last executing test programs:

13.122848688s ago: executing program 0 (id=196):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0xfffffffffffff800, 0x2)
r5 = socket$kcm(0x10, 0x2, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_emit_vhci(0x0, 0x11)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20)

11.948648747s ago: executing program 0 (id=199):
fsopen(&(0x7f0000000000)='ubifs\x00', 0x0)

11.68918202s ago: executing program 0 (id=200):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
set_mempolicy(0x1, &(0x7f0000000040)=0x100000000401, 0xe)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xfffffffffffffd7f, 0x8, {0x1}}}}]}]}, 0x70}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000e0b214c801460000000000000000000000000000000000000000d4b98d7e31e7c0b12aebfabef9f700c90010d80f7ee4a45fa314c2a7119e2d93ea55a4d9cbcc6aebd2d6155f0a8232a8fdc0d18ff6d4d60e15a4ef4febaf82bf87ea855989203c11c437dae997fc895f0e74aa295ac014e1ee5cf93eae8ed8c38aa604a23b0638a61b444b0adcee210a2957a0d981f5654985b2174e4df2cf607130"], 0x48)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000200)={0x0, 0x2, "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"})
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0})
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

9.996071253s ago: executing program 2 (id=202):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040))
socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000100))
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

9.740359036s ago: executing program 2 (id=203):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40180, 0x0)
ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000180)={0x23, 0x113, 0x100000000, 0x4000002, 0xa60b})
creat(&(0x7f0000000000)='./file0/file0\x00', 0xecf86c37d53049ec)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES16=0x0, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x88c4}, 0x44)
r2 = fsopen(&(0x7f0000000200)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
socket(0x2, 0x80805, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
read(r5, &(0x7f0000000140)=""/116, 0x74)
syz_io_uring_complete(r4)

8.728430066s ago: executing program 2 (id=206):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000380)='dx\xeb\xf4\xd8&w\xef\xcd1w\xfd2\x19x\xcc\x8d\xabN\xea\xd1\xea\xfa\xc3u\xcdMB\xb2m\xe5Bq\xe3\x9a~\xbe3\xd7\xb1\x16\x8b\xb9\xb6\xc6u\x0f9S\x05\x83n\x01\xa1\x1c\x82\\fsa<\xcd\x18}=A{\x17\xd0\x95\xbd25N\b^\x8eFsTvd)\xad')
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r4, 0x5603, &(0x7f0000000100))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
sendfile(r3, r5, 0x0, 0x2000000e3aa6ea)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r2)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4)
connect$inet(r6, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10)
sendto(r6, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a424", 0x54, 0x4008044, 0x0, 0x0)
write$binfmt_misc(r6, &(0x7f0000000000), 0x0)
sendto$inet(r6, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x84000)

7.737674375s ago: executing program 1 (id=207):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x40}}, 0x0)

7.589626023s ago: executing program 1 (id=208):
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000008, 0x11, 0xffffffffffffffff, 0x76d0b000)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x1a840, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
readv(r1, &(0x7f0000000300)=[{&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f0000000000)=""/2, 0x2}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f0000000240)=""/173, 0xad}], 0x5)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x188}}, 0x4008004)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40101)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open$dir(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1a3)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380))
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r5, &(0x7f0000001d00)={0x2020}, 0x2020)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x2000, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0xa1, 0x8, 0x7, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x10, 0x1, 0x199, 0x7f}})
r8 = socket(0x2a, 0x800, 0x400000)
getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)

7.475891268s ago: executing program 3 (id=209):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x13, 0x4})
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1)
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000140)=0xfff8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
socket$tipc(0x1e, 0x5, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x7f, 0x40, 0xd23, 0x2, 0x8001}, 0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x47e00, 0x19)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r4, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000600)="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", 0xb5f}], 0x2}, 0x20008004)
syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc07000259610505240600"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

7.433693861s ago: executing program 0 (id=210):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb)
epoll_create1(0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xfffffffffffffffa, 0xffffffffffffffff, 'id1\x00'})
socket$alg(0x26, 0x5, 0x0)
fsopen(0x0, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
setreuid(0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"})
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000391000/0x4000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x20002b5, 0x0, 0x0, 0x0, 0x18})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8c853}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a0900000000000000000002000a2f0900010073797a30000000000900020073797a310000000008000340000000010800084000000000080004400000000014000000110001"], 0x6c}}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00'})
sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
getdents(r6, &(0x7f0000000300)=""/56, 0x38)

5.870567178s ago: executing program 4 (id=212):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="fb", 0x55)
r0 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="14ecd3a38335a82f20660d820000000207010200"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x819)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x86)
mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
read$msr(r2, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0)
lremovexattr(&(0x7f0000000140)='./file0/file1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='os2.*\x004'])
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a204be7693395d19b1000000000000000010080030900010073797a300000000014000000060a0104000000000000000001000000140000001100010000000000000000000700000a2095c8d2d87fb367daa2d3edb20f2b7a883f86a12828a2"], 0x5c}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

5.84010011s ago: executing program 2 (id=213):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040))
socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000100))
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

5.257705899s ago: executing program 4 (id=214):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000400000008000000ffffffff0018"], 0x50)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001080)={0x0, 0x2b, 0x1, [0x7, 0x40, 0x4, 0x1d, 0x8], [0x81, 0x80, 0xfffffffffffffffc, 0x2, 0x4, 0xfffffffffffffffb, 0x5, 0x7fffffff, 0x1, 0x1, 0x7, 0xf, 0x8000000000000001, 0xa, 0x10000000000e, 0x80, 0xfffffffffffffff8, 0x7faf, 0x938, 0x8, 0x6, 0xfffffffffffff664, 0x3, 0x80000000, 0xfb, 0x3, 0x20000000007, 0x3, 0x5, 0x400000008000008, 0x9, 0x9, 0xc, 0x6, 0xfffd, 0x4, 0xf4, 0xfffffffbfffdfffa, 0x3, 0x800000000000000, 0x5617, 0x1, 0x2, 0x5, 0x2, 0x2, 0x4000006, 0x71, 0x1, 0xfc4, 0x75, 0x40800cb14, 0x3b, 0x80000004, 0x8000000000000001, 0x40000000000756, 0x3, 0x0, 0x1246, 0x3ff, 0x4, 0x642, 0x66, 0x9, 0x1, 0x1, 0x8, 0x401, 0x1, 0x5, 0x9, 0x5, 0xfff, 0xfffffffffffffffe, 0x0, 0x400000000100001, 0xd32d, 0x8, 0x632, 0x7, 0x2, 0x8000000000000000, 0xfffffffffffffff9, 0x1, 0x5, 0x3, 0x7, 0x4, 0xd7, 0x8, 0x3, 0xb, 0x8, 0x8, 0x145, 0x5e9, 0xe51a, 0x40000000053ed, 0x2, 0x80, 0x0, 0x1, 0x402, 0x2, 0x5, 0x8000, 0x4, 0x0, 0xffff, 0x1, 0x19, 0x8, 0x2000000009, 0x4b3, 0x0, 0x34d8, 0xfff2, 0x9, 0xbf7, 0x100000000000b1, 0x8000000000000001]})
getpid()
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x3, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000001c0)=0x2001)
r4 = fcntl$dupfd(r3, 0x0, r3)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
dup(r5)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94)
socket(0x2, 0x80805, 0x0)

4.608607161s ago: executing program 0 (id=215):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb)
epoll_create1(0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xfffffffffffffffa, 0xffffffffffffffff, 'id1\x00'})
socket$alg(0x26, 0x5, 0x0)
fsopen(0x0, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
setreuid(0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"})
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000391000/0x4000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x20002b5, 0x0, 0x0, 0x0, 0x18})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8c853}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a0900000000000000000002000a2f0900010073797a30000000000900020073797a310000000008000340000000010800084000000000080004400000000014000000110001"], 0x6c}}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00'})
sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000180)={0x84, @dev={0xac, 0x14, 0x14, 0xa}, 0x15, 0x3, 'sed\x00', 0x1, 0x0, 0x4}, 0x2c)
socket$kcm(0xa, 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
getdents(r6, &(0x7f0000000300)=""/56, 0x38)

4.500622736s ago: executing program 1 (id=216):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x1b0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000340)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)

4.293569276s ago: executing program 4 (id=217):
syz_open_dev$sg(&(0x7f0000000040), 0xa, 0x800)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYRES16=0x0], 0x6c}}, 0x400c8c0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
close(0xffffffffffffffff)
inotify_init1(0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20008000)
sendfile(r0, r1, 0x0, 0x20000023896)

3.634218619s ago: executing program 2 (id=218):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
open(0x0, 0x143142, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setrlimit(0xd, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140))
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r4, &(0x7f0000009b80)=""/102392, 0x18ff8)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x7fffffff)

3.633659969s ago: executing program 1 (id=219):
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100))
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x140)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)

3.633134069s ago: executing program 4 (id=220):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x1000, 0x1})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

3.569203332s ago: executing program 3 (id=221):
syz_open_dev$sg(&(0x7f0000000040), 0xa, 0x800)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYRES16=0x0], 0x6c}}, 0x400c8c0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000480)}], 0x1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, r1, 0x0, 0x20000023896)

2.433621889s ago: executing program 3 (id=222):
bind$alg(0xffffffffffffffff, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0)
sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, r2, 0x48334cf00147764d, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044880}, 0x20000000)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d"], 0x5c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)

2.432434178s ago: executing program 0 (id=223):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000380)='dx\xeb\xf4\xd8&w\xef\xcd1w\xfd2\x19x\xcc\x8d\xabN\xea\xd1\xea\xfa\xc3u\xcdMB\xb2m\xe5Bq\xe3\x9a~\xbe3\xd7\xb1\x16\x8b\xb9\xb6\xc6u\x0f9S\x05\x83n\x01\xa1\x1c\x82\\fsa<\xcd\x18}=A{\x17\xd0\x95\xbd25N\b^\x8eFsTvd)\xad')
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r4, 0x5603, &(0x7f0000000100))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
sendfile(r3, r5, 0x0, 0x2000000e3aa6ea)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r2)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4)
connect$inet(r6, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10)
sendto(r6, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a424", 0x54, 0x4008044, 0x0, 0x0)
write$binfmt_misc(r6, &(0x7f0000000000), 0x0)
sendto$inet(r6, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x84000)

1.736737554s ago: executing program 3 (id=224):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x7f, 0x228000, 0x3, 0x9, 0x8, 0x0, 0x0, 0x0, 0x10}}, 0x50)
mkdir(0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x2e76be}], 0x1}, 0x3)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b0905, 0x8000, '\x00', @string=&(0x7f0000000180)=0x81}})
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa6c81, 0xc0)
open_by_handle_at(r6, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x80301)

1.652461877s ago: executing program 2 (id=225):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="400129000000570274a1"], 0x0}, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000540), 0x0}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

1.012966059s ago: executing program 3 (id=226):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x50)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
getpid()
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x3, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = dup(0xffffffffffffffff)
sendmsg$inet(r1, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000001c0)=0x2001)
fcntl$dupfd(r2, 0x0, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = dup(r3)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000000000000c410000004c0014fffffff062726f6164636173742d0e076e6b000000000000df995d1ec888273d06451a6b00000000000000000000000000760b00000091f700190000000000000000000000000000000000000000000000000000a13f73aa99d33b16bcf81c86b090c6435fd070da8cb45950adb61e2e3b682ec950496bb77c01c5d3758d631049935a18dac4c4251a95ea204f3b9c663f9d3887b632837dd013fe95fa3bebc76efeb4a72c87a9c3cd2a9e7d8b457f008bf3ea0eb34a377c"], 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x0)
socket(0x2, 0x80805, 0x0)

721.760204ms ago: executing program 4 (id=227):
r0 = getpid()
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x440, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0))
timer_settime(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

721.095724ms ago: executing program 3 (id=228):
syz_open_dev$sg(&(0x7f0000000040), 0xa, 0x800)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYRES16=0x0], 0x6c}}, 0x400c8c0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000480)}], 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
close(0xffffffffffffffff)
inotify_init1(0x800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20008000)
sendfile(r0, r1, 0x0, 0x20000023896)

218.826989ms ago: executing program 1 (id=229):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040))
socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000100))
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

110.986354ms ago: executing program 4 (id=230):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
getpid()
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000})
close(r0)
r2 = socket(0x2b, 0x1, 0x1)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x5)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=231):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x13, 0x4})
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1)
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000140)=0xfff8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
socket$tipc(0x1e, 0x5, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x7f, 0x40, 0xd23, 0x2, 0x8001}, 0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x47e00, 0x19)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r4, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000600)="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", 0xb5f}], 0x2}, 0x20008004)
syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc07000259610505240600"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts.
[   56.907043][ T4253] cgroup: Unknown subsys name 'net'
[   57.067624][ T4253] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.420895][ T4253] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   60.388099][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.397158][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.416547][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.425119][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   60.426473][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.432564][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.440040][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   60.447577][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.455674][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   60.461035][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.467945][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.475049][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   60.482027][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.488847][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   60.495916][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   60.509809][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.510092][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.518384][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.524455][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   60.538995][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   60.546593][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   60.553706][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.560744][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   60.563122][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   60.569863][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.575296][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.582962][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   60.588727][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   60.653772][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   60.661050][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   61.007501][ T4266] chnl_net:caif_netlink_parms(): no params data found
[   61.068340][ T4265] chnl_net:caif_netlink_parms(): no params data found
[   61.115590][ T4270] chnl_net:caif_netlink_parms(): no params data found
[   61.125896][ T4267] chnl_net:caif_netlink_parms(): no params data found
[   61.212314][ T4283] chnl_net:caif_netlink_parms(): no params data found
[   61.249238][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.257081][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.265429][ T4265] device bridge_slave_0 entered promiscuous mode
[   61.294397][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.301464][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.312096][ T4266] device bridge_slave_0 entered promiscuous mode
[   61.319803][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.326986][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.335087][ T4265] device bridge_slave_1 entered promiscuous mode
[   61.366098][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.373263][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.381370][ T4266] device bridge_slave_1 entered promiscuous mode
[   61.428973][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.436413][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.444576][ T4267] device bridge_slave_0 entered promiscuous mode
[   61.460991][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.484412][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.491497][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.502215][ T4270] device bridge_slave_0 entered promiscuous mode
[   61.509826][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.517017][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.525115][ T4267] device bridge_slave_1 entered promiscuous mode
[   61.534866][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.549305][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.558883][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.568945][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.576652][ T4283] device bridge_slave_0 entered promiscuous mode
[   61.584427][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.591509][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.599382][ T4270] device bridge_slave_1 entered promiscuous mode
[   61.615071][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.629392][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.636913][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.645225][ T4283] device bridge_slave_1 entered promiscuous mode
[   61.687387][ T4265] team0: Port device team_slave_0 added
[   61.700385][ T4265] team0: Port device team_slave_1 added
[   61.708265][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.719252][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.730884][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.760880][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.773530][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.798406][ T4266] team0: Port device team_slave_0 added
[   61.814490][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.835540][ T4266] team0: Port device team_slave_1 added
[   61.843628][ T4267] team0: Port device team_slave_0 added
[   61.851353][ T4270] team0: Port device team_slave_0 added
[   61.863952][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.870908][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.897106][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.917378][ T4267] team0: Port device team_slave_1 added
[   61.931786][ T4270] team0: Port device team_slave_1 added
[   61.947858][ T4283] team0: Port device team_slave_0 added
[   61.954213][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.961166][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.988267][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.021507][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.028653][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.054670][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.071302][ T4283] team0: Port device team_slave_1 added
[   62.091841][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.099640][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.126251][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.137822][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.145037][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.171314][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.203629][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.210600][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.237157][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.253268][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.260227][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.286665][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.301289][ T4265] device hsr_slave_0 entered promiscuous mode
[   62.310215][ T4265] device hsr_slave_1 entered promiscuous mode
[   62.328416][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.335517][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.361701][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.380257][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.387386][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.413436][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.437825][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.444883][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.471117][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.512094][ T4266] device hsr_slave_0 entered promiscuous mode
[   62.518662][ T4266] device hsr_slave_1 entered promiscuous mode
[   62.525289][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.533117][ T4266] Cannot create hsr debugfs directory
[   62.580749][ T4267] device hsr_slave_0 entered promiscuous mode
[   62.587560][ T4267] device hsr_slave_1 entered promiscuous mode
[   62.594278][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.601839][ T4267] Cannot create hsr debugfs directory
[   62.621021][ T4270] device hsr_slave_0 entered promiscuous mode
[   62.628273][ T4270] device hsr_slave_1 entered promiscuous mode
[   62.633679][ T4288] Bluetooth: hci0: command 0x0409 tx timeout
[   62.640235][ T4281] Bluetooth: hci2: command 0x0409 tx timeout
[   62.641256][ T4288] Bluetooth: hci3: command 0x0409 tx timeout
[   62.647280][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.662741][ T4270] Cannot create hsr debugfs directory
[   62.687795][ T4283] device hsr_slave_0 entered promiscuous mode
[   62.694988][ T4283] device hsr_slave_1 entered promiscuous mode
[   62.701731][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.709578][ T4283] Cannot create hsr debugfs directory
[   62.715107][ T4281] Bluetooth: hci4: command 0x0409 tx timeout
[   62.722983][ T4281] Bluetooth: hci1: command 0x0409 tx timeout
[   63.036827][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.057179][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.074135][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.085216][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.094137][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.105979][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.115478][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.127897][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.212352][ T4270] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.236515][ T4270] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.255352][ T4270] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.265232][ T4270] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.316305][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.341096][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.354160][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.364241][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   63.386358][ T4266] 8021q: adding VLAN 0 to HW filter on device team0
[   63.394903][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   63.407265][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   63.417513][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   63.436853][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.448635][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.458189][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.465446][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.474579][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.504193][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.529238][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.542244][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.550963][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.558042][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.567996][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.578249][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.618310][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.626473][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.637101][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.646587][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.655285][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.670616][ T4267] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.683883][ T4267] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.695489][ T4265] 8021q: adding VLAN 0 to HW filter on device team0
[   63.704877][ T4267] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.716936][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.726599][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.757972][ T4267] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.771994][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.788143][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.800860][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.810674][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.819451][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.828184][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.835393][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.843768][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.852024][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.860936][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.869316][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.879865][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.900240][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.909132][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.917503][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.927573][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.936519][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.943644][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.951952][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.990696][ T4283] 8021q: adding VLAN 0 to HW filter on device team0
[   64.002765][ T4270] 8021q: adding VLAN 0 to HW filter on device team0
[   64.018577][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.027253][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.041305][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.050443][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.066115][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.079597][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.090949][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.105522][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.115006][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.122958][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.162029][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.171100][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.180796][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.187952][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.198495][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.207390][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.216946][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.224083][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.232200][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.242159][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.256771][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.267107][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.274263][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.288209][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.297297][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.307088][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.314228][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.322612][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.331899][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.340905][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.350104][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.361290][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.369926][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.384427][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.392356][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.404591][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.412241][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.422929][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.431556][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.451116][ T4270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.461758][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.494341][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.501644][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.511967][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.520676][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.530100][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.538601][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.547395][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.556043][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.564734][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.573676][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.582001][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.589782][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.597572][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.605995][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.616292][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.624716][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.634777][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.644081][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.652526][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.673690][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.701132][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.712845][ T4281] Bluetooth: hci3: command 0x041b tx timeout
[   64.713163][ T4288] Bluetooth: hci2: command 0x041b tx timeout
[   64.718853][ T4281] Bluetooth: hci0: command 0x041b tx timeout
[   64.739002][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   64.760053][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   64.793759][ T4281] Bluetooth: hci1: command 0x041b tx timeout
[   64.793837][ T4288] Bluetooth: hci4: command 0x041b tx timeout
[   64.831133][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.884669][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.899035][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.925281][ T4267] 8021q: adding VLAN 0 to HW filter on device team0
[   64.936221][ T4266] device veth0_vlan entered promiscuous mode
[   64.950455][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   64.960102][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   64.990041][ T4266] device veth1_vlan entered promiscuous mode
[   64.998899][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.007473][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.031008][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.044124][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.058264][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.067755][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.074887][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.082474][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.092216][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.100703][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.107804][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.115814][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.147415][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.168129][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.196381][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.238642][ T4266] device veth0_macvtap entered promiscuous mode
[   65.260616][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.290719][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.319048][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.345581][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.367175][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.394207][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.404476][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.417381][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.429513][ T4266] device veth1_macvtap entered promiscuous mode
[   65.451998][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.480395][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.498610][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.508121][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.524763][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.532248][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.545692][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.555571][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.582177][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.595036][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.604394][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.614157][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.622555][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.631097][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.645118][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.656046][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.682402][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.697853][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.714500][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.736581][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.773404][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.787328][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.800339][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.817005][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.828733][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.842811][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.884613][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.903292][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.920206][ T4270] device veth0_vlan entered promiscuous mode
[   65.954067][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.962446][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.977299][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.987896][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.004720][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.027979][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.088360][ T4270] device veth1_vlan entered promiscuous mode
[   66.123836][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.131883][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.148940][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.161523][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.169848][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.193751][ T4265] device veth0_vlan entered promiscuous mode
[   66.239260][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.248112][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.257884][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.266462][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.304311][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.314771][ T4270] device veth0_macvtap entered promiscuous mode
[   66.328816][ T4265] device veth1_vlan entered promiscuous mode
[   66.328908][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.344494][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.360133][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.369413][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.379866][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.388159][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.398744][ T4283] device veth0_vlan entered promiscuous mode
[   66.407964][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.417978][ T4270] device veth1_macvtap entered promiscuous mode
[   66.427174][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.436086][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.445040][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.454123][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.461937][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.470351][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.480309][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.498878][ T4283] device veth1_vlan entered promiscuous mode
[   66.521547][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.534025][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.546038][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.555227][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.564809][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.573433][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.583292][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.610548][ T4265] device veth0_macvtap entered promiscuous mode
[   66.624618][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.644514][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.653800][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.662481][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.712186][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.743122][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.755832][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.767172][ T4267] device veth0_vlan entered promiscuous mode
[   66.774806][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.784032][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.792474][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.800563][ T4288] Bluetooth: hci0: command 0x040f tx timeout
[   66.808088][ T4279] Bluetooth: hci2: command 0x040f tx timeout
[   66.808484][ T4281] Bluetooth: hci3: command 0x040f tx timeout
[   66.820665][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.829822][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.839374][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.848134][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.861002][ T4265] device veth1_macvtap entered promiscuous mode
[   66.873019][   T48] Bluetooth: hci1: command 0x040f tx timeout
[   66.878287][ T4283] device veth0_macvtap entered promiscuous mode
[   66.879037][   T48] Bluetooth: hci4: command 0x040f tx timeout
[   66.890611][ T4283] device veth1_macvtap entered promiscuous mode
[   66.902990][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.914330][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.927007][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.939337][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.949840][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.965979][ T4355] process 'syz.2.3' launched '/dev/fd/11' with NULL argv: empty string added
[   66.983700][ T4270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.992411][ T4270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.011560][ T4270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.045439][ T4270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.098443][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.116047][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.131239][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.142301][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.159595][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.199156][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.208609][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.225811][ T4267] device veth1_vlan entered promiscuous mode
[   67.242457][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.256139][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.266478][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.280996][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.294351][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.317746][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.331547][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.345148][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.362780][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.372714][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.387493][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.398415][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.409355][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.425976][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.457443][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.467055][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.476913][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.486060][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.500717][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.520008][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.540143][ T4267] device veth0_macvtap entered promiscuous mode
[   67.564104][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.583312][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.593665][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.603850][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.633541][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.646164][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.664917][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.684488][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.702710][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.718349][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.745330][ T4267] device veth1_macvtap entered promiscuous mode
[   67.770043][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.780128][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.810831][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.833802][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.848349][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.862918][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.871744][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.942150][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.957842][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.968440][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.979198][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.992961][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.003669][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.013996][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.025036][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.044305][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.068130][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.094943][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.102985][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   68.118244][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.127167][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.143495][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.159426][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.174672][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.185111][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.195964][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.206089][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.216832][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.226897][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.242748][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.254458][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.272170][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.294037][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.346080][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.360202][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.368522][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.377672][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.377834][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.395210][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.404378][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.405596][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.454465][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.466920][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.550021][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.564397][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.599356][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.644405][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.652239][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.690454][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.723641][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.752950][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.787659][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.808265][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.814221][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.830214][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.863647][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.866443][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.878951][   T48] Bluetooth: hci3: command 0x0419 tx timeout
[   68.885020][   T48] Bluetooth: hci2: command 0x0419 tx timeout
[   68.891114][   T48] Bluetooth: hci0: command 0x0419 tx timeout
[   68.953270][   T48] Bluetooth: hci4: command 0x0419 tx timeout
[   68.961698][ T4281] Bluetooth: hci1: command 0x0419 tx timeout
[   69.198286][ T4370] Zero length message leads to an empty skb
[   69.344746][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   69.459362][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.862655][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   69.872703][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   71.276759][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[   71.283342][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[   72.234498][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   73.752891][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   73.762727][    T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!!
[   73.772660][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   73.780945][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   75.377314][ T4428] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   75.451265][ T4430] tipc: Started in network mode
[   76.311842][ T4430] tipc: Node identity 4e4e965f23ec, cluster identity 4711
[   76.396254][   T14] cfg80211: failed to load regulatory.db
[   76.409093][ T4430] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.675618][ T4427] tipc: Disabling bearer <eth:syzkaller0>
[   76.954048][ T4445] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   77.011269][ T4443] block device autoloading is deprecated and will be removed.
[   77.042726][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   77.999339][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'.
[   78.214156][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'.
[   78.354719][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   78.362972][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   78.432214][ T4469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.483627][ T4320] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   79.762863][ T4320] usb 4-1: Using ep0 maxpacket: 32
[   79.818543][ T4320] usb 4-1: config 0 has an invalid interface number: 119 but max is 0
[   79.950372][ T4320] usb 4-1: config 0 has no interface number 0
[   80.335686][ T4320] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping
[   80.360606][ T4320] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping
[   80.442321][ T4320] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   82.504961][ T4320] usb 4-1: string descriptor 0 read error: -71
[   82.511207][ T4320] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[   82.559157][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.689420][ T4320] usb 4-1: config 0 descriptor??
[   82.726197][ T4320] usb 4-1: can't set config #0, error -71
[   82.778851][ T4320] usb 4-1: USB disconnect, device number 2
[   83.148219][ T4513] xt_policy: neither incoming nor outgoing policy selected
[   86.571549][ T4543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'.
[   87.030275][ T4529] Set syz0 is full, maxelem 0 reached
[   87.465218][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'.
[   87.573020][ T4515] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   87.632707][   T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   87.792540][ T4515] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[   88.048517][ T4515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.064250][ T4562] mmap: syz.1.52 (4562) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   88.082192][ T4515] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   88.124965][ T4515] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   88.154849][ T4515] usb 1-1: Manufacturer: syz
[   88.210603][ T4515] usb 1-1: config 0 descriptor??
[   88.234488][   T22] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[   88.250763][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.734529][   T22] usb 3-1: config 0 descriptor??
[   88.942788][   T22] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[   88.973637][   T22] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[   89.022830][ T4515] rc_core: IR keymap rc-hauppauge not found
[   89.028884][ T4515] Registered IR keymap rc-empty
[   89.037777][   T22] [drm:udl_init] *ERROR* Selecting channel failed
[   89.086837][ T4515] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   89.146803][   T22] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[   89.166902][ T4515] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5
[   89.178944][   T22] [drm] Initialized udl on minor 2
[   89.199785][   T22] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   89.247873][   T22] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[   89.277821][   T22] usb 3-1: USB disconnect, device number 2
[   89.350338][ T4515] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[   89.402506][ T4515] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[   89.458520][ T4515] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[   90.649354][ T4587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'.
[   91.170798][ T4589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'.
[   91.189541][ T3043] usb 1-1: USB disconnect, device number 2
[   91.211465][ T4589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'.
[   94.162703][ T4515] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   94.352770][ T4515] usb 1-1: Using ep0 maxpacket: 8
[   94.359560][ T4515] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[   94.392894][ T4515] usb 1-1: config 0 has no interface number 0
[   94.420064][ T4515] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   94.447339][ T4515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.472802][ T4515] usb 1-1: Product: syz
[   94.480624][ T4515] usb 1-1: Manufacturer: syz
[   94.527096][ T4515] usb 1-1: SerialNumber: syz
[   94.570744][ T4515] usb 1-1: config 0 descriptor??
[   94.904283][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'.
[   95.225722][ T4515] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[   95.232220][ T4515] usb 1-1: Failed to initialize entity for entity 6
[   95.252702][ T4515] usb 1-1: Failed to register entities (-22).
[   95.672833][    T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   95.685608][ T4653] device syzkaller0 entered promiscuous mode
[   95.879574][    T7] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[   95.888974][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.112043][    T7] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   96.400585][    T7] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   96.446729][    T7] usb 3-1: Manufacturer: syz
[   96.484721][    T7] usb 3-1: config 0 descriptor??
[   96.558807][ T4515] usb 1-1: USB disconnect, device number 3
[   96.612032][ T4665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'.
[   96.662130][ T4665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'.
[   97.002879][    T7] rc_core: IR keymap rc-hauppauge not found
[   97.008793][    T7] Registered IR keymap rc-empty
[   97.038644][    T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   97.096820][    T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6
[   98.201692][ T4321] usb 3-1: USB disconnect, device number 3
[   98.995874][ T4687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'.
[   99.537438][ T4699] netlink: 76 bytes leftover after parsing attributes in process `syz.1.86'.
[  100.051954][ T4712] fuse: Unknown parameter 'group_id00000000000000000000'
[  100.803667][ T4704] Set syz0 is full, maxelem 0 reached
[  101.213468][ T4515] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  101.253261][ T3043] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  101.422890][ T4515] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  101.468658][ T4515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.541448][ T4734] =======================================================
[  101.541448][ T4734] WARNING: The mand mount option has been deprecated and
[  101.541448][ T4734]          and is ignored by this kernel. Remove the mand
[  101.541448][ T4734]          option from the mount to silence this warning.
[  101.541448][ T4734] =======================================================
[  101.550624][ T4515] usb 3-1: config 0 descriptor??
[  101.581763][ T3043] usb 5-1: Using ep0 maxpacket: 16
[  101.617646][ T3043] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  101.641277][ T3043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.649514][ T3043] usb 5-1: Product: syz
[  101.653814][ T3043] usb 5-1: Manufacturer: syz
[  101.658532][ T3043] usb 5-1: SerialNumber: syz
[  101.870071][ T4515] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  101.878815][ T4515] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  101.983877][ T4515] [drm:udl_init] *ERROR* Selecting channel failed
[  102.007897][ T4515] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  102.016211][ T4515] [drm] Initialized udl on minor 2
[  102.023200][ T4515] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  102.031847][ T4515] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  102.042456][ T4515] usb 3-1: USB disconnect, device number 4
[  102.073591][ T4320] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  102.095938][ T4320] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  102.130418][ T4320] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  102.347091][ T4744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'.
[  102.739640][ T3043] snd-usb-audio: probe of 5-1:1.0 failed with error -71
[  102.750031][ T3043] usb 5-1: USB disconnect, device number 2
[  103.232330][ T4320] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  103.449867][ T4320] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  103.459148][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.475009][ T4320] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  103.919594][ T4320] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  103.934095][ T4320] usb 4-1: Manufacturer: syz
[  103.940682][ T4320] usb 4-1: config 0 descriptor??
[  104.064937][ T4756] fuse: Unknown parameter 'group_id00000000000000000000'
[  104.258366][ T4320] rc_core: IR keymap rc-hauppauge not found
[  104.272032][ T4320] Registered IR keymap rc-empty
[  104.278308][ T4320] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  104.294569][ T4320] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7
[  105.452613][    C0] sched: RT throttling activated
[  106.460167][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.104'.
[  106.887088][ T4321] usb 4-1: USB disconnect, device number 3
[  106.960307][ T4572] udevd[4572]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  107.029851][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'.
[  108.992951][   T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  109.194466][   T14] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  109.218097][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.255959][   T14] usb 3-1: config 0 descriptor??
[  109.471088][   T14] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  109.540999][   T14] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  109.622728][   T14] [drm:udl_init] *ERROR* Selecting channel failed
[  109.702505][   T14] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  109.791403][   T14] [drm] Initialized udl on minor 2
[  109.805969][   T14] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  109.816932][   T14] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  109.905391][   T14] usb 3-1: USB disconnect, device number 5
[  109.967140][ T4321] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  109.976220][ T4321] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  109.995530][ T4321] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  110.212825][ T4818] Set syz0 is full, maxelem 0 reached
[  111.608850][ T4839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.123'.
[  112.500617][ T4848] fuse: Bad value for 'user_id'
[  116.684376][ T4321] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  116.976486][ T4321] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  117.036699][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.075129][ T4321] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  117.107768][ T4321] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  117.130291][ T4321] usb 3-1: Manufacturer: syz
[  117.137189][ T4321] usb 3-1: config 0 descriptor??
[  117.272871][ T4321] rc_core: IR keymap rc-hauppauge not found
[  117.278994][ T4321] Registered IR keymap rc-empty
[  117.299489][ T4321] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  117.327779][ T4321] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8
[  117.936392][ T4905] fuse: Unknown parameter '0x0000000000000008'
[  118.763773][ T4320] usb 3-1: USB disconnect, device number 6
[  119.122900][    T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  119.352714][    T7] usb 2-1: Using ep0 maxpacket: 16
[  119.366445][    T7] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  119.410794][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.441325][    T7] usb 2-1: Product: syz
[  119.452391][    T7] usb 2-1: Manufacturer: syz
[  119.480149][    T7] usb 2-1: SerialNumber: syz
[  119.692019][    T7] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  119.786457][    T7] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  120.314204][    T7] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  120.806994][    T7] usb 2-1: media controller created
[  120.849310][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  120.868085][    T7] zl10353_read_register: readreg error (reg=127, ret==-71)
[  120.918615][    T7] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5
[  120.964847][    T7] usb 2-1: USB disconnect, device number 2
[  121.108891][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'.
[  121.610723][ T4936] IPVS: sed: FWM 3 0x00000003 - no destination available
[  121.661683][    C0] IPVS: sed: FWM 3 0x00000003 - no destination available
[  122.108522][ T4943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'.
[  122.134193][ T4946] syz.3.155 uses obsolete (PF_INET,SOCK_PACKET)
[  123.699743][ T4964] Set syz0 is full, maxelem 0 reached
[  124.116469][ T4965] fuse: Unknown parameter '0x0000000000000007'
[  124.754263][ T4970] device syzkaller0 entered promiscuous mode
[  127.782786][ T3043] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  127.819417][ T5005] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  127.859293][ T5005] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  127.869849][ T5005] pit: kvm: requested 83809 ns i8254 timer period limited to 200000 ns
[  127.881332][ T5005] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  127.890725][ T5005] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  127.903382][ T5005] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[  127.916070][ T5005] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  127.928474][ T5005] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  127.939410][ T5005] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[  127.949324][ T5005] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns
[  127.985519][ T3043] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  128.002067][ T3043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.036779][ T3043] usb 5-1: config 0 descriptor??
[  128.260368][ T3043] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  128.296464][ T3043] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  128.367249][ T3043] [drm:udl_init] *ERROR* Selecting channel failed
[  128.469996][ T3043] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[  128.549665][ T3043] [drm] Initialized udl on minor 2
[  128.580151][ T3043] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  128.589772][ T3043] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  128.623935][ T4322] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  128.632435][ T3043] usb 5-1: USB disconnect, device number 3
[  128.658825][   T22] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  128.677263][   T22] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  128.686772][   T22] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  128.824618][ T4322] usb 4-1: Using ep0 maxpacket: 16
[  128.835252][ T4322] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  128.849416][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.857858][ T4322] usb 4-1: Product: syz
[  128.862196][ T4322] usb 4-1: Manufacturer: syz
[  128.867388][ T4322] usb 4-1: SerialNumber: syz
[  129.462087][ T4281] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  129.515980][ T4281] Bluetooth: hci4: Injecting HCI hardware error event
[  129.525291][   T48] Bluetooth: hci4: hardware error 0x00
[  129.582197][ T4322] snd-usb-audio: probe of 4-1:1.0 failed with error -71
[  129.606916][ T4322] usb 4-1: USB disconnect, device number 4
[  129.612943][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'.
[  131.673528][   T48] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  132.716962][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  132.726959][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  134.214838][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.223815][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.504870][ T5064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.668998][ T5064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.902134][ T5064] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.911467][ T5064] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.924435][ T5064] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.946436][ T5064] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.741388][ T5090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'.
[  138.784619][ T5090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'.
[  138.992100][ T5130] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  139.120063][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'.
[  140.063390][ T5143] Set syz0 is full, maxelem 0 reached
[  140.622829][ T5147] Cannot find del_set index 2 as target
[  141.282828][   T48] Bluetooth: hci1: command 0x0c1a tx timeout
[  141.289078][ T5137] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  141.811323][ T5157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'.
[  141.962958][ T5137] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  141.987498][ T5137] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  142.016977][ T5137] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  142.037301][ T5137] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  142.057036][ T5137] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  142.081067][ T5137] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  142.167257][ T5137] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  142.553342][ T5137] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  142.567457][ T5137] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  142.585101][ T5137] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  142.600452][ T5137] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  142.845614][   T26] audit: type=1804 audit(1774347117.439:2): pid=5168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.218" name="bus" dev="ramfs" ino=37171 res=1 errno=0
[  143.432701][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  144.039908][ T5180] Set syz0 is full, maxelem 0 reached
[  144.136165][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout
[  144.152902][   T48] Bluetooth: hci0: command 0x0c1a tx timeout
[  144.633009][   T48] Bluetooth: hci3: command 0x0c1a tx timeout
[  145.042672][ T3043] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  145.242678][ T3043] usb 3-1: Using ep0 maxpacket: 16
[  145.249772][ T3043] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.352790][ T3043] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.429615][ T3043] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  145.509853][ T3043] usb 3-1: config 0 interface 0 has no altsetting 0
[  145.588285][ T3043] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  145.741635][ T3043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.117542][ T3043] usb 3-1: config 0 descriptor??
[  146.234466][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  146.240651][   T48] Bluetooth: hci2: command 0x0406 tx timeout
[  146.360566][ T5201] 
[  146.362926][ T5201] ======================================================
[  146.369941][ T5201] WARNING: possible circular locking dependency detected
[  146.376949][ T5201] syzkaller #0 Not tainted
[  146.381339][ T5201] ------------------------------------------------------
[  146.388335][ T5201] syz.4.230/5201 is trying to acquire lock:
[  146.394202][ T5201] ffff888056cd1458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x10d/0xae0
[  146.405672][ T5201] 
[  146.405672][ T5201] but task is already holding lock:
[  146.413017][ T5201] ffff888056cd0130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530
[  146.421965][ T5201] 
[  146.421965][ T5201] which lock already depends on the new lock.
[  146.421965][ T5201] 
[  146.432346][ T5201] 
[  146.432346][ T5201] the existing dependency chain (in reverse order) is:
[  146.441452][ T5201] 
[  146.441452][ T5201] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}:
[  146.449196][ T5201]        lock_sock_nested+0x44/0x100
[  146.454474][ T5201]        smc_listen_out+0x109/0x3d0
[  146.459662][ T5201]        smc_listen_work+0x581/0xd70
[  146.464945][ T5201]        process_one_work+0x8a2/0x1160
[  146.470415][ T5201]        worker_thread+0xaa2/0x1270
[  146.475613][ T5201]        kthread+0x29d/0x330
[  146.480197][ T5201]        ret_from_fork+0x1f/0x30
[  146.485139][ T5201] 
[  146.485139][ T5201] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}:
[  146.495281][ T5201]        __lock_acquire+0x2d07/0x7d10
[  146.500641][ T5201]        lock_acquire+0x1bb/0x4a0
[  146.505659][ T5201]        __flush_work+0x126/0xae0
[  146.510667][ T5201]        __cancel_work_timer+0x3f4/0x560
[  146.516301][ T5201]        smc_clcsock_release+0x5c/0xe0
[  146.521762][ T5201]        __smc_release+0x661/0x7d0
[  146.526885][ T5201]        smc_close_non_accepted+0xd1/0x1f0
[  146.532684][ T5201]        smc_close_active+0xb00/0xea0
[  146.538040][ T5201]        __smc_release+0x8d/0x7d0
[  146.543053][ T5201]        smc_release+0x2ca/0x530
[  146.547976][ T5201]        sock_close+0xd5/0x240
[  146.552772][ T5201]        __fput+0x22c/0x920
[  146.557287][ T5201]        task_work_run+0x1d0/0x260
[  146.562398][ T5201]        exit_to_user_mode_loop+0xe6/0x110
[  146.568649][ T5201]        exit_to_user_mode_prepare+0xee/0x180
[  146.574709][ T5201]        syscall_exit_to_user_mode+0x16/0x40
[  146.580680][ T5201]        do_syscall_64+0x58/0xa0
[  146.585605][ T5201]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.592018][ T5201] 
[  146.592018][ T5201] other info that might help us debug this:
[  146.592018][ T5201] 
[  146.602235][ T5201]  Possible unsafe locking scenario:
[  146.602235][ T5201] 
[  146.609671][ T5201]        CPU0                    CPU1
[  146.615016][ T5201]        ----                    ----
[  146.620361][ T5201]   lock(sk_lock-AF_SMC/1);
[  146.624850][ T5201]                                lock((work_completion)(&new_smc->smc_listen_work));
[  146.634288][ T5201]                                lock(sk_lock-AF_SMC/1);
[  146.641296][ T5201]   lock((work_completion)(&new_smc->smc_listen_work));
[  146.648221][ T5201] 
[  146.648221][ T5201]  *** DEADLOCK ***
[  146.648221][ T5201] 
[  146.656351][ T5201] 2 locks held by syz.4.230/5201:
[  146.661350][ T5201]  #0: ffff888073f22610 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  146.671510][ T5201]  #1: ffff888056cd0130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530
[  146.680897][ T5201] 
[  146.680897][ T5201] stack backtrace:
[  146.686778][ T5201] CPU: 1 PID: 5201 Comm: syz.4.230 Not tainted syzkaller #0
[  146.694040][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  146.704077][ T5201] Call Trace:
[  146.707351][ T5201]  <TASK>
[  146.710267][ T5201]  dump_stack_lvl+0x188/0x24e
[  146.714934][ T5201]  ? load_image+0x400/0x400
[  146.719431][ T5201]  ? show_regs_print_info+0x12/0x12
[  146.724623][ T5201]  ? print_circular_bug+0x12b/0x1a0
[  146.729816][ T5201]  check_noncircular+0x296/0x330
[  146.734748][ T5201]  ? look_up_lock_class+0x75/0x140
[  146.739851][ T5201]  ? add_chain_block+0x940/0x940
[  146.744774][ T5201]  ? lockdep_lock+0xf1/0x1f0
[  146.749349][ T5201]  ? lock_release+0xcf/0x920
[  146.753924][ T5201]  ? _find_first_zero_bit+0xcf/0x100
[  146.759193][ T5201]  __lock_acquire+0x2d07/0x7d10
[  146.764043][ T5201]  ? unwind_next_frame+0x1880/0x20b0
[  146.769325][ T5201]  ? deref_stack_reg+0x19f/0x230
[  146.774250][ T5201]  ? __bfs+0x2a3/0x5c0
[  146.778313][ T5201]  ? verify_lock_unused+0x140/0x140
[  146.783510][ T5201]  ? mark_lock+0x94/0x320
[  146.787833][ T5201]  ? __lock_acquire+0x13cf/0x7d10
[  146.792852][ T5201]  ? add_chain_block+0x940/0x940
[  146.797783][ T5201]  ? lockdep_unlock+0x142/0x2e0
[  146.802627][ T5201]  lock_acquire+0x1bb/0x4a0
[  146.807127][ T5201]  ? __flush_work+0x10d/0xae0
[  146.811786][ T5201]  ? __lock_acquire+0x13cf/0x7d10
[  146.816795][ T5201]  ? read_lock_is_recursive+0x10/0x10
[  146.822156][ T5201]  ? __flush_work+0x10d/0xae0
[  146.826819][ T5201]  __flush_work+0x126/0xae0
[  146.831303][ T5201]  ? __flush_work+0x10d/0xae0
[  146.835961][ T5201]  ? verify_lock_unused+0x140/0x140
[  146.841144][ T5201]  ? flush_work+0x20/0x20
[  146.845538][ T5201]  ? try_to_grab_pending+0xfa/0x860
[  146.850714][ T5201]  ? lockdep_hardirqs_off+0x70/0x100
[  146.855981][ T5201]  ? mark_lock+0x94/0x320
[  146.860294][ T5201]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  146.866257][ T5201]  ? lock_chain_count+0x20/0x20
[  146.871110][ T5201]  ? __cancel_work_timer+0x36a/0x560
[  146.876374][ T5201]  __cancel_work_timer+0x3f4/0x560
[  146.881516][ T5201]  ? cancel_work_sync+0x20/0x20
[  146.886350][ T5201]  ? __smc_release+0x659/0x7d0
[  146.891097][ T5201]  ? __local_bh_enable_ip+0x136/0x1c0
[  146.896457][ T5201]  ? lockdep_hardirqs_on+0x94/0x140
[  146.901646][ T5201]  ? __local_bh_enable_ip+0x136/0x1c0
[  146.907012][ T5201]  ? _local_bh_enable+0xa0/0xa0
[  146.911855][ T5201]  smc_clcsock_release+0x5c/0xe0
[  146.916784][ T5201]  __smc_release+0x661/0x7d0
[  146.921362][ T5201]  ? do_raw_spin_unlock+0x11d/0x230
[  146.926542][ T5201]  smc_close_non_accepted+0xd1/0x1f0
[  146.931818][ T5201]  smc_close_active+0xb00/0xea0
[  146.936657][ T5201]  ? sock_no_sendpage_locked+0x1c0/0x1c0
[  146.942276][ T5201]  __smc_release+0x8d/0x7d0
[  146.946799][ T5201]  ? do_raw_spin_unlock+0x11d/0x230
[  146.951991][ T5201]  smc_release+0x2ca/0x530
[  146.956400][ T5201]  sock_close+0xd5/0x240
[  146.960629][ T5201]  ? sock_mmap+0x90/0x90
[  146.964860][ T5201]  __fput+0x22c/0x920
[  146.968836][ T5201]  task_work_run+0x1d0/0x260
[  146.973420][ T5201]  ? task_work_cancel+0x220/0x220
[  146.978459][ T5201]  ? exit_to_user_mode_loop+0x3b/0x110
[  146.983911][ T5201]  exit_to_user_mode_loop+0xe6/0x110
[  146.989193][ T5201]  exit_to_user_mode_prepare+0xee/0x180
[  146.994734][ T5201]  syscall_exit_to_user_mode+0x16/0x40
[  147.000179][ T5201]  do_syscall_64+0x58/0xa0
[  147.004581][ T5201]  ? clear_bhb_loop+0x60/0xb0
[  147.009243][ T5201]  ? clear_bhb_loop+0x60/0xb0
[  147.013904][ T5201]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  147.019853][ T5201] RIP: 0033:0x7f226b79c799
[  147.024269][ T5201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.043886][ T5201] RSP: 002b:00007f226c72e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  147.052283][ T5201] RAX: 0000000000000000 RBX: 00007f226ba15fa0 RCX: 00007f226b79c799
[  147.060236][ T5201] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  147.068197][ T5201] RBP: 00007f226b832c99 R08: 0000000000000000 R09: 0000000000000000
[  147.076153][ T5201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.084107][ T5201] R13: 00007f226ba16038 R14: 00007f226ba15fa0 R15: 00007ffc53814338
[  147.092078][ T5201]  </TASK>
[  147.097429][   T48] Bluetooth: hci3: command 0x0406 tx timeout
[  147.154396][ T5203] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  147.328932][ T3043] usb 3-1: USB disconnect, device number 7
[  147.405205][ T5204] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  147.411268][ T5204] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  147.418741][ T5204] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  147.426092][ T5204] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  147.432056][ T5204] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  147.439376][ T5204] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  147.448259][ T5204] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  147.454400][ T5204] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  147.461167][ T5204] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  147.468536][ T5204] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  147.474630][ T5204] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  147.482146][ T5204] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  147.752762][ T4316] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  147.944063][ T4316] usb 2-1: config 150 has an invalid interface number: 204 but max is 2
[  147.952450][ T4316] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  147.962988][ T4316] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 3
[  147.972027][ T4316] usb 2-1: config 150 has no interface number 0
[  147.978345][ T4316] usb 2-1: config 150 interface 204 has no altsetting 0
[  147.986977][ T4316] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  147.996683][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.004743][ T4316] usb 2-1: Product: syz
[  148.008921][ T4316] usb 2-1: Manufacturer: syz
[  148.013612][ T4316] usb 2-1: SerialNumber: syz
[  149.352739][   T48] Bluetooth: hci1: command 0x0c1a tx timeout
[  149.432679][   T48] Bluetooth: hci2: command 0x0c1a tx timeout
[  149.512653][   T48] Bluetooth: hci3: command 0x0c1a tx timeout
[  149.512672][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout
[  150.125250][ T4316] usb 2-1: USB disconnect, device number 3
[  151.432729][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  151.522671][ T4288] Bluetooth: hci2: command 0x0406 tx timeout
[  151.592695][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  151.592705][ T4288] Bluetooth: hci3: command 0x0406 tx timeout