last executing test programs:

2m42.104859178s ago: executing program 3 (id=246):
msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0)
msgget$private(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000009c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000240))
lseek(r3, 0x0, 0x4)

2m39.748640852s ago: executing program 3 (id=250):
read(0xffffffffffffffff, &(0x7f0000001600)=""/233, 0xe9)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000100)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
r5 = socket(0x18, 0x0, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
sendfile(r5, r0, 0x0, 0x80006)

2m38.386768528s ago: executing program 3 (id=251):
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xf)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000000001010200000000000000000a00000324001700000000080000000000000101000000131e000000000000000000000000000000edc89c3e9b7f0f98fdde4167642d002b98ea7830"], 0x38}, 0x1, 0x0, 0x0, 0xb4}, 0x0)

2m34.398737031s ago: executing program 3 (id=257):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x20, 0x0, 0x89}, &(0x7f0000000240), 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffff08, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r4, 0x40047457, 0x0)

2m31.815976125s ago: executing program 3 (id=264):
socket$inet(0x2, 0x2, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1)
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc01c7c02, &(0x7f0000000040)={0x80000000, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast1}]}, @generic={0x7, 0x8, "04030e0000"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="04", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a40)="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"/917, 0x395}, {&(0x7f00000004c0)="439e9c06fc666cf70af3a6aec0617798af5a5cf62fc0cccc2529193558277dab", 0x20}], 0x2}}], 0x2, 0x44000)

2m28.424490994s ago: executing program 3 (id=266):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap'])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r3, r4, 0x0, 0x7ffff000)
lstat(&(0x7f00000002c0)='./file0\x00', 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
recvmsg(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000080))
getpeername$packet(r5, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x3, 0xd4bd)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)

2m12.527977662s ago: executing program 32 (id=266):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap'])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r3, r4, 0x0, 0x7ffff000)
lstat(&(0x7f00000002c0)='./file0\x00', 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
recvmsg(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000080))
getpeername$packet(r5, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x3, 0xd4bd)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)

1m37.046424017s ago: executing program 1 (id=351):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe80000000000000", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020301"], 0x1c}}, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000007000000"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m34.158815195s ago: executing program 1 (id=359):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
recvmmsg(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000300)=""/143, 0x8f}], 0x2}, 0x3}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/20, 0x14}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/145, 0x91}, {&(0x7f0000000740)=""/89, 0x59}, {&(0x7f00000007c0)=""/68, 0x44}, {&(0x7f0000000e40)=""/218, 0xda}], 0x6, &(0x7f0000000f40)=""/36, 0x24}, 0x1}], 0x2, 0x20000000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x3000)=nil)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}, 0x1, 0xffffffff00000003}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10)
socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(0xffffffffffffffff, 0x800000000010d, 0x14, 0x0, 0x0)
openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/access\x00', 0x2, 0x0)

1m31.580276224s ago: executing program 1 (id=363):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000480)=[{0x20, 0xfc, 0xff, 0xfffff00c}, {0xb1, 0xf0, 0xee, 0x7ffff020}, {0x6, 0xfc, 0x2, 0x4}]}, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x7)
socket(0x10, 0x3, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x8100)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1m21.136842008s ago: executing program 1 (id=387):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r4, 0x0, 0x0)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)

44.473851753s ago: executing program 1 (id=387):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r4, 0x0, 0x0)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)

15.40684565s ago: executing program 1 (id=387):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r4, 0x0, 0x0)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)

13.150883596s ago: executing program 0 (id=512):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getpgrp(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000300)={0x2, {0x0, 0x1, 0xc, 0x10001}, {0x1000, 0x3, 0x7, 0x8}, {0x3, 0x8}})
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x53, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x4e, 0x10, 0xfffffffffffffffe, 0xffffffffffffffff}, &(0x7f0000000080)=0x18)
recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000003c0)=""/9, 0x9}], 0x1}, 0x2000}], 0x2, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x40044}, 0x20000040)

11.575353167s ago: executing program 0 (id=516):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000010000000400", @ANYRES32, @ANYRES32, @ANYBLOB], 0x48)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000))
ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0))
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$kcm(0x10, 0x3, 0x10)
memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d  \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000003140), 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x1000000, 0x90, [0x0, 0x200000c0, 0x200000f0, 0x20000120], 0x0, 0x0, 0x0}, 0x108)

10.144767702s ago: executing program 0 (id=518):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94)
syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0x7f00, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0)
lsm_set_self_attr(0x66, 0x0, 0x20, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x7, 0x9, 0x9}]}, 0x10)

10.129147638s ago: executing program 2 (id=519):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0x1, 0x6)
r3 = timerfd_create(0x9, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
timerfd_settime(r3, 0x2, &(0x7f0000007000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0x6)
munlockall()
setsockopt$inet6_int(r2, 0x29, 0x12, 0x0, 0x0)

9.364840537s ago: executing program 2 (id=520):
socket$can_raw(0x1d, 0x3, 0x1)
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
iopl(0x3)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0xe4841, 0x108)
brk(0x1)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)

8.538724056s ago: executing program 0 (id=522):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d0102030109021200010000000009040000002ac59800fd167dd86c691d08ca76b2075eca2faba325fb6b3c366afce7f44811b9b09f8375d12741ff29ad68c8fcfbbe5c4d9006ea4195f6c07c8337267a38e48072c3ea80a02c19a5ff5cafaf904e0318e93fbaa09ffb8a70b47de7e3a9cd6304df2af26fac3389fdbd5112bf8968ecc766876a4e201b78"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket(0x2a, 0x2, 0xe2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x3, 0x5)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6c6f616420656372797074667320757365723a747275737465643a203030303038303030303030303030303030303634200022ff8768c7fa828847969f9a21640a02f1381c2c0153741f4cb815877703d7cbf917030cf3cdc4b29c3ae288c46fb9b04a982c822e26e17e89676bb790c58fd603c27aa75f86a871611c"], 0x32, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

8.375101738s ago: executing program 4 (id=524):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000480), 0x6da, 0x224101)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0)
chdir(0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f0000000240)=[{0xfffc, 0x11, 0x0, 0x0}, {0x8, 0x2000, 0x0, 0x0}], 0x2})

7.418740114s ago: executing program 5 (id=525):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x3, 0x0, {0x11, 0x8, 0x0, 0x0, 0x6, 0x62, 0x1, 0x4, 0x1}})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000400)=""/102400, 0x19000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0)
ioprio_get$uid(0x3, 0xee01)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='hpfs\x00', 0x0, 0x0)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000500)={0x1, 0x0, 0x2, 0x0})
syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x2ee0, 0x1000, 0x3, 0x2c, 0x0, r1}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000002c0))
r5 = mmap$IORING_OFF_SQES(&(0x7f000011f000/0x3000)=nil, 0x3000, 0x5, 0x4000010, 0xffffffffffffffff, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x38, 0x0, @fd_index=0x9, 0x40, 0x80, 0x5, 0x10, 0x1, {0x0, r6}})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000f40)=""/4089, 0x38, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0x9, 0x2d, 0xfffffffffffffff9, 0x3a, 0x0, 0x2c}, 0x48)

6.431918186s ago: executing program 5 (id=526):
r0 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000540)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f00000003c0)={0x50000008})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020)
setresgid(0x0, 0xee00, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)="583c6df9fe", 0x5}, {&(0x7f0000000040)='-', 0x1}], 0x2)
r8 = syz_open_dev$video(&(0x7f0000002300), 0x400000000000001, 0x294200)
ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000012c00)={0xc, {0x80000001, 0x3, 0x4}})
syz_usb_connect(0x4, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)

4.980043982s ago: executing program 2 (id=527):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r5, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

4.890941106s ago: executing program 4 (id=528):
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x218a01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sendmsg$nl_route(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x40004)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r6, 0x6213, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x240bf, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
sendfile(r10, r9, &(0x7f0000000000)=0x9, 0x2)

3.809195666s ago: executing program 0 (id=529):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
fcntl$dupfd(r0, 0x0, r0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)

3.801740674s ago: executing program 4 (id=530):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"})
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
sched_setscheduler(r1, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x5, 0x6, '\t|N', 0x0, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local}}}}}, 0x42)
close(r6)
execveat$binfmt(0xffffffffffffff9c, r5, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00', &(0x7f0000000500)='//\x00', &(0x7f0000000540)='&\'.\xad,^%,-!:\',!\\\x00']}, 0x0)

3.437027807s ago: executing program 2 (id=531):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
r2 = syz_open_dev$evdev(0x0, 0x0, 0x101000)
ioctl$EVIOCGUNIQ(r2, 0x80404508, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080d0}, 0x24000100)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r1, <r6=>0x0})
r7 = socket(0x1e, 0x4, 0x0)
getsockname$packet(r7, 0x0, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r6, 0x0, 0x9, 0x8, 0x0, [<r8=>0x0], [0x4], [0x0, 0x0, 0x100, 0xd], [0x4, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, <r9=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r9, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

2.911405489s ago: executing program 5 (id=532):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94)
syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0x7f00, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0)
lsm_set_self_attr(0x66, 0x0, 0x20, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x7, 0x9, 0x9}]}, 0x10)

2.673199688s ago: executing program 0 (id=533):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"])
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_uring_setup(0x37ee, &(0x7f00000000c0)={0x0, 0x572e, 0x2, 0x4, 0x10})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

2.668699615s ago: executing program 4 (id=534):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x20, 0x0, 0x89}, &(0x7f0000000240), 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffff08, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r4, 0x40047457, 0x0)

2.110747026s ago: executing program 5 (id=535):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socketpair(0x1, 0x80001, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = io_uring_setup(0x17ba, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x2, 0x354})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
close_range(r3, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e40)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x28}, &(0x7f0000000100)='./file0\x00', 0x18})
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0x32)
setresuid(0x0, r6, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0})

2.034599911s ago: executing program 2 (id=536):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}})
syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@dev, @multicast1, 0x0, "05888ee9654ce5db9229e6a1f0a3c9505e2ebbbc3d341ad6ad352965b867e20b"}, 0x3c)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000240)=0xa, 0x4)
memfd_create(0x0, 0x2)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe)
accept4$bt_l2cap(r4, 0x0, 0x0, 0x0)
shutdown(r4, 0x1)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000080), 0x4)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf})

1.362747324s ago: executing program 4 (id=537):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @remote}]}, 0x4c}}, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071104d00000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x100000, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0xe)
ioctl$TCFLSH(r6, 0x540b, 0x10000000005)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], &(0x7f0000007d40), &(0x7f00000000c0), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x1, 0x0, r5})

1.024745753s ago: executing program 5 (id=538):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000480), 0x6da, 0x224101)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0)
chdir(0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f0000000240)=[{0xfffc, 0x11, 0x0, 0x0}, {0x8, 0x2000, 0x0, 0x0}], 0x2})

670.589659ms ago: executing program 2 (id=539):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x105, 0x80080)
bpf$PROG_LOAD(0x5, 0x0, 0xb1fb9d7970a80962)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r6, &(0x7f0000000000), 0x0}, 0x20)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
close(r8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syslog(0x4, &(0x7f00000001c0)=""/54, 0x36)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000001280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x1})

30.841404ms ago: executing program 4 (id=540):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfe3c)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"00000004", 0x0, 0x5, 0x3, 0x0, 0x0, "01cdf78ea77000", "000100", "05049e3e", "d7e86a9e", ['e\x00s\x00', "ffffff05de7100", "00000000000000000061000e", "38a70ed483d94574c9ac9f16"]})
select(0x40, &(0x7f0000000000)={0x7fffffffffffffff, 0x9, 0x7a43, 0x4, 0xd1ba, 0x6, 0xc2, 0xe000000000000000}, &(0x7f00000000c0)={0x8000000000000001, 0x2, 0x0, 0x4, 0x0, 0xd7, 0x7, 0x101}, &(0x7f0000000100)={0x8, 0x9, 0x43, 0x0, 0x7, 0x5f2, 0x0, 0x35}, &(0x7f0000000180)={0x77359400})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)

0s ago: executing program 5 (id=541):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000040)={0x80000000, 0x0, 0x0})
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="04", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a40)="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"/917, 0x395}, {&(0x7f00000004c0)="439e9c06fc666cf70af3a6aec0617798af5a5cf62fc0cccc2529193558277dab", 0x20}], 0x2}}], 0x2, 0x44000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts.
[   82.097203][ T5811] cgroup: Unknown subsys name 'net'
[   82.225546][ T5811] cgroup: Unknown subsys name 'cpuset'
[   82.233963][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.143854][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   87.230400][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.262943][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.283269][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.297112][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.308330][ T5823] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   87.316771][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.360709][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.386166][ T5132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.435292][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.448203][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.456983][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.483661][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.499143][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.513443][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.521937][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   87.525600][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.537762][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.538147][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   87.546056][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.553980][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.562163][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.569529][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.580207][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.592578][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   87.592788][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.608886][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.617113][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.618703][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.626004][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   87.640922][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.989631][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   88.011782][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   88.060818][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   88.199222][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.206850][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.214816][ T5821] bridge_slave_0: entered allmulticast mode
[   88.223584][ T5821] bridge_slave_0: entered promiscuous mode
[   88.239281][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.247627][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.257487][ T5821] bridge_slave_1: entered allmulticast mode
[   88.266540][ T5821] bridge_slave_1: entered promiscuous mode
[   88.293500][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   88.325177][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   88.349810][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.358952][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.367043][ T5837] bridge_slave_0: entered allmulticast mode
[   88.375470][ T5837] bridge_slave_0: entered promiscuous mode
[   88.389844][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.398022][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.406806][ T5828] bridge_slave_0: entered allmulticast mode
[   88.417078][ T5828] bridge_slave_0: entered promiscuous mode
[   88.444517][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.454327][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.465246][ T5837] bridge_slave_1: entered allmulticast mode
[   88.479316][ T5837] bridge_slave_1: entered promiscuous mode
[   88.489800][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.499602][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.507832][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.517068][ T5828] bridge_slave_1: entered allmulticast mode
[   88.526415][ T5828] bridge_slave_1: entered promiscuous mode
[   88.578660][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.639887][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.654952][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.688669][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.701351][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.731830][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.741225][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.749788][ T5833] bridge_slave_0: entered allmulticast mode
[   88.758253][ T5833] bridge_slave_0: entered promiscuous mode
[   88.777387][ T5821] team0: Port device team_slave_0 added
[   88.798061][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.808510][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.820125][ T5833] bridge_slave_1: entered allmulticast mode
[   88.828913][ T5833] bridge_slave_1: entered promiscuous mode
[   88.843926][ T5821] team0: Port device team_slave_1 added
[   88.851215][ T5828] team0: Port device team_slave_0 added
[   88.857958][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.867179][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.877035][ T5825] bridge_slave_0: entered allmulticast mode
[   88.885422][ T5825] bridge_slave_0: entered promiscuous mode
[   88.900960][ T5837] team0: Port device team_slave_0 added
[   88.918854][ T5828] team0: Port device team_slave_1 added
[   88.927842][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.939160][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.953544][ T5825] bridge_slave_1: entered allmulticast mode
[   88.975982][ T5825] bridge_slave_1: entered promiscuous mode
[   89.001396][ T5837] team0: Port device team_slave_1 added
[   89.054191][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.069324][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.097753][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.106504][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.138233][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.159878][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.169821][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.203918][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.235784][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.244578][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.278721][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.291472][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.300536][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.337177][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.351720][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.360301][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.389327][ T5839] Bluetooth: hci0: command tx timeout
[   89.397705][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.413363][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.431049][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.441174][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.472745][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.511320][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.533064][ T5833] team0: Port device team_slave_0 added
[   89.576885][ T5825] team0: Port device team_slave_0 added
[   89.585788][ T5833] team0: Port device team_slave_1 added
[   89.603004][ T5839] Bluetooth: hci2: command tx timeout
[   89.634178][ T5825] team0: Port device team_slave_1 added
[   89.668731][ T5837] hsr_slave_0: entered promiscuous mode
[   89.676941][ T5837] hsr_slave_1: entered promiscuous mode
[   89.683476][ T5839] Bluetooth: hci1: command tx timeout
[   89.693069][ T5832] Bluetooth: hci4: command tx timeout
[   89.695350][ T5821] hsr_slave_0: entered promiscuous mode
[   89.698938][ T5839] Bluetooth: hci3: command tx timeout
[   89.711098][ T5821] hsr_slave_1: entered promiscuous mode
[   89.720021][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.729869][ T5821] Cannot create hsr debugfs directory
[   89.746481][ T5828] hsr_slave_0: entered promiscuous mode
[   89.756883][ T5828] hsr_slave_1: entered promiscuous mode
[   89.763927][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.772763][ T5828] Cannot create hsr debugfs directory
[   89.779845][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.789824][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.823483][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.839889][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.847798][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.883624][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.919910][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.929881][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.959588][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.002689][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.012640][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.044243][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.147234][ T5833] hsr_slave_0: entered promiscuous mode
[   90.157078][ T5833] hsr_slave_1: entered promiscuous mode
[   90.166297][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.182593][ T5833] Cannot create hsr debugfs directory
[   90.292125][ T5825] hsr_slave_0: entered promiscuous mode
[   90.303494][ T5825] hsr_slave_1: entered promiscuous mode
[   90.312684][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.321022][ T5825] Cannot create hsr debugfs directory
[   90.493038][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.505878][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.535231][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.548734][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.580615][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   90.591026][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   90.615621][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   90.629996][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.675427][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.696824][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.733791][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.756599][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.805021][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.826549][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   90.854270][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   90.884246][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   90.932325][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   90.958640][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   90.987106][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   90.997215][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.027042][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.086128][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.097461][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   91.135844][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.144672][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.159317][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   91.186427][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.194140][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.208572][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.216979][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.249462][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.257538][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.324694][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.360561][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   91.379856][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   91.392607][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.431432][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.445122][ T5839] Bluetooth: hci0: command tx timeout
[   91.473108][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.481268][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.494652][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.506356][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.576732][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   91.641268][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.654721][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.665799][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.683560][ T5839] Bluetooth: hci2: command tx timeout
[   91.701457][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.710013][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.768788][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.774955][ T5839] Bluetooth: hci3: command tx timeout
[   91.796355][ T5832] Bluetooth: hci4: command tx timeout
[   91.805839][ T5834] Bluetooth: hci1: command tx timeout
[   91.874515][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   91.939969][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.949854][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.964995][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.982770][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.993687][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.011552][ T5821] veth0_vlan: entered promiscuous mode
[   92.058625][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.080119][ T5821] veth1_vlan: entered promiscuous mode
[   92.161853][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.180308][ T5837] veth0_vlan: entered promiscuous mode
[   92.226273][ T5837] veth1_vlan: entered promiscuous mode
[   92.255730][ T5821] veth0_macvtap: entered promiscuous mode
[   92.272013][ T5828] veth0_vlan: entered promiscuous mode
[   92.286780][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.308038][ T5828] veth1_vlan: entered promiscuous mode
[   92.352043][ T5821] veth1_macvtap: entered promiscuous mode
[   92.398223][ T5837] veth0_macvtap: entered promiscuous mode
[   92.445980][ T5837] veth1_macvtap: entered promiscuous mode
[   92.479266][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.508233][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.520804][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.537585][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.560161][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.587688][ T5828] veth0_macvtap: entered promiscuous mode
[   92.607300][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.626021][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.638365][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.649922][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.659930][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.670391][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.682373][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.694706][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.718115][ T5828] veth1_macvtap: entered promiscuous mode
[   92.732128][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.751345][ T5821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.765165][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.775276][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.810295][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.825086][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.837697][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.851103][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.864528][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.885705][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.898503][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.910468][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.924955][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.937153][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.974800][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.987632][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.999099][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.010738][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.040188][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.055447][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.119457][ T5825] veth0_vlan: entered promiscuous mode
[   93.131874][ T5833] veth0_vlan: entered promiscuous mode
[   93.163466][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.174415][ T5825] veth1_vlan: entered promiscuous mode
[   93.184924][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.199476][ T5833] veth1_vlan: entered promiscuous mode
[   93.250252][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   93.252706][ T5825] veth0_macvtap: entered promiscuous mode
[   93.267557][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.279967][ T5825] veth1_macvtap: entered promiscuous mode
[   93.303093][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.340878][ T5833] veth0_macvtap: entered promiscuous mode
[   93.384883][ T5833] veth1_macvtap: entered promiscuous mode
[   93.403902][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.405656][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.431477][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.436951][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.460173][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.471735][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.485372][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.496599][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.516168][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.557485][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.576300][ T5832] Bluetooth: hci0: command tx timeout
[   93.596829][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.622102][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.647431][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.659116][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.679350][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.692691][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.705113][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.716815][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.730171][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.741969][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.763109][ T5832] Bluetooth: hci2: command tx timeout
[   93.984905][ T5834] Bluetooth: hci3: command tx timeout
[   93.991367][ T5834] Bluetooth: hci1: command tx timeout
[   93.997546][ T5832] Bluetooth: hci4: command tx timeout
[   94.298476][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.315919][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.339032][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.351106][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.361142][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.372917][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.384442][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.396281][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.409138][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.465185][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.488010][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.498563][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.512134][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.525904][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.539098][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.551401][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.562580][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.575631][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.653386][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   94.734792][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.747084][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.759929][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.770261][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.786663][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.826495][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.959912][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.087013][ T5914] dlm: no local IP address has been set
[   95.093899][ T5914] dlm: cannot start dlm midcomms -107
[   95.176132][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.190427][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.323505][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   95.474362][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.603545][ T5839] Bluetooth: hci0: command tx timeout
[   95.844357][ T5839] Bluetooth: hci2: command tx timeout
[   95.924870][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.980291][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.791471][ T5923] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.838058][ T5839] Bluetooth: hci4: command tx timeout
[   96.838108][ T5839] Bluetooth: hci1: command tx timeout
[   96.838134][ T5839] Bluetooth: hci3: command tx timeout
[   96.856243][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.856270][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.184589][ T5924] tty tty2: ldisc open failed (-12), clearing slot 1
[   97.263235][ T5925] tty tty3: ldisc open failed (-12), clearing slot 2
[   97.445277][   T46] cfg80211: failed to load regulatory.db
[   99.871696][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.950959][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.262453][ T5948] loop7: detected capacity change from 0 to 16384
[  100.562740][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.574373][ T5949] loop7: detected capacity change from 16384 to 16383
[  100.730888][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.983120][ T5937] vxcan1: tx drop: invalid da for name 0x0000000000000003
[  101.179192][ T5937] can0: slcan on ttyS3.
[  102.637703][ T5966] futex_wake_op: syz.1.15 tries to shift op by -1; fix this program
[  102.648416][ T5930] can0 (unregistered): slcan off ttyS3.
[  103.043129][ T5971] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  103.057257][ T5971] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  104.961722][ T5988] mmap: syz.4.19 (5988) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  105.636513][ T5832] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  105.649572][ T5832] Bluetooth: hci0: Injecting HCI hardware error event
[  105.660201][ T5839] Bluetooth: hci0: hardware error 0x00
[  106.968570][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  107.623081][ T6015] binder: 6000:6015 ioctl 40044591 20000280 returned -22
[  108.037524][ T5839] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  108.054807][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  108.123335][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  109.364412][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  110.525579][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.713613][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  111.019202][ T6063] overlayfs: failed to decode file handle (len=6, type=4, flags=0, err=-22)
[  111.888216][ T6068] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  120.412241][ T6095] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  121.020440][ T6075] Set syz1 is full, maxelem 65536 reached
[  123.981225][ T6116] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  127.731079][ T6097] Set syz1 is full, maxelem 65536 reached
[  132.093171][ T6173] orangefs_mount: mount request failed with -4
[  132.375847][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.386034][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.397214][ T6175] bridge0: entered allmulticast mode
[  133.664496][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  133.672085][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  134.523505][ T6199] input: syz1 as /devices/virtual/input/input6
[  135.470386][ T6198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.57'.
[  135.513384][ T6198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.57'.
[  135.919669][ T6206] bridge0: port 3(vlan2) entered blocking state
[  135.928984][ T6206] bridge0: port 3(vlan2) entered disabled state
[  135.943011][ T6206] vlan2: entered allmulticast mode
[  135.979570][ T6206] vlan2: left allmulticast mode
[  136.008985][ T6198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.57'.
[  136.178828][ T6198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.57'.
[  137.241640][ T6223] Zero length message leads to an empty skb
[  137.915486][ T6227] gfs2: not a GFS2 filesystem
[  140.093688][ T6245] =======================================================
[  140.093688][ T6245] WARNING: The mand mount option has been deprecated and
[  140.093688][ T6245]          and is ignored by this kernel. Remove the mand
[  140.093688][ T6245]          option from the mount to silence this warning.
[  140.093688][ T6245] =======================================================
[  140.131946][    C1] vkms_vblank_simulate: vblank timer overrun
[  141.211810][ T6250] capability: warning: `syz.4.71' uses 32-bit capabilities (legacy support in use)
[  144.309397][ T6257] Bluetooth: MGMT ver 1.23
[  147.181047][ T6294] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  150.184898][ T6303] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  152.625841][ T6321] Set syz1 is full, maxelem 65536 reached
[  153.191013][ T6329] Invalid source name
[  153.195855][ T6329] UBIFS error (pid: 6329): cannot open "./file0", error -22
[  156.255842][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'.
[  156.894169][ T6348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.94'.
[  158.580580][ T6378] pimreg: entered allmulticast mode
[  160.468329][ T6393] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  160.603027][ T6404] netlink: 'syz.2.103': attribute type 9 has an invalid length.
[  160.611069][ T6404] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.103'.
[  165.000155][ T6437] netlink: 32 bytes leftover after parsing attributes in process `syz.2.111'.
[  165.982224][ T6452] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  166.824837][ T6459] netlink: 'syz.4.121': attribute type 11 has an invalid length.
[  167.463090][ T6462] capability: warning: `syz.4.121' uses deprecated v2 capabilities in a way that may be insecure
[  167.923581][ T6462] program syz.4.121 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  170.582429][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'.
[  171.668255][ T6489] netlink: 'syz.2.127': attribute type 11 has an invalid length.
[  176.456861][ T6510] netlink: 'syz.3.133': attribute type 1 has an invalid length.
[  176.469372][ T6510] netlink: 'syz.3.133': attribute type 2 has an invalid length.
[  178.183660][ T6526] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  182.496851][ T6545] syz_tun: entered promiscuous mode
[  182.782749][ T6530] Set syz1 is full, maxelem 65536 reached
[  184.485757][ T6563] Bluetooth: hci5: Frame reassembly failed (-84)
[  186.803272][ T5839] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  188.996593][ T6644] sctp: [Deprecated]: syz.2.153 (pid 6644) Use of int in maxseg socket option.
[  188.996593][ T6644] Use struct sctp_assoc_value instead
[  189.121595][ T6663] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  189.133785][ T6644] cgroup: Name too long
[  189.427774][ T6669] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  194.833448][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  194.840655][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  195.956651][ T6703] I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0
[  195.974411][ T6703] I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 0
[  195.985703][ T6703] I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  195.995780][ T6703] Buffer I/O error on dev loop7, logical block 1280, async page read
[  196.004462][ T6703] I/O error, dev loop7, sector 1281 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  196.014126][ T6703] Buffer I/O error on dev loop7, logical block 1281, async page read
[  196.022742][ T6703] I/O error, dev loop7, sector 1282 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  196.034378][ T6703] Buffer I/O error on dev loop7, logical block 1282, async page read
[  196.044648][ T6703] I/O error, dev loop7, sector 1283 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  196.054623][ T6703] Buffer I/O error on dev loop7, logical block 1283, async page read
[  196.065328][ T6703] I/O error, dev loop7, sector 1284 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  196.076062][ T6703] Buffer I/O error on dev loop7, logical block 1284, async page read
[  196.086205][ T6703] I/O error, dev loop7, sector 1285 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  196.098177][ T6703] Buffer I/O error on dev loop7, logical block 1285, async page read
[  196.106761][ T6703] I/O error, dev loop7, sector 1286 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  196.117724][ T6703] Buffer I/O error on dev loop7, logical block 1286, async page read
[  196.127362][ T6703] I/O error, dev loop7, sector 1287 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  196.139269][ T6703] Buffer I/O error on dev loop7, logical block 1287, async page read
[  196.219794][   T26] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  196.229342][   T26] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  196.638755][ T6665] Set syz1 is full, maxelem 65536 reached
[  197.341641][ T6677] Set syz1 is full, maxelem 65536 reached
[  201.315045][ T6751] tc_dump_action: action bad kind
[  201.491364][ T6755] binder: 6748:6755 ioctl 400c620e 200001c0 returned -22
[  202.384502][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'.
[  206.129376][ T6788] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  206.129376][ T6788]    program syz.4.191 not setting count and/or reply_len properly
[  208.165921][ T6801] kvm: user requested TSC rate below hardware speed
[  209.965984][ T6821] ebtables: ebtables: counters copy to user failed while replacing table
[  212.743067][ T5132] Bluetooth: hci4: command 0x0406 tx timeout
[  212.750623][ T5132] Bluetooth: hci2: command 0x0406 tx timeout
[  212.760017][ T5132] Bluetooth: hci1: command 0x0406 tx timeout
[  212.766675][ T5132] Bluetooth: hci3: command 0x0406 tx timeout
[  213.205879][ T6854] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  213.764014][ T6862] Set syz1 is full, maxelem 65536 reached
[  215.641135][ T6885] netlink: 47 bytes leftover after parsing attributes in process `syz.4.216'.
[  216.975532][ T6902] hub 2-0:1.0: USB hub found
[  216.981911][ T6902] hub 2-0:1.0: 1 port detected
[  218.545995][ T6913] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  219.901257][ T6911] Set syz1 is full, maxelem 65536 reached
[  220.222535][ T6919] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  221.385815][ T6928] Set syz1 is full, maxelem 65536 reached
[  224.955930][ T6962] netlink: 'syz.2.235': attribute type 1 has an invalid length.
[  224.965352][ T6962] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.235'.
[  225.952481][ T6949] ceph: No mds server is up or the cluster is laggy
[  225.964372][ T2151] libceph: connect (1)[c::]:6789 error -101
[  225.971536][ T2151] libceph: mon0 (1)[c::]:6789 connect error
[  226.901170][ T6976] xt_TCPMSS: Only works on TCP SYN packets
[  227.500768][ T6978] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  228.769164][ T6987] netlink: 'syz.1.240': attribute type 3 has an invalid length.
[  228.850597][ T6989] process 'syz.4.242' launched './file0' with NULL argv: empty string added
[  228.868704][ T6984] Set syz1 is full, maxelem 65536 reached
[  229.202839][ T6995] syz.0.244(6995): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  230.262951][ T2151] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  231.682854][ T2151] usb 5-1: Using ep0 maxpacket: 32
[  231.702642][ T2151] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.193133][ T7013] infiniband syz1: set active
[  232.198387][ T7013] infiniband syz1: added syz_tun
[  232.461179][ T7013] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  232.469810][ T7013] infiniband syz1: Couldn't open port 1
[  232.694147][ T7013] RDS/IB: syz1: added
[  232.698953][ T7013] smc: adding ib device syz1 with port count 1
[  232.706013][ T7013] smc:    ib device syz1 port 1 has pnetid 
[  232.808800][ T2151] usb 5-1: string descriptor 0 read error: -71
[  232.815895][ T2151] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a
[  232.858639][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.205736][ T7013] syz.1.248 (7013) used greatest stack depth: 19304 bytes left
[  233.251472][ T2151] usb 5-1: config 0 descriptor??
[  233.273534][ T2151] usb 5-1: can't set config #0, error -71
[  233.280601][ T2151] usb 5-1: USB disconnect, device number 2
[  235.373928][ T7033] warning: `syz.1.252' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  238.529845][ T7056] veth1_to_batadv: entered promiscuous mode
[  238.536283][ T7056] macsec1: entered promiscuous mode
[  239.471286][ T7045] dvmrp8: entered allmulticast mode
[  239.513467][ T7044] dvmrp8: left allmulticast mode
[  239.654688][ T7054] loop7: detected capacity change from 0 to 16384
[  242.411648][ T7054] blk_print_req_error: 137 callbacks suppressed
[  242.411667][ T7054] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 0
[  242.430217][ T7054] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 0
[  242.440467][ T7054] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  242.450297][ T7054] buffer_io_error: 1278 callbacks suppressed
[  242.450313][ T7054] Buffer I/O error on dev loop7, logical block 416, async page read
[  243.053839][ T7053] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  243.064894][ T7053] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  243.075150][ T7053] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  243.083859][ T7053] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  243.094504][ T7053] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  243.134043][ T7053] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  243.643253][ T7053] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  243.861994][ T7053] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  243.870878][ T7053] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  243.879469][ T7053] Buffer I/O error on dev loop7, logical block 8, lost async page write
[  243.894284][   T29] audit: type=1326 audit(1737408953.887:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cd185d29 code=0x7ffc0000
[  243.899504][ T7053] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  243.918991][   T29] audit: type=1326 audit(1737408953.887:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cd185d29 code=0x7ffc0000
[  244.081954][   T29] audit: type=1326 audit(1737408953.887:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f61cd185d29 code=0x7ffc0000
[  244.118516][   T29] audit: type=1326 audit(1737408953.887:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cd185d29 code=0x7ffc0000
[  244.652293][   T29] audit: type=1326 audit(1737408953.887:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cd185d29 code=0x7ffc0000
[  245.747646][   T29] audit: type=1326 audit(1737408953.897:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f61cd185d29 code=0x7ffc0000
[  245.789798][ T7053] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  245.813322][   T29] audit: type=1326 audit(1737408953.897:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cd185d29 code=0x7ffc0000
[  245.856891][   T29] audit: type=1326 audit(1737408953.897:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cd185d29 code=0x7ffc0000
[  245.887660][ T7053] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0
[  245.903846][ T7094] ref_ctr going negative. vaddr: 0x20ffc002, curr val: -29824, delta: 1
[  245.933830][   T29] audit: type=1326 audit(1737408953.897:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f61cd185d29 code=0x7ffc0000
[  245.935581][ T7094] ref_ctr increment failed for inode: 0x121 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807b206880
[  245.979431][   T29] audit: type=1326 audit(1737408953.897:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61cd185d29 code=0x7ffc0000
[  246.427357][ T7098] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  246.908420][ T7104] Set syz1 is full, maxelem 65536 reached
[  247.142373][ T7113] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  248.142854][ T7114] Set syz1 is full, maxelem 65536 reached
[  248.192246][ T7111] [U] 
[  256.209620][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  256.216422][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  256.418277][ T7157] evm: overlay not supported
[  256.802554][ T7160] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  257.202428][ T7160] Set syz1 is full, maxelem 65536 reached
[  258.838425][ T7173] Set syz1 is full, maxelem 65536 reached
[  259.668501][ T7183] Driver unsupported XDP return value 0 on prog  (id 92) dev N/A, expect packet loss!
[  261.970319][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  262.033274][ T7206] trusted_key: encrypted_key: insufficient parameters specified
[  262.979482][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  262.987296][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  262.996113][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  263.004904][ T5839] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  263.013082][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  264.517033][ T7220] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  264.888693][ T7222] batadv1: entered promiscuous mode
[  264.897110][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv1
[  265.932885][ T5839] Bluetooth: hci5: command tx timeout
[  265.999512][ T7220] Set syz1 is full, maxelem 65536 reached
[  267.580660][ T7244] xt_nat: multiple ranges no longer supported
[  268.418264][ T5839] Bluetooth: hci5: command tx timeout
[  268.552986][ T7247] dccp_invalid_packet: P.Data Offset(10) too large
[  268.653458][ T7244] netlink: 76 bytes leftover after parsing attributes in process `syz.4.303'.
[  268.949194][ T7203] chnl_net:caif_netlink_parms(): no params data found
[  269.880408][ T7258] orangefs_mount: mount request failed with -4
[  270.574862][ T5839] Bluetooth: hci5: command tx timeout
[  271.066289][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.126450][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.211456][ T7203] bridge_slave_0: entered allmulticast mode
[  271.331444][ T7203] bridge_slave_0: entered promiscuous mode
[  271.393629][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.422957][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.480576][ T7203] bridge_slave_1: entered allmulticast mode
[  271.579469][ T7203] bridge_slave_1: entered promiscuous mode
[  272.662522][ T5839] Bluetooth: hci5: command tx timeout
[  272.848097][ T7203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.980709][ T7203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.227544][ T7203] team0: Port device team_slave_0 added
[  273.261816][ T7203] team0: Port device team_slave_1 added
[  273.421200][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.454773][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.481017][    C1] vkms_vblank_simulate: vblank timer overrun
[  273.554203][ T7203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.573764][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.581019][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.643152][ T7203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.884614][ T7203] hsr_slave_0: entered promiscuous mode
[  273.900323][ T7203] hsr_slave_1: entered promiscuous mode
[  273.909777][ T7203] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  273.924058][ T7203] Cannot create hsr debugfs directory
[  274.180654][ T7203] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  274.196500][ T7203] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  274.243449][ T7203] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  274.295251][ T7203] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  275.103289][ T5874] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  275.630647][ T7203] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.703741][ T7203] 8021q: adding VLAN 0 to HW filter on device team0
[  275.722850][ T5874] usb 5-1: Using ep0 maxpacket: 16
[  275.852120][ T6625] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.859351][ T6625] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.126094][ T6625] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.133843][ T6625] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.245223][ T5874] usb 5-1: config 0 has an invalid descriptor of length 109, skipping remainder of the config
[  276.263755][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  276.277075][ T5874] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[  276.287634][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.305105][ T5874] usb 5-1: config 0 descriptor??
[  276.320451][ T5874] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  276.348199][ T7203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  276.400296][ T7203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  276.511189][ T7311] kernel profiling enabled (shift: 9)
[  277.857459][ T7203] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.017227][ T5874] usb 5-1: USB disconnect, device number 3
[  278.124534][ T7331] openvswitch: netlink: Actions may not be safe on all matching packets
[  278.393024][ T5875] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  279.644790][ T5875] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.209956][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0
[  280.221577][ T5875] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  280.231682][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.276062][ T5875] usb 1-1: config 0 descriptor??
[  280.590457][ T7203] veth0_vlan: entered promiscuous mode
[  281.530092][ T7358] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  281.530092][ T7358]    program syz.4.325 not setting count and/or reply_len properly
[  282.314686][ T5875] usbhid 1-1:0.0: can't add hid device: -71
[  282.326818][ T5875] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  282.343072][ T5875] usb 1-1: USB disconnect, device number 2
[  282.362046][ T7203] veth1_vlan: entered promiscuous mode
[  283.281296][ T7203] veth0_macvtap: entered promiscuous mode
[  283.297015][ T7203] veth1_macvtap: entered promiscuous mode
[  283.333549][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.344549][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.354447][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.365539][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.375450][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.386631][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.465752][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.476315][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.487372][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.499056][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.539012][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.678420][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.699829][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.715589][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.726669][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.739452][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.751586][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.779090][ T7373] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  285.334466][ T7375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.329'.
[  285.345402][ T7375] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  285.358546][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.369224][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.379505][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.390158][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.401827][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_1
[  285.478980][ T7203] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.531995][ T7203] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.596908][ T7203] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.719564][ T7203] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.659256][ T7398] xt_CT: You must specify a L4 protocol and not use inversions on it
[  287.783320][ T6604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.010858][ T6604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.075375][ T6389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.093040][ T6389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.821702][ T7412] ntfs3(nullb0): Primary boot signature is not NTFS.
[  288.828860][ T7412] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  288.839924][ T7412] bridge0: port 3(erspan0) entered blocking state
[  288.846705][ T7412] bridge0: port 3(erspan0) entered disabled state
[  288.853441][ T7412] erspan0: entered allmulticast mode
[  288.859790][ T7412] erspan0: entered promiscuous mode
[  288.865651][ T7412] bridge0: port 3(erspan0) entered blocking state
[  288.872260][ T7412] bridge0: port 3(erspan0) entered forwarding state
[  290.011959][ T7423] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available
[  290.193116][ T5830] IPVS: starting estimator thread 0...
[  290.303425][ T7430] IPVS: using max 33 ests per chain, 79200 per kthread
[  291.090411][ T7378] Set syz1 is full, maxelem 65536 reached
[  291.205773][ T7443] netlink: 40 bytes leftover after parsing attributes in process `syz.2.342'.
[  291.216958][ T7443] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  291.461143][ T7444] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  291.461143][ T7444]    program syz.5.343 not setting count and/or reply_len properly
[  292.239966][ T7447] tmpfs: Bad value for 'mpol'
[  292.335398][ T7455] syz.1.345: attempt to access beyond end of device
[  292.335398][ T7455] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0
[  292.348408][ T7455] MINIX-fs: unable to read superblock
[  293.099366][ T7462] overlayfs: failed to get index nlink (file1/file0, err=-61)
[  293.527173][ T7466] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  296.128454][ T7487] netlink: 252 bytes leftover after parsing attributes in process `syz.5.354'.
[  296.137577][ T7487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.354'.
[  297.425704][ T7497] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  298.809279][ T7515] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  299.789970][ T5821] infiniband syz1: set down
[  299.879685][ T6604] smc: removing ib device syz1
[  300.388680][ T5839] Bluetooth: hci3: unexpected event for opcode 0x0419
[  301.684137][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.368'.
[  302.324121][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'.
[  303.820973][ T7576] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.374' sets config #0
[  304.423205][ T5839] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  304.432142][ T5839] Bluetooth: hci3: Injecting HCI hardware error event
[  304.439853][ T5839] Bluetooth: hci3: hardware error 0x00
[  306.796474][ T5839] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  307.830364][ T7605] netlink: 40 bytes leftover after parsing attributes in process `syz.5.381'.
[  307.841460][ T7605] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  311.056503][ T6030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.099150][ T6030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.178795][ T6030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.271203][ T6030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.918224][ T6030] bridge_slave_1: left allmulticast mode
[  314.936647][ T6030] bridge_slave_1: left promiscuous mode
[  314.957755][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  314.958061][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.031587][ T6030] bridge_slave_0: left allmulticast mode
[  315.040173][ T6030] bridge_slave_0: left promiscuous mode
[  315.046921][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  315.058746][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  315.066946][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  315.075720][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  315.609052][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  315.656120][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.735247][ T7660] netlink: 252 bytes leftover after parsing attributes in process `syz.2.391'.
[  315.744404][ T7660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.391'.
[  316.653040][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.399'.
[  317.179463][ T6030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  317.252174][ T6030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  317.328833][ T6030] bond0 (unregistering): Released all slaves
[  317.773570][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.784394][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  317.807757][   T54] Bluetooth: hci0: command tx timeout
[  319.207021][ T6030] hsr_slave_0: left promiscuous mode
[  319.213217][ T6030] hsr_slave_1: left promiscuous mode
[  319.220425][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  319.228276][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0
[  319.842907][   T54] Bluetooth: hci0: command tx timeout
[  319.849145][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  320.003086][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.922867][   T54] Bluetooth: hci0: command tx timeout
[  322.052585][ T6030] veth1_macvtap: left promiscuous mode
[  322.347414][ T6030] veth0_macvtap: left promiscuous mode
[  322.356201][ T6030] veth1_vlan: left promiscuous mode
[  322.361654][ T6030] veth0_vlan: left promiscuous mode
[  322.943119][ T7732] netlink: 252 bytes leftover after parsing attributes in process `syz.0.410'.
[  322.952183][ T7732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.410'.
[  324.468133][   T54] Bluetooth: hci0: command tx timeout
[  324.621524][ T6030] team0 (unregistering): Port device team_slave_1 removed
[  325.383836][ T6030] team0 (unregistering): Port device team_slave_0 removed
[  327.795830][ T7649] chnl_net:caif_netlink_parms(): no params data found
[  330.280995][ T7787] netlink: 56 bytes leftover after parsing attributes in process `syz.5.423'.
[  330.377850][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.387244][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.412489][ T7649] bridge_slave_0: entered allmulticast mode
[  330.437216][ T7649] bridge_slave_0: entered promiscuous mode
[  331.604663][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.612406][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.073313][ T7649] bridge_slave_1: entered allmulticast mode
[  332.385022][ T7649] bridge_slave_1: entered promiscuous mode
[  332.653968][ T7649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.678372][ T7649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  333.316593][ T7649] team0: Port device team_slave_0 added
[  333.344446][ T7649] team0: Port device team_slave_1 added
[  333.464606][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.490506][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.610740][ T7649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.664504][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.697502][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.801852][ T7649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.999405][ T7649] hsr_slave_0: entered promiscuous mode
[  334.022263][ T7649] hsr_slave_1: entered promiscuous mode
[  334.044411][ T7649] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  334.140039][ T7649] Cannot create hsr debugfs directory
[  337.255754][ T7862] syz.0.434: attempt to access beyond end of device
[  337.255754][ T7862] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0
[  337.268830][ T7862] MINIX-fs: unable to read superblock
[  337.961025][ T7867] bpf: Bad value for 'gid'
[  340.533643][ T7649] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  340.561185][ T7649] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  340.595415][ T7649] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  340.625325][ T7649] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  340.780768][ T7895] No such timeout policy "syz0"
[  340.806581][   T29] kauditd_printk_skb: 32 callbacks suppressed
[  340.806602][   T29] audit: type=1107 audit(1737409050.797:44): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='1���{k�p�ӗl��+I%7ͤm��[�4����G�g��ϳ�~�׏���W���oN����`�|������׼�e2v]���-#(_�)MI�鐏iX$5��@��*���>|�'
[  340.911084][ T7649] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.263456][ T7649] 8021q: adding VLAN 0 to HW filter on device team0
[  341.449472][ T7908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.444'.
[  342.176519][ T7908] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  342.222233][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.237667][ T6602] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.315958][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.323170][ T6602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  343.031091][ T7649] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.330141][ T7649] veth0_vlan: entered promiscuous mode
[  343.377243][ T7649] veth1_vlan: entered promiscuous mode
[  343.457198][ T7649] veth0_macvtap: entered promiscuous mode
[  343.478162][ T7649] veth1_macvtap: entered promiscuous mode
[  343.534778][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.593063][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.603751][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.617236][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.627997][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.639971][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.653799][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.667681][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.677976][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.688708][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.700366][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.709433][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.746275][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.817768][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.821158][ T7938] syz.5.448 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  343.839098][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.876753][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.076587][ T7945] netlink: 40 bytes leftover after parsing attributes in process `syz.4.447'.
[  344.090443][ T7945] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  344.618162][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.628201][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.645249][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.752808][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.810281][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.822128][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.873380][ T7649] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.922214][ T7649] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.295974][ T7649] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.311001][ T7649] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.589051][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.615152][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.679280][ T6030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.727422][ T6030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.032799][    T8] IPVS: starting estimator thread 0...
[  346.195490][ T7981] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  346.284143][ T7976] IPVS: using max 34 ests per chain, 81600 per kthread
[  346.888918][ T6030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.335529][ T6030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.568365][ T6030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.863175][ T8008] GUP no longer grows the stack in syz.4.459 (8008): 20006000-2000a000 (20005000)
[  348.786553][ T8008] CPU: 0 UID: 0 PID: 8008 Comm: syz.4.459 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0
[  348.796935][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  348.807163][ T8008] Call Trace:
[  348.810470][ T8008]  <TASK>
[  348.813437][ T8008]  dump_stack_lvl+0x241/0x360
[  348.818148][ T8008]  ? __pfx_dump_stack_lvl+0x10/0x10
[  348.823463][ T8008]  ? __pfx__printk+0x10/0x10
[  348.828143][ T8008]  ? find_vma+0xf9/0x170
[  348.832464][ T8008]  __get_user_pages+0x4385/0x49e0
[  348.837510][ T8008]  ? __pfx_lock_acquire+0x10/0x10
[  348.842549][ T8008]  ? mt_validate+0x4925/0x4ac0
[  348.847434][ T8008]  ? mas_next_node+0xb99/0xe00
[  348.852252][ T8008]  ? __pfx___get_user_pages+0x10/0x10
[  348.857643][ T8008]  ? __gup_longterm_locked+0xd2f/0x17f0
[  348.863227][ T8008]  ? rcu_is_watching+0x15/0xb0
[  348.868008][ T8008]  ? __pfx_down_read_killable+0x10/0x10
[  348.873568][ T8008]  ? lock_release+0xbf/0xa30
[  348.878201][ T8008]  ? __pfx_lock_acquire+0x10/0x10
[  348.883279][ T8008]  ? rcu_is_watching+0x15/0xb0
[  348.888144][ T8008]  ? lock_acquire+0xe3/0x550
[  348.892751][ T8008]  ? __pfx_lock_release+0x10/0x10
[  348.897893][ T8008]  __gup_longterm_locked+0xe64/0x17f0
[  348.903283][ T8008]  ? rcu_is_watching+0x15/0xb0
[  348.908173][ T8008]  ? try_get_folio+0xf1/0x6f0
[  348.912956][ T8008]  ? __pfx_lock_release+0x10/0x10
[  348.918029][ T8008]  ? try_grab_folio_fast+0x1c0/0x6d0
[  348.923339][ T8008]  ? __pfx___gup_longterm_locked+0x10/0x10
[  348.929205][ T8008]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  348.935556][ T8008]  ? rcu_is_watching+0x15/0xb0
[  348.940337][ T8008]  gup_fast_fallback+0x2266/0x29c0
[  348.945475][ T8008]  ? __pfx_gup_fast_fallback+0x10/0x10
[  348.950978][ T8008]  ? rcu_is_watching+0x15/0xb0
[  348.955759][ T8008]  ? lock_acquire+0xe3/0x550
[  348.960368][ T8008]  ? __mutex_trylock_common+0x183/0x2e0
[  348.965936][ T8008]  ? __pfx___might_resched+0x10/0x10
[  348.971305][ T8008]  ? is_valid_gup_args+0x124/0x200
[  348.976435][ T8008]  get_user_pages_fast+0xcc/0x160
[  348.981488][ T8008]  ? __pfx_get_user_pages_fast+0x10/0x10
[  348.987131][ T8008]  ? rcu_is_watching+0x15/0xb0
[  348.991935][ T8008]  ? trace_contention_end+0x3c/0x120
[  348.997268][ T8008]  ? __mutex_lock+0x37f/0xee0
[  349.001961][ T8008]  __iov_iter_get_pages_alloc+0x3b4/0x8e0
[  349.007790][ T8008]  iov_iter_get_pages2+0xcf/0x130
[  349.012828][ T8008]  ? __pfx_iov_iter_get_pages2+0x10/0x10
[  349.018482][ T8008]  __se_sys_vmsplice+0x740/0x1490
[  349.023540][ T8008]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  349.029037][ T8008]  ? __pfx_futex_wait+0x10/0x10
[  349.033904][ T8008]  ? fd_install+0x9c/0x5d0
[  349.038336][ T8008]  ? xfd_validate_state+0x6e/0x150
[  349.043463][ T8008]  ? rcu_is_watching+0x15/0xb0
[  349.048325][ T8008]  ? rcu_is_watching+0x15/0xb0
[  349.053100][ T8008]  do_syscall_64+0xf3/0x230
[  349.057887][ T8008]  ? clear_bhb_loop+0x35/0x90
[  349.062627][ T8008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.068549][ T8008] RIP: 0033:0x7f9ed6f85d29
[  349.073025][ T8008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.092846][ T8008] RSP: 002b:00007f9ed7d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  349.101313][ T8008] RAX: ffffffffffffffda RBX: 00007f9ed7175fa0 RCX: 00007f9ed6f85d29
[  349.109302][ T8008] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000008
[  349.117294][ T8008] RBP: 00007f9ed7001b08 R08: 0000000000000000 R09: 0000000000000000
[  349.125313][ T8008] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  349.133297][ T8008] R13: 0000000000000000 R14: 00007f9ed7175fa0 R15: 00007ffed0174b18
[  349.141292][ T8008]  </TASK>
[  349.396917][ T6030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.637932][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  350.745237][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  350.756024][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  350.804487][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  350.812119][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  350.819980][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  351.411906][ T6030] bridge_slave_1: left allmulticast mode
[  351.440240][ T6030] bridge_slave_1: left promiscuous mode
[  351.458400][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.470871][ T6030] bridge_slave_0: left allmulticast mode
[  351.488176][ T6030] bridge_slave_0: left promiscuous mode
[  351.507461][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.718286][ T6030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  351.742245][ T6030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  351.778259][ T6030] bond0 (unregistering): Released all slaves
[  351.919293][ T8022] chnl_net:caif_netlink_parms(): no params data found
[  352.165166][ T6030] hsr_slave_0: left promiscuous mode
[  352.177755][ T6030] hsr_slave_1: left promiscuous mode
[  352.195243][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.204416][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0
[  352.213201][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.233166][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.247101][ T6030] veth1_macvtap: left promiscuous mode
[  352.257895][ T6030] veth0_macvtap: left promiscuous mode
[  352.264016][ T6030] veth1_vlan: left promiscuous mode
[  352.269438][ T6030] veth0_vlan: left promiscuous mode
[  353.536779][   T54] Bluetooth: hci0: command tx timeout
[  353.692890][   T29] audit: type=1800 audit(1737409063.567:45): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.466" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[  353.769546][ T6030] team0 (unregistering): Port device team_slave_1 removed
[  353.852460][ T8091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.463'.
[  353.887867][ T8091] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  354.607795][ T8098] loop7: detected capacity change from 0 to 16384
[  354.613321][ T6030] team0 (unregistering): Port device team_slave_0 removed
[  354.704012][ T8098] loop7: detected capacity change from 16384 to 16383
[  354.745826][ T8098] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  354.755580][ T8098] buffer_io_error: 407 callbacks suppressed
[  354.755597][ T8098] Buffer I/O error on dev loop7, logical block 0, async page read
[  354.769519][ T8098] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  354.778714][ T8098] Buffer I/O error on dev loop7, logical block 0, async page read
[  354.786758][ T8098] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  354.795976][ T8098] Buffer I/O error on dev loop7, logical block 0, async page read
[  354.804126][ T8098] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  354.813330][ T8098] Buffer I/O error on dev loop7, logical block 0, async page read
[  354.821324][ T8098] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  354.830562][ T8098] Buffer I/O error on dev loop7, logical block 0, async page read
[  354.838708][ T8098] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  354.847948][ T8098] Buffer I/O error on dev loop7, logical block 0, async page read
[  354.856709][ T8098] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  354.865972][ T8098] Buffer I/O error on dev loop7, logical block 0, async page read
[  354.873994][ T8098] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  354.883213][ T8098] Buffer I/O error on dev loop7, logical block 0, async page read
[  354.891145][ T8098] ldm_validate_partition_table(): Disk read failed.
[  354.897942][ T8098] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  354.907180][ T8098] Buffer I/O error on dev loop7, logical block 0, async page read
[  354.915203][ T8098] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  354.924429][ T8098] Buffer I/O error on dev loop7, logical block 0, async page read
[  354.932519][ T8098] Dev loop7: unable to read RDB block 0
[  354.938603][ T8098]  loop7: unable to read partition table
[  354.944518][ T8098] loop_reread_partitions: partition scan of loop7 (R%0���T�$7�)]W����?�18��;9��C?��-��z׌����	������97d���) failed (rc=-5)
[  355.253503][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.313166][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.354422][ T8022] bridge_slave_0: entered allmulticast mode
[  355.362275][ T8022] bridge_slave_0: entered promiscuous mode
[  355.390927][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.397532][ T8123] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  355.535558][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.606134][   T54] Bluetooth: hci0: command tx timeout
[  355.613941][ T8022] bridge_slave_1: entered allmulticast mode
[  355.625186][ T8022] bridge_slave_1: entered promiscuous mode
[  356.309580][ T8022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.368310][ T8022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  357.170694][ T8022] team0: Port device team_slave_0 added
[  357.317392][ T8150] Set syz1 is full, maxelem 65536 reached
[  357.868248][   T54] Bluetooth: hci0: command tx timeout
[  357.915718][ T8022] team0: Port device team_slave_1 added
[  358.136292][ T8167] netlink: 40 bytes leftover after parsing attributes in process `syz.5.478'.
[  358.150199][ T8167] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  358.944311][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_0
[  358.975303][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.113527][ T8022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.619294][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.642251][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.682409][ T8022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.815391][ T8022] hsr_slave_0: entered promiscuous mode
[  359.922844][   T54] Bluetooth: hci0: command tx timeout
[  359.928823][ T8022] hsr_slave_1: entered promiscuous mode
[  359.987419][ T8022] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  360.003576][ T8022] Cannot create hsr debugfs directory
[  364.815472][ T8022] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  365.450678][ T8022] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  365.493371][ T8022] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  366.492259][ T8241] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  366.883313][ T8022] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  366.906941][ T8245] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  367.933425][ T8251] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  367.940468][ T8251] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  367.946518][ T8251] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  368.008353][ T8251] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  368.014507][ T8251] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  368.021358][ T8251] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  368.027494][ T8251] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  368.034844][ T8251] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  368.041565][ T8251] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  368.047621][ T8251] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  368.054681][ T8251] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  368.138891][ T8022] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.195699][ T8022] 8021q: adding VLAN 0 to HW filter on device team0
[  368.283566][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.290840][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.431468][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.438658][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.497871][ T8262] Set syz1 is full, maxelem 65536 reached
[  369.593225][ T8022] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  369.605065][ T8022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  369.644612][ T8270] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  370.011739][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  370.017938][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  370.082963][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  370.089051][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout
[  370.095222][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  370.918640][ T8022] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.327239][   T29] audit: type=1326 audit(1737409080.977:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8290 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256db85d29 code=0x7ffc0000
[  371.469477][ T8022] veth0_vlan: entered promiscuous mode
[  371.484684][   T29] audit: type=1326 audit(1737409080.977:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8290 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256db85d29 code=0x7ffc0000
[  371.505166][ T8022] veth1_vlan: entered promiscuous mode
[  371.555354][   T29] audit: type=1326 audit(1737409080.987:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8290 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f256db85d29 code=0x7ffc0000
[  371.665590][ T8022] veth0_macvtap: entered promiscuous mode
[  371.829901][   T29] audit: type=1326 audit(1737409080.987:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8290 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256db85d29 code=0x7ffc0000
[  371.853131][   T29] audit: type=1326 audit(1737409080.987:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8290 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256db85d29 code=0x7ffc0000
[  371.887947][ T8022] veth1_macvtap: entered promiscuous mode
[  372.119120][ T8308] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  372.366280][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  372.366294][ T5831] Bluetooth: hci5: command 0x0c1a tx timeout
[  372.366326][ T5831] Bluetooth: hci4: command 0x0406 tx timeout
[  372.372399][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  372.433542][   T29] audit: type=1326 audit(1737409080.987:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8290 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f256db85d29 code=0x7ffc0000
[  372.457849][ T8307] geneve2: entered promiscuous mode
[  372.463188][ T8307] geneve2: entered allmulticast mode
[  372.481230][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.484944][   T29] audit: type=1326 audit(1737409080.987:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8290 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256db85d29 code=0x7ffc0000
[  372.502891][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.523523][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.534190][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.544239][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.556685][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.573154][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.662755][   T29] audit: type=1326 audit(1737409080.987:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8290 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256db85d29 code=0x7ffc0000
[  372.783004][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.793729][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.804582][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.817312][ T8022] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.827282][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.841883][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.854281][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.865360][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.882782][   T29] audit: type=1326 audit(1737409080.997:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8290 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f256db85d29 code=0x7ffc0000
[  372.904914][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.925392][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.943424][   T29] audit: type=1326 audit(1737409080.997:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8290 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  372.987681][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.062792][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.309187][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.474464][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.646942][ T8022] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.755066][ T8022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.836916][ T8022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.907276][ T8022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.926790][ T8022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.402843][   T54] Bluetooth: hci5: command 0x0c1a tx timeout
[  374.409024][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  374.435410][ T6620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.547894][ T6620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.695871][ T6620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.735840][ T6620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  376.350345][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.685515][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.841340][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.864623][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.999506][   T35] bridge_slave_1: left allmulticast mode
[  379.025184][   T35] bridge_slave_1: left promiscuous mode
[  379.101501][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.129809][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  379.138918][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  379.409460][   T35] bridge_slave_0: left allmulticast mode
[  379.482764][   T35] bridge_slave_0: left promiscuous mode
[  379.507149][ T8363] netlink: zone id is out of range
[  379.520869][ T8363] netlink: zone id is out of range
[  379.521090][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.532083][ T8363] netlink: zone id is out of range
[  379.538571][ T8363] netlink: zone id is out of range
[  379.556036][ T8363] netlink: zone id is out of range
[  379.561309][ T8363] netlink: zone id is out of range
[  379.567366][ T8363] netlink: zone id is out of range
[  379.576878][ T8363] netlink: zone id is out of range
[  379.583196][ T8363] netlink: zone id is out of range
[  379.590478][ T8363] netlink: zone id is out of range
[  381.026963][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  381.040159][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  381.125541][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  381.146646][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  381.160739][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  381.171827][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  381.321149][ T8380] Bluetooth: MGMT ver 1.23
[  382.597356][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.713261][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.734290][   T35] bond0 (unregistering): Released all slaves
[  383.152851][    T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  383.222221][   T54] Bluetooth: hci0: command tx timeout
[  383.892996][    T8] usb 1-1: Using ep0 maxpacket: 8
[  384.044890][    T8] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  384.064266][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.135172][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.525'.
[  384.173641][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.525'.
[  384.317415][ T8417] syz.5.525: attempt to access beyond end of device
[  384.317415][ T8417] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  384.330842][ T8417] hpfs: hpfs_map_sector(): read error
[  384.392797][    T8] usb 1-1: Product: syz
[  384.406407][    T8] usb 1-1: Manufacturer: syz
[  384.474942][    T8] usb 1-1: SerialNumber: syz
[  384.480565][   T35] hsr_slave_0: left promiscuous mode
[  384.498567][    T8] usb 1-1: config 0 descriptor??
[  384.504320][   T35] hsr_slave_1: left promiscuous mode
[  384.512010][    T8] gspca_main: sq930x-2.14.0 probing 2770:930c
[  384.526587][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  384.540984][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.551971][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.560241][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.611560][   T35] veth1_macvtap: left promiscuous mode
[  384.628817][   T35] veth0_macvtap: left promiscuous mode
[  384.642623][   T35] veth1_vlan: left promiscuous mode
[  384.665421][   T35] veth0_vlan: left promiscuous mode
[  385.264448][ T8429] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  385.372823][   T54] Bluetooth: hci0: command tx timeout
[  385.666054][    T8] gspca_sq930x: ucbus_write failed -110
[  385.699593][   T35] team0 (unregistering): Port device team_slave_1 removed
[  385.714753][   T35] team0 (unregistering): Port device team_slave_0 removed
[  385.868151][ T8373] chnl_net:caif_netlink_parms(): no params data found
[  385.967590][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.977172][ T8373] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.987444][ T8373] bridge_slave_0: entered allmulticast mode
[  385.996558][ T8373] bridge_slave_0: entered promiscuous mode
[  386.009616][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.019055][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.027739][ T8373] bridge_slave_1: entered allmulticast mode
[  386.037888][ T8373] bridge_slave_1: entered promiscuous mode
[  386.095960][ T8373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.108752][ T8373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.151724][ T8373] team0: Port device team_slave_0 added
[  386.169684][ T8373] team0: Port device team_slave_1 added
[  386.215360][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.225590][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.256471][ T8373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.271152][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.315221][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.371944][ T8373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.481899][ T8373] hsr_slave_0: entered promiscuous mode
[  387.034295][    T8] gspca_sq930x: Unknown sensor
[  387.034610][    T8] sq930x 1-1:0.0: probe with driver sq930x failed with error -22
[  387.460387][    T8] usb 1-1: USB disconnect, device number 3
[  387.467580][   T54] Bluetooth: hci0: command tx timeout
[  387.819345][ T8373] hsr_slave_1: entered promiscuous mode
[  387.831274][ T8373] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  387.831365][ T8373] Cannot create hsr debugfs directory
[  387.923655][ T8451] syz.4.530 uses obsolete (PF_INET,SOCK_PACKET)
[  389.110695][ T8467] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  389.523005][   T54] Bluetooth: hci0: command tx timeout
[  391.247617][   T30] INFO: task kworker/u8:18:6613 blocked for more than 144 seconds.
[  391.271931][   T30]       Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  391.297779][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  391.332910][   T30] task:kworker/u8:18   state:D stack:24592 pid:6613  tgid:6613  ppid:2      flags:0x00004000
[  391.735101][   T30] Workqueue: events_unbound netfs_write_collection_worker
[  391.752040][   T30] Call Trace:
[  391.764571][   T30]  <TASK>
[  391.784297][   T30]  __schedule+0x17fb/0x4be0
[  391.807104][   T30]  ? rcu_is_watching+0x15/0xb0
[  391.830881][   T30]  ? lock_release+0xbf/0xa30
[  391.926191][   T30]  ? __pfx___schedule+0x10/0x10
[  391.931174][   T30]  ? __pfx_lock_release+0x10/0x10
[  391.947422][   T30]  ? schedule+0x90/0x320
[  391.951743][   T30]  ? wq_worker_sleeping+0x66/0x240
[  391.962932][   T30]  ? schedule+0x90/0x320
[  391.967368][   T30]  schedule+0x14b/0x320
[  391.971561][   T30]  bit_wait+0x12/0xd0
[  391.986545][   T30]  __wait_on_bit+0xb0/0x2f0
[  391.991122][   T30]  ? do_raw_spin_lock+0x14f/0x370
[  391.998571][   T30]  ? __pfx_bit_wait+0x10/0x10
[  392.006708][   T30]  out_of_line_wait_on_bit+0x1d5/0x260
[  392.012233][   T30]  ? __pfx_bit_wait+0x10/0x10
[  392.018271][   T30]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  392.026223][   T30]  ? rcu_is_watching+0x15/0xb0
[  392.031080][   T30]  ? __pfx_wake_bit_function+0x10/0x10
[  392.037518][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  392.044217][   T30]  netfs_retry_writes+0x16e/0x19b0
[  392.049407][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  392.055297][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  392.061240][   T30]  ? rcu_is_watching+0x15/0xb0
[  392.066573][   T30]  ? __pfx_netfs_retry_writes+0x10/0x10
[  392.072168][   T30]  ? rcu_is_watching+0x15/0xb0
[  392.077710][   T30]  ? rcu_is_watching+0x15/0xb0
[  392.082555][   T30]  netfs_write_collection_worker+0x2f90/0x3bb0
[  392.089489][   T30]  ? process_scheduled_works+0x976/0x1840
[  392.096094][   T30]  process_scheduled_works+0xa66/0x1840
[  392.102140][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  392.110002][   T30]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  392.116374][   T30]  ? assign_work+0x364/0x3d0
[  392.121031][   T30]  worker_thread+0x870/0xd30
[  392.127839][   T30]  ? __kthread_parkme+0x169/0x1d0
[  392.133825][   T30]  ? __pfx_worker_thread+0x10/0x10
[  392.138990][   T30]  kthread+0x2f0/0x390
[  392.144006][   T30]  ? __pfx_worker_thread+0x10/0x10
[  392.149195][   T30]  ? __pfx_kthread+0x10/0x10
[  392.154695][   T30]  ret_from_fork+0x4b/0x80
[  392.159146][   T30]  ? __pfx_kthread+0x10/0x10
[  392.164659][   T30]  ret_from_fork_asm+0x1a/0x30
[  392.169489][   T30]  </TASK>
[  392.174000][   T30] INFO: task syz.3.266:7077 blocked for more than 144 seconds.
[  392.181702][   T30]       Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0
[  392.189623][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  392.198519][   T30] task:syz.3.266       state:D stack:23688 pid:7077  tgid:7076  ppid:5828   flags:0x00004006
[  392.208896][   T30] Call Trace:
[  392.212198][   T30]  <TASK>
[  392.215489][   T30]  __schedule+0x17fb/0x4be0
[  392.220056][   T30]  ? rcu_is_watching+0x15/0xb0
[  392.225075][   T30]  ? lock_release+0xbf/0xa30
[  392.230783][   T30]  ? __pfx___schedule+0x10/0x10
[  392.235979][   T30]  ? __pfx_lock_release+0x10/0x10
[  392.241050][   T30]  ? rcu_is_watching+0x15/0xb0
[  392.247581][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  392.253804][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  392.260186][   T30]  ? schedule+0x90/0x320
[  392.264776][   T30]  schedule+0x14b/0x320
[  392.268961][   T30]  schedule_preempt_disabled+0x13/0x30
[  392.274675][   T30]  __mutex_lock+0x7e7/0xee0
[  392.279227][   T30]  ? __mutex_lock+0x5ef/0xee0
[  392.284161][   T30]  ? netfs_writepages+0x12b/0x9e0
[  392.289221][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  392.294706][   T30]  ? rcu_is_watching+0x15/0xb0
[  392.299548][   T30]  ? lock_release+0xbf/0xa30
[  392.304479][   T30]  netfs_writepages+0x12b/0x9e0
[  392.309392][   T30]  ? __pfx_lock_release+0x10/0x10
[  392.314696][   T30]  ? stack_trace_save+0x118/0x1d0
[  392.319761][   T30]  ? unwind_next_frame+0x18e6/0x22d0
[  392.328558][   T30]  ? deref_stack_reg+0x17c/0x210
[  392.335042][   T30]  ? __pfx_netfs_writepages+0x10/0x10
[  392.340482][   T30]  ? preempt_count_add+0x93/0x190
[  392.346070][   T30]  ? __pfx_netfs_writepages+0x10/0x10
[  392.351507][   T30]  do_writepages+0x35f/0x880
[  392.356504][   T30]  ? __pfx_do_writepages+0x10/0x10
[  392.361674][   T30]  ? lock_release+0xbf/0xa30
[  392.366617][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  392.371692][   T30]  ? do_raw_spin_lock+0x14f/0x370
[  392.377283][   T30]  ? __pfx_lock_release+0x10/0x10
[  392.382366][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  392.388182][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  392.393788][   T30]  ? wbc_attach_and_unlock_inode+0x561/0x580
[  392.399821][   T30]  filemap_fdatawrite+0x1f3/0x2a0
[  392.405168][   T30]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  392.410756][   T30]  ? kmem_cache_free+0x30e/0x410
[  392.415946][   T30]  ? __pfx_ima_file_free+0x10/0x10
[  392.421120][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  392.427668][   T30]  v9fs_dir_release+0x151/0x560
[  392.433695][   T30]  ? __pfx___might_resched+0x10/0x10
[  392.439060][   T30]  ? __pfx_v9fs_dir_release+0x10/0x10
[  392.444632][   T30]  ? __pfx_call_rcu+0x10/0x10
[  392.449368][   T30]  ? evm_file_release+0x105/0x1e0
[  392.454697][   T30]  ? __pfx_v9fs_dir_release+0x10/0x10
[  392.460107][   T30]  __fput+0x23c/0xa50
[  392.464332][   T30]  task_work_run+0x24f/0x310
[  392.469035][   T30]  ? __phys_addr+0xba/0x170
[  392.473734][   T30]  ? __pfx_task_work_run+0x10/0x10
[  392.478881][   T30]  ? task_work_add+0x321/0x490
[  392.484459][   T30]  get_signal+0x15f7/0x1750
[  392.489048][   T30]  ? fput+0x1fa/0x290
[  392.493669][   T30]  ? __pfx_get_signal+0x10/0x10
[  392.498614][   T30]  arch_do_signal_or_restart+0x96/0x860
[  392.504653][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  392.510859][   T30]  ? rcu_is_watching+0x15/0xb0
[  392.515876][   T30]  syscall_exit_to_user_mode+0xce/0x340
[  392.521473][   T30]  do_syscall_64+0x100/0x230
[  392.526304][   T30]  ? clear_bhb_loop+0x35/0x90
[  392.531067][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.538395][   T30] RIP: 0033:0x7f7e35985d29
[  392.544260][   T30] RSP: 002b:00007f7e367f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  392.552939][   T30] RAX: 0000000000519000 RBX: 00007f7e35b75fa0 RCX: 00007f7e35985d29
[  392.560926][   T30] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007
[  392.569326][   T30] RBP: 00007f7e35a01b08 R08: 0000000000000000 R09: 0000000000000000
[  392.577584][   T30] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000
[  392.586208][   T30] R13: 0000000000000000 R14: 00007f7e35b75fa0 R15: 00007ffe0d4c3848
[  392.594619][   T30]  </TASK>
[  392.743881][   T30] INFO: lockdep is turned off.
[  392.782860][   T30] NMI backtrace for cpu 0
[  392.787257][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0
[  392.797437][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  392.807503][   T30] Call Trace:
[  392.810790][   T30]  <TASK>
[  392.813725][   T30]  dump_stack_lvl+0x241/0x360
[  392.818419][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  392.823631][   T30]  ? __pfx__printk+0x10/0x10
[  392.828232][   T30]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[  392.835182][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  392.840141][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  392.845623][   T30]  ? _printk+0xd5/0x120
[  392.849794][   T30]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  392.855785][   T30]  ? __pfx__printk+0x10/0x10
[  392.860385][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  392.866379][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  392.872379][   T30]  watchdog+0xff6/0x1040
[  392.876631][   T30]  ? watchdog+0x1ea/0x1040
[  392.881057][   T30]  ? __pfx_watchdog+0x10/0x10
[  392.885744][   T30]  kthread+0x2f0/0x390
[  392.889845][   T30]  ? __pfx_watchdog+0x10/0x10
[  392.894590][   T30]  ? __pfx_kthread+0x10/0x10
[  392.899203][   T30]  ret_from_fork+0x4b/0x80
[  392.903628][   T30]  ? __pfx_kthread+0x10/0x10
[  392.908226][   T30]  ret_from_fork_asm+0x1a/0x30
[  392.913012][   T30]  </TASK>
[  392.916139][    C0] vkms_vblank_simulate: vblank timer overrun
[  392.923043][   T30] Sending NMI from CPU 0 to CPUs 1:
[  392.928319][    C1] NMI backtrace for cpu 1
[  392.928336][    C1] CPU: 1 UID: 0 PID: 8480 Comm: syz.0.533 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0
[  392.928354][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  392.928366][    C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x18/0x90
[  392.928391][    C1] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 65 48 8b 14 25 c0 d4 03 00 65 8b 05 40 5e 64 7e <25> 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74
[  392.928405][    C1] RSP: 0018:ffffc9000b606998 EFLAGS: 00000246
[  392.928421][    C1] RAX: 0000000080000000 RBX: 0000000000000000 RCX: 1ffff920016c0d50
[  392.928433][    C1] RDX: ffff888032b7da00 RSI: 0000000000004001 RDI: 0000000000000927
[  392.928444][    C1] RBP: ffffc9000b606b50 R08: ffffffff8a0a48cb R09: 1ffff1100524c000
[  392.928457][    C1] R10: dffffc0000000000 R11: ffffed100524c001 R12: 0000000000000927
[  392.928468][    C1] R13: 0000000000004001 R14: dffffc0000000000 R15: 0000000000000000
[  392.928480][    C1] FS:  00007fda33db46c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  392.928494][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  392.928505][    C1] CR2: 0000560290ea2680 CR3: 000000005bf94000 CR4: 00000000003526f0
[  392.928520][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  392.928530][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  392.928540][    C1] Call Trace:
[  392.928546][    C1]  <NMI>
[  392.928552][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  392.928580][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  392.928600][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  392.928634][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  392.928659][    C1]  ? nmi_handle+0x14f/0x5a0
[  392.928679][    C1]  ? nmi_handle+0x2a/0x5a0
[  392.928698][    C1]  ? __sanitizer_cov_trace_cmp4+0x18/0x90
[  392.928715][    C1]  ? default_do_nmi+0x63/0x160
[  392.928741][    C1]  ? exc_nmi+0x123/0x1f0
[  392.928765][    C1]  ? end_repeat_nmi+0xf/0x53
[  392.928789][    C1]  ? hash_netport4_uadt+0xe2b/0x1470
[  392.928812][    C1]  ? __sanitizer_cov_trace_cmp4+0x18/0x90
[  392.928831][    C1]  ? __sanitizer_cov_trace_cmp4+0x18/0x90
[  392.928849][    C1]  ? __sanitizer_cov_trace_cmp4+0x18/0x90
[  392.928867][    C1]  </NMI>
[  392.928873][    C1]  <TASK>
[  392.928879][    C1]  hash_netport4_uadt+0xe2b/0x1470
[  392.928904][    C1]  ? __pfx_hash_netport4_add+0x10/0x10
[  392.928925][    C1]  ? __pfx_hash_netport4_uadt+0x10/0x10
[  392.928944][    C1]  ? rcu_is_watching+0x15/0xb0
[  392.928968][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  392.928994][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  392.929020][    C1]  ? call_ad+0x182/0xa70
[  392.929046][    C1]  call_ad+0x279/0xa70
[  392.929074][    C1]  ? __pfx_call_ad+0x10/0x10
[  392.929099][    C1]  ? rcu_is_watching+0x15/0xb0
[  392.929126][    C1]  ? lock_acquire+0xe3/0x550
[  392.929147][    C1]  ? __nla_parse+0x40/0x60
[  392.929174][    C1]  ip_set_ad+0x7e0/0x990
[  392.929202][    C1]  ? __pfx_ip_set_ad+0x10/0x10
[  392.929226][    C1]  ? trace_contention_end+0x3c/0x120
[  392.929263][    C1]  ? __nla_parse+0x40/0x60
[  392.929287][    C1]  ? nfnetlink_rcv_msg+0x225/0x1180
[  392.929304][    C1]  nfnetlink_rcv_msg+0xbec/0x1180
[  392.929320][    C1]  ? nfnetlink_rcv_msg+0x225/0x1180
[  392.929344][    C1]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  392.929359][    C1]  ? stack_trace_save+0x118/0x1d0
[  392.929395][    C1]  ? dev_hard_start_xmit+0x27a/0x7d0
[  392.929420][    C1]  ? __dev_queue_xmit+0x1b73/0x3f50
[  392.929444][    C1]  ? __netlink_deliver_tap+0x56b/0x7f0
[  392.929468][    C1]  ? netlink_deliver_tap+0x19d/0x1b0
[  392.929491][    C1]  ? netlink_unicast+0x7c4/0x990
[  392.929510][    C1]  ? netlink_sendmsg+0x8e4/0xcb0
[  392.929533][    C1]  ? __sock_sendmsg+0x221/0x270
[  392.929551][    C1]  ? ____sys_sendmsg+0x52a/0x7e0
[  392.929575][    C1]  ? __sys_sendmsg+0x269/0x350
[  392.929605][    C1]  netlink_rcv_skb+0x1e3/0x430
[  392.929628][    C1]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  392.929645][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  392.929674][    C1]  ? cap_capable+0x1b4/0x250
[  392.929697][    C1]  ? safesetid_security_capable+0xb2/0x1d0
[  392.929721][    C1]  ? bpf_lsm_capable+0x9/0x10
[  392.929737][    C1]  ? security_capable+0x7e/0x2d0
[  392.929756][    C1]  nfnetlink_rcv+0x297/0x2ab0
[  392.929773][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  392.929800][    C1]  ? __dev_queue_xmit+0x2f4/0x3f50
[  392.929826][    C1]  ? __dev_queue_xmit+0x1775/0x3f50
[  392.929850][    C1]  ? kasan_save_track+0x51/0x80
[  392.929875][    C1]  ? ____sys_sendmsg+0x52a/0x7e0
[  392.929901][    C1]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  392.929917][    C1]  ? __dev_queue_xmit+0x2f4/0x3f50
[  392.929943][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  392.929975][    C1]  ? ref_tracker_free+0x643/0x7e0
[  392.929998][    C1]  ? __asan_memcpy+0x40/0x70
[  392.930019][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  392.930044][    C1]  ? rcu_is_watching+0x15/0xb0
[  392.930066][    C1]  ? lock_release+0xbf/0xa30
[  392.930086][    C1]  ? skb_clone+0x240/0x390
[  392.930102][    C1]  ? __pfx_lock_release+0x10/0x10
[  392.930126][    C1]  ? __netlink_deliver_tap+0x7aa/0x7f0
[  392.930155][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  392.930179][    C1]  netlink_unicast+0x7f6/0x990
[  392.930203][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  392.930223][    C1]  ? __virt_addr_valid+0x45f/0x530
[  392.930243][    C1]  ? __phys_addr_symbol+0x2f/0x70
[  392.930262][    C1]  ? __check_object_size+0x47a/0x730
[  392.930290][    C1]  netlink_sendmsg+0x8e4/0xcb0
[  392.930319][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  392.930344][    C1]  ? lock_release+0xbf/0xa30
[  392.930364][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  392.930388][    C1]  __sock_sendmsg+0x221/0x270
[  392.930408][    C1]  ____sys_sendmsg+0x52a/0x7e0
[  392.930436][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  392.930460][    C1]  ? __fget_files+0x2a/0x410
[  392.930479][    C1]  ? __fget_files+0x2a/0x410
[  392.930500][    C1]  __sys_sendmsg+0x269/0x350
[  392.930525][    C1]  ? __pfx_futex_wake+0x10/0x10
[  392.930548][    C1]  ? __pfx___sys_sendmsg+0x10/0x10
[  392.930574][    C1]  ? lock_release+0xbf/0xa30
[  392.930610][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  392.930632][    C1]  ? rcu_is_watching+0x15/0xb0
[  392.930659][    C1]  ? rcu_is_watching+0x15/0xb0
[  392.930686][    C1]  do_syscall_64+0xf3/0x230
[  392.930710][    C1]  ? clear_bhb_loop+0x35/0x90
[  392.930736][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.930760][    C1] RIP: 0033:0x7fda35f85d29
[  392.930777][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.930792][    C1] RSP: 002b:00007fda33db4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  392.930812][    C1] RAX: ffffffffffffffda RBX: 00007fda36176160 RCX: 00007fda35f85d29
[  392.930826][    C1] RDX: 0000000000000080 RSI: 00000000200002c0 RDI: 0000000000000009
[  392.930838][    C1] RBP: 00007fda36001b08 R08: 0000000000000000 R09: 0000000000000000
[  392.930850][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  392.930861][    C1] R13: 0000000000000000 R14: 00007fda36176160 R15: 00007ffe692114c8
[  392.930881][    C1]  </TASK>
[  393.679875][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  393.686788][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0
[  393.696972][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  393.707059][   T30] Call Trace:
[  393.710359][   T30]  <TASK>
[  393.713309][   T30]  dump_stack_lvl+0x241/0x360
[  393.718023][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  393.723262][   T30]  ? __pfx__printk+0x10/0x10
[  393.727893][   T30]  ? vscnprintf+0x5d/0x90
[  393.732274][   T30]  panic+0x349/0x880
[  393.736216][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  393.742428][   T30]  ? __pfx_panic+0x10/0x10
[  393.746885][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  393.752308][   T30]  ? __irq_work_queue_local+0x137/0x410
[  393.757900][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  393.763347][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  393.769570][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  393.775781][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  393.782000][   T30]  watchdog+0x1035/0x1040
[  393.786377][   T30]  ? watchdog+0x1ea/0x1040
[  393.790842][   T30]  ? __pfx_watchdog+0x10/0x10
[  393.795564][   T30]  kthread+0x2f0/0x390
[  393.799688][   T30]  ? __pfx_watchdog+0x10/0x10
[  393.804412][   T30]  ? __pfx_kthread+0x10/0x10
[  393.809048][   T30]  ret_from_fork+0x4b/0x80
[  393.813505][   T30]  ? __pfx_kthread+0x10/0x10
[  393.818182][   T30]  ret_from_fork_asm+0x1a/0x30
[  393.823004][   T30]  </TASK>
[  393.826337][   T30] Kernel Offset: disabled
[  393.830666][   T30] Rebooting in 86400 seconds..