last executing test programs:

1m45.361819914s ago: executing program 0 (id=1920):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
open(0x0, 0x0, 0x146)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[])
read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x900}}}, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3}, 0x50)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x400c0930, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r4, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000049c0)=[{{&(0x7f0000000340)=@tipc=@name, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/132, 0x84}], 0x1, &(0x7f0000000540)=""/136, 0x88}, 0xe9}, {{&(0x7f0000000640)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/157, 0x9d}, {&(0x7f00000033c0)=""/4084, 0xff4}, {&(0x7f0000000780)=""/85, 0x55}, {&(0x7f0000000940)=""/245, 0xf5}], 0x4, &(0x7f00000002c0)=""/15, 0xf}, 0x4}, {{&(0x7f00000043c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000048c0)=[{0x0}, {0x0}, {&(0x7f0000004780)=""/180, 0xb4}], 0x3, &(0x7f0000004900)=""/134, 0x86}, 0x24a}], 0x3, 0x41, &(0x7f0000004a40)={0x77359400})
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000f140100000000000047285ae53080ee75766572627300ff0700030000000000"], 0x24}}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
setxattr$incfs_id(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x0, 0x0, 0x2)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)

1m43.770675946s ago: executing program 0 (id=1926):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x8, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000008000b00", @ANYBLOB="04000500050002000a"], 0x58}}, 0x0)
listen(r1, 0xfff)
syz_emit_ethernet(0x86, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d00", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xffffffff}]}}}}}}}}, 0x0)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
r7 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
personality(0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r7, r5, 0x0)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x1e, 0x14, 0x0})
keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xffffffffffffffff)
syz_pidfd_open(r0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)

1m42.867452521s ago: executing program 0 (id=1927):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
writev(r4, &(0x7f0000000580), 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r5, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
syz_genetlink_get_family_id$nfc(0x0, r2)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0x1c}}, 0x0)
r7 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000001bc0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="948120000000", 0x0, 0x0, 0x0, 0x0, 0x0})
write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="6105010303830102046b7f06beacfe46fd18176d06801f1f01ad"], 0x1a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r9 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x6, 0x2}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x0)

1m41.718170266s ago: executing program 0 (id=1930):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(0x0, 0x32)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x24000800)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x55)
read(r3, &(0x7f00000000c0)=""/29, 0x1d)
write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x19)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1m41.405160892s ago: executing program 0 (id=1932):
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x6}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdbc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x45c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

1m39.282421144s ago: executing program 0 (id=1935):
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0)
sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
memfd_create(0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d  \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r1, 0x0)

1m0.700331628s ago: executing program 2 (id=1979):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
pipe2$9p(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x3, 0xffffffffffffffe9)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}}, 0x4040015)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200025bd7000000000002500000008002f00f70b000005002a000600000008020200dc4307777f00ee398cfcef1949a8a46b0f5ef7316646d218f924c00b9a0200000000efff00a90600a06e8d55e3ee11ae7d9ed9a1063b0fcb3c318b1805feb527b899c8741ac4229da085f882b26b0c37a1e636e059c7f1e41164c8440100a8f522a60d2d0389fe2d0ab130d6a6a093c9d48e35f558b1e0d3db7a78946df1334bc01b0c17484a282c342868a5f8c3aaf54268173498634e", @ANYRES32=r6, @ANYBLOB="0600040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000000)
bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r7}, 0x10)
syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44090)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xf, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x3d, 0xc, "6f88d04cddaaab1be334a9a8ebd5a03859143c31322bed52aaf253d831167f54efa063e51dcac9adf691addf26a0d712d91293a335cf32a636"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x20}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0xa0}}, 0x24008084)

58.995541658s ago: executing program 2 (id=1981):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
rename(&(0x7f00000000c0)='./file0\x00', 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet(0x2, 0x5, 0x5)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000010000000000000000000000000a28000000050a00000000000000000000000008000540000000410c0002400000000000000000140000001100010000000000000000000000000a0000"], 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="140004006e7363766630000000000001010000000800050006000000180017800400040004"], 0x50}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0x1000, @loopback}, 0x1c)
listen(r5, 0x0)
r6 = epoll_create(0x689)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040))
epoll_pwait(r6, &(0x7f0000000180)=[{}], 0x1, 0xfffffffa, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socket(0x200000100000011, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

51.314583564s ago: executing program 2 (id=1992):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
unshare(0x2020400)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6, <r7=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r7}, 0x4)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4018aee1, &(0x7f00000002c0)=ANY=[])
ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f00000001c0)=""/171)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3}, 0x83}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x6, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

45.386888915s ago: executing program 3 (id=1997):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2840, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc})
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r1 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x8)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r1, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x3, 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)
r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e)
write$binfmt_script(r5, &(0x7f0000000100), 0x4)
ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0xf)

43.222992331s ago: executing program 2 (id=2000):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0)
sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
memfd_create(0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d  \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r2, 0x0)
fallocate(r2, 0x0, 0x0, 0x400)
r3 = userfaultfd(0x801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
fanotify_init(0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001880)=ANY=[], 0x34}}, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x0, 0x274e, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf}, 0x48)
sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c)

40.270891276s ago: executing program 3 (id=2004):
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x01')
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x40, 0x10, 0xfffffffc, 0x10001, {{0x17, 0x4, 0x1, 0x6, 0x5c, 0x67, 0x0, 0x7, 0xa177ff5f35ad204d, 0x0, @multicast1, @multicast2, {[@ssrr={0x89, 0x7, 0xfd, [@dev={0xac, 0x14, 0x14, 0xd}]}, @end, @generic={0x82, 0x11, "2c53d4e4d5dbaad495d699e60bc5d4"}, @timestamp_addr={0x44, 0x2c, 0x98, 0x1, 0xc, [{@loopback, 0x7}, {@multicast2, 0x1}, {@rand_addr=0x64010101, 0x919a}, {@multicast2, 0x80000001}, {@empty, 0xd}]}]}}}}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r4}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x10, 0x4, 0x3a8, 0xec, 0x0, 0x0, 0x2c8, 0x2c8, 0x2c8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0xbc, 0xec}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1cc}}, {{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth1_vlan\x00'}, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e82c585781a388bb66b5beff5bbd1a3e53cf6f00000000020000221200"}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f4)
r6 = socket(0x10, 0x80803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/18, @ANYRES32=0x0, @ANYBLOB="bf"], 0x1c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
recvmmsg(r6, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000200000000b70000ed000000009500000000000000a333bc2b568b7fd00814608960340f9a08331ea87420813f4119903f7341dfcd1267efd7a20d94d76974b0ed0a8063ac816465e77272a841a1f1ddd82e104d08e21ebe5c57f2f50ef71d83b0b514daa7c83a863e4f55139d008e8eb37d78e531717f6e118dfe7d419d4854ed8be45e80ace0671de76595b0648fdf8397480fd45ee3c76ec84320639ab6224ac9d50862da1111c4664066634e301bbcd360917c2153ac0cead5bd3d24742d2c76fe8cd44a7d5c272da6c728"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

38.589703941s ago: executing program 2 (id=2006):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
r2 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
unshare(0x2020400)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6, <r7=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r7}, 0x4)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4018aee1, &(0x7f00000002c0)=ANY=[])
ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f00000001c0)=""/171)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3}, 0x83}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x6, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

38.165658344s ago: executing program 3 (id=2008):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106, 0x4}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000b00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x2}}, 0x20)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xe01}], 0x3)

35.935086822s ago: executing program 3 (id=2010):
socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff00000000000088a80d008100090086dd60dd690b00482f00fc000000000000000000000000000000ff0200000000000000000000000000012420810000000000000008000009000086dd0009080080be81000000100000000100000000008000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x65c, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
fsopen(0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@allocspi={0x118, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback}, 0x0, 0x4ad}, [@XFRMA_IF_ID={0x8}, @lastused={0xc}, @mark={0xc}]}, 0x118}}, 0x0)

34.149419947s ago: executing program 3 (id=2012):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x68b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
acct(&(0x7f00000001c0)='./file0\x00')
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
setresgid(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000001000000000fd750000000000000000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076000068305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000900000000000000000000000000000000000000000000000000000000000000000000636c75737465720000000000000000000000000000000000000000003062000010000000000000000000000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000004493000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000004000000000000000800"/592]}, 0x2c8)

33.899952378s ago: executing program 2 (id=2013):
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x6}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdbc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x45c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\v', 0x1, 0xffffffffffffffff)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="8f129a622e6230ee26e092c9f46b6e7b08730a31d78b77a831d1ddd5b07c9b5ec02095f97c57f3132bf37fb75e621b1f8ac180cc4d60fc03ab1239466f32711bd6b700eacd5430ed84c8115fe12dfa1961249f630c9a7e9443be1b19a608e8c9546409690d363ea4901d234603ba535b2f41ced38903bdbad73b1259c015a970ae51e0338531499ce3eb8b7431e504271a278611e2250feaf6d702f5dbdf386bfae6df6b2cc4f5cb989a3d4d100e4a550902530af246e397ea9be2f1a2ab6998", 0xc0, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000001100)="ae", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f00000011c0)={r4, r5, r6}, &(0x7f0000000440)=""/202, 0xca, &(0x7f0000001380)={&(0x7f0000000400)={'sha384-ssse3\x00'}})

32.605662148s ago: executing program 3 (id=2014):
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x01')
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x40, 0x10, 0xfffffffc, 0x10001, {{0x17, 0x4, 0x1, 0x6, 0x5c, 0x67, 0x0, 0x7, 0xa177ff5f35ad204d, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x8, 0x96, 0x0, 0x5, [0x10]}, @ssrr={0x89, 0x7, 0xfd, [@dev={0xac, 0x14, 0x14, 0xd}]}, @end, @generic={0x82, 0x11, "2c53d4e4d5dbaad495d699e60bc5d4"}, @timestamp_addr={0x44, 0x24, 0x98, 0x1, 0xc, [{@loopback, 0x7}, {@multicast2, 0x1}, {@multicast2, 0x80000001}, {@empty, 0xd}]}]}}}}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r4 = socket(0x10, 0x80803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="bf"], 0x1c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040))
recvmmsg(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000200000000b70000ed000000009500000000000000a333bc2b568b7fd00814608960340f9a08331ea87420813f4119903f7341dfcd1267efd7a20d94d76974b0ed0a8063ac816465e77272a841a1f1ddd82e104d08e21ebe5c57f2f50ef71d83b0b514daa7c83a863e4f55139d008e8eb37d78e531717f6e118dfe7d419d4854ed8be45e80ace0671de76595b0648fdf8397480fd45ee3c76ec84320639ab6224ac9d50862da1111c4664066634e301bbcd360917c2153ac0cead5bd3d24742d2c76fe8cd44a7d5c272da6c728"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

14.115387889s ago: executing program 4 (id=2033):
r0 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x100000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff00"], 0x34}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000000)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x8, 0x0, "82ffe9a7ca8d338e0978c80c568a9d94969744223a3bf7b1ce1f566ac0b5502df67a3a54817e92bda7e02337b5186bf1532b41dc173f2ef38ea641dbf4bea193", "2c8d978bbbaf836770b6bc05c7d33d4ba1eeb28b81365fd5b98b898cd82f59b99d77af213e51d53d7e04d4e85e1d41ee121ea3aad63b499c7a25e1b181ac9ebf", "9fef7affaecac6ed08f4c36330801327cabc8491b2a7e8063de5ae1f02b8cb3a", [0x0, 0x3]}})
preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffff62d, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400))
chdir(&(0x7f0000001180)='./bus\x00')
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x1)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, &(0x7f0000000080))

12.650510468s ago: executing program 4 (id=2035):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x216002, 0x0)
ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0})
keyctl$update(0x2, 0x0, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket(0x27, 0xa, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d02"], 0x17)
r4 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)='z', 0x1}], 0x1, &(0x7f0000001340)=ANY=[], 0x280}, 0xc0c0)
accept$unix(r4, 0x0, 0x0)

11.15009075s ago: executing program 4 (id=2037):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
writev(r4, &(0x7f0000000580), 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r6=>0x0)
io_submit(r6, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r5, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
syz_genetlink_get_family_id$nfc(0x0, r2)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0x1c}}, 0x0)
r7 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000001bc0)={0x53, 0x0, 0x3, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="948120", 0x0, 0x0, 0x0, 0x0, 0x0})
write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="6105010303830102046b7f06beacfe46fd18176d06801f1f01ad"], 0x1a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r9 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x6, 0x2}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x0)

9.726362311s ago: executing program 4 (id=2039):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setscheduler(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x8040080)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000001a80)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000fc0)=""/212, 0xd4}, {&(0x7f0000001140)=""/213, 0xd5}, {&(0x7f0000001240)=""/32, 0x20}, {&(0x7f00000013c0)=""/64, 0x40}], 0x5, &(0x7f00000015c0)=""/177, 0xb1}}, {{&(0x7f0000001680)=@qipcrtr, 0x80, 0x0, 0x0, &(0x7f0000001a00)=""/88, 0x58}}], 0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0x10, 0x4, 0xe, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x700, 0x10, 0x9, 0x7}})
bind$inet(r1, &(0x7f0000000680)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831b538dfd8e012e79578e51bc5af65ff7ae735ffc8191a9bb0a83099e90f4580d760551b5b342f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea086e95767d42b4e54861d0227dbfd2e6d28715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c62fd5d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc2200000000000001ff9682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e2331d01ce99a069694124d37cef099ece729aa218f9f44ad06a223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb8fc500404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99ff987900040000009feb121c49e07dbed4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39e00213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd9205218ee0200e2ff08644fb94c06003dc39050f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e906049fe86e09c58e273cd905deb28c13c1ed1c9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f891fab9d3f2e82c5f6fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935000000009c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f281e6bad1e5aa6d901c279eb156c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b4c6936531effce7115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b402bbab76fbb9d8a917df5b2e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380b3e365f84a3e5b116ae3e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627aaefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a00000000000000000000000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8d5f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c4a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d76ef45af7d87b308117a9ea24dcda2bc42cf20942c31268a400a221d7b1622585094e9dd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a420cc91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc1a170200a63a83ab25a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b47800acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7acb37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c901d99eced99b46b43016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa91811ccd7c1b1a92bac529df90000000000000000000000004000301b5557b674a86db8c4bfd58ff30000000000000000000000e8f1ed2ea68b0569be17bd73c0633ed4acaaef9e9f7d21998f55b71b26af7e284b1cc4685d740a9d106380dd8cb78f9d9c8cf59b155bc569ddd3098417286bec31896306410a60acadb0f3fb44d30b82986b792635155fa3d562d3aa09452cbb201b0dfed6412837bc2237acf7ca5997ee1898541f4a1c4031e240ccc80ee8fad036ce04409c4630821b8b99be5a3f72afc458f8417544014a67ae4ad31b15c8e13c9f0cdee4abefd0ed28a4a55dd992a748008822d05f13b1a8112d7f41e3bf28bcc1b0963798bed4e0db07d0574016276aa28a86eb33d20a5d58f58201edcef1253b02aac4c74427322ec24809bb059c41db9ee1c3e728c76c5ade17df0a7fc74229ea1a525ee42e8eac3675cb18d6c06748e93179c382f331dde2eea7eab2da71c2ea7086c0c71b6e3d837fdfdc1a5285c471b11eb3311a9f7459a57f7174d000000000000000000000000000000000000000000000008c6987f5d91d640fe5d83d4489b382fe3d3e49c23dcee2af69ba44ab575f354ed026cbf37acc05331084088093fa14152ee6d861dc27a69a9a563c0feb8b27fb7d4586b35a6f181793d5b73e231e7a2d1a6f564a06adc348b9a1c1017f908f99e136b04a0d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xef, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f06558fee0ffff0003ba52c44277fb08061402e000030b62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0xfe, 0x60000000}, 0x50)

8.554260439s ago: executing program 1 (id=2040):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r6=>0x0})
setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r9, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x84}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="b98700000000000000000b00000004000180"], 0x18}}, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

7.107623712s ago: executing program 4 (id=2041):
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x01')
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x40, 0x10, 0xfffffffc, 0x10001, {{0x17, 0x4, 0x1, 0x6, 0x5c, 0x67, 0x0, 0x7, 0xa177ff5f35ad204d, 0x0, @multicast1, @multicast2, {[@ssrr={0x89, 0x7, 0xfd, [@dev={0xac, 0x14, 0x14, 0xd}]}, @end, @generic={0x82, 0x11, "2c53d4e4d5dbaad495d699e60bc5d4"}, @timestamp_addr={0x44, 0x2c, 0x98, 0x1, 0xc, [{@loopback, 0x7}, {@multicast2, 0x1}, {@rand_addr=0x64010101, 0x919a}, {@multicast2, 0x80000001}, {@empty, 0xd}]}]}}}}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r4}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x10, 0x4, 0x3a8, 0xec, 0x0, 0x0, 0x2c8, 0x2c8, 0x2c8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0xbc, 0xec}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1cc}}, {{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth1_vlan\x00'}, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e82c585781a388bb66b5beff5bbd1a3e53cf6f00000000020000221200"}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f4)
r6 = socket(0x10, 0x80803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/19, @ANYRES32=0x0, @ANYBLOB="bf"], 0x1c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
recvmmsg(r6, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000200000000b70000ed000000009500000000000000a333bc2b568b7fd00814608960340f9a08331ea87420813f4119903f7341dfcd1267efd7a20d94d76974b0ed0a8063ac816465e77272a841a1f1ddd82e104d08e21ebe5c57f2f50ef71d83b0b514daa7c83a863e4f55139d008e8eb37d78e531717f6e118dfe7d419d4854ed8be45e80ace0671de76595b0648fdf8397480fd45ee3c76ec84320639ab6224ac9d50862da1111c4664066634e301bbcd360917c2153ac0cead5bd3d24742d2c76fe8cd44a7d5c272da6c728"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

6.982507001s ago: executing program 1 (id=2042):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000001180)={0x10, 0xfffffff5, 0x3}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000b2d000/0x4000)=nil, 0x1000, 0xa, 0x20010, 0xffffffffffffffff, 0x83000000)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x80020000, 0x2, {0x5, @raw_data="439e73c82bad769c1516d4c77a5c5885be9b70b538ec45e7ba36827b0dcf53cc22c46c7ddae950c8f87629ac052d399516111996f2d568d4314f1a6a19db3bdb291cb1a830152d32b2ad880e24ae29ce49a0ba071236284d59f28276b7b6325b4fb369c2aab53751ce9ef9dea4663ae9ce4c521f2918fad161726fe27dd15cc6520d466d80c07cd248fcf58332bf0ee0e5061d4377b24a0c253e86d27c5edcd2ae36ce31344898571a1a4f7f4af1de4747103ee0bb34830f53b67d1578af4dab6f19403d8c88fd8e"}})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000008000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
semget$private(0x0, 0x1, 0x0)
semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800002, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

5.845365668s ago: executing program 1 (id=2043):
r0 = getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x90)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x5)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

5.593041035s ago: executing program 4 (id=2044):
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x6}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffd, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdbc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x45c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\v', 0x1, 0xffffffffffffffff)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="8f129a622e6230ee26e092c9f46b6e7b08730a31d78b77a831d1ddd5b07c9b5ec02095f97c57f3132bf37fb75e621b1f8ac180cc4d60fc03ab1239466f32711bd6b700eacd5430ed84c8115fe12dfa1961249f630c9a7e9443be1b19a608e8c9546409690d363ea4901d234603ba535b2f41ced38903bdbad73b1259c015a970ae51e0338531499ce3eb8b7431e504271a278611e2250feaf6d702f5dbdf386bfae6df6b2cc4f5cb989a3d4d100e4a550902530af246e397ea9be2f1a2ab6998", 0xc0, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000001100)="ae", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f00000011c0)={r4, r5, r6}, &(0x7f0000000440)=""/202, 0xca, &(0x7f0000001380)={&(0x7f0000000400)={'sha384-ssse3\x00'}})

3.744412895s ago: executing program 1 (id=2045):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
r2 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
unshare(0x2020400)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6, <r7=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r7}, 0x4)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4018aee1, &(0x7f00000002c0)=ANY=[])
ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f00000001c0)=""/171)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3}, 0x83}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x6, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.168157041s ago: executing program 1 (id=2046):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
pipe2$9p(&(0x7f0000001900), 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
inotify_init()
pipe(&(0x7f0000000140))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16, @ANYRESDEC], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}})

0s ago: executing program 1 (id=2047):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x8, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000300000008000b00", @ANYBLOB="04000500050002000a"], 0x58}}, 0x0)
listen(r2, 0xfff)
syz_emit_ethernet(0x86, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d00", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xffffffff}]}}}}}}}}, 0x0)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
personality(0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r6, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)

kernel console output (not intermixed with test programs):

slave_1 added
[  801.859072][T11162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  801.898629][T11154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  801.906003][T11154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  801.939276][T11154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  801.954134][T11154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  801.961385][T11154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  801.988289][T11154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  802.076385][T11160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  802.083840][T11160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  802.092827][ T1122] IPVS: stop unused estimator thread 0...
[  802.111522][T11160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  802.141612][T11162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  802.196351][T11152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  802.209328][T11160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  802.217177][T11160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  802.249035][T11160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  802.355076][T11152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  802.458067][T11162] team0: Port device team_slave_0 added
[  802.562095][ T4609] Bluetooth: hci3: command tx timeout
[  802.593978][T11152] team0: Port device team_slave_0 added
[  802.617879][T11162] team0: Port device team_slave_1 added
[  802.632452][ T4609] Bluetooth: hci5: command tx timeout
[  802.646138][T11158] hsr_slave_0: entered promiscuous mode
[  802.654542][T11158] hsr_slave_1: entered promiscuous mode
[  802.662557][T11158] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  802.670181][T11158] Cannot create hsr debugfs directory
[  802.703615][T11154] hsr_slave_0: entered promiscuous mode
[  802.722864][T11154] hsr_slave_1: entered promiscuous mode
[  802.744137][T11154] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  802.751784][T11154] Cannot create hsr debugfs directory
[  802.828269][T11152] team0: Port device team_slave_1 added
[  802.872527][ T4609] Bluetooth: hci2: command tx timeout
[  802.952091][ T4609] Bluetooth: hci7: command tx timeout
[  803.112057][ T4609] Bluetooth: hci8: command tx timeout
[  803.117377][T11160] hsr_slave_0: entered promiscuous mode
[  803.135357][T11160] hsr_slave_1: entered promiscuous mode
[  803.162216][T11160] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  803.169854][T11160] Cannot create hsr debugfs directory
[  803.232929][T11162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  803.239946][T11162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  803.300924][T11162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  803.325683][T11162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  803.341999][T11162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  803.381548][T11162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  803.598383][T11152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  803.606241][T11152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  803.635288][T11152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  803.670259][T11152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  803.689418][T11152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  803.717465][T11152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  804.011744][T11162] hsr_slave_0: entered promiscuous mode
[  804.018962][T11162] hsr_slave_1: entered promiscuous mode
[  804.026122][T11162] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  804.038027][T11162] Cannot create hsr debugfs directory
[  804.117366][ T1122] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  804.407396][ T1122] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  804.710166][ T1122] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  804.826785][T11152] hsr_slave_0: entered promiscuous mode
[  804.836479][T11152] hsr_slave_1: entered promiscuous mode
[  804.846810][T11152] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  804.862618][T11152] Cannot create hsr debugfs directory
[  805.078707][ T1122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  805.338222][T11158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  805.561060][T11158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  805.684192][T11158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  805.868673][T11158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.208800][ T1122] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.406053][ T1122] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.556152][ T1122] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.619265][T11158] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  806.668752][T11158] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  806.779775][T11154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.846308][ T1122] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.865979][T11158] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  806.976650][T11154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.995641][T11158] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  807.086779][T11154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.286484][T11154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.497597][ T1122] bridge_slave_1: left allmulticast mode
[  807.522248][ T1122] bridge_slave_1: left promiscuous mode
[  807.528138][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.560857][ T1122] bridge_slave_0: left allmulticast mode
[  807.572211][ T1122] bridge_slave_0: left promiscuous mode
[  807.578177][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.625984][ T1122] bridge_slave_1: left allmulticast mode
[  807.631728][ T1122] bridge_slave_1: left promiscuous mode
[  807.638619][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.667168][ T1122] bridge_slave_0: left allmulticast mode
[  807.681252][ T1122] bridge_slave_0: left promiscuous mode
[  807.689606][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.705460][ T1122] bridge_slave_1: left allmulticast mode
[  807.711177][ T1122] bridge_slave_1: left promiscuous mode
[  807.719264][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.730696][ T1122] bridge_slave_0: left allmulticast mode
[  807.736565][ T1122] bridge_slave_0: left promiscuous mode
[  807.746896][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.768996][ T1122] bridge_slave_1: left allmulticast mode
[  807.777066][ T1122] bridge_slave_1: left promiscuous mode
[  807.783706][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.794941][ T1122] bridge_slave_0: left allmulticast mode
[  807.800658][ T1122] bridge_slave_0: left promiscuous mode
[  807.819214][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.928537][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  809.942611][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  809.955900][ T1122] bond0 (unregistering): Released all slaves
[  810.164153][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  810.178619][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  810.194247][ T1122] bond0 (unregistering): Released all slaves
[  810.378882][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  810.393983][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  810.408972][ T1122] bond0 (unregistering): Released all slaves
[  810.606670][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  810.629070][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  810.643884][ T1122] bond0 (unregistering): Released all slaves
[  810.926130][T11158] 8021q: adding VLAN 0 to HW filter on device bond0
[  811.102339][T11154] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  811.162976][T11154] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  811.181413][   T29] audit: type=1400 audit(1723239478.918:332): avc:  denied  { write } for  pid=4653 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  811.208896][   T29] audit: type=1400 audit(1723239478.918:333): avc:  denied  { remove_name } for  pid=4653 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  811.225415][T11154] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  811.269230][   T29] audit: type=1400 audit(1723239478.918:334): avc:  denied  { add_name } for  pid=4653 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  811.349043][T11158] 8021q: adding VLAN 0 to HW filter on device team0
[  811.361012][T11154] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  811.509115][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  811.516456][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  811.611661][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  811.618986][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  812.294762][T11158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  813.229110][T11154] 8021q: adding VLAN 0 to HW filter on device bond0
[  813.716477][T11154] 8021q: adding VLAN 0 to HW filter on device team0
[  813.793388][T11158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  813.815357][T10929] bridge0: port 1(bridge_slave_0) entered blocking state
[  813.822680][T10929] bridge0: port 1(bridge_slave_0) entered forwarding state
[  813.866043][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  813.873384][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  813.913199][ T1122] hsr_slave_0: left promiscuous mode
[  813.919862][ T1122] hsr_slave_1: left promiscuous mode
[  813.928039][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  813.937103][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0
[  813.946476][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  813.956898][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1
[  813.971668][ T1122] hsr_slave_0: left promiscuous mode
[  813.978992][ T1122] hsr_slave_1: left promiscuous mode
[  813.986456][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  813.995388][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0
[  814.010168][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  814.018129][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1
[  814.039140][ T1122] hsr_slave_0: left promiscuous mode
[  814.049979][ T1122] hsr_slave_1: left promiscuous mode
[  814.058523][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  814.068935][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0
[  814.083957][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  814.096330][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1
[  814.116494][ T1122] hsr_slave_0: left promiscuous mode
[  814.123367][ T1122] hsr_slave_1: left promiscuous mode
[  814.129755][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  814.138268][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0
[  814.153896][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  814.161669][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1
[  814.276457][ T1122] veth1_macvtap: left promiscuous mode
[  814.283947][ T1122] veth0_macvtap: left promiscuous mode
[  814.289839][ T1122] veth1_vlan: left promiscuous mode
[  814.295472][ T1122] veth0_vlan: left promiscuous mode
[  814.305221][ T1122] veth1_macvtap: left promiscuous mode
[  814.313934][ T1122] veth0_macvtap: left promiscuous mode
[  814.321130][ T1122] veth1_vlan: left promiscuous mode
[  814.327494][ T1122] veth0_vlan: left promiscuous mode
[  814.335936][ T1122] veth1_macvtap: left promiscuous mode
[  814.341662][ T1122] veth0_macvtap: left promiscuous mode
[  814.348547][ T1122] veth1_vlan: left promiscuous mode
[  814.354712][ T1122] veth0_vlan: left promiscuous mode
[  814.363587][ T1122] veth1_macvtap: left promiscuous mode
[  814.369229][ T1122] veth0_macvtap: left promiscuous mode
[  814.375988][ T1122] veth1_vlan: left promiscuous mode
[  814.381397][ T1122] veth0_vlan: left promiscuous mode
[  814.414863][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  814.421469][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  815.886178][ T1122] team0 (unregistering): Port device team_slave_1 removed
[  815.937362][ T1122] team0 (unregistering): Port device team_slave_0 removed
[  817.293449][ T1122] team0 (unregistering): Port device team_slave_1 removed
[  817.345263][ T1122] team0 (unregistering): Port device team_slave_0 removed
[  818.684752][ T1122] team0 (unregistering): Port device team_slave_1 removed
[  818.749590][ T1122] team0 (unregistering): Port device team_slave_0 removed
[  820.070165][ T1122] team0 (unregistering): Port device team_slave_1 removed
[  820.130674][ T1122] team0 (unregistering): Port device team_slave_0 removed
[  821.254892][T11152] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  821.278097][T11152] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  821.342510][T11152] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  821.385528][T11152] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  821.419821][T11158] veth0_vlan: entered promiscuous mode
[  821.558102][T11158] veth1_vlan: entered promiscuous mode
[  821.804227][T11158] veth0_macvtap: entered promiscuous mode
[  821.838376][T11160] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  821.887439][T11160] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  821.908272][T11160] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  821.930218][T11160] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  821.966335][T11158] veth1_macvtap: entered promiscuous mode
[  822.058129][T11154] 8021q: adding VLAN 0 to HW filter on device batadv0
[  822.325056][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  822.337194][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  822.351056][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  822.361864][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  822.372964][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  822.384611][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  822.403794][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  822.414977][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  822.428196][T11158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  822.535280][T11162] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  822.568801][T11162] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  822.627362][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  822.651198][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  822.678006][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  822.688964][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  822.699128][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  822.711297][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  822.726921][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  822.737599][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  822.759504][T11158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  822.774490][T11162] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  822.848475][T11162] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  822.916288][T11158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  822.925955][T11158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  822.936874][T11158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  822.949821][T11158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  823.144122][T11154] veth0_vlan: entered promiscuous mode
[  823.170141][T11152] 8021q: adding VLAN 0 to HW filter on device bond0
[  823.231018][T11154] veth1_vlan: entered promiscuous mode
[  823.456410][T10930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  823.486263][T10930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  823.516656][T11152] 8021q: adding VLAN 0 to HW filter on device team0
[  823.557159][ T1122] IPVS: stop unused estimator thread 0...
[  823.585045][ T1122] IPVS: stop unused estimator thread 0...
[  823.606797][ T1122] IPVS: stop unused estimator thread 0...
[  823.633398][ T1122] IPVS: stop unused estimator thread 0...
[  823.665266][T11160] 8021q: adding VLAN 0 to HW filter on device bond0
[  823.693642][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  823.701530][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  823.730379][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.737671][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  823.898248][T11160] 8021q: adding VLAN 0 to HW filter on device team0
[  823.937677][T10799] bridge0: port 2(bridge_slave_1) entered blocking state
[  823.945026][T10799] bridge0: port 2(bridge_slave_1) entered forwarding state
[  824.001343][T11154] veth0_macvtap: entered promiscuous mode
[  824.092951][T10930] bridge0: port 1(bridge_slave_0) entered blocking state
[  824.100391][T10930] bridge0: port 1(bridge_slave_0) entered forwarding state
[  824.221625][T10930] bridge0: port 2(bridge_slave_1) entered blocking state
[  824.228937][T10930] bridge0: port 2(bridge_slave_1) entered forwarding state
[  824.258706][T11285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1651'.
[  824.288776][T11154] veth1_macvtap: entered promiscuous mode
[  824.579602][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  824.611326][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.642627][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  824.673065][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.696803][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  824.736004][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.766466][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  824.790596][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.820159][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  824.861750][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.909923][T11154] batman_adv: batadv0: Interface activated: batadv_slave_0
[  824.941724][T11162] 8021q: adding VLAN 0 to HW filter on device bond0
[  825.028079][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  825.076374][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.090866][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  825.101800][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.129937][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  825.163559][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.197858][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  825.219137][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.252184][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  825.270460][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.307038][T11154] batman_adv: batadv0: Interface activated: batadv_slave_1
[  825.471829][T11154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  825.484639][T11154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  825.512996][T11154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  825.545988][T11154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  825.593924][T11152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  825.681429][T11162] 8021q: adding VLAN 0 to HW filter on device team0
[  825.774482][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  825.781804][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  826.090743][T10930] bridge0: port 2(bridge_slave_1) entered blocking state
[  826.098126][T10930] bridge0: port 2(bridge_slave_1) entered forwarding state
[  826.475965][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  826.502711][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  826.781073][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  826.832466][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  826.979384][T11152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  827.061216][T11160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  827.438011][T11329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1655'.
[  827.511056][T11152] veth0_vlan: entered promiscuous mode
[  827.664610][T11152] veth1_vlan: entered promiscuous mode
[  827.770764][T11160] veth0_vlan: entered promiscuous mode
[  827.943968][T11160] veth1_vlan: entered promiscuous mode
[  828.214297][T11152] veth0_macvtap: entered promiscuous mode
[  828.355237][T11152] veth1_macvtap: entered promiscuous mode
[  828.526007][T11160] veth0_macvtap: entered promiscuous mode
[  828.589079][T11162] 8021q: adding VLAN 0 to HW filter on device batadv0
[  828.670164][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.732059][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.760281][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.794663][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.823465][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.864129][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.882971][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.895680][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.905895][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.917145][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.927259][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.946418][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.969695][T11152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  829.041213][ T5272] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  829.141670][T11160] veth1_macvtap: entered promiscuous mode
[  829.376098][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  829.447773][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  829.528963][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  829.600647][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  829.958203][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  830.016878][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  830.060726][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  830.112016][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  830.153347][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  830.210820][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  830.252033][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  830.303089][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  830.364994][T11152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  830.557043][T11152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  830.608515][T11152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  830.645226][T11152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  830.687716][T11152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  830.803445][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  830.846524][ T5272] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  830.864034][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  830.902748][ T5272] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  830.911849][ T5272] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  830.912014][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  830.933699][ T5272] usb 3-1: config 0 interface 0 has no altsetting 0
[  830.965258][ T5272] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  830.982217][ T5272] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  831.001983][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  831.012553][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  831.033008][ T5272] usb 3-1: config 0 interface 0 has no altsetting 0
[  831.041325][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  831.053485][ T5272] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  831.072085][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  831.091956][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  831.103794][ T5272] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  831.103849][ T5272] usb 3-1: config 0 interface 0 has no altsetting 0
[  831.113825][ T5272] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  831.155191][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  831.172029][ T5272] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  831.176330][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  831.222191][ T5272] usb 3-1: config 0 interface 0 has no altsetting 0
[  831.226925][T11365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1658'.
[  831.230833][ T5272] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  831.241958][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  831.282049][ T5272] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  831.284222][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  831.322204][ T5272] usb 3-1: config 0 interface 0 has no altsetting 0
[  831.352196][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  831.362604][ T5272] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  831.362708][ T5272] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  831.362756][ T5272] usb 3-1: config 0 interface 0 has no altsetting 0
[  831.373564][ T5272] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  831.403805][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  831.452150][ T5272] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  831.470761][ T5272] usb 3-1: config 0 interface 0 has no altsetting 0
[  831.474636][T11160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  831.497166][ T5272] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  831.506577][ T5272] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  831.596730][ T5272] usb 3-1: config 0 interface 0 has no altsetting 0
[  831.596763][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  831.626829][ T5272] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  831.637424][ T5272] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  831.681996][ T5272] usb 3-1: Product: syz
[  831.686612][ T5272] usb 3-1: Manufacturer: syz
[  831.691274][ T5272] usb 3-1: SerialNumber: syz
[  831.720890][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  831.759932][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  831.795216][ T5272] usb 3-1: config 0 descriptor??
[  831.803443][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  831.825757][ T5272] usb 3-1: can't set config #0, error -71
[  831.843456][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  831.884472][ T5272] usb 3-1: USB disconnect, device number 13
[  831.965440][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  832.010923][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  832.076506][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  832.114476][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  832.143008][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  832.167469][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  832.202894][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  832.223018][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  832.268589][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  832.307084][T11160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  832.497437][T11160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  832.544056][T11160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  832.582732][T11160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  832.602057][T11160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  832.799073][T11382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1660'.
[  833.131674][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  833.176451][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  833.263754][   T29] audit: type=1400 audit(1723239501.008:335): avc:  denied  { create } for  pid=11388 comm="syz.1.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  833.366040][T11162] veth0_vlan: entered promiscuous mode
[  833.462637][T10930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  833.479114][T10930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  833.557839][T11162] veth1_vlan: entered promiscuous mode
[  833.833127][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  833.841022][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.994619][T11162] veth0_macvtap: entered promiscuous mode
[  838.098395][T10930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  838.142065][T10930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  838.239130][T11162] veth1_macvtap: entered promiscuous mode
[  838.483534][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  838.511094][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'.
[  838.525975][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  838.590242][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  838.636158][   T29] audit: type=1400 audit(1723239506.378:336): avc:  denied  { create } for  pid=11411 comm="syz.0.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  838.662014][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  838.724899][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  838.752015][   T29] audit: type=1400 audit(1723239506.448:337): avc:  denied  { connect } for  pid=11411 comm="syz.0.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  838.794196][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  838.843397][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  838.882124][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  838.963023][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  839.000104][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  839.048769][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  839.067919][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  839.179670][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  839.222018][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  839.242073][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  839.277044][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  839.345744][T11162] batman_adv: batadv0: Interface activated: batadv_slave_0
[  840.174907][T11441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1668'.
[  840.331231][T11419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1665'.
[  840.363733][T11430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1652'.
[  840.446924][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  840.507228][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  840.559154][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  840.610820][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  840.678396][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  840.704460][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  840.745716][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  840.783982][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  840.828851][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  840.890766][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  840.929515][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  841.014593][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  841.072125][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  841.129011][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  841.207404][T11162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  841.228613][T11162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  841.308874][T11162] batman_adv: batadv0: Interface activated: batadv_slave_1
[  841.472366][T11162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  841.481189][T11162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  841.541071][T11162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  841.596217][T11162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  841.754533][ T5303] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  841.962599][ T5303] usb 2-1: Using ep0 maxpacket: 16
[  842.009954][ T5303] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  842.078020][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  842.116584][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  842.191131][ T5303] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  842.246125][ T5303] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  842.316110][ T5303] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  842.340296][T11456] netlink: 'syz.0.1671': attribute type 9 has an invalid length.
[  842.359060][ T5303] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  842.388147][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  842.392423][ T5303] usb 2-1: Manufacturer: syz
[  842.410798][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  842.423956][T11456] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1671'.
[  842.458003][ T5303] usb 2-1: config 0 descriptor??
[  842.700568][T11449] block nbd2: shutting down sockets
[  843.002218][ T5303] rc_core: IR keymap rc-hauppauge not found
[  843.009537][ T5303] Registered IR keymap rc-empty
[  843.023188][ T5303] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  843.133802][ T5303] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  843.178081][ T5303] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  843.230414][ T5303] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14
[  843.345436][T11462] netlink: 'syz.3.1672': attribute type 9 has an invalid length.
[  843.357561][T11466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  843.382860][ T5303] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  843.423103][T11466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  843.451405][T11462] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1672'.
[  843.461793][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  843.470213][ T5303] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  843.512751][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  843.556815][ T5303] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  843.652173][ T5303] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  843.770628][ T5303] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  843.865952][ T5303] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  843.938008][ T5303] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  844.044215][ T5303] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  844.063342][T11459] block nbd3: shutting down sockets
[  844.112084][ T5303] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  844.202412][ T5303] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  844.274467][ T5303] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  844.306212][ T5303] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  844.483780][ T5303] usb 2-1: USB disconnect, device number 12
[  844.661716][ T5327] IPVS: starting estimator thread 0...
[  844.772928][T11476] netlink: 'syz.0.1673': attribute type 9 has an invalid length.
[  844.784526][T11476] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1673'.
[  844.822252][T11489] IPVS: using max 22 ests per chain, 52800 per kthread
[  844.914475][T11482] hpfs: bad mount options.
[  845.475188][T11487] block nbd0: shutting down sockets
[  846.081275][   T29] audit: type=1400 audit(1723239513.818:338): avc:  denied  { module_load } for  pid=11498 comm="syz.3.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  846.848148][T11509] netlink: 'syz.0.1679': attribute type 9 has an invalid length.
[  846.923626][T11509] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1679'.
[  847.440039][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'.
[  847.560652][ T4609] block nbd3: Receive control failed (result -104)
[  847.621661][T11518] block nbd3: shutting down sockets
[  847.855817][T11527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1683'.
[  847.909015][   T29] audit: type=1400 audit(1723239515.628:339): avc:  denied  { read } for  pid=11514 comm="syz.1.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  848.770222][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1685'.
[  849.509620][T11543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1684'.
[  850.366115][T11553] ieee802154 phy0 wpan0: encryption failed: -22
[  850.966339][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'.
[  851.155977][   T29] audit: type=1400 audit(1723239518.838:340): avc:  denied  { create } for  pid=11562 comm="syz.0.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  853.047807][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'.
[  854.172049][ T5327] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  854.432027][ T5327] usb 2-1: Using ep0 maxpacket: 16
[  854.469435][ T5327] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  854.521388][T11609] netlink: 'syz.4.1698': attribute type 9 has an invalid length.
[  854.536686][ T5327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  854.590728][ T5327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  854.602884][T11609] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1698'.
[  854.632593][ T5327] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  854.694069][ T5327] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  854.744403][ T5327] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  854.776134][ T5327] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  854.827169][ T5327] usb 2-1: Manufacturer: syz
[  854.882203][ T5327] usb 2-1: config 0 descriptor??
[  855.542169][ T5327] rc_core: IR keymap rc-hauppauge not found
[  855.548170][ T5327] Registered IR keymap rc-empty
[  855.621459][ T5327] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  855.672493][ T5327] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  855.760524][ T5327] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  855.845493][ T5327] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15
[  855.913454][T11635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  855.943994][ T5327] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  855.977260][T11635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  856.044325][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1702'.
[  856.074524][ T5327] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  856.142660][ T5327] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  856.220632][T11637] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1701'.
[  856.252257][ T5327] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  856.362507][ T5327] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  856.484235][ T5327] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  856.563403][ T5327] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  856.716720][ T5327] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  856.832296][ T5327] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  856.917570][ T5327] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  856.980096][ T5327] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  857.045867][ T5327] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  857.528755][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1704'.
[  858.418221][ T5271] usb 2-1: USB disconnect, device number 13
[  858.728790][   T29] audit: type=1400 audit(1723239526.468:341): avc:  denied  { ioctl } for  pid=11674 comm="syz.1.1707" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  859.415277][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1709'.
[  861.093896][ T4609] Bluetooth: Wrong link type (-57)
[  861.927560][T11725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1715'.
[  862.086710][T11726] ieee802154 phy0 wpan0: encryption failed: -22
[  864.203088][T11744] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1719'.
[  865.080935][   T29] audit: type=1400 audit(1723239532.818:342): avc:  denied  { bind } for  pid=11754 comm="syz.3.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  865.218326][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  865.242527][   T29] audit: type=1400 audit(1723239532.858:343): avc:  denied  { setopt } for  pid=11754 comm="syz.3.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  866.140636][T11773] netlink: 'syz.0.1725': attribute type 9 has an invalid length.
[  866.155541][T11773] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1725'.
[  866.569061][   T29] audit: type=1400 audit(1723239534.308:344): avc:  denied  { ioctl } for  pid=11765 comm="syz.3.1727" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  866.747045][T11778] netlink: 'syz.3.1727': attribute type 2 has an invalid length.
[  866.855955][ T4609] block nbd0: Receive control failed (result -104)
[  866.868969][T11766] block nbd0: shutting down sockets
[  870.752137][T11795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1735'.
[  870.777210][T11792] block nbd3: shutting down sockets
[  871.256871][ T4609] block nbd0: Receive control failed (result -104)
[  871.266671][T11800] block nbd0: shutting down sockets
[  871.302881][T11802] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1733'.
[  872.552134][T11815] netlink: 'syz.2.1737': attribute type 9 has an invalid length.
[  872.562078][T11815] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1737'.
[  873.592821][T11825] netlink: 'syz.3.1739': attribute type 2 has an invalid length.
[  873.891190][ T4609] block nbd2: Receive control failed (result -104)
[  873.956344][T11820] block nbd2: shutting down sockets
[  874.221310][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'.
[  875.847973][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  875.870767][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  876.439947][T11844] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1743'.
[  877.322727][T11860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1748'.
[  877.834389][T11870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1750'.
[  877.999139][T11847] block nbd1: shutting down sockets
[  879.643094][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1752'.
[  881.037538][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1757'.
[  881.147237][T11898] netlink: 'syz.2.1754': attribute type 9 has an invalid length.
[  881.183007][T11898] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1754'.
[  881.812433][T11896] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1755'.
[  881.955746][T11906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1756'.
[  888.434274][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'.
[  889.387067][ T5272] IPVS: starting estimator thread 0...
[  889.481027][T11942] hpfs: bad mount options.
[  889.512273][T11945] IPVS: using max 15 ests per chain, 36000 per kthread
[  891.553166][T11953] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1767'.
[  891.611587][T11951] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1768'.
[  892.082167][T11302] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  892.302558][T11302] usb 1-1: Using ep0 maxpacket: 16
[  892.348659][T11302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  892.403558][T11302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  892.431830][T11302] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  892.454684][T11302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.538089][T11302] usb 1-1: config 0 descriptor??
[  892.903862][T11302] usbhid 1-1:0.0: can't add hid device: -71
[  892.939999][T11302] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  892.985572][T11302] usb 1-1: USB disconnect, device number 10
[  893.287259][T11973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1774'.
[  893.449937][T11978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1776'.
[  893.693342][T11971] netlink: 'syz.3.1775': attribute type 9 has an invalid length.
[  893.719561][T11302] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  893.745063][T11971] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1775'.
[  893.934346][T11302] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  893.990489][T11302] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  894.042249][T11302] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  894.092465][T11302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.184415][T11977] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  894.268748][T11302] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  894.463862][T11977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  894.502805][T11977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  894.513416][ T4609] block nbd3: Receive control failed (result -104)
[  894.541529][T11975] block nbd3: shutting down sockets
[  894.679126][T11302] usb 3-1: USB disconnect, device number 14
[  895.117788][T11986] udevd[11986]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  895.595948][T11995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1780'.
[  896.384769][T11302] IPVS: starting estimator thread 0...
[  896.474175][T12000] hpfs: bad mount options.
[  896.482112][T12003] IPVS: using max 17 ests per chain, 40800 per kthread
[  901.193960][T12004] block nbd2: shutting down sockets
[  905.278094][T12025] netlink: 'syz.1.1788': attribute type 9 has an invalid length.
[  905.439212][T12025] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1788'.
[  906.032264][ T5303] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  906.119114][ T4609] block nbd1: Receive control failed (result -104)
[  906.270934][ T5303] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  906.293618][T12032] block nbd1: shutting down sockets
[  906.296478][ T5303] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  906.332058][ T5303] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  906.352171][ T5303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.388220][T12039] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  906.506521][ T5303] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  906.718259][T12043] netlink: 'syz.3.1794': attribute type 2 has an invalid length.
[  906.810008][T12039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  906.943598][T12039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  907.135727][T11302] usb 5-1: USB disconnect, device number 6
[  907.818433][T12050] udevd[12050]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  910.956306][T12095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1805'.
[  911.722786][T12115] netlink: 'syz.0.1807': attribute type 2 has an invalid length.
[  911.903930][ T5272] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  912.116781][ T5272] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  912.170240][ T5272] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  912.212546][ T5272] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  912.262415][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  912.326558][T12114] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  912.379012][ T5272] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  912.507692][T12121] hpfs: bad mount options.
[  912.774479][T12114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  912.832586][T12114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  913.058389][ T5271] usb 4-1: USB disconnect, device number 17
[  913.837516][T12136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'.
[  914.904423][T12148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1818'.
[  914.942259][   T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  915.209227][   T25] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  915.779664][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  915.956179][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  916.002028][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[  916.023342][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  916.042051][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  916.056496][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[  916.068808][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  916.119496][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  916.150870][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[  916.170972][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  916.207291][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  916.281129][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[  916.309775][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  916.339621][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  916.365099][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[  916.395204][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  916.650717][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  916.662032][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[  916.671819][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  916.681696][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  916.692801][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[  916.743376][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  916.830856][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  916.842317][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[  916.885242][   T25] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  916.894675][   T25] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  916.904997][   T25] usb 2-1: Product: syz
[  916.909471][   T25] usb 2-1: Manufacturer: syz
[  916.942049][   T25] usb 2-1: SerialNumber: syz
[  916.991079][   T25] usb 2-1: config 0 descriptor??
[  917.056957][   T25] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  917.393156][   T25] usb 2-1: USB disconnect, device number 14
[  917.430423][   T25] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  917.874118][T12171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1824'.
[  918.167226][T12172] hpfs: bad mount options.
[  918.872366][T12164] Bluetooth: hci7: command 0x0406 tx timeout
[  918.880033][T11155] Bluetooth: hci3: command 0x0406 tx timeout
[  918.892510][T12164] Bluetooth: hci5: command 0x0406 tx timeout
[  918.898626][T12164] Bluetooth: hci2: command 0x0406 tx timeout
[  918.905723][T11155] Bluetooth: hci8: command 0x0406 tx timeout
[  920.382069][   T25] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  920.596350][   T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  920.732127][   T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  920.761287][   T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  920.802205][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.875630][T12187] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  920.979584][   T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  921.168955][T12187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  921.241702][T12187] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  921.709226][ T5303] usb 4-1: USB disconnect, device number 18
[  922.467426][T12206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1834'.
[  922.611446][T12204] ieee802154 phy0 wpan0: encryption failed: -22
[  924.918392][T12229] hpfs: bad mount options.
[  924.990046][T12230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1839'.
[  931.194598][T12256] netlink: 'syz.0.1847': attribute type 9 has an invalid length.
[  931.214395][T12256] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1847'.
[  932.506102][T11157] block nbd0: Receive control failed (result -104)
[  932.534349][T12270] block nbd0: shutting down sockets
[  936.555574][T12307] netlink: 'syz.1.1856': attribute type 9 has an invalid length.
[  936.608533][T12307] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1856'.
[  936.887970][T11157] block nbd1: Receive control failed (result -104)
[  936.895629][T12317] block nbd1: shutting down sockets
[  937.093199][   T29] audit: type=1400 audit(1723239604.818:345): avc:  denied  { read } for  pid=12321 comm="syz.0.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  937.283602][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  937.293703][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  939.150863][T12338] netlink: 'syz.1.1863': attribute type 9 has an invalid length.
[  939.174016][T12338] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1863'.
[  940.099001][T11157] block nbd1: Receive control failed (result -104)
[  940.123000][T12330] block nbd1: shutting down sockets
[  943.058185][T12382] ebt_limit: overflow, try lower: 0/0
[  944.635827][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1880'.
[  953.071970][ T5303] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  953.166269][ T5271] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  953.252415][ T5303] usb 1-1: device descriptor read/64, error -71
[  953.376418][ T5271] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  953.425022][ T5271] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  953.502483][ T5271] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  953.532106][ T5303] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  953.541987][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.589482][T12413] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  953.651524][ T5271] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  953.712195][ T5303] usb 1-1: device descriptor read/64, error -71
[  953.853546][ T5303] usb usb1-port1: attempt power cycle
[  953.997620][T12423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  954.049843][T12423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  954.277736][T12162] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  954.300330][T12162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  954.322476][ T5303] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  954.330699][T12162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  954.348630][T12162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  954.359576][T12162] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  954.367374][T12162] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  954.463817][ T5303] usb 1-1: device descriptor read/8, error -71
[  954.646490][ T5327] usb 2-1: USB disconnect, device number 15
[  954.831992][ T5303] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  954.930275][ T5303] usb 1-1: device descriptor read/8, error -71
[  955.073699][ T5303] usb usb1-port1: unable to enumerate USB device
[  955.159843][T12432] hpfs: bad mount options.
[  956.826142][T12162] Bluetooth: hci2: command tx timeout
[  958.882174][T12162] Bluetooth: hci2: command tx timeout
[  959.543653][T12426] chnl_net:caif_netlink_parms(): no params data found
[  959.781995][T11317] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  959.984828][T11317] usb 1-1: Using ep0 maxpacket: 16
[  959.996230][T11317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  960.009593][T12451] netlink: 'syz.1.1899': attribute type 2 has an invalid length.
[  960.029159][T11317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  960.084609][T12456] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1900'.
[  960.119964][T11317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  960.161028][T12465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1901'.
[  960.172101][T11317] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  960.179390][T12426] bridge0: port 1(bridge_slave_0) entered blocking state
[  960.223772][T12426] bridge0: port 1(bridge_slave_0) entered disabled state
[  960.240544][T11317] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  960.262571][T12426] bridge_slave_0: entered allmulticast mode
[  960.281685][T12426] bridge_slave_0: entered promiscuous mode
[  960.300885][T11317] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  960.318667][T12426] bridge0: port 2(bridge_slave_1) entered blocking state
[  960.347478][T11317] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  960.358332][T11317] usb 1-1: Manufacturer: syz
[  960.377885][T12426] bridge0: port 2(bridge_slave_1) entered disabled state
[  960.394603][T11317] usb 1-1: config 0 descriptor??
[  960.408631][T12426] bridge_slave_1: entered allmulticast mode
[  960.419386][T12426] bridge_slave_1: entered promiscuous mode
[  960.601734][T12426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  960.696718][T12426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  960.953966][T12162] Bluetooth: hci2: command tx timeout
[  961.062083][T11317] rc_core: IR keymap rc-hauppauge not found
[  961.068100][T11317] Registered IR keymap rc-empty
[  961.093664][T11317] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  961.097942][T12426] team0: Port device team_slave_0 added
[  961.131491][T12469] netlink: 'syz.1.1902': attribute type 9 has an invalid length.
[  961.182395][T12469] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1902'.
[  961.202841][T11317] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  961.255939][T12426] team0: Port device team_slave_1 added
[  961.268414][T11317] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  961.281094][T12473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  961.330832][T12473] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  961.376992][T11317] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16
[  961.411487][T11317] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  961.467185][T11317] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  961.522892][T11317] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  961.588014][T11317] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  961.675895][T11317] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  961.733531][T11317] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  961.791596][T11317] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  961.858140][T11317] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  961.927919][T11317] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  961.947793][T12162] block nbd1: Receive control failed (result -104)
[  961.962261][T11317] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  961.997216][T12471] block nbd1: shutting down sockets
[  962.067253][T11317] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  962.100183][T11317] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  962.171253][T11317] usb 1-1: USB disconnect, device number 15
[  962.466129][T12426] batman_adv: batadv0: Adding interface: batadv_slave_0
[  962.497366][T12426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  962.642001][T12426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  962.673758][T12426] batman_adv: batadv0: Adding interface: batadv_slave_1
[  962.680765][T12426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  962.815815][T12426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  963.033231][T12162] Bluetooth: hci2: command tx timeout
[  963.426775][T12426] hsr_slave_0: entered promiscuous mode
[  963.520035][T12426] hsr_slave_1: entered promiscuous mode
[  963.557510][T12426] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  963.594076][T12426] Cannot create hsr debugfs directory
[  963.844345][T12501] ieee802154 phy0 wpan0: encryption failed: -22
[  964.234777][T12500] netlink: 'syz.0.1908': attribute type 2 has an invalid length.
[  964.670873][T12426] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  965.124321][T12426] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  965.520084][T12426] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  965.542510][T12522] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1915'.
[  965.840883][T12426] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  965.913209][T12526] netlink: 'syz.3.1916': attribute type 2 has an invalid length.
[  966.827582][T12426] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  966.928173][T12540] netlink: 'syz.3.1919': attribute type 2 has an invalid length.
[  966.963734][T12426] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  966.975098][T12554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1920'.
[  967.048738][T12426] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  967.157802][T12426] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  967.265234][T12548] netlink: 'syz.1.1921': attribute type 2 has an invalid length.
[  967.751626][T12426] 8021q: adding VLAN 0 to HW filter on device bond0
[  967.873590][ T5327] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  967.892218][T12426] 8021q: adding VLAN 0 to HW filter on device team0
[  967.955463][T10799] bridge0: port 1(bridge_slave_0) entered blocking state
[  967.962770][T10799] bridge0: port 1(bridge_slave_0) entered forwarding state
[  968.044432][T10799] bridge0: port 2(bridge_slave_1) entered blocking state
[  968.051793][T10799] bridge0: port 2(bridge_slave_1) entered forwarding state
[  968.102050][ T5327] usb 4-1: Using ep0 maxpacket: 16
[  968.137048][ T5327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  968.205028][ T5327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  968.275774][ T5327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  968.332599][ T5327] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  968.370365][ T5327] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  968.440117][ T5327] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  968.459413][T12569] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1924'.
[  968.465448][ T5327] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  968.497120][ T5327] usb 4-1: Manufacturer: syz
[  968.540873][ T5327] usb 4-1: config 0 descriptor??
[  968.645074][T12570] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1926'.
[  969.192841][ T5327] rc_core: IR keymap rc-hauppauge not found
[  969.209857][ T5327] Registered IR keymap rc-empty
[  969.258997][T12426] 8021q: adding VLAN 0 to HW filter on device batadv0
[  969.262118][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  969.362821][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  969.433151][ T5327] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  969.491496][T12588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  969.507757][ T5327] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17
[  969.565379][T12588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  969.614063][T12426] veth0_vlan: entered promiscuous mode
[  969.641565][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  969.679114][T12578] netlink: 'syz.0.1927': attribute type 2 has an invalid length.
[  969.709152][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  969.772260][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  969.811997][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  969.851192][T12426] veth1_vlan: entered promiscuous mode
[  969.864780][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  969.913706][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  969.943134][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  969.975501][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  970.047044][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  970.132088][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  970.216797][ T5327] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  970.269961][T12426] veth0_macvtap: entered promiscuous mode
[  970.282988][ T5327] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  970.374044][ T5327] usb 4-1: USB disconnect, device number 19
[  970.394633][T12426] veth1_macvtap: entered promiscuous mode
[  970.527405][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  970.591993][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  970.665041][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  970.948636][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  970.968175][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  970.978937][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.781876][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  971.844428][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  971.888963][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  971.890364][   T29] audit: type=1400 audit(1723239639.608:346): avc:  denied  { execute } for  pid=12596 comm="syz.4.1931" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=44133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  971.981592][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.047399][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  972.067723][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.139580][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  972.175705][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.222210][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  972.235033][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.251367][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  972.273713][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.367439][T12426] batman_adv: batadv0: Interface activated: batadv_slave_0
[  972.501347][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  972.623651][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.689085][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  972.699846][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.710186][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  972.730815][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.742435][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  972.773132][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.832680][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  972.901030][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.915933][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  972.933187][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.944468][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  972.956705][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.083974][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  973.102900][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.154580][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  973.167939][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.226115][T12426] batman_adv: batadv0: Interface activated: batadv_slave_1
[  973.333819][T12426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  973.385121][T12426] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  973.415273][T12426] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  973.504910][T12426] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  974.251342][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  974.293615][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  974.555595][T12012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  974.607010][T12624] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1937'.
[  974.609063][T12012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  974.654097][ T5327] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  974.931921][ T5327] usb 4-1: Using ep0 maxpacket: 16
[  974.965219][ T5327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  975.022217][ T5327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  975.084898][ T5327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  975.125350][ T5327] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  975.162253][ T5327] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  975.237293][ T5327] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  975.262414][ T5327] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  975.306221][ T5327] usb 4-1: Manufacturer: syz
[  975.354401][ T5327] usb 4-1: config 0 descriptor??
[  979.954660][ T5327] rc_core: IR keymap rc-hauppauge not found
[  980.023390][ T5327] Registered IR keymap rc-empty
[  980.284644][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  980.342417][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  980.439428][ T5327] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  980.597175][ T5327] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18
[  980.910243][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  981.021255][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  981.137488][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  981.703819][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  982.166077][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  982.513256][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  982.784631][T11317] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  983.662639][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  983.704353][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  984.233248][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  984.312764][ T5327] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  984.343762][T11317] usb 3-1: Using ep0 maxpacket: 16
[  984.384006][ T5327] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  984.429928][T11317] usb 3-1: device descriptor read/all, error -71
[  984.475856][ T5327] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  987.693416][ T5327] usb 4-1: USB disconnect, device number 20
[  989.383162][T11157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  989.394642][T11157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  989.420223][T11157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  989.439037][T11157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  989.448909][T11157] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  989.457270][T11157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  991.657084][T12162] Bluetooth: hci3: command tx timeout
[  993.672392][T12162] Bluetooth: hci3: command tx timeout
[  993.808418][T12676] chnl_net:caif_netlink_parms(): no params data found
[  994.096592][ T3783] bridge_slave_1: left allmulticast mode
[  994.118544][ T3783] bridge_slave_1: left promiscuous mode
[  994.172166][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state
[  994.254569][ T3783] bridge_slave_0: left allmulticast mode
[  994.260344][ T3783] bridge_slave_0: left promiscuous mode
[  994.312833][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state
[  994.572109][ T5271] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  994.772031][ T5271] usb 3-1: Using ep0 maxpacket: 16
[  994.784959][ T5271] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  994.818584][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  994.846070][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  994.856488][ T5303] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  994.858363][ T5271] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  994.892783][ T5271] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  994.978926][ T5271] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  995.022010][ T5271] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  995.032130][ T5271] usb 3-1: Manufacturer: syz
[  995.062078][ T5303] usb 5-1: Using ep0 maxpacket: 16
[  995.085904][ T5271] usb 3-1: config 0 descriptor??
[  995.095936][ T5303] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  995.123392][ T5303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  995.168667][ T5303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  995.189394][ T5303] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  995.239385][ T5303] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  995.363571][ T5303] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  995.392113][ T5303] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  995.400198][ T5303] usb 5-1: Manufacturer: syz
[  995.451628][ T5303] usb 5-1: config 0 descriptor??
[  995.633793][ T5271] rc_core: IR keymap rc-hauppauge not found
[  995.666141][ T5271] Registered IR keymap rc-empty
[  995.671281][ T5271] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  995.724178][ T5271] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  995.752419][T12162] Bluetooth: hci3: command tx timeout
[  995.807255][ T5271] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  995.844841][ T5271] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19
[  995.978445][ T5271] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  996.012639][ T5303] rc_core: IR keymap rc-hauppauge not found
[  996.020679][ T5303] Registered IR keymap rc-empty
[  996.026786][ T5271] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  996.055492][ T5303] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  996.062323][ T5271] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  996.091580][T12719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  996.124357][ T5271] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  996.134340][T12719] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  996.159757][ T5303] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  996.206285][ T5271] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  996.237319][ T5303] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1
[  996.282129][ T5271] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  996.306864][ T5303] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input20
[  996.349990][ T5271] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  996.381394][T12721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  996.416023][ T5271] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  996.417130][ T5303] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  996.444089][T12721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  996.472992][ T5271] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  996.572296][ T5271] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  996.574548][ T5303] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  996.661104][ T5271] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  996.672620][ T5303] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  996.679865][ T5271] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  996.732699][ T5303] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  996.824103][ T5303] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  996.881237][ T5303] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  996.964878][ T5303] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  997.052309][ T5303] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  997.108025][ T5303] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  997.212403][ T5303] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  997.230420][ T3783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  997.256576][ T5303] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  997.292058][ T5303] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  997.320042][ T3783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  998.032471][T12162] Bluetooth: hci3: command tx timeout
[ 1001.406143][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1001.443106][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1001.693960][ T3783] bond0 (unregistering): Released all slaves
[ 1001.765710][ T5303] usb 5-1: USB disconnect, device number 7
[ 1001.809032][T11302] usb 3-1: USB disconnect, device number 17
[ 1003.576548][T12750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'.
[ 1004.066614][T12676] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1004.192875][T12676] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1004.267371][T12676] bridge_slave_0: entered allmulticast mode
[ 1004.294147][T12676] bridge_slave_0: entered promiscuous mode
[ 1004.422295][T12676] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1004.479920][T12676] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1004.549648][T12676] bridge_slave_1: entered allmulticast mode
[ 1004.593962][T12676] bridge_slave_1: entered promiscuous mode
[ 1005.727527][T12676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1005.800781][T12676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1009.405303][T12777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1972'.
[ 1009.659603][T12770] block nbd3: shutting down sockets
[ 1009.746620][T12676] team0: Port device team_slave_0 added
[ 1010.222826][T11281] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1010.433349][T12676] team0: Port device team_slave_1 added
[ 1010.537220][T11281] usb 5-1: Using ep0 maxpacket: 16
[ 1010.724295][T11281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1010.828238][T11281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1010.849328][T12797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1976'.
[ 1010.868705][T11281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1010.950066][T11281] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1011.010396][T11281] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1011.104800][T11281] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1011.152286][T11281] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1011.177283][T11281] usb 5-1: Manufacturer: syz
[ 1011.242887][T11281] usb 5-1: config 0 descriptor??
[ 1011.404436][ T3783] hsr_slave_0: left promiscuous mode
[ 1011.515728][ T3783] hsr_slave_1: left promiscuous mode
[ 1011.596016][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1011.606746][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1011.628301][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1011.652094][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1011.795102][ T3783] veth1_macvtap: left promiscuous mode
[ 1011.826472][ T3783] veth0_macvtap: left promiscuous mode
[ 1011.842114][T11281] rc_core: IR keymap rc-hauppauge not found
[ 1011.858681][ T3783] veth1_vlan: left promiscuous mode
[ 1011.875980][T11281] Registered IR keymap rc-empty
[ 1011.876270][ T3783] veth0_vlan: left promiscuous mode
[ 1011.892223][T11281] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1011.952074][T11281] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1012.004544][T11281] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1012.090542][T11281] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21
[ 1012.139611][T12814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1012.199630][T11281] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1012.256564][T12814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1012.297048][T11281] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1012.402139][T11281] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1012.494433][T11281] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1012.585012][T11281] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1012.665459][T11281] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1012.713781][T11281] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1012.812291][T11281] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1012.875603][T11281] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1012.976490][T11281] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1013.063582][T11281] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[ 1013.117285][T11281] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1014.464892][T11302] usb 5-1: USB disconnect, device number 8
[ 1017.525753][ T3783] team0 (unregistering): Port device team_slave_1 removed
[ 1017.698960][ T3783] team0 (unregistering): Port device team_slave_0 removed
[ 1019.061478][T12676] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1019.078530][T12676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1019.128003][T12676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1019.164269][T12676] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1019.246225][T12676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1019.272968][T12676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1019.285329][T12826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1981'.
[ 1019.399897][T12858] ebt_limit: overflow, try lower: 0/0
[ 1020.179116][T12837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1983'.
[ 1024.518717][T12676] hsr_slave_0: entered promiscuous mode
[ 1024.570529][T12676] hsr_slave_1: entered promiscuous mode
[ 1024.583880][T12676] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1024.614212][T12676] Cannot create hsr debugfs directory
[ 1024.809253][ T9748] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1025.011927][ T9748] usb 3-1: Using ep0 maxpacket: 16
[ 1025.100971][ T9748] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1025.164535][ T9748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1025.208848][ T9748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1025.249979][ T9748] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1025.275349][ T3783] IPVS: stop unused estimator thread 0...
[ 1025.306716][ T9748] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1025.370040][ T9748] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1025.421312][ T9748] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1025.510967][ T9748] usb 3-1: Manufacturer: syz
[ 1025.536181][ T9748] usb 3-1: config 0 descriptor??
[ 1025.889034][T12676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1026.202001][ T9748] rc_core: IR keymap rc-hauppauge not found
[ 1026.234419][ T9748] Registered IR keymap rc-empty
[ 1026.245504][T12676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1026.287705][ T9748] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1026.372207][ T9748] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1026.466931][T12885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1026.514177][ T9748] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1026.542685][T12885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1026.640002][ T9748] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22
[ 1026.852253][ T9748] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1026.899562][T12676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1027.002993][ T9748] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1027.084312][ T9748] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1027.152116][ T9748] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1027.208459][ T9748] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1027.262221][ T9748] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1027.306801][ T9748] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1027.341356][T12676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1027.356074][ T9748] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1027.407413][ T9748] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1027.478398][ T9748] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1027.618422][ T9748] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[ 1027.660059][ T9748] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1027.839094][ T3783] bridge_slave_1: left allmulticast mode
[ 1027.852003][ T3783] bridge_slave_1: left promiscuous mode
[ 1027.858328][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1027.934771][ T3783] bridge_slave_0: left allmulticast mode
[ 1027.971959][ T3783] bridge_slave_0: left promiscuous mode
[ 1027.978055][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1028.567639][T11281] usb 3-1: USB disconnect, device number 18
[ 1028.603728][T11302] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1028.807290][T11302] usb 2-1: Using ep0 maxpacket: 32
[ 1028.826412][T11302] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1028.872433][T11302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1028.946704][T11302] usb 2-1: config 0 descriptor??
[ 1029.008864][T11302] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1030.023419][T11302] gspca_sunplus: reg_r err -71
[ 1030.029204][T11302] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[ 1030.040874][T11302] usb 2-1: USB disconnect, device number 16
[ 1030.206491][T12906] ebt_limit: overflow, try lower: 0/0
[ 1031.656911][ T3783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1031.718346][ T3783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1031.786032][ T3783] bond0 (unregistering): Released all slaves
[ 1033.386693][T12676] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1033.485393][T12676] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1033.612939][T12676] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1033.774759][T12676] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1035.322438][T11395] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1037.735563][T12676] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1037.928860][T11395] usb 3-1: device descriptor read/all, error -71
[ 1038.334145][T12949] ebt_limit: overflow, try lower: 0/0
[ 1039.575111][T12676] 8021q: adding VLAN 0 to HW filter on device team0
[ 1039.725854][ T3783] hsr_slave_0: left promiscuous mode
[ 1039.760781][ T3783] hsr_slave_1: left promiscuous mode
[ 1039.848644][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1040.169228][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1040.206980][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1040.239610][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1040.771203][ T3783] veth1_macvtap: left promiscuous mode
[ 1041.274376][T12966] ebt_limit: overflow, try lower: 0/0
[ 1043.401441][ T3783] veth0_macvtap: left promiscuous mode
[ 1043.440106][ T3783] veth1_vlan: left promiscuous mode
[ 1043.466686][ T3783] veth0_vlan: left promiscuous mode
[ 1046.233132][T11157] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1046.251292][T11157] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1046.272467][T11157] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1046.281408][T11157] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1046.294577][T11157] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 1046.312385][T11157] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1047.398323][ T3783] team0 (unregistering): Port device team_slave_1 removed
[ 1047.464604][ T3783] team0 (unregistering): Port device team_slave_0 removed
[ 1048.559798][T11157] Bluetooth: hci9: command tx timeout
[ 1050.642126][T11157] Bluetooth: hci9: command tx timeout
[ 1050.672376][T13004] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2023'.
[ 1050.872507][T11302] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1051.129617][T11302] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 1051.192883][T11302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.200973][T11302] usb 5-1: Product: syz
[ 1051.258517][T11302] usb 5-1: Manufacturer: syz
[ 1051.311953][T11302] usb 5-1: SerialNumber: syz
[ 1051.433520][T11302] r8152-cfgselector 5-1: Unknown version 0x0000
[ 1051.440418][T11302] r8152-cfgselector 5-1: config 0 descriptor??
[ 1051.513619][T12982] chnl_net:caif_netlink_parms(): no params data found
[ 1051.853218][T12162] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1051.892442][T12162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1051.918411][T12162] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1051.933865][T12162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1051.943657][T12162] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1051.952744][T12162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1051.972044][ T5303] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1052.087379][T12162] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1052.098085][T12162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1052.108944][T12162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1052.135493][T12162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1052.155481][T12162] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1052.163759][T12162] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1052.208304][ T5303] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 1052.223410][ T5303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1052.231603][ T5303] usb 2-1: Product: syz
[ 1052.238239][ T5303] usb 2-1: Manufacturer: syz
[ 1052.282758][T11302] r8152-cfgselector 5-1: USB disconnect, device number 9
[ 1052.307732][ T5303] usb 2-1: SerialNumber: syz
[ 1052.344989][ T5303] r8152-cfgselector 2-1: Unknown version 0x0000
[ 1052.355210][ T5303] r8152-cfgselector 2-1: config 0 descriptor??
[ 1052.546888][ T3783] IPVS: stop unused estimator thread 0...
[ 1052.712203][T12162] Bluetooth: hci9: command tx timeout
[ 1052.734688][T12982] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1052.742425][T12982] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1052.749795][T12982] bridge_slave_0: entered allmulticast mode
[ 1052.758406][T12982] bridge_slave_0: entered promiscuous mode
[ 1052.809377][T12982] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1052.828821][T12982] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1052.841453][T12982] bridge_slave_1: entered allmulticast mode
[ 1052.859218][T12982] bridge_slave_1: entered promiscuous mode
[ 1052.937183][ T5303] r8152-cfgselector 2-1: USB disconnect, device number 17
[ 1053.088540][T12982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1053.138571][T12982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1053.335993][ T3783] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.500753][T12982] team0: Port device team_slave_0 added
[ 1054.060775][ T3783] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.090192][T12162] Bluetooth: hci3: command tx timeout
[ 1054.234594][T12162] Bluetooth: hci2: command tx timeout
[ 1054.257855][T12982] team0: Port device team_slave_1 added
[ 1054.507874][ T3783] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.731205][T12982] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1054.754044][T12982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1054.781629][T12982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1054.792593][T12162] Bluetooth: hci9: command tx timeout
[ 1054.844429][ T3783] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.909747][T12982] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1054.917569][T12982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1054.951127][T12982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1056.152591][T12162] Bluetooth: hci3: command tx timeout
[ 1056.458978][T11157] Bluetooth: hci2: command tx timeout
[ 1057.754201][T12982] hsr_slave_0: entered promiscuous mode
[ 1057.781163][T12982] hsr_slave_1: entered promiscuous mode
[ 1057.797764][T12982] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1057.820542][T12982] Cannot create hsr debugfs directory
[ 1058.232478][T11157] Bluetooth: hci3: command tx timeout
[ 1058.460362][T13012] chnl_net:caif_netlink_parms(): no params data found
[ 1058.474787][T11157] Bluetooth: hci2: command tx timeout
[ 1058.898503][T13015] chnl_net:caif_netlink_parms(): no params data found
[ 1060.160011][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1060.166517][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1060.312451][T11157] Bluetooth: hci3: command tx timeout
[ 1060.560629][T11157] Bluetooth: hci2: command tx timeout
[ 1060.587991][T13012] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1060.597058][T13012] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1060.612216][T13012] bridge_slave_0: entered allmulticast mode
[ 1060.620899][T13012] bridge_slave_0: entered promiscuous mode
[ 1060.643598][T13012] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1060.672755][T13012] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1060.687543][T13012] bridge_slave_1: entered allmulticast mode
[ 1060.697364][T13012] bridge_slave_1: entered promiscuous mode
[ 1061.835773][T13090] netlink: 'syz.4.2037': attribute type 2 has an invalid length.
[ 1061.869726][T13012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1061.941728][T13012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1061.984548][T13015] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1062.022224][T13015] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1062.029618][T13015] bridge_slave_0: entered allmulticast mode
[ 1062.064709][T13015] bridge_slave_0: entered promiscuous mode
[ 1062.094969][T13015] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1062.120777][T13015] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1062.140412][T13015] bridge_slave_1: entered allmulticast mode
[ 1062.163761][T13015] bridge_slave_1: entered promiscuous mode
[ 1063.349225][T13012] team0: Port device team_slave_0 added
[ 1063.396147][T13012] team0: Port device team_slave_1 added
[ 1063.682871][T13015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1063.713979][T13015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1065.104913][T13012] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1065.116700][T13012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1065.157957][T13012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1065.215408][T13012] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1065.244900][T13012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1065.339418][T13012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1065.665598][T13015] team0: Port device team_slave_0 added
[ 1065.846268][T13012] hsr_slave_0: entered promiscuous mode
[ 1065.892422][T13012] hsr_slave_1: entered promiscuous mode
[ 1065.942628][T13012] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1065.950233][T13012] Cannot create hsr debugfs directory
[ 1065.996317][T13015] team0: Port device team_slave_1 added
[ 1066.627214][T13015] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1066.636797][T13015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1066.664791][T13015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1067.731014][ T3783] bridge_slave_1: left allmulticast mode
[ 1067.754242][ T3783] bridge_slave_1: left promiscuous mode
[ 1067.760273][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1067.781267][ T3783] bridge_slave_0: left allmulticast mode
[ 1067.791142][ T3783] bridge_slave_0: left promiscuous mode
[ 1067.802653][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1067.835244][T13131] block nbd1: shutting down sockets
[ 1067.862018][ T3783] bridge_slave_1: left allmulticast mode
[ 1067.867858][ T3783] bridge_slave_1: left promiscuous mode
[ 1067.926323][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1067.947040][ T3783] bridge_slave_0: left allmulticast mode
[ 1067.968736][ T3783] bridge_slave_0: left promiscuous mode
[ 1067.983531][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1068.413045][T11302] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1068.628364][T11302] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1068.641534][T11302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1068.650328][T11302] usb 2-1: Product: syz
[ 1068.655083][T11302] usb 2-1: Manufacturer: syz
[ 1068.659743][T11302] usb 2-1: SerialNumber: syz
[ 1068.687752][T11302] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1068.869080][ T9748] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1069.354258][ T3783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1069.377225][ T3783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1069.404309][ T3783] bond0 (unregistering): Released all slaves
[ 1073.580694][ T9748] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1077.955800][T12162] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1077.972206][T12162] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1077.981197][T12162] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1078.000571][T12162] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1078.009102][T12162] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1078.021673][T12162] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1079.624517][ T3783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1080.082072][T12162] Bluetooth: hci7: command tx timeout
[ 1080.544994][ T3783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1082.172765][T12162] Bluetooth: hci7: command tx timeout
[ 1082.757923][ T3783] bond0 (unregistering): Released all slaves
[ 1084.232495][T12162] Bluetooth: hci7: command tx timeout
[ 1084.472889][T11157] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1084.485502][T11157] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1084.504298][T11157] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1084.526573][T11157] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1084.535122][T11157] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 1084.546140][T11157] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1085.037969][    C0] hrtimer: interrupt took 17125775 ns
[ 1085.944490][T13164] chnl_net:caif_netlink_parms(): no params data found
[ 1086.322231][T12162] Bluetooth: hci7: command tx timeout
[ 1086.642776][T12162] Bluetooth: hci10: command tx timeout
[ 1088.722519][T12162] Bluetooth: hci10: command tx timeout
[ 1090.803315][T12162] Bluetooth: hci10: command tx timeout
[ 1092.882538][T12162] Bluetooth: hci10: command tx timeout
[ 1106.963104][T11157] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1106.979316][T11157] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1106.993130][T11157] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1107.004021][T11157] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1107.022175][T11157] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[ 1107.035351][T11157] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1109.132003][T11157] Bluetooth: hci11: command tx timeout
[ 1110.559661][T12162] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1110.573469][T12162] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1110.583892][T12162] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1110.593845][T12162] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1110.602287][T12162] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[ 1110.611178][T12162] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1111.202664][T11157] Bluetooth: hci11: command tx timeout
[ 1111.873363][T12162] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1111.888743][T12162] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1111.901213][T12162] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1111.914866][T12162] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1111.924199][T12162] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[ 1111.931991][T12162] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1112.724833][T12162] Bluetooth: hci12: command tx timeout
[ 1113.282234][T12162] Bluetooth: hci11: command tx timeout
[ 1114.002229][T12162] Bluetooth: hci13: command tx timeout
[ 1114.802254][T12162] Bluetooth: hci12: command tx timeout
[ 1115.373696][T12162] Bluetooth: hci11: command tx timeout
[ 1116.085166][T12162] Bluetooth: hci13: command tx timeout
[ 1116.882087][T12162] Bluetooth: hci12: command tx timeout
[ 1118.169184][T12162] Bluetooth: hci13: command tx timeout
[ 1118.962113][T12162] Bluetooth: hci12: command tx timeout
[ 1120.242394][T12162] Bluetooth: hci13: command tx timeout
[ 1123.925469][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1123.932201][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1139.510049][T11157] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1139.536342][T11157] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1139.545976][T11157] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1139.571019][T11157] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1139.580815][T11157] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[ 1139.588669][T11157] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1141.684902][T12162] Bluetooth: hci14: command tx timeout
[ 1143.765144][T12162] Bluetooth: hci14: command tx timeout
[ 1144.041646][T11157] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 1144.054517][T11157] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 1144.072147][T11157] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 1144.083423][T11157] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 1144.112870][T11157] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[ 1144.120680][T11157] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 1145.832429][T11157] Bluetooth: hci14: command tx timeout
[ 1146.244150][T11157] Bluetooth: hci15: command tx timeout
[ 1147.922342][T11157] Bluetooth: hci14: command tx timeout
[ 1148.323093][T11157] Bluetooth: hci15: command tx timeout
[ 1150.402622][T11157] Bluetooth: hci15: command tx timeout
[ 1152.482827][T12162] Bluetooth: hci15: command tx timeout
[ 1169.085965][ T4609] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[ 1169.109260][ T4609] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[ 1169.119099][ T4609] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[ 1169.134990][ T4609] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[ 1169.143455][ T4609] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[ 1169.151291][ T4609] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[ 1169.770629][ T4609] Bluetooth: hci9: command 0x0406 tx timeout
[ 1171.281975][ T4609] Bluetooth: hci16: command tx timeout
[ 1171.588982][T11157] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[ 1171.603059][T11157] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[ 1171.612909][T11157] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[ 1171.654454][T11157] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[ 1171.664830][T11157] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[ 1171.675562][T11157] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[ 1172.919336][ T5223] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[ 1172.937743][ T5223] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[ 1172.949839][ T5223] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[ 1172.962269][ T5223] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[ 1172.970990][ T5223] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[ 1172.982937][ T5223] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[ 1173.362174][ T5223] Bluetooth: hci16: command tx timeout
[ 1173.762282][ T5223] Bluetooth: hci17: command tx timeout
[ 1174.902280][ T4609] Bluetooth: hci2: command 0x0406 tx timeout
[ 1174.908426][ T5223] Bluetooth: hci3: command 0x0406 tx timeout
[ 1175.042308][ T5223] Bluetooth: hci18: command tx timeout
[ 1175.443906][ T5223] Bluetooth: hci16: command tx timeout
[ 1175.843551][ T5223] Bluetooth: hci17: command tx timeout
[ 1177.131828][ T5223] Bluetooth: hci18: command tx timeout
[ 1177.530698][T12162] Bluetooth: hci16: command tx timeout
[ 1177.922305][T12162] Bluetooth: hci17: command tx timeout
[ 1179.202386][T12162] Bluetooth: hci18: command tx timeout
[ 1180.002026][T11157] Bluetooth: hci17: command tx timeout
[ 1181.282258][T11157] Bluetooth: hci18: command tx timeout
[ 1183.958458][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1183.984232][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1200.491600][T11157] Bluetooth: hci7: command 0x0406 tx timeout
[ 1201.092760][ T5223] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[ 1201.106448][ T5223] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[ 1201.115654][ T5223] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[ 1201.128840][ T5223] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[ 1201.139462][ T5223] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3
[ 1201.147797][ T5223] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[ 1203.765764][T12162] Bluetooth: hci19: command tx timeout
[ 1204.625207][ T5223] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[ 1204.636779][ T5223] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[ 1204.650098][ T5223] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[ 1204.681222][ T5223] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[ 1204.691233][ T5223] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3
[ 1204.699616][ T5223] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[ 1205.842516][T12162] Bluetooth: hci19: command tx timeout
[ 1206.809100][T12162] Bluetooth: hci20: command tx timeout
[ 1207.922480][T12162] Bluetooth: hci19: command tx timeout
[ 1208.882236][ T5223] Bluetooth: hci20: command tx timeout
[ 1210.002195][ T5223] Bluetooth: hci19: command tx timeout
[ 1210.732354][ T5223] Bluetooth: hci10: command 0x0406 tx timeout
[ 1210.971780][ T5223] Bluetooth: hci20: command tx timeout
[ 1213.051837][ T5223] Bluetooth: hci20: command tx timeout
[ 1227.861884][   T30] INFO: task kworker/u8:9:2549 blocked for more than 143 seconds.
[ 1227.869790][   T30]       Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1228.013244][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1228.082462][   T30] task:kworker/u8:9    state:D stack:22128 pid:2549  tgid:2549  ppid:2      flags:0x00004000
[ 1228.183857][   T30] Workqueue: events_unbound linkwatch_event
[ 1228.189900][   T30] Call Trace:
[ 1228.332272][   T30]  <TASK>
[ 1228.335285][   T30]  __schedule+0xe37/0x5490
[ 1228.339842][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1228.548508][   T30]  ? __pfx___schedule+0x10/0x10
[ 1228.621478][   T30]  ? schedule+0x298/0x350
[ 1228.681895][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1228.687022][   T30]  ? __mutex_lock+0x5b3/0x9c0
[ 1228.771948][   T30]  ? __mutex_trylock_common+0x78/0x250
[ 1228.777509][   T30]  schedule+0xe7/0x350
[ 1228.781627][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1228.964208][   T30]  __mutex_lock+0x5b8/0x9c0
[ 1228.968814][   T30]  ? linkwatch_event+0x51/0xc0
[ 1229.102833][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1229.108063][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1229.216689][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1229.238019][   T30]  ? linkwatch_event+0x51/0xc0
[ 1229.273956][   T30]  ? rtnl_lock+0x9/0x20
[ 1229.278211][   T30]  linkwatch_event+0x51/0xc0
[ 1229.351774][   T30]  ? __pfx_linkwatch_event+0x10/0x10
[ 1229.357169][   T30]  ? rcu_is_watching+0x12/0xc0
[ 1229.411761][   T30]  process_one_work+0x9c5/0x1b40
[ 1229.453328][   T30]  ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10
[ 1229.460987][   T30]  ? __pfx_process_one_work+0x10/0x10
[ 1229.501861][   T30]  ? assign_work+0x1a0/0x250
[ 1229.506551][   T30]  worker_thread+0x6c8/0xf20
[ 1229.511207][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 1229.621897][   T30]  kthread+0x2c1/0x3a0
[ 1229.626056][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1229.631304][   T30]  ? __pfx_kthread+0x10/0x10
[ 1229.721761][   T30]  ret_from_fork+0x45/0x80
[ 1229.732145][   T30]  ? __pfx_kthread+0x10/0x10
[ 1229.736900][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1229.783490][   T30]  </TASK>
[ 1229.786619][   T30] INFO: task kworker/0:5:5303 blocked for more than 145 seconds.
[ 1229.901863][   T30]       Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0
[ 1229.909583][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1230.011976][   T30] task:kworker/0:5     state:D stack:22320 pid:5303  tgid:5303  ppid:2      flags:0x00004000
[ 1230.066357][   T30] Workqueue: events switchdev_deferred_process_work
[ 1230.095295][   T30] Call Trace:
[ 1230.098658][   T30]  <TASK>
[ 1230.101634][   T30]  __schedule+0xe37/0x5490
[ 1230.200691][   T30]  ? __pfx_mark_lock+0x10/0x10
[ 1230.232133][   T30]  ? __pfx___schedule+0x10/0x10
[ 1230.237119][   T30]  ? schedule+0x298/0x350
[ 1230.241507][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1230.316286][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1230.321590][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1230.371853][   T30]  schedule+0xe7/0x350
[ 1230.376035][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1230.381556][   T30]  __mutex_lock+0x5b8/0x9c0
[ 1230.471824][   T30]  ? switchdev_deferred_process_work+0xe/0x20
[ 1230.478003][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1230.541765][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1230.546906][   T30]  ? switchdev_deferred_process_work+0xe/0x20
[ 1230.591766][   T30]  ? rtnl_lock+0x9/0x20
[ 1230.596019][   T30]  switchdev_deferred_process_work+0xe/0x20
[ 1230.671782][   T30]  process_one_work+0x9c5/0x1b40
[ 1230.711958][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1230.717101][   T30]  ? __pfx_process_one_work+0x10/0x10
[ 1230.781765][   T30]  ? assign_work+0x1a0/0x250
[ 1230.786466][   T30]  worker_thread+0x6c8/0xf20
[ 1230.791120][   T30]  ? __kthread_parkme+0x148/0x220
[ 1230.871977][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 1230.877202][   T30]  kthread+0x2c1/0x3a0
[ 1230.881404][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1230.983973][   T30]  ? __pfx_kthread+0x10/0x10
[ 1230.988661][   T30]  ret_from_fork+0x45/0x80
[ 1231.041794][   T30]  ? __pfx_kthread+0x10/0x10
[ 1231.046567][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1231.051401][   T30]  </TASK>
[ 1231.111825][   T30] INFO: task kworker/u8:13:10799 blocked for more than 146 seconds.
[ 1231.120065][   T30]       Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0
[ 1231.232129][ T5223] Bluetooth: hci11: command 0x0406 tx timeout
[ 1231.251787][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1231.260525][   T30] task:kworker/u8:13   state:D stack:23200 pid:10799 tgid:10799 ppid:2      flags:0x00004000
[ 1231.351759][   T30] Workqueue: ipv6_addrconf addrconf_verify_work
[ 1231.358106][   T30] Call Trace:
[ 1231.361418][   T30]  <TASK>
[ 1231.442150][   T30]  __schedule+0xe37/0x5490
[ 1231.446672][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1231.511758][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1231.517071][   T30]  ? __pfx___schedule+0x10/0x10
[ 1231.571781][   T30]  ? schedule+0x298/0x350
[ 1231.576219][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1231.581311][   T30]  ? __mutex_lock+0x5b3/0x9c0
[ 1231.661064][   T30]  ? __mutex_trylock_common+0x78/0x250
[ 1231.723706][   T30]  schedule+0xe7/0x350
[ 1231.727881][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1231.781863][   T30]  __mutex_lock+0x5b8/0x9c0
[ 1231.812189][   T30]  ? addrconf_verify_work+0x12/0x30
[ 1231.817482][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1231.901789][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1231.907054][   T30]  ? addrconf_verify_work+0x12/0x30
[ 1231.988539][   T30]  addrconf_verify_work+0x12/0x30
[ 1232.022109][   T30]  process_one_work+0x9c5/0x1b40
[ 1232.027155][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 1232.091790][   T30]  ? __pfx_process_one_work+0x10/0x10
[ 1232.097280][   T30]  ? assign_work+0x1a0/0x250
[ 1232.151776][   T30]  worker_thread+0x6c8/0xf20
[ 1232.156488][   T30]  ? __kthread_parkme+0x148/0x220
[ 1232.161581][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 1232.248029][   T30]  kthread+0x2c1/0x3a0
[ 1232.291762][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1232.297057][   T30]  ? __pfx_kthread+0x10/0x10
[ 1232.301693][   T30]  ret_from_fork+0x45/0x80
[ 1232.368501][   T30]  ? __pfx_kthread+0x10/0x10
[ 1232.410610][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1232.451758][   T30]  </TASK>
[ 1232.454936][   T30] INFO: task syz-executor:12982 blocked for more than 148 seconds.
[ 1232.601786][   T30]       Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0
[ 1232.609497][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1232.681980][   T30] task:syz-executor    state:D stack:23888 pid:12982 tgid:12982 ppid:1      flags:0x00004006
[ 1232.753808][   T30] Call Trace:
[ 1232.757169][   T30]  <TASK>
[ 1232.760137][   T30]  __schedule+0xe37/0x5490
[ 1232.806451][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1232.831981][   T30]  ? __pfx___schedule+0x10/0x10
[ 1232.836926][   T30]  ? schedule+0x298/0x350
[ 1232.841312][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1232.962701][   T30]  ? __mutex_lock+0x5b3/0x9c0
[ 1232.967489][   T30]  ? __mutex_trylock_common+0x78/0x250
[ 1233.025589][   T30]  schedule+0xe7/0x350
[ 1233.029851][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1233.101758][   T30]  __mutex_lock+0x5b8/0x9c0
[ 1233.106368][   T30]  ? nsim_destroy+0x6f/0x6a0
[ 1233.111018][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1233.211759][   T30]  ? do_raw_spin_lock+0x12d/0x2c0
[ 1233.216915][   T30]  ? _raw_spin_unlock+0x28/0x50
[ 1233.281758][   T30]  ? nsim_destroy+0x6f/0x6a0
[ 1233.286462][   T30]  ? rtnl_lock+0x9/0x20
[ 1233.290666][   T30]  nsim_destroy+0x6f/0x6a0
[ 1233.401954][   T30]  __nsim_dev_port_del+0x189/0x240
[ 1233.407289][   T30]  nsim_dev_reload_destroy+0x108/0x4d0
[ 1233.508818][   T30]  nsim_drv_remove+0x52/0x1d0
[ 1233.535503][   T30]  ? __pfx_nsim_bus_remove+0x10/0x10
[ 1233.540978][   T30]  device_remove+0xc8/0x170
[ 1233.581935][   T30]  device_release_driver_internal+0x44a/0x610
[ 1233.588103][   T30]  bus_remove_device+0x22f/0x420
[ 1233.686301][   T30]  device_del+0x396/0x9f0
[ 1233.690726][   T30]  ? __pfx_device_del+0x10/0x10
[ 1233.761765][   T30]  ? rcu_is_watching+0x12/0xc0
[ 1233.766636][   T30]  device_unregister+0x1d/0xc0
[ 1233.771452][   T30]  del_device_store+0x346/0x4b0
[ 1233.863762][   T30]  ? __pfx_del_device_store+0x10/0x10
[ 1233.869249][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1233.971761][   T30]  ? __pfx__copy_from_iter+0x10/0x10
[ 1233.977162][   T30]  ? __pfx_del_device_store+0x10/0x10
[ 1234.058281][   T30]  bus_attr_store+0x76/0xa0
[ 1234.071793][   T30]  ? __pfx_bus_attr_store+0x10/0x10
[ 1234.077095][   T30]  sysfs_kf_write+0x117/0x170
[ 1234.152278][   T30]  kernfs_fop_write_iter+0x343/0x500
[ 1234.157695][   T30]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1234.231814][   T30]  vfs_write+0x6b6/0x1140
[ 1234.236339][   T30]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1234.321784][   T30]  ? __pfx_vfs_write+0x10/0x10
[ 1234.326644][   T30]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1234.417594][   T30]  ? __fget_light+0x173/0x210
[ 1234.451865][   T30]  ksys_write+0x12f/0x260
[ 1234.491815][   T30]  ? __pfx_ksys_write+0x10/0x10
[ 1234.496772][   T30]  do_syscall_64+0xcd/0x250
[ 1234.501337][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1234.591804][   T30] RIP: 0033:0x7fcb535764df
[ 1234.596323][   T30] RSP: 002b:00007ffded619a40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1234.711761][   T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fcb535764df
[ 1234.719824][   T30] RDX: 0000000000000001 RSI: 00007ffded619a90 RDI: 0000000000000005
[ 1234.841990][   T30] RBP: 00007fcb535e695f R08: 0000000000000000 R09: 00007ffded619897
[ 1234.850053][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1234.951761][   T30] R13: 00007ffded619a90 R14: 00007fcb54234620 R15: 0000000000000003
[ 1234.959841][   T30]  </TASK>
[ 1235.011814][   T30] INFO: task syz-executor:13012 blocked for more than 150 seconds.
[ 1235.019784][   T30]       Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0
[ 1235.121754][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1235.130591][   T30] task:syz-executor    state:D stack:23888 pid:13012 tgid:13012 ppid:1      flags:0x00004006
[ 1235.251464][   T30] Call Trace:
[ 1235.269364][   T30]  <TASK>
[ 1235.281761][   T30]  __schedule+0xe37/0x5490
[ 1235.286284][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1235.291562][   T30]  ? __pfx___schedule+0x10/0x10
[ 1235.371817][   T30]  ? schedule+0x298/0x350
[ 1235.417174][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1235.471756][   T30]  ? __mutex_lock+0x5b3/0x9c0
[ 1235.476569][   T30]  ? __mutex_trylock_common+0x78/0x250
[ 1235.531757][   T30]  schedule+0xe7/0x350
[ 1235.535925][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1235.541447][   T30]  __mutex_lock+0x5b8/0x9c0
[ 1235.611763][   T30]  ? rtnetlink_rcv_msg+0x372/0xea0
[ 1235.616994][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1235.681838][   T30]  ? rtnetlink_rcv_msg+0x372/0xea0
[ 1235.717189][   T30]  rtnetlink_rcv_msg+0x372/0xea0
[ 1235.741847][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1235.747418][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1235.789866][   T30]  ? avc_has_perm+0x11b/0x1c0
[ 1235.811801][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1235.817113][   T30]  ? __pfx_avc_has_perm+0x10/0x10
[ 1235.911757][   T30]  ? __lock_acquire+0xbdd/0x3cb0
[ 1235.916818][   T30]  netlink_rcv_skb+0x16b/0x440
[ 1235.921642][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1236.014114][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1236.019518][   T30]  ? netlink_deliver_tap+0x1ae/0xd90
[ 1236.072039][   T30]  netlink_unicast+0x544/0x830
[ 1236.091895][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[ 1236.131897][   T30]  netlink_sendmsg+0x8b8/0xd70
[ 1236.136769][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1236.211770][   T30]  __sys_sendto+0x47f/0x4e0
[ 1236.216394][   T30]  ? __pfx___sys_sendto+0x10/0x10
[ 1236.221481][   T30]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[ 1236.291862][   T30]  ? kasan_quarantine_put+0x10a/0x240
[ 1236.297340][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1236.371786][   T30]  __x64_sys_sendto+0xe0/0x1c0
[ 1236.376671][   T30]  ? do_syscall_64+0x91/0x250
[ 1236.381490][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1236.411833][T12179] Bluetooth: hci12: command 0x0406 tx timeout
[ 1236.418035][T12179] Bluetooth: hci13: command 0x0406 tx timeout
[ 1236.481449][   T30]  do_syscall_64+0xcd/0x250
[ 1236.521923][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1236.527937][   T30] RIP: 0033:0x7fefa8b7978c
[ 1236.601790][   T30] RSP: 002b:00007fff87b874f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1236.651761][   T30] RAX: ffffffffffffffda RBX: 00007fefa9834620 RCX: 00007fefa8b7978c
[ 1236.659824][   T30] RDX: 000000000000006c RSI: 00007fefa9834670 RDI: 0000000000000003
[ 1236.761796][   T30] RBP: 0000000000000000 R08: 00007fff87b87544 R09: 000000000000000c
[ 1236.782149][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1236.790197][   T30] R13: 0000000000000000 R14: 00007fefa9834670 R15: 0000000000000000
[ 1236.883046][   T30]  </TASK>
[ 1236.886239][   T30] INFO: task syz-executor:13015 blocked for more than 152 seconds.
[ 1236.978436][   T30]       Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0
[ 1237.031799][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1237.081827][   T30] task:syz-executor    state:D stack:24096 pid:13015 tgid:13015 ppid:1      flags:0x00000004
[ 1237.152743][   T30] Call Trace:
[ 1237.156100][   T30]  <TASK>
[ 1237.159071][   T30]  __schedule+0xe37/0x5490
[ 1237.221861][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1237.227187][   T30]  ? find_held_lock+0x2d/0x110
[ 1237.275941][   T30]  ? __pfx___schedule+0x10/0x10
[ 1237.280900][   T30]  ? schedule+0x298/0x350
[ 1237.338448][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1237.371833][   T30]  ? __mutex_lock+0x5b3/0x9c0
[ 1237.376620][   T30]  ? __mutex_trylock_common+0x78/0x250
[ 1237.428750][   T30]  schedule+0xe7/0x350
[ 1237.452624][   T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2670 jiffies s: 23197 root: 0x1/.
[ 1237.481813][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1237.487378][   T30]  __mutex_lock+0x5b8/0x9c0
[ 1237.561784][   T19] rcu: blocking rcu_node structures (internal RCU debug):
[ 1237.568995][   T19] Sending NMI from CPU 1 to CPUs 0:
[ 1237.574540][    C0] NMI backtrace for cpu 0
[ 1237.574560][    C0] CPU: 0 UID: 0 PID: 13137 Comm: syz.4.2044 Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0
[ 1237.574593][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1237.574608][    C0] RIP: 0010:unwind_next_frame+0x57/0x23a0
[ 1237.574642][    C0] Code: 04 02 84 c0 74 08 3c 03 0f 8e 0f 0d 00 00 8b 2b 31 ff 89 ee e8 fa 9d 4d 00 85 ed 75 1c 31 db e8 af 9b 4d 00 89 d8 48 83 c4 40 <5b> 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 95 9b 4d 00 48 8d
[ 1237.574668][    C0] RSP: 0018:ffffc900000064e0 EFLAGS: 00000082
[ 1237.574689][    C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff813cf0ff
[ 1237.574706][    C0] RDX: ffff88802751da00 RSI: ffffffff813cdf51 RDI: 0000000000000005
[ 1237.574724][    C0] RBP: ffffc90000007c40 R08: 0000000000000005 R09: 0000000000000000
[ 1237.574741][    C0] R10: 0000000000010304 R11: 0000000000000000 R12: ffffc90000000000
[ 1237.574758][    C0] R13: ffffc90000008000 R14: ffffc90000007c48 R15: ffffc90000007be0
[ 1237.574776][    C0] FS:  00007fd77cb816c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[ 1237.574803][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1237.574821][    C0] CR2: 000000110c3be946 CR3: 0000000079a64000 CR4: 00000000003506f0
[ 1237.574839][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1237.574855][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1237.574871][    C0] Call Trace:
[ 1237.574880][    C0]  <NMI>
[ 1237.574888][    C0]  ? show_regs+0x8c/0xa0
[ 1237.574928][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[ 1237.574961][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1237.574998][    C0]  ? nmi_handle+0x1a9/0x5c0
[ 1237.575022][    C0]  ? unwind_next_frame+0x57/0x23a0
[ 1237.575047][    C0]  ? default_do_nmi+0x6a/0x160
[ 1237.575094][    C0]  ? exc_nmi+0x170/0x1e0
[ 1237.575132][    C0]  ? end_repeat_nmi+0xf/0x53
[ 1237.575175][    C0]  ? unwind_next_frame+0x11ff/0x23a0
[ 1237.575199][    C0]  ? unwind_next_frame+0x51/0x23a0
[ 1237.575224][    C0]  ? unwind_next_frame+0x57/0x23a0
[ 1237.575249][    C0]  ? unwind_next_frame+0x57/0x23a0
[ 1237.575274][    C0]  ? unwind_next_frame+0x57/0x23a0
[ 1237.575299][    C0]  </NMI>
[ 1237.575306][    C0]  <IRQ>
[ 1237.575314][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1237.575343][    C0]  arch_stack_walk+0x100/0x170
[ 1237.575372][    C0]  ? ieee80211_rx_list+0x1be3/0x2e90
[ 1237.575404][    C0]  ? dummy_timer+0x1750/0x38d0
[ 1237.575429][    C0]  stack_trace_save+0x95/0xd0
[ 1237.575454][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1237.575481][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1237.575512][    C0]  kasan_save_stack+0x33/0x60
[ 1237.575541][    C0]  ? kasan_save_stack+0x33/0x60
[ 1237.575569][    C0]  ? kasan_save_track+0x14/0x30
[ 1237.575596][    C0]  ? kasan_save_free_info+0x3b/0x60
[ 1237.575636][    C0]  ? poison_slab_object+0xf7/0x160
[ 1237.575664][    C0]  ? __kasan_slab_free+0x32/0x50
[ 1237.575694][    C0]  ? kfree+0x12a/0x3b0
[ 1237.575717][    C0]  ? dummy_timer+0x1750/0x38d0
[ 1237.575740][    C0]  ? __hrtimer_run_queues+0x20c/0xcc0
[ 1237.575778][    C0]  ? hrtimer_interrupt+0x31b/0x800
[ 1237.575816][    C0]  ? __sysvec_apic_timer_interrupt+0x10f/0x450
[ 1237.575844][    C0]  ? sysvec_apic_timer_interrupt+0x43/0xb0
[ 1237.575874][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20