last executing test programs:

15.418425543s ago: executing program 3 (id=70):
unshare(0x2000400)
unshare(0x10a00)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000180)={{}, "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"})
ptrace(0x10, r0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x1, 0x0, 0x3012, 0x0, 0xd, 0x2, 0x2}})
ptrace$setsig(0x4203, r0, 0x3, &(0x7f00000003c0)={0x29, 0x9, 0xbef})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae03, 0xbb)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x4000000000010042)
unshare(0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0)
r6 = fanotify_init(0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8})
r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x200000)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc0405519, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})
r10 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
fcntl$getown(r5, 0x9)
sendmsg$SMC_PNETID_FLUSH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="021a2bbd7000fbdbdf250400000005000400020000800900010073797a30"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40004)
dup(r6)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r11, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d40)=@newtaction={0x894, 0x30, 0x1, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4, 0x400, 0x10000, 0x0, 0xc2, 0x6, 0x4, 0x5a76, 0x4, 0x2, 0x7fff, 0x5, 0x8, 0xe1, 0xf, 0x6, 0x3, 0x0, 0x2, 0x7, 0x4, 0x4, 0x6, 0xfffffff8, 0xdfa, 0xa, 0x2, 0x6, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x3ff, 0x7, 0x3, 0x5, 0x0, 0x0, 0x8f, 0x4, 0x2, 0x1, 0x6, 0xffffffff, 0xf, 0x1, 0x8, 0x9, 0x4, 0x70, 0xd, 0x10, 0x5, 0x7, 0x9, 0x1, 0xb4, 0x5c6, 0x803f, 0xffffffff, 0x10001, 0xfffffff8, 0xffffffff, 0x12000, 0x1, 0x2, 0xf, 0x6, 0x9, 0x8, 0x8, 0x4, 0x9, 0x5, 0x2, 0x10001, 0x7fff, 0x10000, 0x200, 0x4, 0x8, 0x1, 0x2, 0x7, 0x7fff, 0x6, 0x0, 0x5, 0x3, 0x8, 0xfff, 0x4, 0x80000001, 0xe00000, 0x5, 0x5, 0x5579c707, 0x3, 0x5, 0x0, 0xfffffff8, 0x2, 0xffff, 0x3, 0x8, 0x7, 0x0, 0x508, 0xffffffff, 0x7fff, 0x0, 0xfffffe00, 0x1, 0x400, 0x5, 0x6, 0x6, 0xfffffff8, 0xee2, 0xffffffff, 0x9b4, 0x1ff, 0x3, 0x8, 0xd, 0x9, 0x1, 0x71, 0x4, 0x1, 0x1, 0x10, 0x1, 0x3, 0x9, 0x6f, 0x7, 0x7, 0x3, 0x1000, 0x7, 0x1, 0x7, 0x3, 0x48c2, 0x1, 0xffff63f9, 0xffff, 0x2f, 0x8, 0x7, 0xfe5, 0x8001, 0x4, 0x8000, 0xeb57, 0x7, 0x9, 0x9, 0xffffff65, 0x97, 0x1, 0x7, 0x7, 0x307, 0x3800000, 0x6, 0x5, 0x54, 0x9, 0x9, 0x21d5, 0x6, 0x4, 0xa, 0xb, 0x959, 0xffffffff, 0x1ff, 0x314f, 0x2, 0xb, 0x10001, 0x1ff, 0x0, 0x3, 0x7, 0xa, 0x81, 0x9, 0x9, 0xffffffff, 0x4, 0x4, 0x5, 0xce6, 0x9, 0xfffffffc, 0x2, 0x2, 0x0, 0xd, 0x4, 0x7, 0x3, 0x6, 0xcdc, 0x8, 0x3, 0x9, 0x3, 0x2, 0x0, 0x5, 0x3, 0x2, 0x8, 0x0, 0x4, 0x8, 0xff, 0x5bb, 0xa4c, 0x4, 0xff, 0x8000, 0x0, 0x8, 0x9, 0x5, 0x0, 0xaf2, 0x2, 0x1, 0x8, 0x36, 0x8, 0x6, 0x5, 0x0, 0x1f, 0x3, 0x1ff, 0x0, 0xd, 0x7, 0x2, 0x6, 0x4, 0x17cd, 0x1, 0xfff, 0xf, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0x20, 0x4, 0x4, 0x4, 0xba1f, 0x3, 0x1, 0x4, 0x1, 0x9, 0xfb, 0xffff, 0x4, 0x0, 0x4, 0x4, 0xffff, 0x6, 0xa2f, 0x8000, 0x7, 0x1000, 0x9, 0xe, 0x4, 0x1, 0x7, 0x1, 0x55, 0x7, 0x8, 0x5, 0x4, 0x2, 0x3, 0x2, 0x8, 0x0, 0x10000, 0xaeae, 0xe, 0x6, 0x53, 0xfa, 0xd2be4f9, 0xf, 0x80000000, 0x2, 0xcc, 0x3, 0x3, 0x10000000, 0x800, 0x53e, 0x5, 0x2, 0x2, 0x2, 0x7, 0x11f, 0x1, 0x2, 0x8f5, 0x8, 0xff, 0x2, 0x9, 0x3, 0x3, 0x3ff, 0xcd, 0x3, 0x1000, 0x8, 0xfa, 0x401, 0xb3ec, 0x0, 0x2, 0xc5, 0x9, 0x5, 0x40, 0x3, 0x1, 0x0, 0x4, 0x9, 0x80000001, 0x91, 0x2, 0x5, 0x800, 0x5, 0x6, 0x8, 0x7, 0xffff, 0xfffffff9, 0x30, 0x4, 0x0, 0x7, 0xd5, 0x8000, 0xe6, 0x0, 0x2, 0x3, 0x40, 0x373, 0x6, 0x2, 0x7, 0x7, 0x4, 0x8, 0x5, 0x8000, 0x8, 0x4, 0x6, 0x1, 0x9, 0x7fff, 0xffffffc0, 0x0, 0x1, 0x9, 0x0, 0x2755, 0x2, 0x7ff, 0x9, 0x1, 0x3, 0x0, 0x7, 0x2e69, 0x200, 0x5, 0xc000, 0x101, 0x6, 0x3, 0x359, 0x591, 0xffa, 0xa, 0x8, 0x7f, 0x5, 0x3, 0x2, 0x2, 0x2, 0x6, 0x6, 0xd2b5906c, 0x3508, 0xabf, 0x0, 0xfffffffe, 0xfc, 0x8001, 0x5, 0x1ff, 0xffffff29, 0x9, 0x2, 0x0, 0x5, 0x0, 0x7fffffff, 0x9, 0x36b57a6e, 0x9, 0x79b, 0x7, 0x7, 0x7, 0x1, 0x5, 0x200, 0x5, 0xfffffffe, 0x9c, 0x5, 0x8000, 0x101, 0xd, 0x7f, 0xfffffff7, 0x8be, 0x7, 0xf, 0x81, 0xd0, 0x7, 0x9, 0x80, 0x5, 0x4, 0x5, 0x9, 0x6, 0x3, 0xa, 0x3, 0xffff, 0x80000000, 0xffff961a, 0x8001, 0xea6, 0x7, 0xb, 0x81, 0x7, 0x6, 0x4, 0xa, 0x7a, 0xe56, 0x1, 0x3, 0x9, 0x4, 0x3ff, 0x5, 0x5fa, 0x6, 0x80000000, 0x460, 0x7, 0x1, 0x2, 0x3ff, 0x1914e758, 0x9e7e, 0x6, 0xa, 0x8000, 0x2, 0xfe74, 0x8000, 0x2, 0x2, 0x6, 0x4, 0x6, 0x0, 0x3ff, 0x81, 0x3ff, 0x10000, 0x3]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x90f8, 0x1, 0x3, {0x7, 0x1, 0x8, 0x7, 0x8, 0x9}, {0x8, 0x2, 0x3, 0x1000, 0x6, 0x101}, 0x2, 0x0, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x894}}, 0x0)

14.320521018s ago: executing program 3 (id=74):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000700)={0x10000000})
syz_genetlink_get_family_id$fou(&(0x7f0000000380), r1)

14.217782914s ago: executing program 3 (id=76):
memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0fecff06"], 0x48)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
syz_usb_control_io(r1, 0x0, 0x0)

13.534946107s ago: executing program 4 (id=77):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r4, 0x40043d0d, 0x0)

11.29435884s ago: executing program 4 (id=82):
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
socket$nl_rdma(0x10, 0x3, 0x14)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000640)=0x4)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)

10.758115665s ago: executing program 4 (id=84):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$sndctrl(0x0, 0x62d, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0)
r2 = gettid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x53b8c3)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x2284, &(0x7f0000000000))
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)

10.563899401s ago: executing program 1 (id=85):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$sndctrl(0x0, 0x62d, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0)
r2 = gettid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x53b8c3)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x2284, &(0x7f0000000000))
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)

9.368102967s ago: executing program 3 (id=88):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="140000001e", 0x5}, {&(0x7f0000000140)="78cafb73fc02", 0x6}], 0x2}, 0x8000)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000005c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20040840}], 0x1, 0x40800)
r3 = userfaultfd(0x801)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r4, 0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}})
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000240)={0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="4010040000009689e5fb3079ff5b6b3bd2f70ce4a5bd65bf0a622cc16ea85412d3c6a89bbef7ff000000000000000e1b556000"/65], 0x0, 0x0})
r7 = dup(r5)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000a80)={{}, "fad7b9428d93038f63c4dafa1da7e07527fe756bde6d960d81bfd34ba5cca803ad5bdebe227152d43a607faa0dc407fc189b0d7e7468ab55f146ff0337aed82849987da5e1ab963dda992d377e4eacce0e342581ab9962694df4a98aef6d7813fb8b796948ff95415e9d71a47ede207b1794f624b034487af5832e243034017f4f93e15abf71e2dc467d2d07d33c06c55c3f89c8d5282a18faedb7595cdedc33c345c89deca5b925cf8467200094111705e71154b451ed8407d1c89255b27d9b243d3a333b099595c33db04682ac22a418c49f5c39a0918c015e8393d2cb7c20feb2c54c82b6387812412e3237e938369453e1e8030d49fcd1c91bf36f2422d1a72f49b31ec3889ebc0d28c929b0c6736f00b53b9ccfd3934a7d933a8202fd2bdb2a8b0d58d6180c1a69b7fb41255ce92795786d10a8c7d9e4f680517f4e34b1e8f884e81e09bd5ec5ecf38b7b8f1637afb0aee0e708c4074eec24e3141b9e12ced6b4beaedec6d55dbae69d5a63142b3e81997458d7151a84d0d7cd4ebd25d24f3d2a3b4c403ab707fe38aa61cab1b070d4730625f76dc37f201e8698204637fe62fe52ed11ae0d8f98f69d4f92762bcba03b8b42feeca7a9fa9300ca4759ff9d7e9162479f954b1316775fcbfc6640b91dd1cb976ceaf2f9f28040ecfdc0e28bb9705a1b985274c7d08bd96aacd6a00f865f3a22f86ef2ace146c4f40bb20798e0bc2db4ce62f0873c09a85e7892729489a7b9c8c9a2939812595942b1ca2d3260315bc723ac2edf24d88f0f49d586a8065817ad936dc8161e438eb5b845df96b2c9a56eb7535ee9e255f41def5d9e9720857fbfd84b4bf1c97c574f568933df8f25d6df5d74a374e4f9a6a2e76644df77da621a8c9ce947af8f20feda0e22ef467eb210665589823025c9144ec05d80276574d3cae61c639d3b12438e012ffe1ca3823b4b79185ce1896b7a41aa36a47776fade667af70c25d9543bc036f40aec1c521f39239cdbf2748883f86b89349ffee1f528f955bdf6f29686c57a49b66ebfc26ee604316f27f9547cf3c21c221581458246b04d627e29e8b846e099e5d8234ce0db1d3e77130147580622b8eeaa34707ea25369c250ce5f5adc14b7afcfbce3c25e5e65d04858dc056456e2f2d2bd6afb59afae8d63b7ab5b8b6ad3386d52dbcee60c7f0945517a77edeeda33789acdb3b7b3242704d6c51940c004cde1d3a342477607581a92a50716caf93495cbc1a6b2f1be20081f7ba8a013416e6b8433383299b752feabd1455bc336b868b38f5ad73f397f0381a51748ffa8550510837d9128ab095629b7a159c6b0dfadfd8a8bff53c80481c59d861954790c593524d8a53cd8b2f2c234b850ec7576a46074293453a86cb3c0c346a8cbbac65eda4a2130e00053f5a054603776ea1d2975e4badbaa83518dad9274c22ac17f20686f56315340e5581c787a2f71ab3a2063664bcc82c7380a13cc8eb106c036800c7b0f14ed667f39af9a5cc01dcdd5809b534fad505858508845d9c547e19c632cd8024ecd777e193c2258312b7a5998a875d33dd8b861500946852af487bbefa54e9b16a83b6131ac343eacb2558e759a9b6ce5db0f1ab173d457d144fd5a65f092e553e1d0e3f9972ec57d27bb48c78332c7a6fab0d5958c61898b3a5ae8810e3a46ae36291cd5f79f9475e697c9da84d05cc8dc197485ad790d2a8da5400583dce8ffa3c8adfe276884ed5d33f0e7bc4fb1748e83884213c10ec673dbbbf55670da7fbdd6d8927cd41106064ce22cd2ae14084c439e8f07e4e261667507c0acb03033f30665dbf928d31ff9cf38f61a46d6d1286065bfad5839b0247c975673839f6f685ebaad9396c5f93b3a5f346202a40969ab5c72d0355fd609d33b9443093a53dfbf8052a405389ce269f71da8ae1fb39b30f6a701f56838ca11527de58850f17b4fcc6397614da8e2e331f06024f1ee7f6a8b2f910711526361244a585dfacb4bab57b00587ed6a16233d17cfeceb95016e339aa5f2ba30515f289ba35118d32504f52710044e78666dd2834fc2d9fad35e2df29b10e0557ab4789c7dc718d2d03434062bb58fd824c13a0bc6298ed9bdc3d0cc79d008972fcc9f751af4824b2be0823313581cd2fd2b436f84b14719b93dd95a38941c11af5b51f3b0503f3db3569ac847a93ea9124622044b37b083fcf8882a788041289905296e1bf2eb12aadb5228f366a925269a20f7ca9db7f317d5117a70d93f90b402993a7f84328409bda0fdc6306dd5c126fdb179fde4e4d7314d2ee419c8635e62895f8dffdf73f38188121f7b24dae40531b6e43054d3b9b459df2f2613536819643e6b7038de55ffa43bc9edc72e2038e2bf9da70a4a24a3fce0b8673f7f8f5099fcf0d23ab90c7f8770bdfd23e6aaabf7d110768ff08c8754ff6d962e43ff215d78d2ebd882353490da27dabd92ab08291338eaacf3e1ebe6a7da8286d3d57e272b9eac7c70a9a1bd67fb3f4e3052779422a7e19b7cfb01760f949ce4562ce5ad5292cb607e42d513d1facd0903a87836d5c30c181b5728db474154d3cb4e524ba5e03336534ca9f6b093fd6d9e5b89ede5becc677996321d65e9022d1c00e2907767a51c75c9f0688e4e82e045dc972e6be8948c7fc8a84ca8e1a992d44ac8e7a962a931d8eb3d0c4756b838c1339758a4a563d108d35940366b582c48567b5ca539839fbd327361ed76f4204f8ec84ec6401079a189b271747129c3d0025ccc25c9d7fbea0aa4f6a0e5f10422e9866e42ab0f86d6e9022688652536eef7fd28dc5961670a4058eaec61ba3e11273111be9cc3da57edc16321e1382d20f4cf52827032b5f79e395e742113303b0aa595f7188a417ddfdc3b6259b56f9f8f7b133774bfb5c181f1288713e3144ac4ff69fc146cc633dc70c8aee1da2384b72115b49cdbdfe9508b2e06fcd02df78d895e12cf6f0cf4171c7570809b949c6bfbff07da4018935a186630be06d42a4844521428afbed6b3a34aa0226a948fa12e8bdfbb27d13fd5627093511f52a51a6dcd33e0122d2dd1736885c797e1d1c65c06739790767be42582349c147d52e377732742f176b79243edd2c6b585d5512702ce4a7395835e2ab038a5deff84f7ff0d4622aebcd31c58d2dbbaad54638473e5fb428b827a577215460489001af429b40d0dae3521be9a381913740ea72a8b707d2ed4a12f5791fc2d0ea9674d59d68ff02a7b7dda9b9a1917db6093bf8ba4a186c952434dfd664cf9607d9b194b874c24ad03b04148d6f1951d4127146b22783be7ece1344e9e49cfc0d43633098983a40276b4b4fcbe4ce0b695d58471afcfcce714ff1da6e975bd1494d127fbcda25c0110f596e4e0882e01acc674446d2c6e3d08d8034eebd4432968b1aab2e825eba0f76612ae6617667ad6c823fb8234363d5bb341c440fe0a0cad018b6c36ca317e3473eedbcc5f6740a7fad23b55a6fb626d8093ea62d6f35d2babd391e138b24a4ddfa86fef5487a710289f2994f36e87fadd178a5e139455d398a8809e30d2569650ceee90ad6b68942087ae0e33c49c6f7952b08da8762be2c9066e56d27a69a926fc58c82565877e913bff08e0827c45f9e74c964f282d5023efb21e976b93177464a686150ef09a32c352505c534e467ce014fec144dbbdcc8e2d28b6bf619ddf63a48054406dfa33aa541cb9beafa70cabcd8600cabf93d138de261f6f5b63273691669e363e06bc583bdee1ed210179f2ab50a6bc0a727475551e90b0265e1e8ca02acabe93b596b7a782151d792a5679e21e730b7e964c38a49717d0a1385bbb1b0459916424133149720bf47ac38687178a8b351ae3f29bf4a6ea369c90f85f4f123416c8c09c3f25b133ddcdb71b1289821d81581b78ae66c075c535e30151ae1bd48e787b55cc45951c83b5ce097711df0764feab81f24d63940915c471479c24222bd5569201ac4c56577168b76c1f0684f981df516cf5ac5d4307ef2bf429d818c9809f6669f43b1eb160bdcb817154bc36cd8bd24cd6c75e037edab6fa0fe9a0f19b6dbaf99dd68f0318382ccf8d20fe2fdc08134a86b5b0794a534992751fca4ec726dfca985cc239bae2b04ce49416e07e14f752767d05f6584479b5da973fa22477be64fef48b5f3c07936c2be9fa8b92c9e8a0412a2718932edf53382efe2aa1531bbde87363fee5a15501a490c16d26354c0ffeeccf0d05705a6b68a0b88de1e15736092014273f7494474a24555e7e7a6b4e274a9dd4d534cac979a0e99758203f74309af7b221e925c592ad25e13c7907c1030fc79bb728bce4437047470cf97ebc48f45ef67695585caa73178057802a24e3e4fea0a55111275c738d2b09aa7e7a00e91be43ee507b6533c6c6e9d1848e708240d7547b08bb9121fc024caed12805a0a8bfb72f72c6787b760ccd3657328507050f8ad3e348597b38685ad6d51125266382dbf433a9628c548f89eea1691e92fc755502e4656d2faa2077ab1d749a3d2d0543cd5248db49cdb1a60f006ec8cb5b3ecfc1b6b38ed802a6885c6733dbdfbe9d6c0a0daacda38f9bdbd728bfae407e2be620cd8e66743c70073e38e87ede0daf00e7e6205bc0f5cc3ff5657ad559ad13a865d01357215e2e813153212d13d6817ff2badace7edac682ea459e30b476b98ea7ca540c9ec3f8a0550ab51340e04425e3eb0d36fcfa6612bfe947263322afb876ef4a86edf8adf41f4bf4fd617c2cc57c0639baa79f4e6468258e53b76ae51c83f37b6d128cbe4eaf3e58e7d24a7c24451289c991984bed04ce060e4ee13a0c0e43fc98baae2352366672075a6c8c26165aa538b1bac0765ffda39bfafaa401cea38646e418fc99704540acd08e128121bb0b8ab8e316f924cfdae1002d54e2ef3cf3477558d77881beaa3c31cb9cc2429eaf858ebaf06709910faf26d7433290a3250cca586c0e49c3d2456a6409da11259bc7b7e2345146a360404f3d7333487343d9dfbb2813bbeba56a1e1f90d421aca2d1e6ca075b1fcb5733df856fc45de7fe5dbe6174ebc4a6241576e46503a3f7e4ad18b5965c0525faa3d031b09b2b9aa1874285c874382359e93775a69701bb63fccc33d095aac42e79a74ec9700218add3c93114c0686f6897f3228cf3bee05ca63f709075df1b5e89e44c05feb00356c0de06190b84e09285443e58a361840e93da22a3ab64d8a4a0474466d13738c07c71847b6b2e47adb22db94e92524a08ca0dbb02de2e0eb5c2edb7e29d89ed5c2d76bb2fc5da5cd57b89bfd47465b5a57ebd72261ddfb443a141415670a59ae82acde715d73b4ab62602b9a347764a05a15159d25abfa2e26531efc90cce8692bb61d859ef6ecb4d9d6d44813085915e8d97916127241aa470b58cdf629ad52b7ad48d4253b2539726f26cf169c208a591ed4a3d4c0474446493a2da85d1226e58d988bcd484ed94d8b18f3298815be6627d1eb5bde9a2f8a3864b2e0c772502854afab501e8cbf1425028bebc3aece71cae8fc40f1606902d0ebcb124be02fcfb6a2810f580942e9f6a2871f9e9bd4a43bb3428c8e4cc16c5b7f3f6cf92bc0aec8c7826c2e759d6062c7409e2e770e3780bbff8e390bc9b551d12c5d295dda72b46cbf9a20c76f6881d69ec27a003b6edb5b2983483d06b246cc3cbd2c8524e601ce0d45c7441bb9e1dcd676ccb5ac3a9e59e6d65c4eee6b120b6bb71eafc80f9ca5de3529ff04fc2f354600"})

8.97256394s ago: executing program 2 (id=89):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r5, r4, &(0x7f00000000c0)=0x8b, 0x100000500)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = dup2(r3, r6)
sendmmsg$inet(r7, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)}, {&(0x7f0000000c40)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336fb139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b4e01a3ef30321af56b9601fb04e5e5cb16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef374e28f6fc3066150dcb7cd9e7c3b9808eb03c18e8601a71ad3906bb12f7067bf7b51c2a364848bda30518eb340e11b9b5b9651052ab7ae9b1add0ac4936debc76ac7e2d22a49891fcc360f605f0f175d523875b2b15b3a5065fd", 0x148}], 0x3}}], 0x1, 0x4084)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000380)=0xbf, 0x4)
sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESOCT=r8])
r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000080)={0xf0f041})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x258, r10, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0xec, 0x2a, [@measure_req={0x26, 0xe6, {0xfe, 0x9, 0x4, "2d92da7258f36d78b25ec7136e484caa96acd8510a21b6baef5d52260060a2ce22407d230fbeb52f9e0c744708fe46ef8490db5e9462c11377f29c0929a6cebc8451f96a00323c35ed046538dbab0236dd3616f0f1135b9ddeb06718a12af55ad17eac42f6176371ed94e7850ca8972d281d48a50415ba7a8def117d55765dfdea5c3876ee1e0c32460e7b7d49770f929c2b941d195ad898649d77bdd24485a38ff687d29c4c27aea42ce1b90a4724a751a5ee4495b27d558e817622bed5ed4bdec97c8c616bec9040568be10eba090f70c625a079b38cf7f430c9014790194a5dc81b"}}]}, @NL80211_ATTR_IE={0x82, 0x2a, [@mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x2, 0x9, 0x20}}, @ibss={0x6, 0x2, 0x7ea5}, @random={0x63}, @tim={0x5, 0x65, {0x7, 0x43, 0x8, "911394bd01c4d7cee07f4d677bc42346f2e7685eaa67beec791d39e19b910da0b4c7ca1a87f35310d9022ff3ead5ab0f8e9b25d9828b293eb0aa0332db8b140701b25abaccb64e488bce958570125b5c7e88007e9d97113978bcd8c3b61709a75942"}}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x3}, 0x4, 0xf, @broadcast, 0x9, 0x7ff, 0x3}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x882}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0x8b, 0x2a, [@peer_mgmt={0x75, 0x6, {0x0, 0x2f27, @void, @val=0x27, @void}}, @random_vendor={0xdd, 0x77, "402fc9f7d2e378eb0c548aa4a5dc11abb6b3150b9c3aa1966d41b3eaf7ba69f96f9b80cf07d611842421f5d9c424fb81c6cec9460c005806f55e8243a41cba62b562bf6b80fd3eece6c8237a92be3ed17368dc67f16833658c6e691ced8b859280ea99d8fc2444a229aee9b56787cb9e391c90a46793df"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xb, 0xb4, 0x40}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0x258}, 0x1, 0x0, 0x0, 0x15}, 0x24080005)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x0)
io_setup(0x90, &(0x7f0000000080))

8.492641572s ago: executing program 0 (id=90):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r5, r4, &(0x7f00000000c0)=0x8b, 0x100000500)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = dup2(r3, r6)
sendmmsg$inet(r7, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)}, {&(0x7f0000000c40)="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", 0x148}], 0x3}}], 0x1, 0x4084)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000380)=0xbf, 0x4)
sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) (fail_nth: 1)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESOCT=r8])
r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000080)={0xf0f041})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x258, r10, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0xec, 0x2a, [@measure_req={0x26, 0xe6, {0xfe, 0x9, 0x4, "2d92da7258f36d78b25ec7136e484caa96acd8510a21b6baef5d52260060a2ce22407d230fbeb52f9e0c744708fe46ef8490db5e9462c11377f29c0929a6cebc8451f96a00323c35ed046538dbab0236dd3616f0f1135b9ddeb06718a12af55ad17eac42f6176371ed94e7850ca8972d281d48a50415ba7a8def117d55765dfdea5c3876ee1e0c32460e7b7d49770f929c2b941d195ad898649d77bdd24485a38ff687d29c4c27aea42ce1b90a4724a751a5ee4495b27d558e817622bed5ed4bdec97c8c616bec9040568be10eba090f70c625a079b38cf7f430c9014790194a5dc81b"}}]}, @NL80211_ATTR_IE={0x82, 0x2a, [@mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x2, 0x9, 0x20}}, @ibss={0x6, 0x2, 0x7ea5}, @random={0x63}, @tim={0x5, 0x65, {0x7, 0x43, 0x8, "911394bd01c4d7cee07f4d677bc42346f2e7685eaa67beec791d39e19b910da0b4c7ca1a87f35310d9022ff3ead5ab0f8e9b25d9828b293eb0aa0332db8b140701b25abaccb64e488bce958570125b5c7e88007e9d97113978bcd8c3b61709a75942"}}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x3}, 0x4, 0xf, @broadcast, 0x9, 0x7ff, 0x3}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x882}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0x8b, 0x2a, [@peer_mgmt={0x75, 0x6, {0x0, 0x2f27, @void, @val=0x27, @void}}, @random_vendor={0xdd, 0x77, "402fc9f7d2e378eb0c548aa4a5dc11abb6b3150b9c3aa1966d41b3eaf7ba69f96f9b80cf07d611842421f5d9c424fb81c6cec9460c005806f55e8243a41cba62b562bf6b80fd3eece6c8237a92be3ed17368dc67f16833658c6e691ced8b859280ea99d8fc2444a229aee9b56787cb9e391c90a46793df"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xb, 0xb4, 0x40}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0x258}, 0x1, 0x0, 0x0, 0x15}, 0x24080005)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x0)
io_setup(0x90, &(0x7f0000000080))

8.064530347s ago: executing program 2 (id=91):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@hyper, 0x1})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$notify(r4, 0x402, 0x14)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x38, r5, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r7, 0x6, 0x21, &(0x7f00000001c0)="9f7cf21223926c8228dea70cc9c1f43b", 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

6.987955292s ago: executing program 2 (id=92):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8000008b}, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac14140008000200000000000c0002800500010000000000240002801400018008000100ac141400080002007f0000010c0002800500010000000000080007400000000024000e8014000180080001000000000008000200000000000c0002"], 0x88}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0xed)
rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000010000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090080000000fb5509010000000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
r6 = userfaultfd(0x1)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000bac000/0x4000)=nil, 0x4000}, 0x3})
read(r6, &(0x7f0000000140)=""/235, 0xeb)
close(r6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000040), 0x0, 0x4)
syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200))
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

6.971284743s ago: executing program 1 (id=93):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000004c0)={@loopback, 0x4})
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r0, 0x0, 0x0, 0x20000046, &(0x7f0000000200)={0xa, 0x4e20, 0x6, @loopback, 0x401}, 0x1c)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(r1, 0xffffffffffffff30, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(0x0, 0x800000000086, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syslog(0x3, &(0x7f0000000080)=""/48, 0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$ax25(r0, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r4 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000380)="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", 0x10f}], 0x1}, 0x1)
recvmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x22)

6.957016094s ago: executing program 4 (id=94):
memfd_create(0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=@ceph_nfs_fh={0x8, 0x3ffff, {0x1}}, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, &(0x7f0000000640)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0)

6.819821639s ago: executing program 0 (id=95):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf25022012db69ec8f6c1c4d0004000000001a00e1ff"], 0x24}}, 0x0)

6.004387918s ago: executing program 4 (id=96):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, &(0x7f0000000180)=""/1, 0x1}, 0x40002003)
unshare(0x400)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa8001, 0x10)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0xffff, 0x7fff, 0x321, 0xd, 0x10, 0x5, 0x246, 0x7fffffff, 0x0, 0x3ff, 0x80, 0x1, 0xfffffffffffffffc, 0x8, 0x6, 0x5], 0x8080000, 0x100000})
setxattr$incfs_size(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)=0x1b9df72f, 0x8, 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x0)
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r2, &(0x7f0000000480)={0xe74, 0xffff, 0x1})
copy_file_range(r1, 0x0, r0, &(0x7f00000004c0)=0x4, 0x5, 0x0)
getpeername$packet(r1, &(0x7f0000000500)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, r1, 0x7fffffff, '\x00', r3, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000600)={0x4, 0xffffffff})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680), &(0x7f00000006c0)={0x0, 0xfb, 0xdb, 0x1, 0x3, "73d09009788a458ad684f8d1d925d2cf", "4f0f293576a3fce136eb689ee00ae364edf65c0978480d271fbc9731058acafedb2e6a39391884f058d4f63ad26086006eebcfe14abf288a33c9f87cdadb5d96cef29de06ff9ae1a8b06b941cb620b1e970cb5e02d5f65c5a4d0e0923a4dbbaf3bde54bb1a8b2919ba0891da1387b0a97962dc6cb9963f50c65a9e0b2b31c4f254025ea1f55d218cf151d0d802d28474336a452bc08609636c8d7c8c43cbf58d4d22ec4834ee590cc89b382e15d2f4dc3d395a1544d93298bcbe3f46e8cb750d6c2cb1a77eea"}, 0xdb, 0x2)
preadv2(r1, &(0x7f00000007c0), 0x0, 0x0, 0x7, 0x10)
recvmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000900)=""/229, 0xe5}, {&(0x7f0000000a00)=""/218, 0xda}, {&(0x7f0000000b00)=""/229, 0xe5}], 0x4, &(0x7f0000000c40)=""/25, 0x19}, 0x80000001}, {{&(0x7f0000000c80)=@ethernet, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/54, 0x36}, {&(0x7f0000000d40)=""/197, 0xc5}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e80)=""/32, 0x20}, {&(0x7f0000000ec0)=""/111, 0x6f}], 0x2, &(0x7f0000000f80)=""/33, 0x21}, 0x7}, {{&(0x7f0000000fc0)=@x25={0x9, @remote}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001040)=""/209, 0xd1}, {&(0x7f0000001140)=""/220, 0xdc}], 0x2, &(0x7f0000001280)=""/7, 0x7}, 0xf}, {{&(0x7f00000012c0)=@nl, 0x80, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/190, 0xbe}], 0x2, &(0x7f0000002440)=""/186, 0xba}, 0x3}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000002500)=""/247, 0xf7}, {&(0x7f0000002600)=""/59, 0x3b}, {&(0x7f0000002640)=""/87, 0x57}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/230, 0xe6}, {&(0x7f00000037c0)=""/39, 0x27}, {&(0x7f0000003800)=""/73, 0x49}, {&(0x7f0000003880)=""/185, 0xb9}], 0x8, &(0x7f00000039c0)=""/64, 0x40}, 0x4}, {{&(0x7f0000003a00)=@ax25={{0x3, @rose}, [@rose, @remote, @remote, @bcast, @rose, @remote, @default, @rose]}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003a80)=""/241, 0xf1}, {&(0x7f0000003b80)=""/225, 0xe1}, {&(0x7f0000003c80)=""/58, 0x3a}], 0x3}, 0x5f75}, {{&(0x7f0000003d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003d80)=""/12, 0xc}, {&(0x7f0000003dc0)=""/121, 0x79}], 0x2, &(0x7f0000003e80)=""/140, 0x8c}}], 0x8, 0x20, &(0x7f0000004140)={0x77359400})
r5 = syz_open_dev$video(&(0x7f0000004180), 0xe, 0x20a00)
newfstatat(0xffffffffffffff9c, &(0x7f00000041c0)='./file0\x00', &(0x7f0000004200), 0x1000)
fsetxattr$trusted_overlay_upper(r4, &(0x7f0000004280), &(0x7f00000042c0)={0x0, 0xfb, 0x98, 0x4, 0x80, "c5a7a78058d3207c3d26a494018c0328", "2ac286c953518c88c38b72b5c9d3eeb4a768710d060a59f0f54a84ea8d254e9eb5ac0255cda50cabb713198355b0d6b6e93d39c6086919197ac350c6eb1c476cdb8fa8fbfeaba8b94f329173ac2865f0e7a2f4c1bc0d6a7a5c90a94487a6f8dd54e0880bdcb722119b69debeca9f45b3709358fba05a0de26358e10847d9a685fe1354"}, 0x98, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004380)='./file0\x00', 0x401, 0x21)
name_to_handle_at(r6, &(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)=@ocfs2_parent={0x18, 0x2, {{0x7fffffff, 0x0, 0x1}, {0x0, 0x4, 0x4}}}, &(0x7f0000004440), 0x1000)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000004480), &(0x7f00000044c0)=0x2)
setxattr$security_capability(&(0x7f0000004500)='./file1\x00', &(0x7f0000004540), &(0x7f0000004580)=@v1={0x1000000, [{0xcc, 0x8}]}, 0xc, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000045c0)={{0x1, 0x1, 0x18, <r7=>r5, {0x9}}, './file1\x00'})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000005a00)={&(0x7f0000004600)=@ax25={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000005900)=[{&(0x7f0000004680)="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", 0x1000}, {&(0x7f0000005680)}, {&(0x7f00000056c0)="8c9a7cf7e8510672ce9d4204cd2677228bd985a5695b3b13715577e20ed7e45deadffb376df0618700cf7a440dbc510ec8f418d4681bb82155ab48f7216d0e12b6bd4594edb5b2545d064525849fd4e55c82b0bc18a8154315b8f9f94524316ef0df844388a275d2c3f56af566e08acdaae4df0dec8a00b53bd6782392aa7b9c7b71dcce350d1cd1804ad9eabad6c1eef2c10e647bad3338d70993567caa1d119e64c991abf04f33b205d2031fdfb7a8208e5ea55476151759f3e49dd05be051", 0xc0}, {&(0x7f0000005780)="5e8a6c10e3b9decb0b371bd6273498da21c6031f907b376faa2d8d63b3626055494cf0269b025a7101f447385d10c7762fb682a40e64feacc3873b7478a2dca8cb887a3ba48ddc14086436733ede2f6cea645db4b8d75915e0b95e097f6624ec147d302e", 0x64}, {&(0x7f0000005800)="2349d5934a827aa3627196024887d3dd6a", 0x11}, {&(0x7f0000005840)="5898ecea01136b0bd850dcf2b958d8e407526c1a6b77ca97569ebca7c06ded7057a0ebc53289a0ea4ac14fe34349b9b436040f251a08230578e15e0bf20f7fcad63241deb533c774cf6e079e59adf07791ce8a3626cf3a5aa9abbd8dbe2c0f024c2419651b9b525bedb8f2642d4e4af544d3", 0x72}, {&(0x7f00000058c0)="86a569507144f57b7f26c4dbaa983f404e27049bfcc3cf922969a08fd2753702f7b2066b36f232a4ca", 0x29}], 0x7, &(0x7f0000005980)=[{0x50, 0x118, 0x1796, "8baae93babf97fb15ed6df9cc8f17217a2233bcd92efcad1ae829ed5369a5e87e9de46dd281ca5a9c2c26f0de4c507b0536fe86544a222a6e41c3b26"}], 0x50}, 0x44000)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000005a40)={<r8=>r7})
recvmmsg$unix(r8, &(0x7f0000008a00)=[{{&(0x7f0000005a80), 0x6e, &(0x7f0000005d00)=[{&(0x7f0000005b00)=""/194, 0xc2}, {&(0x7f0000005c00)=""/237, 0xed}], 0x2, &(0x7f0000005d40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000005e00), 0x6e, &(0x7f0000006240)=[{&(0x7f0000005e80)=""/156, 0x9c}, {&(0x7f0000005f40)=""/253, 0xfd}, {&(0x7f0000006040)=""/198, 0xc6}, {&(0x7f0000006140)=""/32, 0x20}, {&(0x7f0000006180)=""/32, 0x20}, {&(0x7f00000061c0)=""/92, 0x5c}], 0x6}}, {{&(0x7f00000062c0)=@abs, 0x6e, &(0x7f00000075c0)=[{&(0x7f0000006340)=""/255, 0xff}, {&(0x7f0000006440)=""/216, 0xd8}, {&(0x7f0000006540)=""/4096, 0x1000}, {&(0x7f0000007540)=""/78, 0x4e}], 0x4, &(0x7f0000007600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000007680)=@abs, 0x6e, &(0x7f0000007800)=[{&(0x7f0000007700)=""/132, 0x84}, {&(0x7f00000077c0)=""/6, 0x6}], 0x2}}, {{0x0, 0x0, &(0x7f00000089c0)=[{&(0x7f0000007840)=""/4096, 0x1000}, {&(0x7f0000008840)=""/201, 0xc9}, {&(0x7f0000008940)=""/67, 0x43}], 0x3}}], 0x5, 0x140, &(0x7f0000008b40)={0x77359400})
bind$bt_hci(r10, &(0x7f0000008b80)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
connect(r9, &(0x7f0000008bc0)=@rc={0x1f, @none, 0x80}, 0x80)
write$UHID_CREATE2(r11, &(0x7f0000008c40)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x4e, 0x72, 0x5, 0x1000, 0x10001, 0x240, "d9f0fc23877aa4813f656826c675977296889f0c8ffc8d7488cfbde21888d6ea475e08624d40a66d7981bcec1a8e93376ceca1f73c65ecdd5cdbb234dc7cf1c31b518d77340083c359d376b17d89"}}, 0x166)

5.413378486s ago: executing program 0 (id=97):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
inotify_init1(0x0)
lsetxattr$system_posix_acl(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x4, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01)
openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mknod$loop(0x0, 0x0, 0x0)
mount(&(0x7f0000000080)=@filename='\x00', 0x0, &(0x7f0000000980)='erofs\x00', 0xc, 0x0)
syz_io_uring_setup(0x6d8, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x1000000}, &(0x7f0000000300), &(0x7f00000003c0))
openat$sequencer(0xffffffffffffff9c, 0x0, 0x20b982, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)

5.268178198s ago: executing program 4 (id=98):
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="07000000000000000000020000001400018008000301"], 0x28}}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0xfffffffffffffed1)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f00000000c0), 0x0}, 0x20)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r4, 0x0, 0x1}, 0x18)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r4}, 0xc)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000000780)=""/102374, 0x18fe6)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[], 0x20)
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0x0, 0x4000, 0x31364d4e, 0x0, 0x7, [{0x0, 0xfffffff7}, {}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x0, 0x3}, {0x0, 0x7}, {}, {0x0, 0x4}], 0x0, 0x0, 0x7, 0x0, 0x6}})
unshare(0x10040500)
r7 = semget$private(0x0, 0x4, 0x0)
semtimedop(r7, &(0x7f0000000040)=[{0x2, 0x409, 0x1000}], 0x1, 0x0)
unshare(0x8040080)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xa0c80)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
socket$packet(0x11, 0x3, 0x300)

4.986262196s ago: executing program 32 (id=98):
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="07000000000000000000020000001400018008000301"], 0x28}}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0xfffffffffffffed1)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f00000000c0), 0x0}, 0x20)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r4, 0x0, 0x1}, 0x18)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r4}, 0xc)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000000780)=""/102374, 0x18fe6)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[], 0x20)
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0x0, 0x4000, 0x31364d4e, 0x0, 0x7, [{0x0, 0xfffffff7}, {}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x0, 0x3}, {0x0, 0x7}, {}, {0x0, 0x4}], 0x0, 0x0, 0x7, 0x0, 0x6}})
unshare(0x10040500)
r7 = semget$private(0x0, 0x4, 0x0)
semtimedop(r7, &(0x7f0000000040)=[{0x2, 0x409, 0x1000}], 0x1, 0x0)
unshare(0x8040080)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xa0c80)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
socket$packet(0x11, 0x3, 0x300)

4.973149684s ago: executing program 1 (id=100):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket(0x10, 0x802, 0x0)
write(r1, &(0x7f0000000140)="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", 0xfc)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095bb4ba84b4d79457e4d447fc22700000000060000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xc2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000480)=@file={0x0, './file1/file0\x00'}, 0x6e)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r8, 0x400, 0x1)
truncate(&(0x7f0000000000)='./file1\x00', 0x1104)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)

4.97161617s ago: executing program 2 (id=101):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x4004)
socket$xdp(0x2c, 0x3, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local, {[@end]}}, @info_request={0xf, 0x0, 0x0, 0x3492, 0x2}}}}}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
fanotify_init(0x8, 0x800)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r8, 0x203, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40)
sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004)
sendfile(r1, r5, 0x0, 0x4000000000010046)

4.677349326s ago: executing program 3 (id=102):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="d00000000002010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000131400040000000000000000000000ffff0a0101020c000280050001000000000006000340000200003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c00028004000280050001"], 0xd0}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
epoll_create1(0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
socket$igmp6(0xa, 0x3, 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x20, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r10, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080), 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0})
io_uring_enter(r5, 0x3f70, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x64, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r1], 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x0)

3.597346696s ago: executing program 1 (id=103):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@hyper, 0x1})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$notify(r4, 0x402, 0x14)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x38, r5, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r7, 0x6, 0x21, &(0x7f00000001c0)="9f7cf21223926c8228dea70cc9c1f43b", 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

3.592526093s ago: executing program 2 (id=104):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$sndctrl(0x0, 0x62d, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0)
r2 = gettid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x53b8c3)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x2284, &(0x7f0000000000))
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)

3.050777361s ago: executing program 0 (id=105):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x3eb1c1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902})
write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[], 0xffdd)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000000)={0x2, 0xff8d, @local}, 0x10)

1.80431473s ago: executing program 3 (id=106):
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x8080) (rerun: 32)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000540)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x5}}, 0x18)
socket$l2tp(0x2, 0x2, 0x73) (async)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
close(0x3)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async, rerun: 64)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) (async, rerun: 64)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) (async, rerun: 64)
write$binfmt_script(r2, &(0x7f00000000c0), 0xfecc) (async)
r4 = dup(r1)
write$UHID_INPUT(r4, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006)

1.728745073s ago: executing program 1 (id=107):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf25022012db69ec8f6c1c4d0004000000001a00e1ff"], 0x24}}, 0x0)

1.178131082s ago: executing program 0 (id=108):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=@v1={0x2, "a6995d1c05a79c3e"}, 0x9, 0x2)
r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f00000000c0)={0x98f907, 0x0, @name="32a48dd4c71e94e275c85804b318b86c646135c09fd95a8370e00e77e342f3c8"})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b05, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r4, 0x8b1b, &(0x7f0000000040))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r6 = syz_io_uring_complete(0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x7, 0x9})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x8, 0xb, 0x0, 0x1, 0x1, '\x00', 0x0, r6, 0x3, 0x4, 0x4, 0x7, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x1000, r7}, 0x38)
faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1100)
write$UHID_INPUT(r0, 0x0, 0x0)

187.295274ms ago: executing program 1 (id=109):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000020000000000000805000000002e5f0e00"], 0x0, 0x29, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28)
r2 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

173.334524ms ago: executing program 2 (id=110):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0200000006000000080000004a2d0f512f7c98ded9a607774e"], 0x50)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x9c, 0xf0, 0xb5, 0x10, 0xbb4, 0xa2d, 0xa3d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc, 0x0, 0x0, 0xc8, 0xaa, 0x6}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="4015de"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x18, &(0x7f0000000840)={0x20, 0x15, 0x2, "480f"}, 0x0, 0x0, 0x0, 0x0})
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4547, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES16=r2, @ANYBLOB="05000000000000000000060000000800", @ANYBLOB="d89947c3b0a1f423464c3a1e4f6b5ebdd4c0576386c6e447df65a128d88ab60440de0144f43d33c56dc170772702bc39610d6cc495d00f88e0f997e1cf6106", @ANYRES16=0x0], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r6, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0500b7104341c93f8cd105cbfdd334008b000000150026006c090000126209cfc4bdb41bdb16d7d38bf0aab4250ebf7f9a14205802445e4c65cd0aa118105943b3d402057b999946c396942a84e565a54de481f197d905f0365740efb8a3f89eee3b6284a746f67b863a512e06cd26da1ea4a7289ebf8880e402de91c6351ccf0e4a"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf257900000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990095790000380000000400f4000400f4000400f4000400f4000400f4000400f400"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8840)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xff, 0x42}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000091}, 0x4000)
sendmmsg$inet6(r6, &(0x7f00000025c0)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r6, 0x1)
setsockopt(r6, 0x84, 0x80, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)

0s ago: executing program 0 (id=111):
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x12)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
move_mount(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x30)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x4e24, @private=0xa010101}], 0x2c)
capset(&(0x7f0000000080)={0x20080522, r1}, &(0x7f0000000300)={0x200000, 0xfffffffe, 0xba4, 0x0, 0x6, 0x200f})
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010000000000000013000100", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0)
chmod(&(0x7f0000000180)='./file0\x00', 0x3b6)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9)
sendto$inet6(r4, 0x0, 0x0, 0x4000080, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts.
[   64.733599][ T5808] cgroup: Unknown subsys name 'net'
[   64.887627][ T5808] cgroup: Unknown subsys name 'cpuset'
[   64.895737][ T5808] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.208799][ T5808] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.954078][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.965238][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.965452][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.973680][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.996400][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.006032][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.014109][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.014881][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.028872][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.033898][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   70.036867][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.045488][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   70.052255][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.059523][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   70.065390][ T5835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   70.073122][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   70.078289][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.086684][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   70.093966][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.100096][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   70.106564][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   70.113735][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.129315][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.129810][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   70.161230][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   70.168729][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   70.176533][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   70.191784][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   70.198915][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   70.206830][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   70.452539][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   70.669210][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   70.679335][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.687605][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.695346][ T5820] bridge_slave_0: entered allmulticast mode
[   70.701963][ T5820] bridge_slave_0: entered promiscuous mode
[   70.712905][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.720135][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.727351][ T5820] bridge_slave_1: entered allmulticast mode
[   70.733936][ T5820] bridge_slave_1: entered promiscuous mode
[   70.778041][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   70.842473][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.881605][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.950458][ T5820] team0: Port device team_slave_0 added
[   70.956878][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.963978][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.971763][ T5819] bridge_slave_0: entered allmulticast mode
[   70.978981][ T5819] bridge_slave_0: entered promiscuous mode
[   70.989342][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   71.002805][ T5820] team0: Port device team_slave_1 added
[   71.009153][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.016353][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.023554][ T5819] bridge_slave_1: entered allmulticast mode
[   71.030472][ T5819] bridge_slave_1: entered promiscuous mode
[   71.070739][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   71.097511][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.105296][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.112423][ T5831] bridge_slave_0: entered allmulticast mode
[   71.119668][ T5831] bridge_slave_0: entered promiscuous mode
[   71.131769][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.139352][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.146599][ T5831] bridge_slave_1: entered allmulticast mode
[   71.153506][ T5831] bridge_slave_1: entered promiscuous mode
[   71.163759][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.170958][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.197421][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.211618][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.252834][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.260007][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.286663][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.299554][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.346072][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.358134][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.409536][ T5831] team0: Port device team_slave_0 added
[   71.428979][ T5819] team0: Port device team_slave_0 added
[   71.454219][ T5831] team0: Port device team_slave_1 added
[   71.479832][ T5819] team0: Port device team_slave_1 added
[   71.517662][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.526149][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.552405][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.587263][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.594655][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.602039][ T5830] bridge_slave_0: entered allmulticast mode
[   71.609673][ T5830] bridge_slave_0: entered promiscuous mode
[   71.619872][ T5820] hsr_slave_0: entered promiscuous mode
[   71.626896][ T5820] hsr_slave_1: entered promiscuous mode
[   71.633641][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.640726][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.667137][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.690166][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[   71.696794][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[   71.704926][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.711883][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.738313][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.750159][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.757606][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.764957][ T5818] bridge_slave_0: entered allmulticast mode
[   71.771548][ T5818] bridge_slave_0: entered promiscuous mode
[   71.779317][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.786834][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.794036][ T5830] bridge_slave_1: entered allmulticast mode
[   71.800867][ T5830] bridge_slave_1: entered promiscuous mode
[   71.827222][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.834371][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.860468][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.876822][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.883927][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.891748][ T5818] bridge_slave_1: entered allmulticast mode
[   71.898624][ T5818] bridge_slave_1: entered promiscuous mode
[   71.918196][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.943882][ T5831] hsr_slave_0: entered promiscuous mode
[   71.950267][ T5831] hsr_slave_1: entered promiscuous mode
[   71.956691][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.964751][ T5831] Cannot create hsr debugfs directory
[   71.998314][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.030350][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.063819][ T5819] hsr_slave_0: entered promiscuous mode
[   72.070699][ T5819] hsr_slave_1: entered promiscuous mode
[   72.077507][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.085227][ T5819] Cannot create hsr debugfs directory
[   72.092446][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.150384][ T5830] team0: Port device team_slave_0 added
[   72.163369][ T5830] team0: Port device team_slave_1 added
[   72.175385][ T5832] Bluetooth: hci1: command tx timeout
[   72.175850][ T5826] Bluetooth: hci2: command tx timeout
[   72.190167][ T5818] team0: Port device team_slave_0 added
[   72.200909][ T5818] team0: Port device team_slave_1 added
[   72.242514][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.250061][ T5826] Bluetooth: hci3: command tx timeout
[   72.250298][ T5826] Bluetooth: hci4: command tx timeout
[   72.255721][ T5832] Bluetooth: hci0: command tx timeout
[   72.262275][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.292827][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.308115][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.315318][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.342215][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.390845][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.398014][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.424012][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.469821][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.476902][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.502896][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.588516][ T5830] hsr_slave_0: entered promiscuous mode
[   72.594927][ T5830] hsr_slave_1: entered promiscuous mode
[   72.600944][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.608582][ T5830] Cannot create hsr debugfs directory
[   72.665133][ T5818] hsr_slave_0: entered promiscuous mode
[   72.671418][ T5818] hsr_slave_1: entered promiscuous mode
[   72.678165][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.686534][ T5818] Cannot create hsr debugfs directory
[   72.740528][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   72.771625][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   72.781739][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   72.810387][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   72.893309][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.922464][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.938518][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.957046][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.005238][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   73.029162][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   73.056628][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   73.066826][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   73.102237][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.112425][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.153804][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.183752][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.198868][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.228933][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.239425][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.252088][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.265568][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.312526][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   73.356689][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.364055][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.378664][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.385856][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.440540][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.502972][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   73.521313][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.547355][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.559851][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.567081][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.583417][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   73.604078][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.611229][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.648159][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.655334][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.689927][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.697080][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.720489][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.762450][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   73.809511][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.825760][  T966] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.832869][  T966] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.873767][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.897913][  T966] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.905053][  T966] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.933680][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   73.959448][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.017562][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.025303][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.056743][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.063871][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.101372][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.171488][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.202918][ T5820] veth0_vlan: entered promiscuous mode
[   74.245149][ T5832] Bluetooth: hci1: command tx timeout
[   74.254928][ T5832] Bluetooth: hci2: command tx timeout
[   74.262037][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.286258][ T5820] veth1_vlan: entered promiscuous mode
[   74.326058][ T5832] Bluetooth: hci4: command tx timeout
[   74.326104][ T5835] Bluetooth: hci3: command tx timeout
[   74.339836][ T5826] Bluetooth: hci0: command tx timeout
[   74.350004][ T5831] veth0_vlan: entered promiscuous mode
[   74.417996][ T5831] veth1_vlan: entered promiscuous mode
[   74.501556][ T5820] veth0_macvtap: entered promiscuous mode
[   74.512854][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.531678][ T5831] veth0_macvtap: entered promiscuous mode
[   74.542761][ T5820] veth1_macvtap: entered promiscuous mode
[   74.579528][ T5831] veth1_macvtap: entered promiscuous mode
[   74.621862][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.632240][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.643378][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.664215][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.676981][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.688755][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.701520][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.712475][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.724075][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.739389][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.749180][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.758533][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.767464][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.791287][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.800371][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.811444][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.820191][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.895721][ T5830] veth0_vlan: entered promiscuous mode
[   74.943130][ T5830] veth1_vlan: entered promiscuous mode
[   74.973515][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.992699][ T5819] veth0_vlan: entered promiscuous mode
[   74.999372][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.013747][ T5819] veth1_vlan: entered promiscuous mode
[   75.029014][ T5818] veth0_vlan: entered promiscuous mode
[   75.073216][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.079118][ T5818] veth1_vlan: entered promiscuous mode
[   75.082404][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.116393][ T5830] veth0_macvtap: entered promiscuous mode
[   75.143089][ T5819] veth0_macvtap: entered promiscuous mode
[   75.151975][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.177792][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.209164][ T5818] veth0_macvtap: entered promiscuous mode
[   75.232902][ T5830] veth1_macvtap: entered promiscuous mode
[   75.254538][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.269083][ T5819] veth1_macvtap: entered promiscuous mode
[   75.278245][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   75.280544][ T5818] veth1_macvtap: entered promiscuous mode
[   75.300359][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.329943][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.348876][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.359900][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.378089][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.392921][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.430091][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.442483][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   75.454587][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.466993][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.478133][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.488449][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.499147][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.510799][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.522307][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.540309][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.550750][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.561814][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.601982][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.621662][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.632350][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.643228][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.654107][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.664138][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.674818][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.691442][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.702343][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.713863][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.727371][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.744165][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.754606][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.774453][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.784309][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.801149][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.818131][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.833969][ T5819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.843383][ T5819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.853109][ T5819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.876795][ T5819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.917250][ T5911] netlink: 'syz.0.6': attribute type 4 has an invalid length.
[   75.951454][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.972981][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.992999][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.010953][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.021619][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.037741][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.048645][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.065844][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.125475][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.267302][ T5917] =======================================================
[   76.267302][ T5917] WARNING: The mand mount option has been deprecated and
[   76.267302][ T5917]          and is ignored by this kernel. Remove the mand
[   76.267302][ T5917]          option from the mount to silence this warning.
[   76.267302][ T5917] =======================================================
[   76.329806][ T5826] Bluetooth: hci2: command tx timeout
[   76.335895][ T5835] Bluetooth: hci1: command tx timeout
[   76.404924][ T5826] Bluetooth: hci0: command tx timeout
[   76.410626][ T5826] Bluetooth: hci3: command tx timeout
[   76.412802][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.416409][ T5835] Bluetooth: hci4: command tx timeout
[   76.586419][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.670959][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.682844][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.739016][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.748744][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.757993][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.768714][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.601999][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.621701][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.629380][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.647740][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.670900][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.876091][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.911219][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.930147][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.937260][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.414913][ T5826] Bluetooth: hci2: command tx timeout
[   78.420621][ T5835] Bluetooth: hci1: command tx timeout
[   78.550595][ T5835] Bluetooth: hci0: command tx timeout
[   78.556110][ T5826] Bluetooth: hci4: command tx timeout
[   78.561617][ T5835] Bluetooth: hci3: command tx timeout
[   78.618579][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.739649][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.770845][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.845797][ T5821] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   79.051773][ T5821] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   79.057392][ T5938] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.081480][ T5821] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   79.138238][ T5821] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[   79.167281][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   79.199426][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   79.232618][ T5821] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   79.262200][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   79.273114][ T5821] usb 4-1: Product: syz
[   79.306477][ T5821] usb 4-1: Manufacturer: syz
[   79.353486][ T5821] cdc_wdm 4-1:1.0: skipping garbage
[   79.404927][ T5821] cdc_wdm 4-1:1.0: skipping garbage
[   79.426868][ T5821] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[   79.468941][ T5821] cdc_wdm 4-1:1.0: Unknown control protocol
[   79.677620][ T5821] usb 4-1: USB disconnect, device number 2
[   79.914700][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   80.156925][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16'.
[   80.214766][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   80.224031][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   80.232673][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   80.241222][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   80.274565][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   80.283251][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.265811][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.274632][    T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!!
[   81.464702][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.687759][ T5978] Zero length message leads to an empty skb
[   82.311174][   T25] cfg80211: failed to load regulatory.db
[   82.554012][ T5983] syz.1.22 uses obsolete (PF_INET,SOCK_PACKET)
[   82.912354][ T5991] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.27'.
[   83.071396][ T5991] FAULT_INJECTION: forcing a failure.
[   83.071396][ T5991] name failslab, interval 1, probability 0, space 0, times 1
[   83.674775][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: syz.0.27 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0
[   83.674800][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   83.674814][ T5991] Call Trace:
[   83.674820][ T5991]  <TASK>
[   83.674826][ T5991]  dump_stack_lvl+0x241/0x360
[   83.674865][ T5991]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.674887][ T5991]  ? __pfx__printk+0x10/0x10
[   83.674910][ T5991]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[   83.674931][ T5991]  ? __pfx___might_resched+0x10/0x10
[   83.674952][ T5991]  should_fail_ex+0x40a/0x550
[   83.674975][ T5991]  should_failslab+0xac/0x100
[   83.674995][ T5991]  kmem_cache_alloc_node_noprof+0x77/0x380
[   83.675013][ T5991]  ? __alloc_skb+0x1c3/0x440
[   83.675038][ T5991]  __alloc_skb+0x1c3/0x440
[   83.675063][ T5991]  ? __pfx___alloc_skb+0x10/0x10
[   83.675087][ T5991]  ? netlink_ack_tlv_len+0x6e/0x200
[   83.675112][ T5991]  netlink_ack+0x145/0xa50
[   83.675136][ T5991]  ? __pfx___might_resched+0x10/0x10
[   83.675169][ T5991]  netlink_rcv_skb+0x262/0x430
[   83.675193][ T5991]  ? __pfx_genl_rcv_msg+0x10/0x10
[   83.675214][ T5991]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   83.675249][ T5991]  ? __netlink_deliver_tap+0x7aa/0x7f0
[   83.675278][ T5991]  genl_rcv+0x28/0x40
[   83.675294][ T5991]  netlink_unicast+0x7f6/0x990
[   83.675324][ T5991]  ? __pfx_netlink_unicast+0x10/0x10
[   83.675342][ T5991]  ? __virt_addr_valid+0x45f/0x530
[   83.675364][ T5991]  ? __phys_addr_symbol+0x2f/0x70
[   83.675383][ T5991]  ? __check_object_size+0x47a/0x730
[   83.675406][ T5991]  netlink_sendmsg+0x8e4/0xcb0
[   83.675434][ T5991]  ? __pfx_netlink_sendmsg+0x10/0x10
[   83.675462][ T5991]  ? __pfx_netlink_sendmsg+0x10/0x10
[   83.675476][ T5991]  __sock_sendmsg+0x221/0x270
[   83.675498][ T5991]  ____sys_sendmsg+0x52a/0x7e0
[   83.675523][ T5991]  ? __pfx_____sys_sendmsg+0x10/0x10
[   83.675537][ T5991]  ? __fget_files+0x2a/0x410
[   83.675559][ T5991]  ? __fget_files+0x2a/0x410
[   83.675587][ T5991]  __sys_sendmsg+0x269/0x350
[   83.675608][ T5991]  ? __pfx___sys_sendmsg+0x10/0x10
[   83.675636][ T5991]  ? do_sys_openat2+0x17a/0x1d0
[   83.675681][ T5991]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   83.675702][ T5991]  ? do_syscall_64+0x100/0x230
[   83.675726][ T5991]  ? do_syscall_64+0xb6/0x230
[   83.675748][ T5991]  do_syscall_64+0xf3/0x230
[   83.675768][ T5991]  ? clear_bhb_loop+0x35/0x90
[   83.675792][ T5991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.675812][ T5991] RIP: 0033:0x7f598998cde9
[   83.675830][ T5991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.675843][ T5991] RSP: 002b:00007f598a7ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   83.675861][ T5991] RAX: ffffffffffffffda RBX: 00007f5989ba5fa0 RCX: 00007f598998cde9
[   83.675889][ T5991] RDX: 0000000000004800 RSI: 0000400000000000 RDI: 0000000000000003
[   83.675899][ T5991] RBP: 00007f598a7ab090 R08: 0000000000000000 R09: 0000000000000000
[   83.675908][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   83.675917][ T5991] R13: 0000000000000000 R14: 00007f5989ba5fa0 R15: 00007ffc8d788d88
[   83.675943][ T5991]  </TASK>
[   85.548325][ T6012] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure
[   85.574868][ T6012] program syz.2.33 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   85.600729][ T5875] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   85.866610][ T5875] usb 1-1: config 9 has an invalid interface number: 32 but max is 0
[   85.875195][ T5875] usb 1-1: config 9 has no interface number 0
[   85.924058][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'.
[   85.997026][ T5875] usb 1-1: config 9 interface 32 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64
[   86.055344][ T5875] usb 1-1: config 9 interface 32 has no altsetting 0
[   86.068500][ T5875] usb 1-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3
[   86.080039][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.115296][ T5875] usb 1-1: Product: syz
[   86.119597][ T5875] usb 1-1: Manufacturer: syz
[   86.125946][ T5875] usb 1-1: SerialNumber: syz
[   86.134510][    T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   86.325812][    T8] usb 5-1: too many configurations: 89, using maximum allowed: 8
[   86.436905][    T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   86.463428][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.611501][    T8] usb 5-1: Product: syz
[   86.675264][    T8] usb 5-1: Manufacturer: syz
[   86.686473][    T8] usb 5-1: SerialNumber: syz
[   86.767995][    T8] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   86.844961][ T5872] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   87.026612][ T5875] usb 1-1: USB disconnect, device number 2
[   87.516674][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.569809][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.950184][ T5876] usb 5-1: USB disconnect, device number 2
[   87.958286][ T6014] syz.4.34 (6014) used greatest stack depth: 18352 bytes left
[   88.164940][ T5872] usb 5-1: Service connection timeout for: 256
[   88.182160][ T5872] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[   88.210500][ T5872] ath9k_htc: Failed to initialize the device
[   88.222663][ T5876] usb 5-1: ath9k_htc: USB layer deinitialized
[   89.005155][ T5876] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   89.112068][ T6073] capability: warning: `syz.3.50' uses 32-bit capabilities (legacy support in use)
[   89.227484][ T5876] usb 2-1: Using ep0 maxpacket: 8
[   89.254063][ T5876] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   89.255175][ T5872] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   89.282486][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.309516][ T5876] usb 2-1: config 0 descriptor??
[   89.565333][ T5876] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   89.576872][ T5872] usb 1-1: config 0 has an invalid interface number: 58 but max is 0
[   89.591696][ T5872] usb 1-1: config 0 has no interface number 0
[   89.593101][ T6079] bridge0: port 3(syz_tun) entered blocking state
[   89.613683][ T5872] usb 1-1: too many endpoints for config 0 interface 58 altsetting 240: 90, using maximum allowed: 30
[   89.630811][ T5872] usb 1-1: config 0 interface 58 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 90
[   89.634078][ T6079] bridge0: port 3(syz_tun) entered disabled state
[   89.650098][ T5872] usb 1-1: config 0 interface 58 has no altsetting 0
[   89.660858][ T5872] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[   89.682567][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.692554][ T5872] usb 1-1: Product: syz
[   89.704480][ T5872] usb 1-1: Manufacturer: syz
[   89.709110][ T5872] usb 1-1: SerialNumber: syz
[   89.724835][ T6079] syz_tun: entered allmulticast mode
[   89.732065][ T6079] syz_tun: entered promiscuous mode
[   89.734298][ T5872] usb 1-1: config 0 descriptor??
[   89.775494][ T6079] bridge0: port 3(syz_tun) entered blocking state
[   89.782263][ T6079] bridge0: port 3(syz_tun) entered forwarding state
[   90.197044][ T5872] i2c-tiny-usb 1-1:0.58: version 6d.cc found at bus 001 address 003
[   90.226730][ T5872]  (null): failure setting delay to 10us
[   90.284973][ T5872] i2c-tiny-usb 1-1:0.58: probe with driver i2c-tiny-usb failed with error -5
[   90.344529][ T5876] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[   90.419347][ T5876] asix 2-1:0.0: probe with driver asix failed with error -61
[   90.632366][ T5872] usb 1-1: USB disconnect, device number 3
[   90.764546][ T5875] usb 2-1: USB disconnect, device number 2
[   91.034442][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'.
[   94.509753][ T6134] tmpfs: Unknown parameter ''
[   94.539107][ T6134] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   94.565703][ T6133] loop2: detected capacity change from 0 to 7
[   94.624619][ T6133] Dev loop2: unable to read RDB block 7
[   94.640723][ T6133]  loop2: unable to read partition table
[   94.655350][ T6133] loop2: partition table beyond EOD, truncated
[   94.696634][ T6133] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   94.715517][ T6140] vivid-001: disconnect
[   95.252368][ T6127] vivid-001: reconnect
[   95.405848][ T5876] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   95.588859][ T5876] usb 2-1: config 0 has an invalid interface number: 58 but max is 0
[   95.597609][ T6149] block device autoloading is deprecated and will be removed.
[   95.616752][ T5876] usb 2-1: config 0 has no interface number 0
[   95.635839][ T5876] usb 2-1: too many endpoints for config 0 interface 58 altsetting 240: 90, using maximum allowed: 30
[   95.651026][ T5876] usb 2-1: config 0 interface 58 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 90
[   95.685821][ T5876] usb 2-1: config 0 interface 58 has no altsetting 0
[   96.019449][ T5872] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   96.057795][ T5876] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[   96.153715][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.188796][ T5876] usb 2-1: Product: syz
[   96.204419][ T5876] usb 2-1: Manufacturer: syz
[   96.210140][ T5876] usb 2-1: SerialNumber: syz
[   96.263516][ T5876] usb 2-1: config 0 descriptor??
[   96.279956][ T5876] usb 2-1: can't set config #0, error -71
[   96.297993][ T5876] usb 2-1: USB disconnect, device number 3
[   96.324591][ T5872] usb 4-1: Using ep0 maxpacket: 32
[   96.336183][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.400198][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.684618][ T5872] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   96.709929][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.314619][ T6170] tipc: Started in network mode
[   97.319742][ T6170] tipc: Node identity 7, cluster identity 4711
[   97.326023][ T6170] tipc: Node number set to 7
[   97.331593][ T6170] tipc: Cannot configure node identity twice
[   97.680241][ T5872] usb 4-1: config 0 descriptor??
[   97.689604][ T5872] hub 4-1:0.0: USB hub found
[   98.470836][ T5872] hub 4-1:0.0: 3 ports detected
[   99.058604][ T6157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.127178][ T6157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.385982][ T5872] usb 4-1: USB disconnect, device number 3
[  100.458259][ T6200] FAULT_INJECTION: forcing a failure.
[  100.458259][ T6200] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  100.514436][ T6200] CPU: 1 UID: 0 PID: 6200 Comm: syz.0.86 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0
[  100.514461][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  100.514469][ T6200] Call Trace:
[  100.514475][ T6200]  <TASK>
[  100.514481][ T6200]  dump_stack_lvl+0x241/0x360
[  100.514511][ T6200]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.514533][ T6200]  ? __pfx__printk+0x10/0x10
[  100.514560][ T6200]  ? snprintf+0xda/0x120
[  100.514580][ T6200]  should_fail_ex+0x40a/0x550
[  100.514603][ T6200]  _copy_to_user+0x31/0xb0
[  100.514627][ T6200]  simple_read_from_buffer+0xca/0x150
[  100.514649][ T6200]  proc_fail_nth_read+0x1e9/0x250
[  100.514670][ T6200]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  100.514693][ T6200]  ? rw_verify_area+0x243/0x630
[  100.514715][ T6200]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  100.514734][ T6200]  vfs_read+0x1f8/0xb40
[  100.514757][ T6200]  ? fdget_pos+0x254/0x320
[  100.514778][ T6200]  ? __pfx___mutex_lock+0x10/0x10
[  100.514799][ T6200]  ? __pfx_vfs_read+0x10/0x10
[  100.514824][ T6200]  ? __fget_files+0x2a/0x410
[  100.514845][ T6200]  ? __fget_files+0x395/0x410
[  100.514863][ T6200]  ? __fget_files+0x2a/0x410
[  100.514891][ T6200]  ksys_read+0x18f/0x2b0
[  100.514909][ T6200]  ? __pfx_ksys_read+0x10/0x10
[  100.514925][ T6200]  ? do_syscall_64+0x100/0x230
[  100.514948][ T6200]  ? do_syscall_64+0xb6/0x230
[  100.514971][ T6200]  do_syscall_64+0xf3/0x230
[  100.514991][ T6200]  ? clear_bhb_loop+0x35/0x90
[  100.515015][ T6200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.515035][ T6200] RIP: 0033:0x7f598998b7fc
[  100.515050][ T6200] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  100.515063][ T6200] RSP: 002b:00007f598a7ab030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  100.515080][ T6200] RAX: ffffffffffffffda RBX: 00007f5989ba5fa0 RCX: 00007f598998b7fc
[  100.515092][ T6200] RDX: 000000000000000f RSI: 00007f598a7ab0a0 RDI: 0000000000000004
[  100.515101][ T6200] RBP: 00007f598a7ab090 R08: 0000000000000000 R09: 0000000000000000
[  100.515111][ T6200] R10: 0040030000000000 R11: 0000000000000246 R12: 0000000000000002
[  100.515121][ T6200] R13: 0000000000000000 R14: 00007f5989ba5fa0 R15: 00007ffc8d788d88
[  100.515147][ T6200]  </TASK>
[  100.944573][ T5876] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  101.294642][ T5876] usb 5-1: device descriptor read/64, error -71
[  101.302739][ T6216] FAULT_INJECTION: forcing a failure.
[  101.302739][ T6216] name failslab, interval 1, probability 0, space 0, times 0
[  101.321759][ T6217] vivid-000: disconnect
[  101.333385][ T6216] CPU: 0 UID: 0 PID: 6216 Comm: syz.0.90 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0
[  101.333402][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  101.333408][ T6216] Call Trace:
[  101.333412][ T6216]  <TASK>
[  101.333416][ T6216]  dump_stack_lvl+0x241/0x360
[  101.333439][ T6216]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.333454][ T6216]  ? __pfx__printk+0x10/0x10
[  101.333468][ T6216]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  101.333481][ T6216]  ? __pfx___might_resched+0x10/0x10
[  101.333491][ T6216]  ? tcp_established_options+0x3c1/0x800
[  101.333508][ T6216]  should_fail_ex+0x40a/0x550
[  101.333521][ T6216]  should_failslab+0xac/0x100
[  101.333533][ T6216]  kmem_cache_alloc_node_noprof+0x77/0x380
[  101.333545][ T6216]  ? __alloc_skb+0x1c3/0x440
[  101.333557][ T6216]  ? tcp_current_mss+0x29b/0x4d0
[  101.333571][ T6216]  __alloc_skb+0x1c3/0x440
[  101.333587][ T6216]  ? __pfx___alloc_skb+0x10/0x10
[  101.333604][ T6216]  tcp_stream_alloc_skb+0x3d/0x310
[  101.333617][ T6216]  tcp_sendmsg_locked+0xedb/0x5330
[  101.333627][ T6216]  ? mark_lock+0x9a/0x360
[  101.333642][ T6216]  ? __lock_acquire+0x1397/0x2100
[  101.333662][ T6216]  ? mark_lock+0x9a/0x360
[  101.333678][ T6216]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  101.333692][ T6216]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  101.333705][ T6216]  ? tcp_sendmsg+0x22/0x50
[  101.333715][ T6216]  ? do_raw_spin_unlock+0x13c/0x8b0
[  101.333729][ T6216]  tcp_sendmsg+0x30/0x50
[  101.333740][ T6216]  __sock_sendmsg+0x1a6/0x270
[  101.333753][ T6216]  __sys_sendto+0x363/0x4c0
[  101.333769][ T6216]  ? __pfx___sys_sendto+0x10/0x10
[  101.333788][ T6216]  ? __fget_files+0x2a/0x410
[  101.333804][ T6216]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  101.333817][ T6216]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  101.333831][ T6216]  __x64_sys_sendto+0xde/0x100
[  101.333846][ T6216]  do_syscall_64+0xf3/0x230
[  101.333859][ T6216]  ? clear_bhb_loop+0x35/0x90
[  101.333872][ T6216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.333884][ T6216] RIP: 0033:0x7f598998cde9
[  101.333893][ T6216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.333900][ T6216] RSP: 002b:00007f598a7ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  101.333911][ T6216] RAX: ffffffffffffffda RBX: 00007f5989ba5fa0 RCX: 00007f598998cde9
[  101.333917][ T6216] RDX: 00000000000020c8 RSI: 00004000000012c0 RDI: 0000000000000006
[  101.333923][ T6216] RBP: 00007f598a7ab090 R08: 0000000000000000 R09: 0000000000000027
[  101.333929][ T6216] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[  101.333934][ T6216] R13: 0000000000000000 R14: 00007f5989ba5fa0 R15: 00007ffc8d788d88
[  101.333948][ T6216]  </TASK>
[  101.603205][ T5873] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  101.654770][ T6207] vivid-000: reconnect
[  101.666978][ T6220] vivid-001: disconnect
[  101.724456][ T5876] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  101.931482][ T5873] usb 4-1: config 0 has an invalid interface number: 58 but max is 0
[  101.939757][ T5873] usb 4-1: config 0 has no interface number 0
[  101.955154][ T5873] usb 4-1: too many endpoints for config 0 interface 58 altsetting 240: 90, using maximum allowed: 30
[  101.975153][ T5873] usb 4-1: config 0 interface 58 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 90
[  101.994676][ T5876] usb 5-1: device descriptor read/64, error -71
[  102.054793][ T6224] tipc: Started in network mode
[  102.059777][ T6224] tipc: Node identity 7, cluster identity 4711
[  102.066761][ T6224] tipc: Node number set to 7
[  102.073589][ T6224] tipc: Cannot configure node identity twice
[  102.192998][ T6215] vivid-001: reconnect
[  102.706824][ T5873] usb 4-1: config 0 interface 58 has no altsetting 0
[  102.748762][ T5873] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  102.762134][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.801190][ T5873] usb 4-1: Product: syz
[  102.817532][ T5873] usb 4-1: Manufacturer: syz
[  102.822190][ T5873] usb 4-1: SerialNumber: syz
[  102.865687][ T5876] usb usb5-port1: attempt power cycle
[  102.866575][ T5873] usb 4-1: config 0 descriptor??
[  102.908883][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'.
[  103.268654][ T6230] warning: `syz.2.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  103.818835][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'.
[  103.831979][ T5873] i2c-tiny-usb 4-1:0.58: version 6d.cc found at bus 004 address 004
[  103.962320][ T5873]  (null): failure setting delay to 10us
[  104.204457][ T5873] i2c-tiny-usb 4-1:0.58: probe with driver i2c-tiny-usb failed with error -5
[  104.308109][ T5873] usb 4-1: USB disconnect, device number 4
[  104.589827][   T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.866088][   T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.308489][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  106.318351][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  106.327567][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  106.328388][   T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.403112][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  106.441587][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  106.524959][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  107.921762][   T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.364603][   T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  108.595387][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'.
[  108.736845][ T5832] Bluetooth: hci1: command tx timeout
[  109.541132][   T25] usb 3-1: device descriptor read/64, error -71
[  109.838619][ T6290] netlink: 'syz.0.111': attribute type 4 has an invalid length.
[  109.906204][ T6293] netlink: 'syz.1.109': attribute type 10 has an invalid length.
[  110.062233][ T6293] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.091316][ T6293] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.346928][ T6293] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.354156][ T6293] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.362472][ T6293] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.369655][ T6293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.384597][ T6293] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  110.393367][   T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  110.409948][   T51] 
[  110.412468][   T51] =============================
[  110.417522][   T51] WARNING: suspicious RCU usage
[  110.422382][   T51] 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 Not tainted
[  110.429627][   T51] -----------------------------
[  110.434531][   T51] net/sched/sch_generic.c:1251 suspicious rcu_dereference_protected() usage!
[  110.443305][   T51] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  110.443305][   T51] other info that might help us debug this:
[  110.443305][   T51] 
[  110.453604][   T51] 
[  110.453604][   T51] rcu_scheduler_active = 2, debug_locks = 1
[  110.462385][   T51] 3 locks held by kworker/u8:3/51:
[  110.468172][   T51]  #0: ffff888144b72148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  110.479387][   T51]  #1: ffffc90000bb7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  110.492462][   T51]  #2: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170
[  110.502223][   T51] 
[  110.502223][   T51] stack backtrace:
[  110.508197][   T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0
[  110.508217][   T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  110.508228][   T51] Workqueue: bond0 bond_mii_monitor
[  110.508262][   T51] Call Trace:
[  110.508269][   T51]  <TASK>
[  110.508276][   T51]  dump_stack_lvl+0x241/0x360
[  110.508305][   T51]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.508328][   T51]  ? __pfx__printk+0x10/0x10
[  110.508364][   T51]  lockdep_rcu_suspicious+0x226/0x340
[  110.508390][   T51]  dev_activate+0xf8/0x1240
[  110.508409][   T51]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  110.508427][   T51]  ? lockdep_hardirqs_on+0x99/0x150
[  110.508448][   T51]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  110.508467][   T51]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  110.508486][   T51]  ? __pfx_dev_activate+0x10/0x10
[  110.508500][   T51]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  110.508518][   T51]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  110.508540][   T51]  ? rfc2863_policy+0x10e/0x3f0
[  110.508564][   T51]  linkwatch_do_dev+0xfb/0x170
[  110.508588][   T51]  ethtool_op_get_link+0x15/0x60
[  110.508604][   T51]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  110.508619][   T51]  bond_check_dev_link+0x1f1/0x3f0
[  110.508645][   T51]  ? __pfx_bond_check_dev_link+0x10/0x10
[  110.508683][   T51]  bond_mii_monitor+0x49a/0x3170
[  110.508715][   T51]  ? __lock_acquire+0x1397/0x2100
[  110.508734][   T51]  ? bond_mii_monitor+0x174/0x3170
[  110.508759][   T51]  ? do_raw_spin_unlock+0x13c/0x8b0
[  110.508782][   T51]  ? __pfx_bond_mii_monitor+0x10/0x10
[  110.508816][   T51]  ? __pfx_lock_acquire+0x10/0x10
[  110.508836][   T51]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  110.508858][   T51]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  110.508888][   T51]  ? process_scheduled_works+0x976/0x1840
[  110.508906][   T51]  process_scheduled_works+0xa66/0x1840
[  110.508952][   T51]  ? __pfx_process_scheduled_works+0x10/0x10
[  110.508979][   T51]  ? assign_work+0x364/0x3d0
[  110.509001][   T51]  worker_thread+0x870/0xd30
[  110.509034][   T51]  ? __kthread_parkme+0x169/0x1d0
[  110.509055][   T51]  ? __pfx_worker_thread+0x10/0x10
[  110.509073][   T51]  kthread+0x7a9/0x920
[  110.509090][   T51]  ? __pfx_kthread+0x10/0x10
[  110.509111][   T51]  ? __pfx_worker_thread+0x10/0x10
[  110.509129][   T51]  ? __pfx_kthread+0x10/0x10
[  110.509146][   T51]  ? __pfx_kthread+0x10/0x10
[  110.509170][   T51]  ? __pfx_kthread+0x10/0x10
[  110.509187][   T51]  ? _raw_spin_unlock_irq+0x23/0x50
[  110.509204][   T51]  ? lockdep_hardirqs_on+0x99/0x150
[  110.509222][   T51]  ? __pfx_kthread+0x10/0x10
[  110.509243][   T51]  ret_from_fork+0x4b/0x80
[  110.509267][   T51]  ? __pfx_kthread+0x10/0x10
[  110.509287][   T51]  ret_from_fork_asm+0x1a/0x30
[  110.509319][   T51]  </TASK>
[  110.920399][ T5832] Bluetooth: hci1: command tx timeout
[  110.984413][   T51] 
[  110.986787][   T51] =============================
[  110.991641][   T51] WARNING: suspicious RCU usage
[  110.996561][   T51] 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 Not tainted
[  111.003678][   T51] -----------------------------
[  111.008835][   T51] net/sched/sch_generic.c:1229 suspicious rcu_dereference_protected() usage!
[  111.017644][   T51] 
[  111.017644][   T51] other info that might help us debug this:
[  111.017644][   T51] 
[  111.028110][   T51] 
[  111.028110][   T51] rcu_scheduler_active = 2, debug_locks = 1
[  111.036288][   T51] 3 locks held by kworker/u8:3/51:
[  111.041413][   T51]  #0: ffff888144b72148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  111.052715][   T51]  #1: ffffc90000bb7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  111.065751][   T51]  #2: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170
[  111.074422][   T25] usb 3-1: Using ep0 maxpacket: 16
[  111.075781][   T51] 
[  111.075781][   T51] stack backtrace:
[  111.086799][   T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0
[  111.086820][   T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  111.086831][   T51] Workqueue: bond0 bond_mii_monitor
[  111.086860][   T51] Call Trace:
[  111.086866][   T51]  <TASK>
[  111.086873][   T51]  dump_stack_lvl+0x241/0x360
[  111.086903][   T51]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.086926][   T51]  ? __pfx__printk+0x10/0x10
[  111.086963][   T51]  lockdep_rcu_suspicious+0x226/0x340
[  111.086989][   T51]  transition_one_qdisc+0x8e/0x1c0
[  111.087009][   T51]  dev_activate+0x838/0x1240
[  111.087034][   T51]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  111.087055][   T51]  ? __pfx_dev_activate+0x10/0x10
[  111.087069][   T51]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  111.087087][   T51]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  111.087109][   T51]  ? rfc2863_policy+0x10e/0x3f0
[  111.087135][   T51]  linkwatch_do_dev+0xfb/0x170
[  111.087156][   T51]  ethtool_op_get_link+0x15/0x60
[  111.087173][   T51]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  111.087188][   T51]  bond_check_dev_link+0x1f1/0x3f0
[  111.087213][   T51]  ? __pfx_bond_check_dev_link+0x10/0x10
[  111.087252][   T51]  bond_mii_monitor+0x49a/0x3170
[  111.087283][   T51]  ? __lock_acquire+0x1397/0x2100
[  111.087302][   T51]  ? bond_mii_monitor+0x174/0x3170
[  111.087328][   T51]  ? do_raw_spin_unlock+0x13c/0x8b0
[  111.087351][   T51]  ? __pfx_bond_mii_monitor+0x10/0x10
[  111.087387][   T51]  ? __pfx_lock_acquire+0x10/0x10
[  111.087415][   T51]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  111.087437][   T51]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  111.087467][   T51]  ? process_scheduled_works+0x976/0x1840
[  111.087486][   T51]  process_scheduled_works+0xa66/0x1840
[  111.087532][   T51]  ? __pfx_process_scheduled_works+0x10/0x10
[  111.087558][   T51]  ? assign_work+0x364/0x3d0
[  111.087581][   T51]  worker_thread+0x870/0xd30
[  111.087612][   T51]  ? __kthread_parkme+0x169/0x1d0
[  111.087633][   T51]  ? __pfx_worker_thread+0x10/0x10
[  111.087650][   T51]  kthread+0x7a9/0x920
[  111.087668][   T51]  ? __pfx_kthread+0x10/0x10
[  111.087689][   T51]  ? __pfx_worker_thread+0x10/0x10
[  111.087706][   T51]  ? __pfx_kthread+0x10/0x10
[  111.087724][   T51]  ? __pfx_kthread+0x10/0x10
[  111.087747][   T51]  ? __pfx_kthread+0x10/0x10
[  111.087764][   T51]  ? _raw_spin_unlock_irq+0x23/0x50
[  111.087781][   T51]  ? lockdep_hardirqs_on+0x99/0x150
[  111.087799][   T51]  ? __pfx_kthread+0x10/0x10
[  111.087819][   T51]  ret_from_fork+0x4b/0x80
[  111.087837][   T51]  ? __pfx_kthread+0x10/0x10
[  111.087857][   T51]  ret_from_fork_asm+0x1a/0x30
[  111.087889][   T51]  </TASK>
[  111.101237][   T51] 
[  111.150426][   T62] bridge_slave_1: left allmulticast mode
[  111.151874][   T51] =============================
[  111.162033][   T62] bridge_slave_1: left promiscuous mode
[  111.162947][   T51] WARNING: suspicious RCU usage
[  111.169471][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.174581][   T51] 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 Not tainted
[  111.394778][   T51] -----------------------------
[  111.399701][   T51] ./include/linux/rtnetlink.h:162 suspicious rcu_dereference_protected() usage!
[  111.408947][   T51] 
[  111.408947][   T51] other info that might help us debug this:
[  111.408947][   T51] 
[  111.419258][   T51] 
[  111.419258][   T51] rcu_scheduler_active = 2, debug_locks = 1
[  111.427425][   T51] 3 locks held by kworker/u8:3/51:
[  111.432589][   T51]  #0: ffff888144b72148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  111.444001][   T51]  #1: ffffc90000bb7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  111.457033][   T51]  #2: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170
[  111.466959][   T51] 
[  111.466959][   T51] stack backtrace:
[  111.472898][   T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0
[  111.472918][   T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  111.472928][   T51] Workqueue: bond0 bond_mii_monitor
[  111.472957][   T51] Call Trace:
[  111.472963][   T51]  <TASK>
[  111.472970][   T51]  dump_stack_lvl+0x241/0x360
[  111.473005][   T51]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.473029][   T51]  ? __pfx__printk+0x10/0x10
[  111.473082][   T51]  lockdep_rcu_suspicious+0x226/0x340
[  111.473115][   T51]  dev_activate+0x925/0x1240
[  111.473141][   T51]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  111.473162][   T51]  ? __pfx_dev_activate+0x10/0x10
[  111.473176][   T51]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  111.473194][   T51]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  111.473216][   T51]  ? rfc2863_policy+0x10e/0x3f0
[  111.473241][   T51]  linkwatch_do_dev+0xfb/0x170
[  111.473264][   T51]  ethtool_op_get_link+0x15/0x60
[  111.473280][   T51]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  111.473295][   T51]  bond_check_dev_link+0x1f1/0x3f0
[  111.473320][   T51]  ? __pfx_bond_check_dev_link+0x10/0x10
[  111.473359][   T51]  bond_mii_monitor+0x49a/0x3170
[  111.473390][   T51]  ? __lock_acquire+0x1397/0x2100
[  111.473409][   T51]  ? bond_mii_monitor+0x174/0x3170
[  111.473434][   T51]  ? do_raw_spin_unlock+0x13c/0x8b0
[  111.473456][   T51]  ? __pfx_bond_mii_monitor+0x10/0x10
[  111.473492][   T51]  ? __pfx_lock_acquire+0x10/0x10
[  111.473512][   T51]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  111.473534][   T51]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  111.473564][   T51]  ? process_scheduled_works+0x976/0x1840
[  111.473582][   T51]  process_scheduled_works+0xa66/0x1840
[  111.473622][   T51]  ? __pfx_process_scheduled_works+0x10/0x10
[  111.473647][   T51]  ? assign_work+0x364/0x3d0
[  111.473667][   T51]  worker_thread+0x870/0xd30
[  111.473696][   T51]  ? __kthread_parkme+0x169/0x1d0
[  111.473716][   T51]  ? __pfx_worker_thread+0x10/0x10
[  111.473734][   T51]  kthread+0x7a9/0x920
[  111.473751][   T51]  ? __pfx_kthread+0x10/0x10
[  111.473771][   T51]  ? __pfx_worker_thread+0x10/0x10
[  111.473787][   T51]  ? __pfx_kthread+0x10/0x10
[  111.473803][   T51]  ? __pfx_kthread+0x10/0x10
[  111.473825][   T51]  ? __pfx_kthread+0x10/0x10
[  111.473841][   T51]  ? _raw_spin_unlock_irq+0x23/0x50
[  111.473858][   T51]  ? lockdep_hardirqs_on+0x99/0x150
[  111.473876][   T51]  ? __pfx_kthread+0x10/0x10
[  111.473896][   T51]  ret_from_fork+0x4b/0x80
[  111.473913][   T51]  ? __pfx_kthread+0x10/0x10
[  111.473932][   T51]  ret_from_fork_asm+0x1a/0x30
[  111.473963][   T51]  </TASK>
[  111.733696][   T51] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523
[  111.743337][   T51] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 51, name: kworker/u8:3
[  111.752565][   T51] preempt_count: 0, expected: 0
[  111.760426][   T51] RCU nest depth: 1, expected: 0
[  111.765908][   T51] 3 locks held by kworker/u8:3/51:
[  111.771068][   T51]  #0: ffff888144b72148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  111.782643][   T51]  #1: ffffc90000bb7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  111.797194][   T51]  #2: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170
[  111.807357][   T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0
[  111.807379][   T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  111.807389][   T51] Workqueue: bond0 bond_mii_monitor
[  111.807421][   T51] Call Trace:
[  111.807426][   T51]  <TASK>
[  111.807433][   T51]  dump_stack_lvl+0x241/0x360
[  111.807461][   T51]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.807485][   T51]  ? __pfx__printk+0x10/0x10
[  111.807518][   T51]  __might_resched+0x5d4/0x780
[  111.807539][   T51]  ? preempt_schedule_notrace+0xf6/0x140
[  111.807560][   T51]  ? __pfx___might_resched+0x10/0x10
[  111.807578][   T51]  ? __pfx___schedule+0x10/0x10
[  111.807598][   T51]  ? lockdep_hardirqs_on+0x99/0x150
[  111.807623][   T51]  down_read+0x8e/0xa40
[  111.807643][   T51]  ? dump_stack_lvl+0x2f9/0x360
[  111.807671][   T51]  ? preempt_schedule_notrace+0x100/0x140
[  111.807690][   T51]  ? __pfx_down_read+0x10/0x10
[  111.807711][   T51]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.807733][   T51]  ? __pfx__printk+0x10/0x10
[  111.807758][   T51]  ? dev_get_flags+0x147/0x1d0
[  111.807786][   T51]  wext_netdev_notifier_call+0x1f/0x120
[  111.807810][   T51]  notifier_call_chain+0x1a5/0x3f0
[  111.807836][   T51]  netdev_state_change+0x11f/0x1a0
[  111.807856][   T51]  ? __pfx_netdev_state_change+0x10/0x10
[  111.807873][   T51]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  111.807900][   T51]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  111.807921][   T51]  ? rfc2863_policy+0x10e/0x3f0
[  111.807943][   T51]  linkwatch_do_dev+0x112/0x170
[  111.807966][   T51]  ethtool_op_get_link+0x15/0x60
[  111.807983][   T51]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  111.807998][   T51]  bond_check_dev_link+0x1f1/0x3f0
[  111.808023][   T51]  ? __pfx_bond_check_dev_link+0x10/0x10
[  111.808071][   T51]  bond_mii_monitor+0x49a/0x3170
[  111.808104][   T51]  ? __lock_acquire+0x1397/0x2100
[  111.808123][   T51]  ? bond_mii_monitor+0x174/0x3170
[  111.808153][   T51]  ? do_raw_spin_unlock+0x13c/0x8b0
[  111.808174][   T51]  ? __pfx_bond_mii_monitor+0x10/0x10
[  111.808210][   T51]  ? __pfx_lock_acquire+0x10/0x10
[  111.808230][   T51]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  111.808253][   T51]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  111.808284][   T51]  ? process_scheduled_works+0x976/0x1840
[  111.808302][   T51]  process_scheduled_works+0xa66/0x1840
[  111.808345][   T51]  ? __pfx_process_scheduled_works+0x10/0x10
[  111.808370][   T51]  ? assign_work+0x364/0x3d0
[  111.808392][   T51]  worker_thread+0x870/0xd30
[  111.808422][   T51]  ? __kthread_parkme+0x169/0x1d0
[  111.808443][   T51]  ? __pfx_worker_thread+0x10/0x10
[  111.808460][   T51]  kthread+0x7a9/0x920
[  111.808476][   T51]  ? __pfx_kthread+0x10/0x10
[  111.808496][   T51]  ? __pfx_worker_thread+0x10/0x10
[  111.808513][   T51]  ? __pfx_kthread+0x10/0x10
[  111.808530][   T51]  ? __pfx_kthread+0x10/0x10
[  111.808554][   T51]  ? __pfx_kthread+0x10/0x10
[  111.808579][   T51]  ? _raw_spin_unlock_irq+0x23/0x50
[  111.808596][   T51]  ? lockdep_hardirqs_on+0x99/0x150
[  111.808614][   T51]  ? __pfx_kthread+0x10/0x10
[  111.808635][   T51]  ret_from_fork+0x4b/0x80
[  111.808652][   T51]  ? __pfx_kthread+0x10/0x10
[  111.808671][   T51]  ret_from_fork_asm+0x1a/0x30
[  111.808701][   T51]  </TASK>
[  111.808736][   T51] 
[  112.119442][   T51] =============================
[  112.124272][   T51] [ BUG: Invalid wait context ]
[  112.129099][   T51] 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 Tainted: G        W         
[  112.137662][   T51] -----------------------------
[  112.142499][   T51] kworker/u8:3/51 is trying to lock:
[  112.147764][   T51] ffffffff8fca2290 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120
[  112.157237][   T51] other info that might help us debug this:
[  112.163104][   T51] context-{5:5}
[  112.166560][   T51] 3 locks held by kworker/u8:3/51:
[  112.171649][   T51]  #0: ffff888144b72148 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  112.182785][   T51]  #1: ffffc90000bb7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  112.195644][   T51]  #2: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170
[  112.205299][   T51] stack backtrace:
[  112.209007][   T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:3 Tainted: G        W          6.14.0-rc1-syzkaller-00276-g69b54314c975 #0
[  112.209025][   T51] Tainted: [W]=WARN
[  112.209029][   T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  112.209038][   T51] Workqueue: bond0 bond_mii_monitor
[  112.209059][   T51] Call Trace:
[  112.209065][   T51]  <TASK>
[  112.209071][   T51]  dump_stack_lvl+0x241/0x360
[  112.209092][   T51]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.209109][   T51]  ? __pfx__printk+0x10/0x10
[  112.209130][   T51]  __lock_acquire+0x15a8/0x2100
[  112.209150][   T51]  lock_acquire+0x1ed/0x550
[  112.209164][   T51]  ? wext_netdev_notifier_call+0x1f/0x120
[  112.209182][   T51]  ? __pfx_lock_acquire+0x10/0x10
[  112.209196][   T51]  ? preempt_schedule_notrace+0xf6/0x140
[  112.209211][   T51]  ? __pfx___might_resched+0x10/0x10
[  112.209224][   T51]  ? __pfx___schedule+0x10/0x10
[  112.209237][   T51]  ? lockdep_hardirqs_on+0x99/0x150
[  112.209255][   T51]  down_read+0xb1/0xa40
[  112.209271][   T51]  ? wext_netdev_notifier_call+0x1f/0x120
[  112.209285][   T51]  ? dump_stack_lvl+0x2f9/0x360
[  112.209303][   T51]  ? preempt_schedule_notrace+0x100/0x140
[  112.209317][   T51]  ? __pfx_down_read+0x10/0x10
[  112.209333][   T51]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.209350][   T51]  ? __pfx__printk+0x10/0x10
[  112.209367][   T51]  ? dev_get_flags+0x147/0x1d0
[  112.209385][   T51]  wext_netdev_notifier_call+0x1f/0x120
[  112.209401][   T51]  notifier_call_chain+0x1a5/0x3f0
[  112.209416][   T51]  netdev_state_change+0x11f/0x1a0
[  112.209432][   T51]  ? __pfx_netdev_state_change+0x10/0x10
[  112.209446][   T51]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  112.209460][   T51]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  112.209475][   T51]  ? rfc2863_policy+0x10e/0x3f0
[  112.209492][   T51]  linkwatch_do_dev+0x112/0x170
[  112.209509][   T51]  ethtool_op_get_link+0x15/0x60
[  112.209522][   T51]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  112.209535][   T51]  bond_check_dev_link+0x1f1/0x3f0
[  112.209553][   T51]  ? __pfx_bond_check_dev_link+0x10/0x10
[  112.209574][   T51]  bond_mii_monitor+0x49a/0x3170
[  112.209595][   T51]  ? __lock_acquire+0x1397/0x2100
[  112.209616][   T51]  ? bond_mii_monitor+0x174/0x3170
[  112.209633][   T51]  ? do_raw_spin_unlock+0x13c/0x8b0
[  112.209648][   T51]  ? __pfx_bond_mii_monitor+0x10/0x10
[  112.209669][   T51]  ? __pfx_lock_acquire+0x10/0x10
[  112.209683][   T51]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  112.209699][   T51]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  112.209716][   T51]  ? process_scheduled_works+0x976/0x1840
[  112.209729][   T51]  process_scheduled_works+0xa66/0x1840
[  112.209750][   T51]  ? __pfx_process_scheduled_works+0x10/0x10
[  112.209765][   T51]  ? assign_work+0x364/0x3d0
[  112.209778][   T51]  worker_thread+0x870/0xd30
[  112.209795][   T51]  ? __kthread_parkme+0x169/0x1d0
[  112.209809][   T51]  ? __pfx_worker_thread+0x10/0x10
[  112.209822][   T51]  kthread+0x7a9/0x920
[  112.209836][   T51]  ? __pfx_kthread+0x10/0x10
[  112.209850][   T51]  ? __pfx_worker_thread+0x10/0x10
[  112.209863][   T51]  ? __pfx_kthread+0x10/0x10
[  112.209876][   T51]  ? __pfx_kthread+0x10/0x10
[  112.209892][   T51]  ? __pfx_kthread+0x10/0x10
[  112.209905][   T51]  ? _raw_spin_unlock_irq+0x23/0x50
[  112.209918][   T51]  ? lockdep_hardirqs_on+0x99/0x150
[  112.209931][   T51]  ? __pfx_kthread+0x10/0x10
[  112.209946][   T51]  ret_from_fork+0x4b/0x80
[  112.209960][   T51]  ? __pfx_kthread+0x10/0x10
[  112.209974][   T51]  ret_from_fork_asm+0x1a/0x30
[  112.209991][   T51]  </TASK>
[  112.776370][   T62] bridge_slave_0: left allmulticast mode
[  112.782043][   T62] bridge_slave_0: left promiscuous mode
[  112.835181][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.030809][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.040963][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.051602][   T62] bond0 (unregistering): Released all slaves
[  113.090774][ T6291] bridge0: port 3(syz_tun) entered disabled state
[  113.107657][ T6291] syz_tun (unregistering): left allmulticast mode
[  113.114103][ T6291] syz_tun (unregistering): left promiscuous mode
[  113.121648][ T6291] bridge0: port 3(syz_tun) entered disabled state
[  113.246544][   T25] usb 3-1: device descriptor read/all, error -71
[  113.253668][   T25] usb usb3-port1: attempt power cycle
[  113.373454][   T62] hsr_slave_0: left promiscuous mode
[  113.380210][   T62] hsr_slave_1: left promiscuous mode
[  113.386243][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.393646][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.401528][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.408969][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.419071][   T62] veth1_macvtap: left promiscuous mode
[  113.424621][   T62] veth0_macvtap: left promiscuous mode
[  113.430754][   T62] veth1_vlan: left promiscuous mode
[  113.436250][   T62] veth0_vlan: left promiscuous mode
[  113.548376][   T62] team0 (unregistering): Port device team_slave_1 removed
[  113.558849][   T62] team0 (unregistering): Port device team_slave_0 removed
[  113.904129][   T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.950633][   T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.012168][   T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.053152][   T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.139086][   T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.211775][   T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.260881][   T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.341570][   T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.441900][   T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.496218][   T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.551241][   T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.611178][   T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.680325][   T62] bridge_slave_1: left allmulticast mode
[  114.688874][   T62] bridge_slave_1: left promiscuous mode
[  114.695258][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.703219][   T62] bridge_slave_0: left allmulticast mode
[  114.709107][   T62] bridge_slave_0: left promiscuous mode
[  114.714867][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.723132][   T62] bridge_slave_1: left allmulticast mode
[  114.729203][   T62] bridge_slave_1: left promiscuous mode
[  114.734863][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.742610][   T62] bridge_slave_0: left allmulticast mode
[  114.748656][   T62] bridge_slave_0: left promiscuous mode
[  114.755179][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.763994][   T62] bridge_slave_1: left allmulticast mode
[  114.769711][   T62] bridge_slave_1: left promiscuous mode
[  114.769719][ T1161] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523
[  114.769732][ T1161] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 1161, name: kworker/u8:7
[  114.775976][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.786403][ T1161] preempt_count: 0, expected: 0
[  114.806266][ T1161] RCU nest depth: 1, expected: 0
[  114.811230][ T1161] INFO: lockdep is turned off.
[  114.816036][ T1161] CPU: 0 UID: 0 PID: 1161 Comm: kworker/u8:7 Tainted: G        W          6.14.0-rc1-syzkaller-00276-g69b54314c975 #0
[  114.816059][ T1161] Tainted: [W]=WARN
[  114.816065][ T1161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  114.816076][ T1161] Workqueue: bond0 bond_mii_monitor
[  114.816104][ T1161] Call Trace:
[  114.816109][ T1161]  <TASK>
[  114.816114][ T1161]  dump_stack_lvl+0x241/0x360
[  114.816136][ T1161]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.816154][ T1161]  ? __pfx__printk+0x10/0x10
[  114.816174][ T1161]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  114.816194][ T1161]  __might_resched+0x5d4/0x780
[  114.816210][ T1161]  ? __pfx___might_resched+0x10/0x10
[  114.816225][ T1161]  ? dev_deactivate_many+0xa91/0xc90
[  114.816238][ T1161]  ? rcu_is_watching+0x15/0xb0
[  114.816258][ T1161]  ? dev_deactivate_many+0xa91/0xc90
[  114.816270][ T1161]  ? lock_release+0xbf/0xa30
[  114.816284][ T1161]  down_read+0x8e/0xa40
[  114.816302][ T1161]  ? rcu_is_watching+0x15/0xb0
[  114.816320][ T1161]  ? __local_bh_enable_ip+0x168/0x200
[  114.816340][ T1161]  ? __pfx_down_read+0x10/0x10
[  114.816355][ T1161]  ? dev_deactivate_many+0xa91/0xc90
[  114.816368][ T1161]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  114.816388][ T1161]  ? dev_deactivate_many+0x968/0xc90
[  114.816403][ T1161]  ? dev_get_flags+0x147/0x1d0
[  114.816423][ T1161]  wext_netdev_notifier_call+0x1f/0x120
[  114.816443][ T1161]  notifier_call_chain+0x1a5/0x3f0
[  114.816463][ T1161]  netdev_state_change+0x11f/0x1a0
[  114.816480][ T1161]  ? __pfx_netdev_state_change+0x10/0x10
[  114.816498][ T1161]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  114.816515][ T1161]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.816533][ T1161]  ? rfc2863_policy+0x1ce/0x3f0
[  114.816554][ T1161]  linkwatch_do_dev+0x112/0x170
[  114.816575][ T1161]  ethtool_op_get_link+0x15/0x60
[  114.816590][ T1161]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  114.816605][ T1161]  bond_check_dev_link+0x1f1/0x3f0
[  114.816628][ T1161]  ? __pfx_bond_check_dev_link+0x10/0x10
[  114.816652][ T1161]  ? rcu_read_lock_held+0xa/0x50
[  114.816675][ T1161]  bond_mii_monitor+0x49a/0x3170
[  114.816700][ T1161]  ? bond_mii_monitor+0x174/0x3170
[  114.816721][ T1161]  ? do_raw_spin_unlock+0x13c/0x8b0
[  114.816736][ T1161]  ? rcu_is_watching+0x15/0xb0
[  114.816757][ T1161]  ? __pfx_bond_mii_monitor+0x10/0x10
[  114.816780][ T1161]  ? rcu_is_watching+0x15/0xb0
[  114.816801][ T1161]  ? lock_acquire+0xe3/0x550
[  114.816820][ T1161]  ? __pfx_lock_acquire+0x10/0x10
[  114.816837][ T1161]  ? debug_object_deactivate+0x2d5/0x390
[  114.816855][ T1161]  ? __pfx_lock_release+0x10/0x10
[  114.816874][ T1161]  ? __pfx_debug_object_deactivate+0x10/0x10
[  114.816891][ T1161]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  114.816911][ T1161]  ? rcu_is_watching+0x15/0xb0
[  114.816932][ T1161]  ? process_scheduled_works+0x976/0x1840
[  114.816948][ T1161]  process_scheduled_works+0xa66/0x1840
[  114.816980][ T1161]  ? __pfx_process_scheduled_works+0x10/0x10
[  114.816998][ T1161]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  114.817015][ T1161]  ? assign_work+0x364/0x3d0
[  114.817032][ T1161]  worker_thread+0x870/0xd30
[  114.817051][ T1161]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  114.817070][ T1161]  ? __kthread_parkme+0x169/0x1d0
[  114.817088][ T1161]  ? __pfx_worker_thread+0x10/0x10
[  114.817104][ T1161]  kthread+0x7a9/0x920
[  114.817121][ T1161]  ? __pfx_kthread+0x10/0x10
[  114.817139][ T1161]  ? __pfx_worker_thread+0x10/0x10
[  114.817155][ T1161]  ? __pfx_kthread+0x10/0x10
[  114.817172][ T1161]  ? __pfx_kthread+0x10/0x10
[  114.817191][ T1161]  ? __pfx_kthread+0x10/0x10
[  114.817207][ T1161]  ? _raw_spin_unlock_irq+0x23/0x50
[  114.817223][ T1161]  ? lockdep_hardirqs_on+0x99/0x150
[  114.817241][ T1161]  ? __pfx_kthread+0x10/0x10
[  114.817259][ T1161]  ret_from_fork+0x4b/0x80
[  114.817276][ T1161]  ? __pfx_kthread+0x10/0x10
[  114.817293][ T1161]  ret_from_fork_asm+0x1a/0x30
[  114.817313][ T1161]  </TASK>
[  114.819342][   T62] bridge_slave_0: left allmulticast mode
[  115.199705][   T62] bridge_slave_0: left promiscuous mode
[  115.205892][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.383965][   T62] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  115.481586][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.491196][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.501277][   T62] bond0 (unregistering): Released all slaves
[  115.512255][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.522000][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.531857][   T62] bond0 (unregistering): Released all slaves
[  115.544160][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.553839][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.563475][   T62] bond0 (unregistering): Released all slaves
[  115.627370][   T62] tipc: Left network mode
[  115.636296][   T62] tipc: Left network mode
[  115.985167][   T62] hsr_slave_0: left promiscuous mode
[  115.990874][   T62] hsr_slave_1: left promiscuous mode
[  115.996619][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.004021][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.011683][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.019107][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.028303][   T62] hsr_slave_0: left promiscuous mode
[  116.033877][   T62] hsr_slave_1: left promiscuous mode
[  116.039645][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.048037][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.055627][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.063015][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.072253][   T62] hsr_slave_0: left promiscuous mode
[  116.077949][   T62] hsr_slave_1: left promiscuous mode
[  116.083487][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.090960][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.098642][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.106085][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.116763][   T62] veth1_macvtap: left promiscuous mode
[  116.122237][   T62] veth0_macvtap: left promiscuous mode
[  116.127813][   T62] veth1_vlan: left promiscuous mode
[  116.133046][   T62] veth0_vlan: left promiscuous mode
[  116.138948][   T62] veth1_macvtap: left promiscuous mode
[  116.144485][   T62] veth0_macvtap: left promiscuous mode
[  116.149981][   T62] veth1_vlan: left promiscuous mode
[  116.155312][   T62] veth0_vlan: left promiscuous mode
[  116.161099][   T62] veth1_macvtap: left promiscuous mode
[  116.166698][   T62] veth0_macvtap: left promiscuous mode
[  116.172200][   T62] veth1_vlan: left promiscuous mode
[  116.177527][   T62] veth0_vlan: left promiscuous mode
[  116.352279][   T62] team0 (unregistering): Port device team_slave_1 removed
[  116.373854][   T62] team0 (unregistering): Port device team_slave_0 removed
[  116.509982][   T62] team0 (unregistering): Port device team_slave_1 removed
[  116.530075][   T62] team0 (unregistering): Port device team_slave_0 removed
[  116.668797][   T62] team0 (unregistering): Port device team_slave_1 removed
[  116.687693][   T62] team0 (unregistering): Port device team_slave_0 removed