing program 1 (id=261):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
unshare(0x2a020400)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0x0)

1m17.213500246s ago: executing program 6 (id=263):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x3c1}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)

1m16.821322028s ago: executing program 1 (id=264):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0)

1m16.228069042s ago: executing program 1 (id=266):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100000000000600d, 0x1)
mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0)

1m13.618578348s ago: executing program 35 (id=266):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100000000000600d, 0x1)
mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0)

1m13.533946898s ago: executing program 6 (id=269):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58)
epoll_create1(0x80000)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc0984124, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r4, 0x4112, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="8a", 0x1)
r5 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000040)="000000bdfff39600000000a7c2295605fe590400000000000064167da472fce5a603e330339293a8237b00"/54, 0x36}], 0x2}}], 0x1, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x11, 0x4, 0x4, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000000), 0x0}, 0x20)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x40, 0x4000, @fd, 0x0, 0x0, 0x0, 0x4, 0x1})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

1m12.663714324s ago: executing program 6 (id=271):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
socket(0x2, 0x3, 0xff)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

1m10.429184361s ago: executing program 6 (id=273):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
unshare(0x2a020400)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0x0)

1m10.228886933s ago: executing program 6 (id=275):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0)

1m9.587598714s ago: executing program 6 (id=276):
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r1, 0x114, 0x5, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000)

1m7.40383824s ago: executing program 36 (id=276):
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r1, 0x114, 0x5, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000)

1m7.161835811s ago: executing program 37 (id=249):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
semget$private(0x0, 0x3, 0x24)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0)={[], [{@pcr={'pcr', 0x3d, 0x11}}, {@fowner_eq}, {@fowner_gt={'fowner>', 0xee01}}, {@flag='nomand'}, {@smackfsfloor={'smackfsfloor', 0x3d, ',\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '@'}}, {@subj_type={'subj_type', 0x3d, 'cpuset'}}]})
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x3a1280, 0x0)
lseek(r3, 0x5, 0x0)
getdents(r3, 0x0, 0x58)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000840)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_DQEVENT(r4, 0x80885659, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$nci(r1, 0x0, 0x0)

50.177527636s ago: executing program 5 (id=290):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
unshare(0x2a020400)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0x0)

48.423215797s ago: executing program 5 (id=291):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0)

47.383767237s ago: executing program 5 (id=292):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000026c0)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000070000000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0xfa, &(0x7f0000000640)="0cffffdf71c8afefeba010dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

46.652385799s ago: executing program 5 (id=293):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x2}, 0x18)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000085}, 0x40)
close(r1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

45.775370558s ago: executing program 5 (id=294):
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000200)=""/58, 0x3a, <r1=>0x0, &(0x7f0000000240)=""/111, 0x6f}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10)
r3 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000080)=0xb9f2)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x4a}, 0x2c)
shmget(0xffffffffffffffff, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000140)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x7, 0x37}, {@remote, 0x4e23, 0x10000, 0xc2, 0x12d5c, 0x6}}, 0x44)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000580)={0x1})
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x2008}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2800000, 0x0, 0x0, 0x0, 0x99}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @alu={0x4, 0x1, 0x5, 0x5, 0x2, 0x18, 0x8}, @jmp={0x5, 0x0, 0x1, 0x0, 0xb, 0x20}, @generic={0x8, 0x8, 0x0, 0x1, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x23, &(0x7f00000000c0)=""/35, 0x41100, 0x3c621c24dd3a59ba, '\x00', 0x0, @fallback=0x5f, r0, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x5, 0xd3, 0x1}, 0x10, r1, r2, 0x2, &(0x7f0000000440)=[0xffffffffffffffff, r9, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x4, 0x9, 0xa}, {0x2, 0x3, 0x10, 0x2}], 0x10, 0x7, @void, @value}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newnexthop={0x4c, 0x68, 0x1, 0x3, 0x80000000, {0x0, 0x0, 0x1}, [@NHA_GROUP={0x34, 0x2, [{0x0, 0x6}, {0x0, 0x22}, {0x1, 0x9}, {0x2, 0x5}, {0x0, 0x99}, {}]}]}, 0x4c}}, 0x4000)

40.499670552s ago: executing program 5 (id=297):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
read$char_usb(r0, &(0x7f0000001980)=""/179, 0xb3)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0x0, 0xfffffffffffeffff}, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)

25.097208075s ago: executing program 38 (id=297):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
read$char_usb(r0, &(0x7f0000001980)=""/179, 0xb3)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0x0, 0xfffffffffffeffff}, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)

13.403542795s ago: executing program 9 (id=351):
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000440)="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", 0x116}], 0x1}, 0x400000c)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000100}, 0x14)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f00000001c0)=0x6, 0x4)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_udp_int(r5, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4)
dup(0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x18, r7, 0xf15, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc894}, 0x20008000)

12.333297568s ago: executing program 8 (id=355):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB])

11.323205566s ago: executing program 8 (id=357):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0xb0800000, 0x4)
semget(0x3, 0x6, 0x41)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x801)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x224}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
unshare(0x400)
fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x23}}, 0xc)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c1180fc0b2f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0xa}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3e7}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

8.419083667s ago: executing program 7 (id=360):
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000200)=""/58, 0x3a, <r1=>0x0, &(0x7f0000000240)=""/111, 0x6f}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10)
r3 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000080)=0xb9f2)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x4a}, 0x2c)
shmget(0xffffffffffffffff, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000140)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x7, 0x37}, {@remote, 0x4e23, 0x10000, 0xc2, 0x12d5c, 0x6}}, 0x44)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000580)={0x1})
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x2008}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2800000, 0x0, 0x0, 0x0, 0x99}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @alu={0x4, 0x1, 0x5, 0x5, 0x2, 0x18, 0x8}, @jmp={0x5, 0x0, 0x1, 0x0, 0xb, 0x20}, @generic={0x8, 0x8, 0x0, 0x1, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x23, &(0x7f00000000c0)=""/35, 0x41100, 0x3c621c24dd3a59ba, '\x00', 0x0, @fallback=0x5f, r0, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x5, 0xd3, 0x1}, 0x10, r1, r2, 0x2, &(0x7f0000000440)=[0xffffffffffffffff, r9, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x4, 0x9, 0xa}, {0x2, 0x3, 0x10, 0x2}], 0x10, 0x7, @void, @value}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newnexthop={0x4c, 0x68, 0x1, 0x3, 0x80000000, {0x0, 0x0, 0x1}, [@NHA_GROUP={0x34, 0x2, [{0x0, 0x6}, {0x0, 0x22}, {0x1, 0x9}, {0x2, 0x5}, {0x0, 0x99}, {}]}]}, 0x4c}}, 0x4000)

7.743414665s ago: executing program 7 (id=362):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
gettid()
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x2}, 0x18)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000085}, 0x40)
close(r0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

6.6273054s ago: executing program 9 (id=365):
socket(0x2, 0x3, 0xff)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}, {@version_u}, {@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xde<Q\x1a\x13'}}, {@afid={'afid', 0x3d, 0x8000000000000}}, {@mmap}, {@cache_loose}, {@uname={'uname', 0x3d, ':'}}], [{@subj_user={'subj_user', 0x3d, ':*\xae[#,\'.\xf0'}}]}})
r2 = creat(0x0, 0x0)
lseek(r2, 0x20400, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000001380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000013c0), &(0x7f0000001400), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000001440)}}, 0x10)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
io_setup(0x4, &(0x7f00000001c0)=<r3=>0x0)
r4 = eventfd2(0x0, 0x0)
io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000400)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r4}])
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001700)=@bpf_tracing={0x1a, 0x1, &(0x7f00000015c0)=ANY=[@ANYBLOB="73100000ffffffff"], &(0x7f0000001600)='syzkaller\x00', 0x3, 0x57, &(0x7f0000001640)=""/87, 0x41100, 0xa, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2c01d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x90)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r5, &(0x7f0000000080)={0x237, 0x7d, 0x0, {{0x500, 0xf6, 0x0, 0x0, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x04nodev{cvfox\x81\x02\x00\x00\x00\x00\x16%\x92\x84N\x87O\xe1T\x89\x89\r\x04\x9ay\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0xc, '\xcf\xc2\xf6\x1b\x00\x00\x00\x00\x00\x00\x00\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x48)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x0)
io_submit(r3, 0x9, &(0x7f0000002200)=[&(0x7f0000001b00)={0x0, 0x0, 0x0, 0x3, 0x1a0, r6, &(0x7f0000001a40)="0c1ead0ce6a59d738906650ba9b40fe00ee44f7ca6659c611ab309d58f5f6c459494c2c081056b9742539263bde5d7e00db6603d2c88993d0bc13ddf96619d3be9fdfedfb0fdd04a8faf1c58af2d02262c6dc9e3c8949f1a08d19856c4f7d28b57b63a663c8cc35eda926cf3b51b704036710cbf5991eab76d30224fa9e9f544ed907f91", 0x84, 0x1, 0x0, 0x1, r4}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0xe, 0xf7, 0xffffffffffffffff, &(0x7f0000001b40)="89ebd63c46d73250e6d5b95c756d80d8c449488912d8a89f17f8ec503d553b87b4efd2871015ac003efbe5cc55647affce827b1b70a26689c2a8c11dcf21f1b7530325caa493de752f2ba0a96267a76928b1dbc0f5b25abd89528dd96eb71020ea20f153d725d3c15eba83caf69bace8d9f6fed15878f110fba11b2701d61d17025d4f8f8698d698bea0b3a255229b8a9cd8a169c0ffd0c8efccd8b64c8d5f4502a8490a7f7e8881f28eaa0a4e556c8c0d59d8c3c899b7ec5304e1bb7b3c", 0xbe, 0x0, 0x0, 0x2}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x7, 0x7, r6, &(0x7f0000001c40)="b2185dc89d190bcea2b2a3fd74116786a866f247d5", 0x15, 0x7fff, 0x0, 0x3}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000001cc0)="ae245390cc0fa835a5", 0x9, 0x882c, 0x0, 0x3}, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x5, 0xe0, 0xffffffffffffffff, &(0x7f0000001d40)="e9a4a8928e766a87d8bd849ac40a82290b5053c47d9ebe69428f6e66f82be5473617e31d900770e3bc52628eadc6ade56cacca8bcd9ce555cbbd5e1fe290ca94084c351d89dda36772e4f2661a562b0d294520b2f51b19fe152af8dd5d21030f4de083210539b065ecc32c3a449eae3bd4ce13739a1fcd20497f17470200138f43238f1b818246", 0x87, 0x7, 0x0, 0x3, r4}, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x5, 0x81, r6, &(0x7f0000001e40)="eb2663f3a0027652e6b802b5c986d4b60851f7ec0e6cbe377f31cea05acc589bcb59edc8f73e328cafa3604a33356402f1a8bed9ac9b1d7813471fe3617e0d73961b3360a06f4d96c3f464a377150992db293f4746428627524bfc07a7c7a36963fd20059d9198d448aede810cce6cc86596170febe03b9f1b9d7ccdb5acbfefbd7a9f7ebcda655bc030b4350f1487affce063f5ed08357e2ce4465c220f45aa9f97ebc2b77d10c35932e96b1ffaa7a27064bd8b1c071c54fac83413161ce3294c9fd2000ad5ad", 0xc7, 0x9, 0x0, 0x1}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x1, r4, &(0x7f0000001f80)="a86462a860e692c32417234fcd2a1f6cf547b025cdc1ff5df0429c19c2323236031bb932fbe37583c2a6bb9a1c999c5fa5ef0292e7f9117383a350da190c8543a24ee1fc682b8476b9c1d3e1b59b217e94370e0e9ed62b53a8d3411df64436f14b1d1ccbc127fc839be55ce827927c09b6f74bf2224104e025ff95341cdd89064c2523db0e897dcdcbcd", 0x8a, 0x6, 0x0, 0x3, r0}, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffff, &(0x7f0000002080)="64fdb9f78b5f897c370bdac1ceaeec2f0551bae26358f9701506fb276a8a5fc3c74b39e2b402c1a793c0e1b20138f509fdf1e39a9f4113ae1bce397a17c1b7f41917492e6eee2046265a57acad3fe59af5ee3326f8df4f6a366e5cc83a", 0x5d, 0x1}, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x8, 0x3ff, r2, &(0x7f0000002180)="64d576aae1a2187e11a405c8b05a7a71160551ff01889fe39c78d6565d8bc975a45aab891614c8e1aa7d7d82351c0be9a8", 0x31, 0x1db, 0x0, 0x2, r2}])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0)
getpeername(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\\.-.+:-\x00', 0x0)

5.932214466s ago: executing program 7 (id=366):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB])

5.346650241s ago: executing program 8 (id=367):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x140, 0x0, 0xfeffffff, 0x0, 0x0, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x6000, {0x0, @broadcast, @loopback, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team_slave_1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0)
write$binfmt_script(r3, &(0x7f0000000200), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0x7}, {0x6, 0x0, 0x0, 0x7ffffdbd}, {0x7, 0x1, 0x8, 0x52}]})
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r4, 0xc048aeca, &(0x7f0000005580)={{0x0, 0x0, 0x80}})
syz_usb_connect(0x0, 0x59, 0x0, 0x0)

5.237848438s ago: executing program 0 (id=368):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f"], 0xa0}}, 0x0)

4.398173202s ago: executing program 7 (id=369):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004", 0xd5}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

4.235819786s ago: executing program 0 (id=370):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r1, 0x0, 0x2, 0x4}}, 0x20)
r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
openat$cgroup_int(r2, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000e956000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d)
syz_open_dev$loop(&(0x7f0000000280), 0xc65, 0x20000)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
r9 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r9, 0xfbff)
close_range(r8, 0xffffffffffffffff, 0x0)

4.11269197s ago: executing program 9 (id=371):
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000200)=""/58, 0x3a, <r1=>0x0, &(0x7f0000000240)=""/111, 0x6f}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10)
r3 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000080)=0xb9f2)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x4a}, 0x2c)
shmget(0xffffffffffffffff, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000140)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x7, 0x37}, {@remote, 0x4e23, 0x10000, 0xc2, 0x12d5c, 0x6}}, 0x44)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000580)={0x1})
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x2008}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2800000, 0x0, 0x0, 0x0, 0x99}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @alu={0x4, 0x1, 0x5, 0x5, 0x2, 0x18, 0x8}, @jmp={0x5, 0x0, 0x1, 0x0, 0xb, 0x20}, @generic={0x8, 0x8, 0x0, 0x1, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x23, &(0x7f00000000c0)=""/35, 0x41100, 0x3c621c24dd3a59ba, '\x00', 0x0, @fallback=0x5f, r0, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x5, 0xd3, 0x1}, 0x10, r1, r2, 0x2, &(0x7f0000000440)=[0xffffffffffffffff, r9, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x4, 0x9, 0xa}, {0x2, 0x3, 0x10, 0x2}], 0x10, 0x7, @void, @value}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newnexthop={0x4c, 0x68, 0x1, 0x3, 0x80000000, {0x0, 0x0, 0x1}, [@NHA_GROUP={0x34, 0x2, [{0x0, 0x6}, {0x0, 0x22}, {0x1, 0x9}, {0x2, 0x5}, {0x0, 0x99}, {}]}]}, 0x4c}}, 0x4000)

3.678513531s ago: executing program 7 (id=372):
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000580), 0x6, 0x440401)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
syz_emit_ethernet(0x9e, 0x0, 0x0)
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000140)=0x4, 0x4)
syz_emit_vhci(0x0, 0x9)

3.532273575s ago: executing program 0 (id=373):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)

3.329898062s ago: executing program 8 (id=374):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/sockcreate\x00')
socket(0x1d, 0x2, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
syz_open_dev$vim2m(0x0, 0x10001, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe97)
mkdir(0x0, 0x0)
syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100))
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000001080)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
mq_open(&(0x7f000084dff0)='!senin\xd58\xd9\x03+\t\xe1\xabx\x00', 0x6e93ebbbcc0884f2, 0x88, &(0x7f0000000300)={0x0, 0xfffffffffffffffd, 0x10000007, 0x9})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000340)="0b000000010000", 0x7)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}}}]}, 0x48}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x4040854)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000380)={{0x8, 0x2, 0xd, 0x9}, 0x1, [0x20000000000f8e, 0x7f, 0x6, 0x8000000000000001, 0x8001, 0x204, 0x3, 0x3c42, 0x8, 0xfffffffffffffffb, 0x2, 0xf, 0x0, 0x8, 0xa, 0xa929, 0x9, 0x6, 0x2, 0x8d, 0x8000000000000001, 0x0, 0x26, 0x0, 0x7, 0x2, 0xc0f3, 0x1ff, 0x89, 0x9, 0xfffffffffffffff7, 0x4, 0x6, 0xa, 0x1ff, 0x5, 0xfffffffffffffffd, 0x9, 0x196, 0xb1c, 0x2, 0x1000, 0x1, 0x4, 0x1, 0x6, 0x3, 0xfe, 0x100000000, 0x5, 0x8000000000000000, 0x6, 0xfffffffffffffff8, 0x3, 0x3, 0x6, 0x401, 0x9, 0xfffffffffffffffe, 0x80000000, 0x6, 0x3, 0x2004, 0xfffffffffffffffd, 0x5, 0xa, 0xffff, 0x3, 0x1, 0x2, 0x0, 0x7, 0x5, 0x1, 0x6, 0x2, 0x3, 0x1000, 0x8, 0x819, 0x9, 0x2, 0x902, 0xffffffff7fffffff, 0x7fffffffffffffff, 0xe, 0x3, 0x8, 0xffffffffffffffff, 0x2c, 0x2, 0x4, 0x9, 0xa, 0x5, 0x546, 0x5, 0x2, 0x401, 0x0, 0x5cb02f32, 0x4bb7, 0x1, 0x8, 0x4, 0x8, 0xffffffffffffc096, 0x9, 0x1, 0x0, 0x5, 0x0, 0x7, 0x6, 0xc41, 0x1, 0x5, 0x3, 0x2, 0x6, 0x4, 0x3, 0x1, 0x6, 0x3, 0x1, 0x3, 0xfffffffffffffffe]})

3.284848384s ago: executing program 9 (id=375):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x2}, 0x18)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000085}, 0x40)
close(r0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

2.191782636s ago: executing program 7 (id=376):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xc5594286d776c8c5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x800}]}}}]}, 0x40}}, 0x0)
sendmmsg$inet(r2, &(0x7f00000017c0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x40080, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10)
syz_usb_control_io(r1, &(0x7f0000000e00)={0x2c, &(0x7f0000000380)={0x0, 0x23, 0x58, {0x58, 0x8, "8223273101ef984629ff80d70c1fbed28e717664f6683766401b313b428741d407d77a055e5cc6e71a3df1b012ebf5926eeb4ab5622269d3f863cc98c72d401ff284f67b18fe9f6a1302a35d9a30d4f33e5065eefa8d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c)

2.191377148s ago: executing program 0 (id=377):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180))
r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x3c1}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)

1.590931163s ago: executing program 9 (id=378):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000"])

1.408290216s ago: executing program 8 (id=379):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800"], 0xa0}}, 0x0)

777.797745ms ago: executing program 0 (id=380):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

215.735012ms ago: executing program 8 (id=381):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000040000", 0xd7}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

120.099813ms ago: executing program 9 (id=382):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r1, 0x0, 0x2, 0x4}}, 0x20)
r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
openat$cgroup_int(r2, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000e956000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d)
syz_open_dev$loop(&(0x7f0000000280), 0xc65, 0x20000)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
r9 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r9, 0xfbff)
close_range(r8, 0xffffffffffffffff, 0x0)

0s ago: executing program 0 (id=383):
socket(0x1, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2})
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="003cbdb394fc3c892d35e7357800"/24])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.251' (ED25519) to the list of known hosts.
[  167.063210][ T5778] cgroup: Unknown subsys name 'net'
[  167.214441][ T5778] cgroup: Unknown subsys name 'cpuset'
[  167.228816][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  211.650653][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  215.420789][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  215.464791][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  215.474101][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  215.483025][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  215.491570][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  215.500487][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  215.509990][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  215.520055][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  215.529753][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  215.539473][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  215.547806][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  215.556457][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  215.566505][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  215.592317][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  215.596212][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  215.600995][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  215.610351][ T5813] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  215.620405][ T5811] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  215.629144][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  215.630076][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  215.640544][ T5808] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  215.652727][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  215.662273][ T5813] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  215.663794][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  215.678589][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  215.681886][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  215.702407][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  215.734460][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  215.769012][ T5813] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  215.784887][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  216.693099][ T5796] chnl_net:caif_netlink_parms(): no params data found
[  217.287171][ T5809] chnl_net:caif_netlink_parms(): no params data found
[  217.554840][ T5797] chnl_net:caif_netlink_parms(): no params data found
[  217.596923][ T5794] chnl_net:caif_netlink_parms(): no params data found
[  217.704097][ T5813] Bluetooth: hci0: command tx timeout
[  217.783684][ T5813] Bluetooth: hci1: command tx timeout
[  217.789350][ T5813] Bluetooth: hci2: command tx timeout
[  217.790095][ T5802] Bluetooth: hci3: command tx timeout
[  217.826208][ T5798] chnl_net:caif_netlink_parms(): no params data found
[  217.869602][ T5802] Bluetooth: hci4: command tx timeout
[  218.108426][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.118774][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.126681][ T5796] bridge_slave_0: entered allmulticast mode
[  218.135825][ T5796] bridge_slave_0: entered promiscuous mode
[  218.212915][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.220740][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.228872][ T5796] bridge_slave_1: entered allmulticast mode
[  218.238483][ T5796] bridge_slave_1: entered promiscuous mode
[  218.479674][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.559976][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.568920][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.576736][ T5809] bridge_slave_0: entered allmulticast mode
[  218.585534][ T5809] bridge_slave_0: entered promiscuous mode
[  218.606080][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.674361][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.682096][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.689964][ T5809] bridge_slave_1: entered allmulticast mode
[  218.700593][ T5809] bridge_slave_1: entered promiscuous mode
[  218.754776][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.762472][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.772989][ T5797] bridge_slave_0: entered allmulticast mode
[  218.783909][ T5797] bridge_slave_0: entered promiscuous mode
[  218.878645][ T5796] team0: Port device team_slave_0 added
[  218.887485][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.895838][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.903705][ T5797] bridge_slave_1: entered allmulticast mode
[  218.912654][ T5797] bridge_slave_1: entered promiscuous mode
[  218.932212][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.984320][ T5796] team0: Port device team_slave_1 added
[  219.105129][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  219.111828][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  219.167090][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.222048][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.366517][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.378595][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.386865][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.394737][ T5798] bridge_slave_0: entered allmulticast mode
[  219.402736][ T5798] bridge_slave_0: entered promiscuous mode
[  219.417315][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.425124][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.432800][ T5798] bridge_slave_1: entered allmulticast mode
[  219.441899][ T5798] bridge_slave_1: entered promiscuous mode
[  219.451203][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.459085][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.467154][ T5794] bridge_slave_0: entered allmulticast mode
[  219.476230][ T5794] bridge_slave_0: entered promiscuous mode
[  219.514945][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.522127][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.548683][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.615374][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.623634][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.631325][ T5794] bridge_slave_1: entered allmulticast mode
[  219.640801][ T5794] bridge_slave_1: entered promiscuous mode
[  219.657716][ T5809] team0: Port device team_slave_0 added
[  219.699778][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.707132][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.733561][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.784798][ T5802] Bluetooth: hci0: command tx timeout
[  219.839348][ T5809] team0: Port device team_slave_1 added
[  219.863768][ T5802] Bluetooth: hci2: command tx timeout
[  219.869421][ T5802] Bluetooth: hci3: command tx timeout
[  219.875340][ T5813] Bluetooth: hci1: command tx timeout
[  219.898605][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.914140][ T5797] team0: Port device team_slave_0 added
[  219.929656][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.943532][ T5813] Bluetooth: hci4: command tx timeout
[  219.949773][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.964857][ T5797] team0: Port device team_slave_1 added
[  220.110554][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.149680][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.156908][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.183513][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.315829][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.323485][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.349963][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.369504][ T5794] team0: Port device team_slave_0 added
[  220.395006][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.402622][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.430310][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.482999][ T5796] hsr_slave_0: entered promiscuous mode
[  220.494709][ T5796] hsr_slave_1: entered promiscuous mode
[  220.519709][ T5794] team0: Port device team_slave_1 added
[  220.560895][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.568235][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.594624][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.630002][ T5798] team0: Port device team_slave_0 added
[  220.647210][ T5798] team0: Port device team_slave_1 added
[  220.784393][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.791567][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.818120][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.910223][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.917569][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.944052][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.988094][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.995409][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.022038][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.105633][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.112737][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.140574][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.163036][ T5809] hsr_slave_0: entered promiscuous mode
[  221.172169][ T5809] hsr_slave_1: entered promiscuous mode
[  221.181450][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  221.189342][ T5809] Cannot create hsr debugfs directory
[  221.256473][ T5797] hsr_slave_0: entered promiscuous mode
[  221.266936][ T5797] hsr_slave_1: entered promiscuous mode
[  221.275565][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  221.283260][ T5797] Cannot create hsr debugfs directory
[  221.539578][ T5794] hsr_slave_0: entered promiscuous mode
[  221.552377][ T5794] hsr_slave_1: entered promiscuous mode
[  221.561160][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  221.569042][ T5794] Cannot create hsr debugfs directory
[  221.776523][ T5798] hsr_slave_0: entered promiscuous mode
[  221.787634][ T5798] hsr_slave_1: entered promiscuous mode
[  221.797257][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  221.805136][ T5798] Cannot create hsr debugfs directory
[  221.863776][ T5813] Bluetooth: hci0: command tx timeout
[  221.945826][ T5813] Bluetooth: hci1: command tx timeout
[  221.951482][ T5813] Bluetooth: hci3: command tx timeout
[  221.959218][ T5795] Bluetooth: hci2: command tx timeout
[  222.023813][ T5813] Bluetooth: hci4: command tx timeout
[  222.509657][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  222.595939][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  222.674308][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  222.746131][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  222.953856][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  223.000008][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  223.034587][ T5797] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  223.059301][ T5797] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  223.097954][ T5797] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  223.116346][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  223.164998][ T5797] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  223.188662][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  223.338327][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  223.448837][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  223.499641][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  223.544873][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  223.578674][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  223.639902][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  223.691494][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  223.743538][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  223.957371][ T5813] Bluetooth: hci0: command tx timeout
[  224.025809][ T5813] Bluetooth: hci3: command tx timeout
[  224.031567][ T5795] Bluetooth: hci1: command tx timeout
[  224.032788][ T5802] Bluetooth: hci2: command tx timeout
[  224.107120][ T5802] Bluetooth: hci4: command tx timeout
[  224.326451][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.533545][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.628098][ T5796] 8021q: adding VLAN 0 to HW filter on device team0
[  224.671500][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.753650][ T5797] 8021q: adding VLAN 0 to HW filter on device team0
[  224.786508][ T4823] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.794264][ T4823] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.883465][ T4823] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.891146][ T4823] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.967717][ T5023] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.975507][ T5023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.007945][ T5809] 8021q: adding VLAN 0 to HW filter on device team0
[  225.064410][ T5023] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.072069][ T5023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.131873][ T3997] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.139648][ T3997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.266899][ T3997] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.274699][ T3997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.362535][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.421184][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.635782][ T5794] 8021q: adding VLAN 0 to HW filter on device team0
[  225.693275][ T3997] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.701052][ T3997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.776118][ T5798] 8021q: adding VLAN 0 to HW filter on device team0
[  225.810238][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  225.843559][ T3997] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.851231][ T3997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.927123][ T3841] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.934886][ T3841] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.063179][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.070979][ T3841] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.306514][ T5794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  226.318361][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  227.708398][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.780891][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.056553][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.096430][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.325398][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.361637][ T5796] veth0_vlan: entered promiscuous mode
[  228.472286][ T5796] veth1_vlan: entered promiscuous mode
[  228.642584][ T5809] veth0_vlan: entered promiscuous mode
[  228.764234][ T5798] veth0_vlan: entered promiscuous mode
[  228.840568][ T5809] veth1_vlan: entered promiscuous mode
[  228.908125][ T5796] veth0_macvtap: entered promiscuous mode
[  228.949348][ T5798] veth1_vlan: entered promiscuous mode
[  229.035473][ T5796] veth1_macvtap: entered promiscuous mode
[  229.061163][ T5794] veth0_vlan: entered promiscuous mode
[  229.148151][ T5794] veth1_vlan: entered promiscuous mode
[  229.259788][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0
[  229.378859][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.425437][ T5798] veth0_macvtap: entered promiscuous mode
[  229.455066][ T5809] veth0_macvtap: entered promiscuous mode
[  229.534393][ T5794] veth0_macvtap: entered promiscuous mode
[  229.554861][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.565309][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.575024][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.584206][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.620148][ T5798] veth1_macvtap: entered promiscuous mode
[  229.668695][ T5809] veth1_macvtap: entered promiscuous mode
[  229.687737][ T5794] veth1_macvtap: entered promiscuous mode
[  229.855043][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.868442][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.883442][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  229.941955][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.954269][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.965882][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.977839][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.992827][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.031337][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.043571][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.055695][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.066479][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.076714][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.087633][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.102555][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.161754][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.172640][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.188115][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.219099][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.230353][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.240536][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.251402][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.266443][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.329011][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.338431][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.349873][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.359536][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.407418][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.419759][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.433019][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.444250][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.454368][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.465142][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.479850][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.490380][ T5798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.499588][ T5798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.509715][ T5798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.519923][ T5798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.639410][ T5809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.648684][ T5809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.660036][ T5809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.672166][ T5809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.180715][ T5797] veth0_vlan: entered promiscuous mode
[  231.347825][ T5797] veth1_vlan: entered promiscuous mode
[  231.609080][ T5797] veth0_macvtap: entered promiscuous mode
[  231.685734][ T5797] veth1_macvtap: entered promiscuous mode
[  231.880871][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.895203][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.905479][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.916246][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.926582][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.937428][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.948477][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.959692][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.013775][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.094517][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.105678][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.115887][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.126681][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.136851][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.147719][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.157863][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.168919][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.189253][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.374531][ T5797] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.385784][ T5797] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.397095][ T5797] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.406711][ T5797] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.462884][ T4823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.471868][ T4823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.641729][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.650887][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.899070][ T4823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.909428][ T4823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.049914][ T5796] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  237.093683][ T5023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.101762][ T5023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.274504][ T5023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.282596][ T5023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.544644][ T3841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.552727][ T3841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.555377][ T1826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.568410][ T1826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.755614][ T3887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.764526][ T3887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.194650][ T5980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'.
[  238.204954][ T5980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'.
[  238.782999][ T5992] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  238.811512][ T5987] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  238.820242][ T5987] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  239.012863][ T5987] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  239.032501][ T5987] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  239.039973][ T5987] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  239.064041][ T5987] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  239.124883][ T5987] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  239.136310][ T5987] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  239.152063][ T5987] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  239.173048][ T5987] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  239.180802][ T5987] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  239.191114][ T5987] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  239.202864][ T5987] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  239.210641][ T5987] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  239.228947][ T5987] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  239.329749][ T5023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.342102][ T5023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.520900][ T3997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.529782][ T3997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.084980][ T6002] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  240.924744][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout
[  241.066345][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout
[  241.164922][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout
[  241.243620][ T5802] Bluetooth: hci4: command 0x0c1a tx timeout
[  241.249994][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout
[  242.934189][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  242.984252][ T5813] Bluetooth: hci0: command 0x0c1a tx timeout
[  243.113976][ T5855] usb 4-1: Using ep0 maxpacket: 8
[  243.149421][ T5813] Bluetooth: hci1: command 0x0c1a tx timeout
[  243.158229][ T5855] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  243.168575][ T5855] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  243.178731][ T5855] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  243.189098][ T5855] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  243.202525][ T5855] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  243.211957][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.250469][ T5813] Bluetooth: hci2: command 0x0c1a tx timeout
[  243.337749][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout
[  243.344205][ T5802] Bluetooth: hci4: command 0x0c1a tx timeout
[  244.065110][ T6027] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  244.750688][ T5855] usb 4-1: usb_control_msg returned -71
[  244.757557][ T5855] usbtmc 4-1:16.0: can't read capabilities
[  244.892997][ T5855] usb 4-1: USB disconnect, device number 2
[  245.064638][ T5813] Bluetooth: hci0: command 0x0c1a tx timeout
[  245.356422][ T5813] Bluetooth: hci2: command 0x0c1a tx timeout
[  245.356774][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout
[  245.383672][ T5802] Bluetooth: hci4: command 0x0c1a tx timeout
[  245.389957][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout
[  245.783692][ T5855] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  246.009438][ T5855] usb 1-1: unable to get BOS descriptor or descriptor too short
[  246.044854][ T5855] usb 1-1: not running at top speed; connect to a high speed hub
[  246.105061][ T5855] usb 1-1: config 8 has an invalid interface number: 24 but max is 0
[  246.113917][ T5855] usb 1-1: config 8 has no interface number 0
[  246.120281][ T5855] usb 1-1: config 8 interface 24 has no altsetting 0
[  246.192725][ T5855] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  246.205873][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.215590][ T5855] usb 1-1: Product: syz
[  246.219886][ T5855] usb 1-1: Manufacturer: syz
[  246.224664][ T5855] usb 1-1: SerialNumber: syz
[  246.547397][ T5855] vmk80xx 1-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  246.645658][ T5855] usb 1-1: USB disconnect, device number 2
[  246.664117][ T6055] random: crng reseeded on system resumption
[  247.920303][ T6064] fuse: Bad value for 'fd'
[  248.293948][ T5855] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  248.501817][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.513490][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.523810][ T5855] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  248.533130][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.632033][ T5855] usb 2-1: config 0 descriptor??
[  249.289639][ T5855] usbhid 2-1:0.0: can't add hid device: -32
[  249.296809][ T5855] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  249.664534][ T6070] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  251.283654][ T5855] usb 2-1: USB disconnect, device number 2
[  255.905019][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'.
[  257.684779][ T6093] Zero length message leads to an empty skb
[  259.499102][ T6106] syz.2.34: attempt to access beyond end of device
[  259.499102][ T6106] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0
[  259.514905][ T6106] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32
[  259.913814][ T5852] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  260.054326][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  260.083779][ T5852] usb 3-1: device descriptor read/64, error -71
[  260.430926][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  260.854558][ T5852] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  262.274134][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  263.306581][ T1826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.501043][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  264.495572][ T1826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.684531][ T1826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.867304][ T1826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.205218][ T1826] bridge_slave_1: left allmulticast mode
[  265.211325][ T1826] bridge_slave_1: left promiscuous mode
[  265.217969][ T1826] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.328338][ T1826] bridge_slave_0: left allmulticast mode
[  265.334648][ T1826] bridge_slave_0: left promiscuous mode
[  265.340983][ T1826] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.655393][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  265.993625][ T5852] usb 3-1: device descriptor read/64, error -110
[  266.024944][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  266.093605][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  266.124291][ T5852] usb usb3-port1: attempt power cycle
[  266.174991][ T1826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.233977][ T1826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.280989][ T1826] bond0 (unregistering): Released all slaves
[  266.500615][ T5852] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  266.663726][ T5852] usb 3-1: device descriptor read/8, error -32
[  266.934341][ T5852] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  267.001091][ T5852] usb 3-1: device descriptor read/8, error -32
[  267.130082][ T5852] usb usb3-port1: unable to enumerate USB device
[  267.705444][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  267.735344][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  267.745610][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  267.774620][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  267.787433][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  267.796508][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  267.834017][ T1826] hsr_slave_0: left promiscuous mode
[  267.842516][ T1826] hsr_slave_1: left promiscuous mode
[  267.850946][ T1826] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.860604][ T1826] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.872605][ T1826] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.883709][ T1826] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.012915][ T1826] veth1_macvtap: left promiscuous mode
[  268.019013][ T1826] veth0_macvtap: left promiscuous mode
[  268.025392][ T1826] veth1_vlan: left promiscuous mode
[  268.030958][ T1826] veth0_vlan: left promiscuous mode
[  268.283677][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  268.328859][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  268.700197][ T5855] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  268.744188][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  269.046251][ T1826] team0 (unregistering): Port device team_slave_1 removed
[  269.195576][ T1826] team0 (unregistering): Port device team_slave_0 removed
[  269.603542][ T5855] usb 5-1: Using ep0 maxpacket: 8
[  269.648301][ T5855] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  269.658538][ T5855] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  269.668726][ T5855] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  269.679113][ T5855] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  269.692546][ T5855] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  269.702002][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.033738][ T5813] Bluetooth: hci1: command tx timeout
[  270.052639][   T29] audit: type=1800 audit(1731191094.840:2): pid=6139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.53" name="/" dev="fuse" ino=1 res=0 errno=0
[  270.215795][ T6124] NILFS (loop9): device size too small
[  270.284841][ T5855] usb 5-1: GET_CAPABILITIES returned 2f
[  270.290878][ T5855] usbtmc 5-1:16.0: can't read capabilities
[  270.549210][ T5852] usb 5-1: USB disconnect, device number 2
[  270.918980][ T6121] chnl_net:caif_netlink_parms(): no params data found
[  272.106505][ T5813] Bluetooth: hci1: command tx timeout
[  272.327661][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.335564][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.343896][ T6121] bridge_slave_0: entered allmulticast mode
[  272.352950][ T6121] bridge_slave_0: entered promiscuous mode
[  272.506525][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.519294][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.527364][ T6121] bridge_slave_1: entered allmulticast mode
[  272.536604][ T6121] bridge_slave_1: entered promiscuous mode
[  272.843957][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  272.854084][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  272.866820][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  272.881990][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  272.895164][ T5802] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  272.905881][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  273.153714][ T5852] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  273.207744][ T6121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.224184][ T5908] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  273.334235][ T5852] usb 5-1: Using ep0 maxpacket: 8
[  273.400892][ T5852] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  273.411810][ T5852] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  273.421463][ T6121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.422038][ T5852] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  273.444170][ T5852] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  273.457755][ T5852] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  273.467350][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.564311][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.575686][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.586424][ T5908] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  273.596023][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.754151][ T5908] usb 2-1: config 0 descriptor??
[  273.823832][ T6121] team0: Port device team_slave_0 added
[  273.848138][ T6121] team0: Port device team_slave_1 added
[  273.988288][ T6121] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.995848][ T6121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.022254][ T6121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.104094][ T6176] random: crng reseeded on system resumption
[  274.134863][ T5852] usb 5-1: usb_control_msg returned -71
[  274.141018][ T5852] usbtmc 5-1:16.0: can't read capabilities
[  274.185545][ T5802] Bluetooth: hci1: command tx timeout
[  274.196202][ T5852] usb 5-1: USB disconnect, device number 3
[  274.297099][ T5908] usbhid 2-1:0.0: can't add hid device: -32
[  274.304507][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  274.348251][ T6121] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.358142][ T6121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.385347][ T6121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.784339][ T6166] chnl_net:caif_netlink_parms(): no params data found
[  274.817401][ T6121] hsr_slave_0: entered promiscuous mode
[  274.852633][ T6121] hsr_slave_1: entered promiscuous mode
[  274.997524][ T5802] Bluetooth: hci5: command tx timeout
[  276.120003][ T5852] usb 2-1: USB disconnect, device number 3
[  276.158234][ T6121] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  276.220643][ T6121] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  276.289543][ T5802] Bluetooth: hci1: command tx timeout
[  276.322801][ T6121] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  276.519312][ T6121] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  276.574530][ T6196] uprobe: syz.4.65:6196 failed to unregister, leaking uprobe
[  276.685357][ T6166] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.693074][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.703228][ T6166] bridge_slave_0: entered allmulticast mode
[  276.719107][ T6166] bridge_slave_0: entered promiscuous mode
[  276.810848][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.825796][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.836778][ T6166] bridge_slave_1: entered allmulticast mode
[  276.846638][ T6166] bridge_slave_1: entered promiscuous mode
[  277.064749][ T5802] Bluetooth: hci5: command tx timeout
[  277.109505][ T6166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.176982][ T6166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  277.273793][ T5855] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  277.417692][ T6166] team0: Port device team_slave_0 added
[  277.477910][ T5855] usb 3-1: Using ep0 maxpacket: 8
[  277.509062][ T6166] team0: Port device team_slave_1 added
[  277.536832][ T5855] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  277.547108][ T5855] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  277.557431][ T5855] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  277.567780][ T5855] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  277.581341][ T5855] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  277.590797][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.836786][ T6211] binder: 6210:6211 ioctl 4018620d 0 returned -22
[  277.866887][ T6166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  277.875590][ T6166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.901978][ T6166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.064112][ T6205] NILFS (loop5): device size too small
[  278.089853][ T5855] usb 3-1: GET_CAPABILITIES returned 0
[  278.095860][ T5855] usbtmc 3-1:16.0: can't read capabilities
[  278.130317][ T6166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.138303][ T6166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.168536][ T6166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.410657][ T6121] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.436628][ T5852] usb 3-1: USB disconnect, device number 6
[  278.492556][   T29] audit: type=1800 audit(1731191103.310:3): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.69" name="/" dev="fuse" ino=1 res=0 errno=0
[  278.844485][ T6121] 8021q: adding VLAN 0 to HW filter on device team0
[  278.880693][ T6166] hsr_slave_0: entered promiscuous mode
[  278.938918][ T6166] hsr_slave_1: entered promiscuous mode
[  278.959382][ T6166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  278.970212][ T6166] Cannot create hsr debugfs directory
[  279.001266][ T3997] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.008842][ T3997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.140549][ T3997] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.148085][ T3997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.213855][ T5802] Bluetooth: hci5: command tx timeout
[  279.637221][ T6221] NILFS (loop3): device size too small
[  280.529850][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  280.536877][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  280.615077][ T5908] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  280.777867][ T6166] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  280.843947][   T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  280.853254][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short
[  280.915066][ T5908] usb 2-1: unable to read config index 0 descriptor/start: -71
[  280.923074][ T5908] usb 2-1: can't read configurations, error -71
[  280.929040][ T6166] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  280.998833][ T6166] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  281.031325][ T6166] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  281.088766][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.101162][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.111619][   T25] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  281.124138][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.234649][ T5802] Bluetooth: hci5: command tx timeout
[  281.261244][   T25] usb 3-1: config 0 descriptor??
[  281.412070][ T6121] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.745874][   T25] usbhid 3-1:0.0: can't add hid device: -32
[  281.752506][   T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[  282.610672][ T6166] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.667930][ T6166] 8021q: adding VLAN 0 to HW filter on device team0
[  282.720966][ T1826] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.728488][ T1826] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.741604][ T1826] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.749117][ T1826] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.109191][ T6166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  283.119908][ T6166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  283.925379][ T6258] uprobe: syz.1.75:6258 failed to unregister, leaking uprobe
[  284.174044][ T5855] usb 3-1: USB disconnect, device number 7
[  284.672049][ T6166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.916691][ T6121] veth0_vlan: entered promiscuous mode
[  285.056940][ T6121] veth1_vlan: entered promiscuous mode
[  285.125542][ T6269] NILFS (loop9): device size too small
[  285.204923][ T6271] binder: 6264:6271 ioctl 4018620d 0 returned -22
[  285.687094][ T6121] veth0_macvtap: entered promiscuous mode
[  285.778208][ T6121] veth1_macvtap: entered promiscuous mode
[  286.097726][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.108649][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.119958][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.131047][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.144448][ T5908] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  286.152669][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.164875][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.174991][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.185834][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.201174][ T6121] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.311119][ T5908] usb 5-1: Using ep0 maxpacket: 8
[  286.353957][ T5856] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  286.399277][ T5908] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  286.409656][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  286.419855][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  286.431400][ T5908] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  286.446104][ T5908] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  286.455752][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.601038][ T5856] usb 3-1: unable to get BOS descriptor or descriptor too short
[  286.628973][ T5856] usb 3-1: unable to read config index 0 descriptor/start: -71
[  286.637318][ T5856] usb 3-1: can't read configurations, error -71
[  286.699063][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.710037][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.721880][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.733656][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.743930][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.758543][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.769788][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.780683][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.796014][ T6121] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.959716][ T6276] NILFS (loop9): device size too small
[  287.042622][ T5908] usb 5-1: GET_CAPABILITIES returned 0
[  287.050334][ T5908] usbtmc 5-1:16.0: can't read capabilities
[  287.181349][ T6121] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.192697][ T6121] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.203169][ T6121] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.212865][ T6121] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.325475][   T29] audit: type=1800 audit(1731191112.120:4): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.82" name="/" dev="fuse" ino=1 res=0 errno=0
[  287.391629][ T6166] veth0_vlan: entered promiscuous mode
[  287.576360][ T5855] usb 5-1: USB disconnect, device number 4
[  287.619180][ T6166] veth1_vlan: entered promiscuous mode
[  287.728493][ T6166] veth0_macvtap: entered promiscuous mode
[  287.755866][ T6166] veth1_macvtap: entered promiscuous mode
[  287.841433][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.852615][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.863927][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.874853][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.887694][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.899415][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.909944][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.920790][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.931068][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.942097][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.959507][ T6166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.092248][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.103212][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.117658][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.128490][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.139723][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.150753][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.161004][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.172489][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.185479][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.205005][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.224097][ T6166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.338405][ T6166] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.349633][ T6166] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.360492][ T6166] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.369544][ T6166] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.814050][ T5852] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  290.050644][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.062085][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.072711][ T5852] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  290.082019][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.270678][ T5852] usb 3-1: config 0 descriptor??
[  290.758710][ T5852] usbhid 3-1:0.0: can't add hid device: -32
[  290.765871][ T5852] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[  291.786826][ T6332] NILFS (loop3): device size too small
[  293.020408][ T5908] usb 3-1: USB disconnect, device number 10
[  293.122322][ T6343] binder: 6341:6343 ioctl 4018620d 0 returned -22
[  294.235951][ T5855] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  294.473574][ T5855] usb 5-1: Using ep0 maxpacket: 8
[  294.516512][ T1826] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.555359][ T5855] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  294.566560][ T5855] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  294.577119][ T5855] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  294.591805][ T5855] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  294.606717][ T5855] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  294.616152][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.784756][ T5852] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  294.853142][ T6352] NILFS (loop9): device size too small
[  294.868907][ T1826] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.924825][ T5855] usb 5-1: GET_CAPABILITIES returned 0
[  294.930800][ T5855] usbtmc 5-1:16.0: can't read capabilities
[  295.115165][ T5852] usb 3-1: unable to get BOS descriptor or descriptor too short
[  295.128091][ T1826] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.183190][ T5852] usb 3-1: unable to read config index 0 descriptor/start: -71
[  295.193887][ T5852] usb 3-1: can't read configurations, error -71
[  295.222850][ T5855] usb 5-1: USB disconnect, device number 5
[  295.315799][ T1826] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.832814][ T3841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.841157][ T3841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.051881][ T1826] bridge_slave_1: left allmulticast mode
[  296.058075][ T1826] bridge_slave_1: left promiscuous mode
[  296.068350][ T1826] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.192439][ T1826] bridge_slave_0: left allmulticast mode
[  296.198848][ T1826] bridge_slave_0: left promiscuous mode
[  296.205726][ T1826] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.274342][   T29] audit: type=1800 audit(1731191121.060:5): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.94" name="/" dev="fuse" ino=1 res=0 errno=0
[  297.138540][ T1826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  297.245419][ T1826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  297.319526][ T1826] bond0 (unregistering): Released all slaves
[  297.494038][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.504662][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.668212][ T4823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.677760][ T4823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.859152][ T5023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.867689][ T5023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.359610][ T5908] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  298.638825][ T5908] usb 5-1: Using ep0 maxpacket: 8
[  298.672007][ T5908] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  298.682578][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  298.692988][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  298.703603][ T5908] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  298.717212][ T5908] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  298.730567][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.899402][   T25] IPVS: starting estimator thread 0...
[  299.005183][ T6400] IPVS: using max 240 ests per chain, 12000 per kthread
[  299.129468][ T1826] hsr_slave_0: left promiscuous mode
[  299.205005][ T1826] hsr_slave_1: left promiscuous mode
[  299.248458][ T1826] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.256552][ T1826] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.406599][ T1826] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.414948][ T1826] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.565222][ T6396] NILFS (loop9): device size too small
[  299.726354][ T1826] veth1_macvtap: left promiscuous mode
[  299.732219][ T1826] veth0_macvtap: left promiscuous mode
[  299.738540][ T1826] veth1_vlan: left promiscuous mode
[  299.744304][ T1826] veth0_vlan: left promiscuous mode
[  299.763624][ T5908] usb 5-1: usb_control_msg returned -71
[  299.769714][ T5908] usbtmc 5-1:16.0: can't read capabilities
[  299.935753][ T5908] usb 5-1: USB disconnect, device number 6
[  300.273651][ T5855] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  301.460473][ T5855] usb 3-1: device descriptor read/all, error -71
[  301.750659][ T6414] binder: BINDER_SET_CONTEXT_MGR already set
[  301.757585][ T6414] binder: 6413:6414 ioctl 4018620d 20000040 returned -16
[  301.920477][ T1826] team0 (unregistering): Port device team_slave_1 removed
[  301.955160][ T1826] team0 (unregistering): Port device team_slave_0 removed
[  301.983582][ T5855] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  302.686283][ T5855] usb 3-1: Using ep0 maxpacket: 8
[  302.746779][ T5855] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  302.757059][ T5855] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  302.767289][ T5855] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  302.777723][ T5855] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  302.791218][ T5855] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  302.801900][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.368192][ T6410] NILFS (loop5): device size too small
[  303.446385][ T5855] usb 3-1: GET_CAPABILITIES returned 2f
[  303.452333][ T5855] usbtmc 3-1:16.0: can't read capabilities
[  303.756405][ T5855] usb 3-1: USB disconnect, device number 14
[  306.328831][ T5908] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  306.617468][ T5908] usb 2-1: Using ep0 maxpacket: 32
[  306.697625][ T5908] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  306.706627][ T5908] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  306.722003][ T5908] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  306.734973][ T5908] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024
[  306.747559][ T5908] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  306.761184][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0
[  307.354430][ T5908] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  307.364090][ T5908] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  307.372821][ T5908] usb 2-1: Product: syz
[  307.377522][ T5908] usb 2-1: Manufacturer: syz
[  307.382369][ T5908] usb 2-1: SerialNumber: syz
[  307.500541][ T5908] usb 2-1: config 0 descriptor??
[  307.508853][ T6445] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  307.571688][ T5908] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  307.652319][ T5908] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  307.868163][ T6462] binder: BINDER_SET_CONTEXT_MGR already set
[  307.875329][ T6462] binder: 6460:6462 ioctl 4018620d 20000040 returned -16
[  308.648460][ T5908] usb 2-1: USB disconnect, device number 6
[  308.700710][ T5908] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  309.365465][ T5908] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  309.645551][ T5908] usb 2-1: Using ep0 maxpacket: 8
[  309.811253][ T5855] IPVS: starting estimator thread 0...
[  309.903702][ T6489] IPVS: using max 240 ests per chain, 12000 per kthread
[  310.314817][ T5813] Bluetooth: hci1: command 0x0406 tx timeout
[  310.355630][ T5908] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  310.365940][ T5908] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  310.377300][ T5908] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  310.387740][ T5908] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  310.405607][ T5908] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  310.416877][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.842120][ T6480] NILFS (loop3): device size too small
[  310.943802][ T5908] usb 2-1: GET_CAPABILITIES returned 2f
[  310.949753][ T5908] usbtmc 2-1:16.0: can't read capabilities
[  311.381400][ T5852] usb 2-1: USB disconnect, device number 7
[  313.754784][ T5855] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  313.892604][ T6523] binder: BINDER_SET_CONTEXT_MGR already set
[  313.899173][ T6523] binder: 6519:6523 ioctl 4018620d 20000040 returned -16
[  314.176467][ T5855] usb 2-1: Using ep0 maxpacket: 32
[  314.226867][ T5855] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  314.235760][ T5855] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  314.247294][ T5855] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  314.258826][ T5855] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024
[  314.270748][ T5855] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  314.284308][ T5855] usb 2-1: config 0 interface 0 has no altsetting 0
[  314.383869][ T5855] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  314.393575][ T5855] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  314.408628][ T5855] usb 2-1: Product: syz
[  314.413050][ T5855] usb 2-1: Manufacturer: syz
[  314.419017][ T5855] usb 2-1: SerialNumber: syz
[  314.518054][ T5855] usb 2-1: config 0 descriptor??
[  314.526239][ T6520] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  314.620423][ T5855] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  314.727778][ T5855] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  315.729265][ T5855] usb 2-1: USB disconnect, device number 8
[  315.761024][ T5855] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  316.356458][ T6555] NILFS (loop11): device size too small
[  318.379885][ T6561] binder: 6560:6561 ioctl c0306201 0 returned -14
[  319.944131][   T44] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  320.114319][   T44] usb 5-1: Using ep0 maxpacket: 32
[  320.168738][   T44] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  320.177782][   T44] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  320.189330][   T44] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  320.202034][   T44] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024
[  320.213990][   T44] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  320.227658][   T44] usb 5-1: config 0 interface 0 has no altsetting 0
[  320.449091][   T44] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  320.458736][   T44] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  320.467585][   T44] usb 5-1: Product: syz
[  320.471982][   T44] usb 5-1: Manufacturer: syz
[  320.476917][   T44] usb 5-1: SerialNumber: syz
[  320.600201][   T44] usb 5-1: config 0 descriptor??
[  320.608564][ T6579] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  320.680841][   T44] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  320.740814][   T44] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  322.058906][ T5852] usb 5-1: USB disconnect, device number 7
[  322.137783][ T5852] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  324.181844][ T6615] binder: 6614:6615 ioctl c0306201 0 returned -14
[  324.193924][ T6615] binder: BINDER_SET_CONTEXT_MGR already set
[  324.200357][ T6615] binder: 6614:6615 ioctl 4018620d 20000040 returned -16
[  325.074550][ T5852] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  325.276098][ T5852] usb 6-1: device descriptor read/64, error -71
[  325.560360][ T5852] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  325.734019][ T5852] usb 6-1: device descriptor read/64, error -71
[  325.889873][ T5852] usb usb6-port1: attempt power cycle
[  326.314871][ T5852] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  326.346178][   T44] IPVS: starting estimator thread 0...
[  326.378804][ T5852] usb 6-1: device descriptor read/8, error -71
[  326.453912][ T6649] IPVS: using max 240 ests per chain, 12000 per kthread
[  326.654551][ T5852] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  326.768525][ T5852] usb 6-1: device descriptor read/8, error -71
[  326.907346][ T5852] usb usb6-port1: unable to enumerate USB device
[  329.404625][ T6681] binder: 6680:6681 ioctl c0306201 0 returned -14
[  329.597557][ T6681] binder: BINDER_SET_CONTEXT_MGR already set
[  329.604124][ T6681] binder: 6680:6681 ioctl 4018620d 20000040 returned -16
[  330.035285][ T5813] Bluetooth: hci0: unexpected cc 0x0c1a length: 3 > 1
[  330.552933][ T6698] capability: warning: `syz.5.187' uses 32-bit capabilities (legacy support in use)
[  330.914120][ T5852] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  331.607711][ T5813] Bluetooth: hci5: command 0x0406 tx timeout
[  332.662171][ T5852] usb 3-1: device descriptor read/64, error -71
[  333.333872][ T5852] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  333.514560][ T5852] usb 3-1: device descriptor read/64, error -71
[  333.643940][ T5852] usb usb3-port1: attempt power cycle
[  334.011549][ T5813] Bluetooth: hci3: unexpected cc 0x0c1a length: 3 > 1
[  334.103871][ T5813] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  334.113768][ T5813] Bluetooth: hci0: Injecting HCI hardware error event
[  334.121324][ T5802] Bluetooth: hci0: hardware error 0x00
[  334.340075][ T6734] binder: BINDER_SET_CONTEXT_MGR already set
[  334.346500][ T6734] binder: 6733:6734 ioctl 4018620d 20000040 returned -16
[  336.184923][ T5802] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  336.333948][ T5856] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  336.629154][ T5856] usb 7-1: device descriptor read/64, error -71
[  336.910834][ T5856] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  337.076079][ T5856] usb 7-1: device descriptor read/64, error -71
[  337.193079][ T5856] usb usb7-port1: attempt power cycle
[  337.472705][ T5802] Bluetooth: hci1: unexpected cc 0x0c1a length: 3 > 1
[  337.480029][ T5802] Bluetooth: hci1: unexpected event for opcode 0x0c1a
[  337.580107][ T5856] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  337.665393][ T5856] usb 7-1: device descriptor read/8, error -71
[  337.913983][ T5856] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  337.975075][ T5856] usb 7-1: device descriptor read/8, error -71
[  338.024075][ T5802] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  338.032784][ T5802] Bluetooth: hci3: Injecting HCI hardware error event
[  338.041067][ T5813] Bluetooth: hci3: hardware error 0x00
[  338.135603][ T5856] usb usb7-port1: unable to enumerate USB device
[  338.339862][ T6786] binder: BINDER_SET_CONTEXT_MGR already set
[  338.346251][ T6786] binder: 6785:6786 ioctl 4018620d 20000040 returned -16
[  339.999719][ T5802] Bluetooth: hci3: unexpected cc 0x0c1a length: 3 > 1
[  340.007006][ T5802] Bluetooth: hci3: unexpected event for opcode 0x0c1a
[  340.106131][ T5813] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  341.682271][ T5813] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  341.691017][ T5813] Bluetooth: hci1: Injecting HCI hardware error event
[  341.698686][ T5813] Bluetooth: hci1: hardware error 0x00
[  341.985951][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  341.993059][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  342.207620][ T5802] Bluetooth: hci5: unexpected cc 0x0c1a length: 3 > 1
[  342.215275][ T5802] Bluetooth: hci5: unexpected event for opcode 0x0c1a
[  342.393869][   T44] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  343.175341][   T44] usb 2-1: device descriptor read/64, error -71
[  343.436560][   T44] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  343.628663][   T44] usb 2-1: device descriptor read/64, error -71
[  343.749671][   T44] usb usb2-port1: attempt power cycle
[  343.883914][ T5813] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  344.149755][   T44] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  344.248343][   T44] usb 2-1: device descriptor read/8, error -71
[  344.503932][   T44] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  344.595874][   T44] usb 2-1: device descriptor read/8, error -71
[  344.720364][   T44] usb usb2-port1: unable to enumerate USB device
[  345.240748][ T6881] NILFS (loop3): device size too small
[  345.909983][ T1826] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.094586][ T1826] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.265289][ T5813] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  346.274565][ T5813] Bluetooth: hci5: Injecting HCI hardware error event
[  346.283171][ T5813] Bluetooth: hci5: hardware error 0x00
[  346.342369][ T1826] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.439148][ T1826] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.934588][ T1826] bridge_slave_1: left allmulticast mode
[  346.940405][ T1826] bridge_slave_1: left promiscuous mode
[  346.946844][ T1826] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.079904][ T1826] bridge_slave_0: left allmulticast mode
[  347.087653][ T1826] bridge_slave_0: left promiscuous mode
[  347.094518][ T1826] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.626600][ T1826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  347.756126][ T1826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  347.848104][ T1826] bond0 (unregistering): Released all slaves
[  348.339543][ T1826] hsr_slave_0: left promiscuous mode
[  348.347578][ T5813] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  348.362987][ T1826] hsr_slave_1: left promiscuous mode
[  348.376453][ T1826] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  348.384902][ T1826] batman_adv: batadv0: Removing interface: batadv_slave_0
[  348.402857][ T1826] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  348.411044][ T1826] batman_adv: batadv0: Removing interface: batadv_slave_1
[  348.441960][ T1826] veth1_macvtap: left promiscuous mode
[  348.447926][ T1826] veth0_macvtap: left promiscuous mode
[  348.454340][ T1826] veth1_vlan: left promiscuous mode
[  348.459900][ T1826] veth0_vlan: left promiscuous mode
[  349.291963][ T1826] team0 (unregistering): Port device team_slave_1 removed
[  349.419035][ T1826] team0 (unregistering): Port device team_slave_0 removed
[  350.021469][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  350.031503][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  350.041009][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  350.121058][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  350.131264][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  350.148350][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  350.935324][ T5908] IPVS: starting estimator thread 0...
[  351.024806][ T6930] IPVS: using max 384 ests per chain, 19200 per kthread
[  352.194744][ T5802] Bluetooth: hci2: command tx timeout
[  352.419829][ T6926] chnl_net:caif_netlink_parms(): no params data found
[  353.009043][ T5023] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.211997][ T5023] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.424944][ T5023] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.625199][ T5023] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.167985][ T5023] bridge_slave_1: left allmulticast mode
[  354.174151][ T5023] bridge_slave_1: left promiscuous mode
[  354.180374][ T5023] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.263727][ T5802] Bluetooth: hci2: command tx timeout
[  354.280497][ T5023] bridge_slave_0: left allmulticast mode
[  354.286804][ T5023] bridge_slave_0: left promiscuous mode
[  354.293024][ T5023] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.773916][ T5023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.816591][ T5023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.840950][ T5023] bond0 (unregistering): Released all slaves
[  354.955290][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.963021][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.971883][ T6926] bridge_slave_0: entered allmulticast mode
[  354.980117][ T6926] bridge_slave_0: entered promiscuous mode
[  354.998055][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.005862][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.013622][ T6926] bridge_slave_1: entered allmulticast mode
[  355.021580][ T6926] bridge_slave_1: entered promiscuous mode
[  355.302209][ T6926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  355.477893][ T6926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.659840][ T5023] hsr_slave_0: left promiscuous mode
[  355.672184][ T5023] hsr_slave_1: left promiscuous mode
[  355.720985][ T5023] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  355.730372][ T5023] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.803943][ T5023] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.811948][ T5023] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.073155][ T5023] veth1_macvtap: left promiscuous mode
[  356.080485][ T5023] veth0_macvtap: left promiscuous mode
[  356.086694][ T5023] veth1_vlan: left promiscuous mode
[  356.092269][ T5023] veth0_vlan: left promiscuous mode
[  356.094775][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  356.237228][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  356.246842][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  356.396292][ T5795] Bluetooth: hci2: command tx timeout
[  356.569834][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  356.581391][ T5813] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  356.595261][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  357.353142][ T5023] team0 (unregistering): Port device team_slave_1 removed
[  357.389977][ T5023] team0 (unregistering): Port device team_slave_0 removed
[  357.714941][ T6926] team0: Port device team_slave_0 added
[  357.734760][ T6926] team0: Port device team_slave_1 added
[  358.425262][ T5802] Bluetooth: hci2: command tx timeout
[  358.648650][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_0
[  358.656083][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  358.682563][ T6926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  358.729752][ T5802] Bluetooth: hci3: command tx timeout
[  358.789158][ T5023] IPVS: stop unused estimator thread 0...
[  359.084432][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.091610][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.117991][ T6926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.471070][ T6926] hsr_slave_0: entered promiscuous mode
[  359.504849][ T6926] hsr_slave_1: entered promiscuous mode
[  359.520460][ T6926] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  359.528593][ T6926] Cannot create hsr debugfs directory
[  359.644910][ T4823] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.825264][ T4823] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.000194][ T4823] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.238367][ T4823] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.744436][ T5813] Bluetooth: hci3: command tx timeout
[  360.923274][ T6970] chnl_net:caif_netlink_parms(): no params data found
[  360.959341][ T4823] bridge_slave_1: left allmulticast mode
[  360.965455][ T4823] bridge_slave_1: left promiscuous mode
[  360.972051][ T4823] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.998989][ T4823] bridge_slave_0: left allmulticast mode
[  361.005104][ T4823] bridge_slave_0: left promiscuous mode
[  361.011732][ T4823] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.560834][ T4823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  361.690185][ T4823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  361.706336][ T4823] bond0 (unregistering): Released all slaves
[  362.340327][ T6926] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  362.375099][ T6926] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  362.402536][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  362.412650][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  362.422281][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  362.482885][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  362.502922][ T5802] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  362.514704][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  362.718186][ T6926] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  362.834612][ T5802] Bluetooth: hci3: command tx timeout
[  362.902545][ T6926] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  363.006300][ T4823] hsr_slave_0: left promiscuous mode
[  363.036861][ T4823] hsr_slave_1: left promiscuous mode
[  363.089431][ T4823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  363.098504][ T4823] batman_adv: batadv0: Removing interface: batadv_slave_0
[  363.188171][ T4823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  363.196161][ T4823] batman_adv: batadv0: Removing interface: batadv_slave_1
[  363.293835][ T4823] veth1_macvtap: left promiscuous mode
[  363.299509][ T4823] veth0_macvtap: left promiscuous mode
[  363.305496][ T4823] veth1_vlan: left promiscuous mode
[  363.310906][ T4823] veth0_vlan: left promiscuous mode
[  363.961315][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.971882][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.984778][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  364.012543][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  364.031791][ T5813] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  364.106608][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  364.455077][ T4823] team0 (unregistering): Port device team_slave_1 removed
[  364.544646][ T4823] team0 (unregistering): Port device team_slave_0 removed
[  364.583617][ T5813] Bluetooth: hci4: command tx timeout
[  365.215144][ T5813] Bluetooth: hci3: command tx timeout
[  365.803087][ T7029] netlink: 36 bytes leftover after parsing attributes in process `syz.5.281'.
[  366.028931][ T4823] IPVS: stop unused estimator thread 0...
[  366.264891][ T5813] Bluetooth: hci5: command tx timeout
[  366.381099][ T6926] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.624290][ T7009] chnl_net:caif_netlink_parms(): no params data found
[  366.674613][ T5813] Bluetooth: hci4: command tx timeout
[  366.744220][ T6926] 8021q: adding VLAN 0 to HW filter on device team0
[  366.782467][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.790051][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.802844][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.810358][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.891378][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.899357][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.907399][ T6970] bridge_slave_0: entered allmulticast mode
[  366.966141][ T6970] bridge_slave_0: entered promiscuous mode
[  366.981417][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.989264][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.997159][ T6970] bridge_slave_1: entered allmulticast mode
[  367.006348][ T6970] bridge_slave_1: entered promiscuous mode
[  367.370168][ T7020] chnl_net:caif_netlink_parms(): no params data found
[  367.472033][ T6970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.538811][ T6970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.899564][ T6970] team0: Port device team_slave_0 added
[  367.982391][ T6970] team0: Port device team_slave_1 added
[  368.241642][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.252060][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.279990][ T6970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.375267][ T5813] Bluetooth: hci5: command tx timeout
[  368.522696][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.531094][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.557465][ T6970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.748208][ T5813] Bluetooth: hci4: command tx timeout
[  368.810213][ T6970] hsr_slave_0: entered promiscuous mode
[  368.876771][ T6970] hsr_slave_1: entered promiscuous mode
[  368.924008][ T6970] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  368.931824][ T6970] Cannot create hsr debugfs directory
[  369.590448][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.598706][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.606436][ T7009] bridge_slave_0: entered allmulticast mode
[  369.614828][ T7009] bridge_slave_0: entered promiscuous mode
[  369.725002][ T7009] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.725512][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.726084][ T7009] bridge_slave_1: entered allmulticast mode
[  369.729122][ T7009] bridge_slave_1: entered promiscuous mode
[  369.877456][ T7020] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.877952][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.878570][ T7020] bridge_slave_0: entered allmulticast mode
[  369.881354][ T7020] bridge_slave_0: entered promiscuous mode
[  369.990863][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.991196][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.991639][ T7020] bridge_slave_1: entered allmulticast mode
[  369.994248][ T7020] bridge_slave_1: entered promiscuous mode
[  370.129161][ T7009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.138368][ T7020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.147287][ T7009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.155637][ T7020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.280532][ T6926] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.426873][ T5813] Bluetooth: hci5: command tx timeout
[  370.575911][ T7009] team0: Port device team_slave_0 added
[  370.609280][ T7009] team0: Port device team_slave_1 added
[  370.653733][ T7020] team0: Port device team_slave_0 added
[  370.825450][ T5813] Bluetooth: hci4: command tx timeout
[  370.962767][ T7020] team0: Port device team_slave_1 added
[  371.042470][ T7009] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.042545][ T7009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.042678][ T7009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.098091][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.126208][    C1] vkms_vblank_simulate: vblank timer overrun
[  371.151426][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.151563][ T7020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.286564][ T7009] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.286645][ T7009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.286781][ T7009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.334140][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.334214][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.334351][ T7020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.427351][    C1] vkms_vblank_simulate: vblank timer overrun
[  371.660102][ T6970] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  371.703081][ T7009] hsr_slave_0: entered promiscuous mode
[  371.751314][ T7009] hsr_slave_1: entered promiscuous mode
[  371.804994][ T7009] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  371.812904][ T7009] Cannot create hsr debugfs directory
[  371.846365][ T6970] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  371.997550][ T6970] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  372.099454][ T6970] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  372.223667][ T7020] hsr_slave_0: entered promiscuous mode
[  372.266644][ T7020] hsr_slave_1: entered promiscuous mode
[  372.300301][ T7020] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  372.308269][ T7020] Cannot create hsr debugfs directory
[  372.519844][ T5813] Bluetooth: hci5: command tx timeout
[  373.745506][ T6926] veth0_vlan: entered promiscuous mode
[  374.106299][ T6926] veth1_vlan: entered promiscuous mode
[  375.635405][ T6970] 8021q: adding VLAN 0 to HW filter on device bond0
[  375.728661][ T6970] 8021q: adding VLAN 0 to HW filter on device team0
[  375.801001][ T4823] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.808594][ T4823] bridge0: port 1(bridge_slave_0) entered forwarding state
[  375.827735][ T4823] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.835290][ T4823] bridge0: port 2(bridge_slave_1) entered forwarding state
[  375.907394][ T6926] veth0_macvtap: entered promiscuous mode
[  375.968013][ T6926] veth1_macvtap: entered promiscuous mode
[  376.059988][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  376.070841][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.081330][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  376.092249][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.108677][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.130584][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.141958][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.152242][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.163063][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.177903][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.197956][ T6926] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.207446][ T6926] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.216626][ T6926] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.225765][ T6926] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.313011][ T6970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  376.323806][ T6970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  376.660347][ T7020] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  376.715319][ T7020] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  376.788318][ T7020] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  376.836719][ T7020] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  377.542447][ T7009] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  377.647849][ T7009] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  377.824848][ T7009] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  377.985702][ T7009] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  378.215492][ T7020] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.474276][ T7020] 8021q: adding VLAN 0 to HW filter on device team0
[  378.524422][ T3935] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.532077][ T3935] bridge0: port 1(bridge_slave_0) entered forwarding state
[  378.669211][ T3935] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.676811][ T3935] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.751376][ T7020] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  378.764422][ T7020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  379.393135][ T6970] 8021q: adding VLAN 0 to HW filter on device batadv0
[  379.428238][ T7009] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.470896][ T7009] 8021q: adding VLAN 0 to HW filter on device team0
[  379.575201][ T3841] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.582632][ T3841] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.595909][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.603525][ T3841] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.652782][ T7009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  381.567736][ T7020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.041150][ T7009] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.475751][ T7020] veth0_vlan: entered promiscuous mode
[  382.650338][ T7020] veth1_vlan: entered promiscuous mode
[  382.952203][ T6970] veth0_vlan: entered promiscuous mode
[  383.101646][ T6970] veth1_vlan: entered promiscuous mode
[  383.136649][ T7020] veth0_macvtap: entered promiscuous mode
[  383.269505][ T7020] veth1_macvtap: entered promiscuous mode
[  383.558308][ T6970] veth0_macvtap: entered promiscuous mode
[  383.587544][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.598626][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.608851][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.619920][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.630345][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.641003][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.655015][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  383.734540][ T6970] veth1_macvtap: entered promiscuous mode
[  383.982950][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.996551][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.006923][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.018969][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.030162][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.040951][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.056853][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.174503][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  384.185855][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.197771][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  384.208464][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.218549][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  384.229188][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.240316][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  384.250996][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.268351][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.294916][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.305873][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.316011][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.326647][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.337044][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.348204][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.358575][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.369225][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.382801][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.437357][ T6970] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.446434][ T6970] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.455505][ T6970] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.464474][ T6970] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  384.610395][ T7020] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.621808][ T7020] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.631448][ T7020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.640925][ T7020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.935028][ T7116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.943208][ T7116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.324173][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.332359][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.388168][ T7009] veth0_vlan: entered promiscuous mode
[  386.596290][ T7009] veth1_vlan: entered promiscuous mode
[  387.052231][ T7009] veth0_macvtap: entered promiscuous mode
[  387.213057][ T7009] veth1_macvtap: entered promiscuous mode
[  387.501760][ T7009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.515715][ T7009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.526621][ T7009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.537539][ T7009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.547785][ T7009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.558537][ T7009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.568752][ T7009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.579518][ T7009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.589678][ T7009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.601012][ T7009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.619781][ T7009] batman_adv: batadv0: Interface activated: batadv_slave_0
[  388.112922][ T7009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.126618][ T7009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.137591][ T7009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.148437][ T7009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.158630][ T7009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.169835][ T7009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.179992][ T7009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.190880][ T7009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.201123][ T7009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.211993][ T7009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.230554][ T7009] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.291606][ T7174] netlink: 28 bytes leftover after parsing attributes in process `syz.7.295'.
[  388.604146][ T7009] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.613708][ T7009] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.622761][ T7009] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.632066][ T7009] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.935143][ T1132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.194828][ T1132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.867491][ T1132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.115720][ T1132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.065540][ T1132] bridge_slave_1: left allmulticast mode
[  391.071734][ T1132] bridge_slave_1: left promiscuous mode
[  391.078784][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.135377][ T1132] bridge_slave_0: left allmulticast mode
[  391.141304][ T1132] bridge_slave_0: left promiscuous mode
[  391.149488][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.824445][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  391.940029][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  391.995664][ T1132] bond0 (unregistering): Released all slaves
[  393.028897][ T1132] hsr_slave_0: left promiscuous mode
[  393.092007][ T1132] hsr_slave_1: left promiscuous mode
[  393.119992][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  393.131783][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0
[  393.231642][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  393.240652][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1
[  393.303892][ T1132] veth1_macvtap: left promiscuous mode
[  393.309668][ T1132] veth0_macvtap: left promiscuous mode
[  393.315943][ T1132] veth1_vlan: left promiscuous mode
[  393.321490][ T1132] veth0_vlan: left promiscuous mode
[  394.293811][ T1132] team0 (unregistering): Port device team_slave_1 removed
[  394.333889][ T1132] team0 (unregistering): Port device team_slave_0 removed
[  395.180178][ T1132] IPVS: stop unused estimator thread 0...
[  395.859984][ T3887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.868250][ T3887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.045137][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.053540][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.128758][ T7245] netlink: 28 bytes leftover after parsing attributes in process `syz.7.303'.
[  396.376737][ T4823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.384992][ T4823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.640265][ T5023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.649420][ T5023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.363910][ T5852] IPVS: starting estimator thread 0...
[  398.743912][ T7260] IPVS: using max 240 ests per chain, 12000 per kthread
[  401.086047][ T7286] netlink: 16 bytes leftover after parsing attributes in process `syz.7.311'.
[  401.294050][ T5023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.302268][ T5023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.355054][ T3997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.363154][ T3997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.787314][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.312'.
[  401.796827][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.7.312'.
[  401.818855][ T7291] geneve0: entered promiscuous mode
[  401.824444][ T7291] geneve0: entered allmulticast mode
[  402.719799][ T5813] Bluetooth: hci4: unexpected cc 0x0c1a length: 3 > 1
[  403.746059][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  403.752719][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  405.485059][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  405.567247][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  405.595078][ T7327] netlink: 16 bytes leftover after parsing attributes in process `syz.8.321'.
[  406.423120][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  406.699707][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  406.743664][ T5802] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  406.752254][ T5802] Bluetooth: hci4: Injecting HCI hardware error event
[  406.764596][ T5795] Bluetooth: hci4: hardware error 0x00
[  406.921300][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  406.932381][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  407.741150][ T5813] Bluetooth: hci2: unexpected cc 0x0c1a length: 3 > 1
[  408.211275][    T8] IPVS: starting estimator thread 0...
[  408.333812][ T7351] IPVS: using max 240 ests per chain, 12000 per kthread
[  409.231801][ T5813] Bluetooth: hci0: command tx timeout
[  409.349341][ T7321] chnl_net:caif_netlink_parms(): no params data found
[  409.464358][ T5795] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  410.349668][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.9.333'.
[  411.305307][ T5813] Bluetooth: hci0: command tx timeout
[  411.338958][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.346946][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.354629][ T7321] bridge_slave_0: entered allmulticast mode
[  411.362542][ T7321] bridge_slave_0: entered promiscuous mode
[  411.579982][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.587959][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.596334][ T7321] bridge_slave_1: entered allmulticast mode
[  411.604857][ T7321] bridge_slave_1: entered promiscuous mode
[  411.786717][ T5813] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  411.795608][ T5813] Bluetooth: hci2: Injecting HCI hardware error event
[  411.976063][ T5813] Bluetooth: hci2: hardware error 0x00
[  411.987012][ T5795] Bluetooth: hci2: command 0x0406 tx timeout
[  412.440738][ T7321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.638355][ T7321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.351110][ T7321] team0: Port device team_slave_0 added
[  413.384680][ T5795] Bluetooth: hci0: command tx timeout
[  413.463279][ T7321] team0: Port device team_slave_1 added
[  414.094822][ T5813] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  414.293150][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  414.300813][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.327516][ T7321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  414.398841][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  414.406422][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.433695][ T7321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  414.660363][ T7419] netlink: 16 bytes leftover after parsing attributes in process `syz.7.344'.
[  415.045564][ T7321] hsr_slave_0: entered promiscuous mode
[  415.146068][ T7321] hsr_slave_1: entered promiscuous mode
[  415.203815][ T7321] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  415.211655][ T7321] Cannot create hsr debugfs directory
[  415.467941][ T5795] Bluetooth: hci0: command tx timeout
[  416.383759][ T5795] Bluetooth: hci3: command 0x0406 tx timeout
[  418.646854][ T7459] could not allocate digest TFM handle sha1-ssse3
[  419.202697][ T7321] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  419.295713][ T7321] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  419.409424][ T7321] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  419.585090][ T7321] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  419.770697][ T7472] netlink: 16 bytes leftover after parsing attributes in process `syz.7.358'.
[  420.331937][ T7321] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.442742][ T7321] 8021q: adding VLAN 0 to HW filter on device team0
[  420.493813][ T3887] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.501488][ T3887] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.519143][ T3887] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.526905][ T3887] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.087026][ T7321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  424.778118][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.368'.
[  424.915828][ T7321] veth0_vlan: entered promiscuous mode
[  424.999766][ T7321] veth1_vlan: entered promiscuous mode
[  425.428920][ T7321] veth0_macvtap: entered promiscuous mode
[  425.559809][ T7321] veth1_macvtap: entered promiscuous mode
[  425.970738][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.981946][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.992280][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.004212][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.014728][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.030118][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.043894][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.054819][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.064924][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.075686][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.089907][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  426.330819][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.341727][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.352016][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.362763][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.372985][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.383882][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.394064][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.404823][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.414955][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.429663][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.446262][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  426.500697][ T7321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.510317][ T7321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.519683][ T7321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.531712][ T7321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.111478][ T7539] Bluetooth: MGMT ver 1.23
[  427.994915][   T44] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  428.340005][   T44] usb 8-1: Using ep0 maxpacket: 16
[  428.419676][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.379'.
[  428.555951][   T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.567602][   T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  428.580817][   T44] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  428.591367][   T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.615591][   T44] usb 8-1: config 0 descriptor??
[  429.809606][ T7548] =====================================================
[  429.817119][ T7548] BUG: KMSAN: uninit-value in batadv_get_vid+0x1d4/0x300
[  429.824596][ T7548]  batadv_get_vid+0x1d4/0x300
[  429.829484][ T7548]  batadv_interface_tx+0x329/0x1cf0
[  429.835040][ T7548]  dev_hard_start_xmit+0x247/0xa20
[  429.840425][ T7548]  __dev_queue_xmit+0x3562/0x56d0
[  429.845788][ T7548]  __bpf_redirect+0x148c/0x1610
[  429.850828][ T7548]  bpf_clone_redirect+0x37e/0x500
[  429.856196][ T7548]  ___bpf_prog_run+0x13fe/0xe0f0
[  429.861457][ T7548]  __bpf_prog_run512+0xc5/0xf0
[  429.866611][ T7548]  bpf_test_run+0x546/0xd20
[  429.871323][ T7548]  bpf_prog_test_run_skb+0x182f/0x24d0
[  429.877138][ T7548]  bpf_prog_test_run+0x5e5/0xa30
[  429.882301][ T7548]  __sys_bpf+0x6aa/0xd90
[  429.886889][ T7548]  __ia32_sys_bpf+0xa0/0xe0
[  429.891596][ T7548]  ia32_sys_call+0x30fe/0x40d0
[  429.896712][ T7548]  __do_fast_syscall_32+0xb0/0x110
[  429.902073][ T7548]  do_fast_syscall_32+0x38/0x80
[  429.907294][ T7548]  do_SYSENTER_32+0x1f/0x30
[  429.912014][ T7548]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  429.918711][ T7548] 
[  429.921128][ T7548] Uninit was created at:
[  429.925763][ T7548]  kmem_cache_alloc_node_noprof+0x6bf/0xb80
[  429.931865][ T7548]  kmalloc_reserve+0x13d/0x4a0
[  429.936951][ T7548]  pskb_expand_head+0x226/0x1a60
[  429.942110][ T7548]  skb_ensure_writable+0x496/0x520
[  429.947541][ T7548]  bpf_clone_redirect+0x1c5/0x500
[  429.952753][ T7548]  ___bpf_prog_run+0x13fe/0xe0f0
[  429.958068][ T7548]  __bpf_prog_run512+0xc5/0xf0
[  429.963060][ T7548]  bpf_test_run+0x546/0xd20
[  429.967897][ T7548]  bpf_prog_test_run_skb+0x182f/0x24d0
[  429.973711][ T7548]  bpf_prog_test_run+0x5e5/0xa30
[  429.978873][ T7548]  __sys_bpf+0x6aa/0xd90
[  429.983465][ T7548]  __ia32_sys_bpf+0xa0/0xe0
[  429.988165][ T7548]  ia32_sys_call+0x30fe/0x40d0
[  429.993152][ T7548]  __do_fast_syscall_32+0xb0/0x110
[  429.998627][ T7548]  do_fast_syscall_32+0x38/0x80
[  430.003828][ T7548]  do_SYSENTER_32+0x1f/0x30
[  430.008549][ T7548]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  430.015266][ T7548] 
[  430.017715][ T7548] CPU: 0 UID: 0 PID: 7548 Comm: syz.7.376 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0
[  430.028657][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  430.039004][ T7548] =====================================================
[  430.046215][ T7548] Disabling lock debugging due to kernel taint
[  430.052503][ T7548] Kernel panic - not syncing: kmsan.panic set ...
[  430.059077][ T7548] CPU: 0 UID: 0 PID: 7548 Comm: syz.7.376 Tainted: G    B              6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0
[  430.071384][ T7548] Tainted: [B]=BAD_PAGE
[  430.075660][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  430.085877][ T7548] Call Trace:
[  430.089258][ T7548]  <TASK>
[  430.092248][ T7548]  dump_stack_lvl+0x216/0x2d0
[  430.097058][ T7548]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  430.102963][ T7548]  dump_stack+0x1e/0x30
[  430.107264][ T7548]  panic+0x4e2/0xcf0
[  430.111344][ T7548]  ? kmsan_get_metadata+0x131/0x1c0
[  430.116647][ T7548]  kmsan_report+0x2c7/0x2d0
[  430.121271][ T7548]  ? do_SYSENTER_32+0x1f/0x30
[  430.126081][ T7548]  ? skb_clone+0x3aa/0x550
[  430.130607][ T7548]  ? __dev_queue_xmit+0x3562/0x56d0
[  430.135913][ T7548]  ? __bpf_redirect+0x148c/0x1610
[  430.141052][ T7548]  ? bpf_clone_redirect+0x37e/0x500
[  430.146352][ T7548]  ? ___bpf_prog_run+0x13fe/0xe0f0
[  430.151583][ T7548]  ? __bpf_prog_run512+0xc5/0xf0
[  430.156643][ T7548]  ? bpf_test_run+0x546/0xd20
[  430.161429][ T7548]  ? __msan_warning+0x95/0x120
[  430.166308][ T7548]  ? batadv_get_vid+0x1d4/0x300
[  430.171280][ T7548]  ? batadv_interface_tx+0x329/0x1cf0
[  430.176775][ T7548]  ? dev_hard_start_xmit+0x247/0xa20
[  430.182169][ T7548]  ? __dev_queue_xmit+0x3562/0x56d0
[  430.187490][ T7548]  ? __bpf_redirect+0x148c/0x1610
[  430.192613][ T7548]  ? bpf_clone_redirect+0x37e/0x500
[  430.197907][ T7548]  ? ___bpf_prog_run+0x13fe/0xe0f0
[  430.203143][ T7548]  ? __bpf_prog_run512+0xc5/0xf0
[  430.208231][ T7548]  ? bpf_test_run+0x546/0xd20
[  430.213092][ T7548]  ? bpf_prog_test_run_skb+0x182f/0x24d0
[  430.218848][ T7548]  ? bpf_prog_test_run+0x5e5/0xa30
[  430.224087][ T7548]  ? __sys_bpf+0x6aa/0xd90
[  430.228611][ T7548]  ? __ia32_sys_bpf+0xa0/0xe0
[  430.233405][ T7548]  ? ia32_sys_call+0x30fe/0x40d0
[  430.238478][ T7548]  ? __do_fast_syscall_32+0xb0/0x110
[  430.243900][ T7548]  ? do_fast_syscall_32+0x38/0x80
[  430.249051][ T7548]  ? do_SYSENTER_32+0x1f/0x30
[  430.253846][ T7548]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  430.260462][ T7548]  ? kmsan_get_metadata+0x13e/0x1c0
[  430.265753][ T7548]  ? kmsan_internal_memmove_metadata+0x91/0x230
[  430.272113][ T7548]  ? kmsan_get_metadata+0x13e/0x1c0
[  430.277393][ T7548]  ? kmsan_get_metadata+0x13e/0x1c0
[  430.282675][ T7548]  ? kmsan_get_metadata+0x13e/0x1c0
[  430.287959][ T7548]  ? kmsan_get_metadata+0x13e/0x1c0
[  430.293246][ T7548]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  430.299173][ T7548]  ? batadv_interface_tx+0xc6/0x1cf0
[  430.304623][ T7548]  ? filter_irq_stacks+0x60/0x1a0
[  430.309862][ T7548]  ? kmsan_get_metadata+0x13e/0x1c0
[  430.315172][ T7548]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  430.321088][ T7548]  __msan_warning+0x95/0x120
[  430.325796][ T7548]  batadv_get_vid+0x1d4/0x300
[  430.331046][ T7548]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  430.336966][ T7548]  batadv_interface_tx+0x329/0x1cf0
[  430.342324][ T7548]  ? __pfx_batadv_interface_tx+0x10/0x10
[  430.348106][ T7548]  ? __pfx_batadv_interface_tx+0x10/0x10
[  430.353884][ T7548]  dev_hard_start_xmit+0x247/0xa20
[  430.359131][ T7548]  __dev_queue_xmit+0x3562/0x56d0
[  430.364266][ T7548]  ? kmsan_get_metadata+0x13e/0x1c0
[  430.369556][ T7548]  ? __dev_queue_xmit+0x355/0x56d0
[  430.374795][ T7548]  __bpf_redirect+0x148c/0x1610
[  430.379747][ T7548]  ? kmsan_get_metadata+0x13e/0x1c0
[  430.385034][ T7548]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  430.390937][ T7548]  bpf_clone_redirect+0x37e/0x500
[  430.396077][ T7548]  ___bpf_prog_run+0x13fe/0xe0f0
[  430.401148][ T7548]  __bpf_prog_run512+0xc5/0xf0
[  430.406035][ T7548]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  430.412494][ T7548]  ? kmsan_internal_poison_memory+0x7d/0x90
[  430.418508][ T7548]  ? kmsan_internal_poison_memory+0x49/0x90
[  430.424543][ T7548]  ? kmsan_slab_alloc+0xdf/0x160
[  430.430114][ T7548]  ? kmem_cache_alloc_noprof+0x637/0xb20
[  430.435861][ T7548]  ? kmsan_get_metadata+0x13e/0x1c0
[  430.441145][ T7548]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  430.447046][ T7548]  ? bpf_test_run+0x101/0xd20
[  430.451833][ T7548]  ? kmsan_get_metadata+0x13e/0x1c0
[  430.457123][ T7548]  ? kmsan_get_metadata+0x13e/0x1c0
[  430.462409][ T7548]  ? kmsan_get_metadata+0x13e/0x1c0
[  430.467692][ T7548]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  430.473680][ T7548]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  430.479595][ T7548]  ? __pfx___bpf_prog_run512+0x10/0x10
[  430.485180][ T7548]  bpf_test_run+0x546/0xd20
[  430.489797][ T7548]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  430.496251][ T7548]  ? kmsan_get_metadata+0x13e/0x1c0
[  430.501537][ T7548]  ? bpf_test_run+0x3af/0xd20
[  430.506369][ T7548]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  430.512275][ T7548]  bpf_prog_test_run_skb+0x182f/0x24d0
[  430.517914][ T7548]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  430.523920][ T7548]  bpf_prog_test_run+0x5e5/0xa30
[  430.529001][ T7548]  __sys_bpf+0x6aa/0xd90
[  430.533413][ T7548]  __ia32_sys_bpf+0xa0/0xe0
[  430.538031][ T7548]  ia32_sys_call+0x30fe/0x40d0
[  430.542916][ T7548]  __do_fast_syscall_32+0xb0/0x110
[  430.548162][ T7548]  ? irqentry_exit+0x16/0x60
[  430.552859][ T7548]  do_fast_syscall_32+0x38/0x80
[  430.557845][ T7548]  do_SYSENTER_32+0x1f/0x30
[  430.562463][ T7548]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  430.569014][ T7548] RIP: 0023:0xf73cd579
[  430.573181][ T7548] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  430.592906][ T7548] RSP: 002b:00000000f56b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165
[  430.601433][ T7548] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000080
[  430.609490][ T7548] RDX: 000000000000002c RSI: 0000000000000000 RDI: 0000000000000000
[  430.617538][ T7548] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  430.625588][ T7548] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  430.633633][ T7548] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  430.641706][ T7548]  </TASK>
[  430.645114][ T7548] Kernel Offset: disabled
[  430.649505][ T7548] Rebooting in 86400 seconds..