last executing test programs:

1m42.300773187s ago: executing program 5 (id=193):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
shmget$private(0x0, 0x13000, 0x200, &(0x7f0000feb000/0x13000)=nil)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000200)={0x5, 0x1, {0x3, 0x1, 0xd, 0x0, 0x4}, 0x9})
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x81)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r4, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2})
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x400, 0x300, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, {0x0, 0x401}, {}, {}, {0x0, 0x8}, 0x3, 0x3f0, 0x81, 0xe, 0x1, 0x0, 0x0, 0x0, 0x761a, 0x0, 0x9, 0x0, 0x10, 0x1, 0x3, 0x1})

1m40.284804487s ago: executing program 5 (id=195):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x20008000)
timerfd_create(0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
bind$tipc(0xffffffffffffffff, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x4}}, 0x10)

1m39.627445187s ago: executing program 5 (id=198):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, 0x0)
munmap(&(0x7f0000799000/0x3000)=nil, 0x3000)
mmap(&(0x7f000079b000/0x1000)=nil, 0x1000, 0x0, 0x4100032, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={0xffffffffffffffff, 0x300}, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640000a0000050001000600000005000500020000000500"], 0x5c}}, 0x20000800)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0)
ioctl$SNAPSHOT_S2RAM(r2, 0x330b)

1m36.76694368s ago: executing program 5 (id=204):
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x22000, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, <r1=>0x0})
fcntl$setown(r0, 0x8, r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5}}, 0x10)

1m35.463671139s ago: executing program 5 (id=209):
creat(&(0x7f0000000040)='./bus\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)

1m34.106023119s ago: executing program 5 (id=211):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0x1}}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x20000000, 0x500, 0x4], [0x3]], '\x00', [{0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}], '\x00', 0x6b4})
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
close(0x3)

1m18.356967166s ago: executing program 32 (id=211):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0x1}}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x20000000, 0x500, 0x4], [0x3]], '\x00', [{0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}], '\x00', 0x6b4})
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
close(0x3)

26.102185906s ago: executing program 1 (id=354):
r0 = socket(0x400000000010, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = dup(0xffffffffffffffff)
write$6lowpan_enable(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_open_procfs$userns(r2, &(0x7f00000000c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(r4, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r7, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a})

17.422281748s ago: executing program 0 (id=365):
mkdir(&(0x7f0000000000)='./file0\x00', 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r2, 0x0)

15.405291297s ago: executing program 4 (id=369):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
fchdir(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x5)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800})
listen(0xffffffffffffffff, 0x5)
io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0)

15.178831383s ago: executing program 1 (id=370):
r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040), &(0x7f0000000000))
r1 = getpid()
prlimit64(r1, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

13.952578745s ago: executing program 4 (id=372):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}}}}}}}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x0, 0x0}}, 0x10)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0x9c, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x18, 0x48, 0x4, 0x24, 0x30, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x3}, {0x4, 0x6}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
connect$pppl2tp(r4, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

12.046541045s ago: executing program 4 (id=373):
ppoll(0x0, 0x0, 0x0, &(0x7f0000000180)={[0x400]}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x2, 0x3a)
r6 = dup(r5)
bind$unix(r6, &(0x7f0000000300)=@abs={0xa, 0x2}, 0x6e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00')

10.778471819s ago: executing program 2 (id=374):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
shmget$private(0x0, 0x13000, 0x200, &(0x7f0000feb000/0x13000)=nil)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000200)={0x5, 0x1, {0x3, 0x1, 0xd, 0x0, 0x4}, 0x9})
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x81)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2})
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4, 0x1}}, 0x10)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x400, 0x300, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, {0x0, 0x401}, {}, {}, {0x0, 0x8}, 0x3, 0x3f0, 0x81, 0xe, 0x1, 0x0, 0x0, 0x0, 0x761a, 0x0, 0x9, 0x0, 0x10, 0x1, 0x3, 0x1})

10.758037827s ago: executing program 1 (id=375):
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000280)=0x1e51, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0)
copy_file_range(r0, 0x0, r0, 0x0, 0xb, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={<r5=>0x0, 0x53bd, 0x8, 0x493, 0xcb42, 0x5, 0x383d, 0xfff, {0x0, @in={{0x2, 0x4e21, @local}}, 0x7, 0x2, 0x324c, 0x1, 0xfc35}}, &(0x7f0000000180)=0xb0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r5, 0x8}, &(0x7f0000000200)=0x8)

10.717935221s ago: executing program 3 (id=376):
io_uring_setup(0x30d7, &(0x7f00000000c0)={0x0, 0xf487, 0x800, 0x0, 0x1d})
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r4, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r5, r4, 0x0, 0x578410e9)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[<r7=>0x0], &(0x7f0000000640), 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x201, 0x1, &(0x7f0000000440)=[0x0], 0x0, &(0x7f00000000c0)=[r7, r7], &(0x7f0000000180)})

10.537732578s ago: executing program 0 (id=377):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x20002)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_pts(r1, 0x10400)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
syz_open_dev$tty20(0xc, 0x4, 0x0)
unshare(0x62040200)
lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000200000002000400000000000000100001000000000020"], 0x24, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, 0x0, 0x0)

8.565873115s ago: executing program 1 (id=378):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES32], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "348654c04380036874c07ec32f08554427c380ea60acdb7c2fd4387fe874c13fd2e98345e0acf31bd845105f4b3e4ccfe352876f983a1b86086f24eb83ff1d20a518c48a988b730c99aabd5c4f063f29071469870ef7a02a22b9bd471aa82d2e8f10959c624f2516eab342811e16196e4e04ae046e97cf73a0080537a1181250e67623d0e46db7cea2d32a"}}, &(0x7f0000000580)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x1b, 0x4c, 0x5, "7582cdf7", "3963e2c5"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe6, 0x1, 0x27, 0x0, 0x5, 0x101, 0x223}}}, &(0x7f0000000c80)={0x84, 0x0, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000940)={0x20, 0x0, 0x8, {0x60, 0x2, [0xf0]}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x2dca}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "2505"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0xe5}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x0, &(0x7f0000000b00)={0x40, 0x19, 0x2, "84bd"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x27}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x6}})
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9eb}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x8040)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="000004000e00000045"], 0x0, 0x0, 0x0, 0x0})

8.544993951s ago: executing program 3 (id=379):
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'})
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x143000, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x1678c0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)

7.176160489s ago: executing program 2 (id=380):
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)={0xa8, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xb}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x58, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x16, 0xc, 0x60, 0x16, 0x3, 0x1, 0x18, 0x6c, 0x4, 0x24, 0x5, 0x48, 0x4, 0x6c, 0x60, 0x16, 0x5, 0x16, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x46, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

6.881911057s ago: executing program 4 (id=381):
socket(0x11, 0xa, 0xfffffffd)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x6, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
add_key(&(0x7f00000018c0)='big_key\x00', 0x0, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
write$UHID_CREATE2(r2, &(0x7f0000000480)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x1ff, 0x4, 0x0, 0x0, 0xff}}, 0x118)
chdir(&(0x7f0000000140)='./bus\x00')
read$FUSE(r2, &(0x7f0000001980)={0x2020, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
lchown(&(0x7f0000000100)='./file0\x00', 0x0, r3)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0x356, 0x30, 0x0, 0x0, 0xf, 0x0, {}, {}, {}, {}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5})
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x8, 0x2007, @fd_index=0x4, 0x9, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x57, 0xc2b1, 0x1, 0x0, 0x0)

6.817887914s ago: executing program 3 (id=382):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
shmget$private(0x0, 0x13000, 0x200, &(0x7f0000feb000/0x13000)=nil)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2})
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x400, 0x300, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, {0x0, 0x401}, {}, {}, {0x0, 0x8}, 0x3, 0x3f0, 0x81, 0xe, 0x1, 0x0, 0x0, 0x0, 0x761a, 0x0, 0x9, 0x0, 0x10, 0x1, 0x3, 0x1})

6.676416118s ago: executing program 2 (id=383):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5)
recvmmsg(r5, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x2101}, {{0x0, 0x0, &(0x7f0000000500)}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x80000000}], 0x4, 0x20, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[], 0x50)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
io_setup(0x4, &(0x7f0000000340))
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/42, 0x0})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000180)=""/87, 0x0, 0x4000})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000e00)={0x4, 0x0, [{0x10000, 0x90, &(0x7f0000000ec0)=""/144}, {0xd000, 0x0, 0x0}, {0x2000, 0x6, &(0x7f0000000d00)=""/6}, {0xeeee0000, 0x90, &(0x7f0000000d40)=""/144}]})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000500)=0x1)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, &(0x7f0000000200))

6.529097747s ago: executing program 0 (id=384):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}}}}}}}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x0, 0x0}}, 0x10)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0x9c, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x18, 0x48, 0x4, 0x24, 0x30, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x3}, {0x4, 0x6}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
connect$pppl2tp(r4, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

5.346148994s ago: executing program 4 (id=385):
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', <r0=>0x0, 0x2d, 0x5, 0x0, 0x7, 0x1d, @rand_addr=' \x01\x00', @remote, 0x10, 0x20, 0x6, 0x20000}})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
pipe2$watch_queue(0x0, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x31)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @default, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]})
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@default, @null, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

4.945652246s ago: executing program 0 (id=386):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}}}}}}}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x0, 0x0}}, 0x10)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xa0, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x18, 0xc, 0x60, 0x16, 0x3, 0x1, 0x18, 0x3, 0x4, 0x24, 0x5, 0x48, 0x6c, 0x60, 0x16, 0x5, 0x14, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x3}, {0x4, 0x6}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
connect$pppl2tp(r4, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000a00)={0x134, r0, 0x710, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x1d}}}}, [@NL80211_ATTR_BEACON_TAIL={0xe9, 0xf, [@link_id={0x65, 0x12}, @mesh_id={0x72, 0x6}, @random={0x6, 0xb1, "815c7069163a277d7c855f23f36852dc433537566ba1fd84ba98b5accf9b78dfa94123e92b60b5bc54f90bfd45b94ed32c0041f7c90464eb1e059516b1c49321e1f0b61dad4b0396e6b4fca5afcc720b84e0d283717c89608c8799e15218f4679a2b3573812363444a07e76b458c19050126f8bffb21963acfecbf747f60c08cd7a576a512ab74e4e1f707087433f1dc15569bd46441ac3529ce411f39e47dd86a633011e244b8618ffd036b223722e15d"}, @mesh_chsw={0x76, 0x6, {0x4, 0x3, 0x38, 0x7}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x8d, 0x40}}, @supported_rates, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1f, 0x7f, [@tim={0x5, 0x3, {0x5, 0x4f, 0x6}}, @peer_mgmt={0x75, 0x14, {0x0, 0x0, @void, @void, @val="ea1bf5bad34e3f478506fc51f8598860"}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x8e409b4cb1b8e705}, 0x4000000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4.622862555s ago: executing program 2 (id=387):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
syz_emit_ethernet(0x4a, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, 0x0, 0x0)
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0xf6, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000040), 0xc)

4.336919133s ago: executing program 3 (id=388):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
ioprio_get$uid(0x3, 0xee01)

4.100564865s ago: executing program 0 (id=389):
syz_open_procfs(0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r0, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r1 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r1, 0x3)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg(r3, &(0x7f0000001500), 0x588, 0x1f8)

4.001669779s ago: executing program 1 (id=390):
syz_open_procfs(0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r0, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
socket(0x1, 0x803, 0x0)
r1 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r1, 0x3)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg(r3, &(0x7f0000001500), 0x588, 0x1f8)

2.277867896s ago: executing program 3 (id=391):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
shmget$private(0x0, 0x13000, 0x200, &(0x7f0000feb000/0x13000)=nil)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000200)={0x5, 0x1, {0x3, 0x1, 0xd, 0x0, 0x4}, 0x9})
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x81)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2})
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4, 0x1}}, 0x10)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x400, 0x300, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, {0x0, 0x401}, {}, {}, {0x0, 0x8}, 0x3, 0x3f0, 0x81, 0xe, 0x1, 0x0, 0x0, 0x0, 0x761a, 0x0, 0x9, 0x0, 0x10, 0x1, 0x3, 0x1})

2.019614192s ago: executing program 2 (id=392):
syz_open_procfs(0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r0, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
socket(0x1, 0x803, 0x0)
r1 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r1, 0x3)
socket$inet_dccp(0x2, 0x6, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg(r2, &(0x7f0000001500), 0x588, 0x1f8)

945.949953ms ago: executing program 4 (id=393):
ppoll(0x0, 0x0, 0x0, &(0x7f0000000180)={[0x400]}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x2, 0x3a)
r6 = dup(r5)
bind$unix(r6, &(0x7f0000000300)=@abs={0xa, 0x2}, 0x6e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00')

105.376951ms ago: executing program 2 (id=394):
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)={0xa8, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xb}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x58, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x16, 0xc, 0x60, 0x16, 0x3, 0x1, 0x18, 0x6c, 0x4, 0x24, 0x5, 0x48, 0x4, 0x6c, 0x60, 0x16, 0x5, 0x16, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x46, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

103.602558ms ago: executing program 1 (id=395):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
shmget$private(0x0, 0x13000, 0x200, &(0x7f0000feb000/0x13000)=nil)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000200)={0x5, 0x1, {0x3, 0x1, 0xd, 0x0, 0x4}, 0x9})
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x81)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r4, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2})
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x400, 0x300, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, {0x0, 0x401}, {}, {}, {0x0, 0x8}, 0x3, 0x3f0, 0x81, 0xe, 0x1, 0x0, 0x0, 0x0, 0x761a, 0x0, 0x9, 0x0, 0x10, 0x1, 0x3, 0x1})

20.21498ms ago: executing program 0 (id=396):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="0400"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20)

0s ago: executing program 3 (id=397):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}}}}}}}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x0, 0x0}}, 0x10)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xa0, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x18, 0x48, 0x4, 0x24, 0x30, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x3}, {0x4, 0x6}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
connect$pppl2tp(r4, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts.
[   72.083392][ T5819] cgroup: Unknown subsys name 'net'
[   72.218629][ T5819] cgroup: Unknown subsys name 'cpuset'
[   72.227450][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   73.636551][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   75.969653][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.987125][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.998684][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.024554][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.034763][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   76.042194][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.244990][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.253678][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.261931][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.270192][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.291247][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.299726][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   76.308656][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.317224][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.324803][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.333840][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.345658][ T5140] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   76.353139][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.394790][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.411087][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.414492][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.431838][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.433530][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.440740][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.454245][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   76.461749][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.469311][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.491283][ T5140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.501716][ T5140] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   76.509616][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.576342][ T5140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   76.596689][ T5140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   76.604996][ T5140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   76.606026][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   76.620531][ T5140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   76.628332][ T5140] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   76.636547][ T5140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   76.825588][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.832737][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.841826][ T5830] bridge_slave_0: entered allmulticast mode
[   76.848976][ T5830] bridge_slave_0: entered promiscuous mode
[   76.922058][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.929663][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.938391][ T5830] bridge_slave_1: entered allmulticast mode
[   76.946027][ T5830] bridge_slave_1: entered promiscuous mode
[   76.971894][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   77.030776][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.062255][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.144770][ T5830] team0: Port device team_slave_0 added
[   77.219654][ T5830] team0: Port device team_slave_1 added
[   77.288374][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.295484][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.321776][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.346474][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.353740][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.361602][ T5836] bridge_slave_0: entered allmulticast mode
[   77.368770][ T5836] bridge_slave_0: entered promiscuous mode
[   77.397991][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   77.412204][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.419339][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.445439][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.457097][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.464647][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.471953][ T5836] bridge_slave_1: entered allmulticast mode
[   77.479161][ T5836] bridge_slave_1: entered promiscuous mode
[   77.587003][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   77.660242][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.670058][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   77.708922][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.732966][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   77.803799][ T5836] team0: Port device team_slave_0 added
[   77.833035][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.840608][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.847994][ T5838] bridge_slave_0: entered allmulticast mode
[   77.855638][ T5838] bridge_slave_0: entered promiscuous mode
[   77.866903][ T5830] hsr_slave_0: entered promiscuous mode
[   77.873410][ T5830] hsr_slave_1: entered promiscuous mode
[   77.881601][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.888964][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.897340][ T5843] bridge_slave_0: entered allmulticast mode
[   77.904486][ T5843] bridge_slave_0: entered promiscuous mode
[   77.924952][ T5836] team0: Port device team_slave_1 added
[   77.946465][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.953665][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.961560][ T5838] bridge_slave_1: entered allmulticast mode
[   77.969122][ T5838] bridge_slave_1: entered promiscuous mode
[   77.988508][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.995835][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.003060][ T5843] bridge_slave_1: entered allmulticast mode
[   78.010688][ T5843] bridge_slave_1: entered promiscuous mode
[   78.086499][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.093501][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.120618][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.144949][ T5832] Bluetooth: hci0: command tx timeout
[   78.159106][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.172007][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.184611][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.210059][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.218342][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.244651][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.300974][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.351535][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.361887][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.369463][ T5852] bridge_slave_0: entered allmulticast mode
[   78.378435][ T5852] bridge_slave_0: entered promiscuous mode
[   78.399046][ T5838] team0: Port device team_slave_0 added
[   78.439258][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.446755][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.454018][ T5852] bridge_slave_1: entered allmulticast mode
[   78.455485][ T5832] Bluetooth: hci2: command tx timeout
[   78.460448][ T5140] Bluetooth: hci1: command tx timeout
[   78.467517][ T5852] bridge_slave_1: entered promiscuous mode
[   78.490704][ T5838] team0: Port device team_slave_1 added
[   78.511363][ T5843] team0: Port device team_slave_0 added
[   78.520168][ T5843] team0: Port device team_slave_1 added
[   78.527004][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.534767][ T5140] Bluetooth: hci3: command tx timeout
[   78.535110][ T5832] Bluetooth: hci4: command tx timeout
[   78.546546][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.553831][ T5842] bridge_slave_0: entered allmulticast mode
[   78.561707][ T5842] bridge_slave_0: entered promiscuous mode
[   78.572930][ T5836] hsr_slave_0: entered promiscuous mode
[   78.579658][ T5836] hsr_slave_1: entered promiscuous mode
[   78.587710][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.595796][ T5836] Cannot create hsr debugfs directory
[   78.646707][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.653983][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.662048][ T5842] bridge_slave_1: entered allmulticast mode
[   78.669716][ T5842] bridge_slave_1: entered promiscuous mode
[   78.685886][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.695180][ T5832] Bluetooth: hci5: command tx timeout
[   78.699347][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.710877][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.718254][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.744928][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.768337][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.778313][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.804934][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.852344][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.859928][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.886184][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.898591][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.906014][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.932484][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.000512][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.012862][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.039398][ T5852] team0: Port device team_slave_0 added
[   79.091697][ T5852] team0: Port device team_slave_1 added
[   79.120348][ T5838] hsr_slave_0: entered promiscuous mode
[   79.127505][ T5838] hsr_slave_1: entered promiscuous mode
[   79.133715][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.142423][ T5838] Cannot create hsr debugfs directory
[   79.164836][ T5842] team0: Port device team_slave_0 added
[   79.225111][ T5842] team0: Port device team_slave_1 added
[   79.260503][ T5843] hsr_slave_0: entered promiscuous mode
[   79.267598][ T5843] hsr_slave_1: entered promiscuous mode
[   79.273738][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.281663][ T5843] Cannot create hsr debugfs directory
[   79.302134][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.309381][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.335676][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.380412][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.389218][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.417275][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.429301][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.437043][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.463500][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.502513][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.509788][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.536584][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.630622][ T5852] hsr_slave_0: entered promiscuous mode
[   79.637390][ T5852] hsr_slave_1: entered promiscuous mode
[   79.643510][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.651961][ T5852] Cannot create hsr debugfs directory
[   79.740399][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.755937][ T5842] hsr_slave_0: entered promiscuous mode
[   79.762458][ T5842] hsr_slave_1: entered promiscuous mode
[   79.768896][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.776633][ T5842] Cannot create hsr debugfs directory
[   79.792723][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.809126][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.867510][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.011253][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   80.053245][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   80.084899][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   80.098713][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   80.178778][ T5838] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   80.210483][ T5838] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   80.215631][ T5832] Bluetooth: hci0: command tx timeout
[   80.246638][ T5838] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   80.257132][ T5838] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   80.323676][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.348379][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   80.360235][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   80.398510][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.486535][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   80.505767][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   80.527774][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   80.534890][ T5832] Bluetooth: hci2: command tx timeout
[   80.534941][ T5832] Bluetooth: hci1: command tx timeout
[   80.579527][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   80.614275][ T5140] Bluetooth: hci4: command tx timeout
[   80.621208][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.624464][ T5140] Bluetooth: hci3: command tx timeout
[   80.672789][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.701238][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.726659][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   80.735663][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.747839][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.762891][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.774223][ T5140] Bluetooth: hci5: command tx timeout
[   80.786188][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   80.812748][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.833960][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   80.873996][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.881457][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.892304][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.899621][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.910120][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.917284][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.954442][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.961589][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.972445][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.979653][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.016667][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.024742][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.170316][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.217620][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.261000][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   81.337846][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   81.399616][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.406825][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.464661][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.476512][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.483695][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.551974][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.559238][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.572247][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.579473][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.650346][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.666000][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   81.705016][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.712158][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.759953][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.780555][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.787777][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.820665][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.902638][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.942348][ T5842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.974403][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.071412][ T5830] veth0_vlan: entered promiscuous mode
[   82.129433][ T5830] veth1_vlan: entered promiscuous mode
[   82.248178][ T5830] veth0_macvtap: entered promiscuous mode
[   82.294866][ T5140] Bluetooth: hci0: command tx timeout
[   82.306967][ T5830] veth1_macvtap: entered promiscuous mode
[   82.338624][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.440849][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.483952][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.540024][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.599218][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.609522][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.617554][ T5832] Bluetooth: hci2: command tx timeout
[   82.620201][ T5140] Bluetooth: hci1: command tx timeout
[   82.624382][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.638029][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.662490][ T5852] veth0_vlan: entered promiscuous mode
[   82.687752][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.695111][ T5140] Bluetooth: hci3: command tx timeout
[   82.700545][ T5140] Bluetooth: hci4: command tx timeout
[   82.710122][ T5852] veth1_vlan: entered promiscuous mode
[   82.728806][ T5838] veth0_vlan: entered promiscuous mode
[   82.760015][ T5836] veth0_vlan: entered promiscuous mode
[   82.773949][ T5843] veth0_vlan: entered promiscuous mode
[   82.810409][ T5843] veth1_vlan: entered promiscuous mode
[   82.820644][ T5838] veth1_vlan: entered promiscuous mode
[   82.844650][ T5836] veth1_vlan: entered promiscuous mode
[   82.854586][ T5140] Bluetooth: hci5: command tx timeout
[   82.922956][ T5852] veth0_macvtap: entered promiscuous mode
[   82.933672][ T5852] veth1_macvtap: entered promiscuous mode
[   82.959887][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.964264][ T5842] veth0_vlan: entered promiscuous mode
[   82.976596][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.012809][ T5842] veth1_vlan: entered promiscuous mode
[   83.021779][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.035415][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.048099][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.087377][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.099749][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.111261][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.145373][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.154573][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.163291][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.172216][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.196006][ T5836] veth0_macvtap: entered promiscuous mode
[   83.204292][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.212142][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.219025][ T5842] veth0_macvtap: entered promiscuous mode
[   83.240786][ T5843] veth0_macvtap: entered promiscuous mode
[   83.263103][ T5842] veth1_macvtap: entered promiscuous mode
[   83.272857][ T5838] veth0_macvtap: entered promiscuous mode
[   83.284793][ T5836] veth1_macvtap: entered promiscuous mode
[   83.297435][ T5838] veth1_macvtap: entered promiscuous mode
[   83.315159][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.325714][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.336571][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.347709][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.360648][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.370804][ T5843] veth1_macvtap: entered promiscuous mode
[   83.434605][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.442437][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   83.447976][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.470991][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.481909][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.493893][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.532928][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.547134][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.559033][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.569960][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.580052][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.590610][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.602077][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.621058][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.634173][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.644029][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.656926][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.667505][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.678470][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.688833][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.699827][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.712829][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.740101][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.754569][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.772294][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.784052][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.793959][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.811608][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.823337][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.840529][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.851390][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.869086][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.882370][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.928157][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.945243][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.957046][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.967697][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.984227][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.997110][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.008918][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.030699][ T5838] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.040609][ T5838] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.053395][ T5838] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.074003][ T5838] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.093721][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.105911][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.115895][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.129329][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.139791][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.150324][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.160317][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.171158][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.183274][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.205180][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.213972][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.226554][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.246869][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.262657][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.273401][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.290202][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.303257][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.325516][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.336886][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.347219][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.358243][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.375104][ T5140] Bluetooth: hci0: command tx timeout
[   84.388868][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.419247][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.438732][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.450394][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.469215][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.517789][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.534397][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.543877][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.553138][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.587691][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.605782][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.624762][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.639418][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.694491][ T5832] Bluetooth: hci1: command tx timeout
[   84.700223][ T5140] Bluetooth: hci2: command tx timeout
[   84.712227][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.768662][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.774570][ T5140] Bluetooth: hci3: command tx timeout
[   84.782241][ T5832] Bluetooth: hci4: command tx timeout
[   84.934652][ T5832] Bluetooth: hci5: command tx timeout
[   84.949980][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.973961][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.113222][ T5918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.164413][ T5918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.191586][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.208508][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.317011][ T5948] Cannot find set identified by id 0 to match
[   85.555495][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.714415][ T5952] bridge0: port 3(gretap0) entered blocking state
[   85.721679][ T5952] bridge0: port 3(gretap0) entered disabled state
[   85.729914][ T5952] gretap0: entered allmulticast mode
[   85.744896][ T5952] gretap0: entered promiscuous mode
[   85.755578][ T5952] bridge0: port 3(gretap0) entered blocking state
[   85.762409][ T5952] bridge0: port 3(gretap0) entered forwarding state
[   86.355141][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.370182][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.381605][ T3072] cfg80211: failed to load regulatory.db
[   86.394816][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.415540][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.462190][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.526706][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.682536][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   86.771277][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.784572][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.826294][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.834520][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.315196][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.353578][ T5963] bond0: (slave rose0): Enslaving as an active interface with an up link
[   87.516544][ T5968] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   88.000767][ T5961] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   88.095930][ T5961] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   88.750745][ T5961] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   88.813452][ T5961] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   88.843003][ T5961] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   88.906141][ T5961] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   88.968102][ T5961] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   88.984593][ T5961] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   89.140240][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   89.335197][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[   89.736726][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   89.747795][ T5961] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   89.888109][ T5961] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   89.896340][ T5961] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   90.242534][ T5961] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   90.590210][ T5961] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   90.643608][ T5961] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   90.782274][ T5961] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   90.855654][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[   90.885530][ T5961] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[   90.947291][ T5961] Bluetooth: hci5: Opcode 0x0406 failed: -4
[   91.006851][ T5961] Bluetooth: hci5: Opcode 0x0406 failed: -4
[   91.016207][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[   91.051456][ T6004] overlayfs: missing 'lowerdir'
[   91.156352][ T5956] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   91.228136][ T5956] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   91.316867][ T5956] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   91.344407][ T5956] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   91.350606][ T5956] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   91.736357][ T5956] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[   91.838953][ T6006] random: crng reseeded on system resumption
[   92.154512][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.174439][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[   93.174638][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   93.260684][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[   93.262153][ T6024] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   93.332197][ T6024] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   93.339935][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[   93.416707][ T5140] Bluetooth: hci3: command 0x0c1a tx timeout
[   93.424812][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout
[   93.814285][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout
[   93.975126][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.984473][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.995400][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   94.360917][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   94.576792][ T6038] tc_dump_action: action bad kind
[   95.254634][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[   95.337033][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout
[   95.473061][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout
[   95.494274][ T5140] Bluetooth: hci4: command 0x0c1a tx timeout
[   95.500376][ T5140] Bluetooth: hci3: command 0x0c1a tx timeout
[   95.894335][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout
[   96.591851][ T6045] Zero length message leads to an empty skb
[   97.582246][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[   97.588670][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout
[   97.984603][ T5140] Bluetooth: hci5: command 0x0c1a tx timeout
[   98.025963][ T6061] XFS (nullb0): Invalid superblock magic number
[   98.088576][ T6062] 9pnet_fd: Insufficient options for proto=fd
[   99.424671][ T6088] netlink: 'syz.5.30': attribute type 10 has an invalid length.
[  100.584656][ T5890] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  100.758404][ T6088] team0: Port device netdevsim0 added
[  100.827969][ T5890] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  100.860696][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.882856][ T6117] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  100.944968][ T5890] usb 3-1: config 0 descriptor??
[  101.457385][ T5890] usbhid 3-1:0.0: can't add hid device: -71
[  101.474179][ T5890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  101.503560][ T5890] usb 3-1: USB disconnect, device number 2
[  101.581457][ T6113] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  101.591806][ T6113] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  101.609502][ T6113] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  101.625395][ T6113] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  101.700617][ T6113] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  101.716357][ T6113] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  102.934424][ T5140] Bluetooth: hci0: command 0x0c1a tx timeout
[  103.655337][ T5140] Bluetooth: hci3: command 0x0c1a tx timeout
[  103.704183][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[  103.710351][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[  103.734281][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout
[  103.734668][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout
[  103.860721][ T6142] 9pnet_fd: Insufficient options for proto=fd
[  104.469851][ T6146] XFS (nullb0): Invalid superblock magic number
[  109.564385][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout
[  109.592929][ T6186] XFS (nullb0): Invalid superblock magic number
[  111.774387][ T6206] overlayfs: missing 'lowerdir'
[  111.933796][ T6207] random: crng reseeded on system resumption
[  111.994777][   T26] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  112.461211][ T6211] 9pnet_fd: Insufficient options for proto=fd
[  118.944590][ T6258] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  121.093507][ T6280] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  123.072261][ T6301] bridge0: port 3(gretap0) entered blocking state
[  123.079403][ T6301] bridge0: port 3(gretap0) entered disabled state
[  123.087151][ T6301] gretap0: entered allmulticast mode
[  123.102178][ T6301] gretap0: entered promiscuous mode
[  123.110104][ T6301] bridge0: port 3(gretap0) entered blocking state
[  123.116679][ T6301] bridge0: port 3(gretap0) entered forwarding state
[  124.183676][ T6307] evm: overlay not supported
[  129.569804][ T6345] overlayfs: failed to resolve './file1': -2
[  132.495751][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  132.502434][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  132.946857][ T6359] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  133.889835][ T6368] overlayfs: missing 'lowerdir'
[  133.992901][ T6369] random: crng reseeded on system resumption
[  137.842802][ T6391] trusted_key: encrypted_key: insufficient parameters specified
[  138.341548][ T6399] bridge0: port 3(gretap0) entered blocking state
[  138.348619][ T6399] bridge0: port 3(gretap0) entered disabled state
[  138.356411][ T6399] gretap0: entered allmulticast mode
[  138.369458][ T6399] gretap0: entered promiscuous mode
[  138.376938][ T6399] bridge0: port 3(gretap0) entered blocking state
[  138.383417][ T6399] bridge0: port 3(gretap0) entered forwarding state
[  139.026085][ T6397] /dev/nullb0: Can't open blockdev
[  141.485204][ T6416] ubi31: attaching mtd0
[  141.493629][ T6416] ubi31: scanning is finished
[  141.498846][ T6416] ubi31: empty MTD device detected
[  141.802809][ T6417] tc_dump_action: action bad kind
[  142.598053][ T6416] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  143.098755][ T6422] loop4: detected capacity change from 0 to 32768
[  143.122680][ T6422] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.114 (6422)
[  143.171776][ T6422] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.182806][ T6422] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm
[  143.191518][ T6422] BTRFS info (device loop4): using free-space-tree
[  143.425707][ T6425] loop5: detected capacity change from 0 to 32768
[  143.433817][ T3072] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  143.492964][ T6425] BTRFS: device /dev/loop5 (7:5) using temp-fsid 19e1062b-f06b-4d3a-94f8-de4f425ed605
[  143.502974][ T6425] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.115 (6425)
[  144.138841][ T6425] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.151639][ T6425] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  144.160507][ T6425] BTRFS info (device loop5): using free-space-tree
[  144.328514][ T3072] usb 4-1: Using ep0 maxpacket: 8
[  144.881882][ T3072] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  144.961299][ T3072] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  145.169375][ T3072] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  145.684902][ T3072] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  145.709111][   T30] audit: type=1800 audit(1742175060.398:2): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.114" name="file1" dev="loop4" ino=260 res=0 errno=0
[  145.729790][ T3072] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  145.983747][   T30] audit: type=1800 audit(1742175060.638:3): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.115" name="file1" dev="loop5" ino=260 res=0 errno=0
[  146.390307][ T3072] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  146.564796][ T3072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.590398][   T30] audit: type=1800 audit(1742175061.098:4): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.114" name="file1" dev="loop4" ino=260 res=0 errno=0
[  146.735565][ T3072] usb 4-1: can't set config #16, error -71
[  146.772196][ T3072] usb 4-1: USB disconnect, device number 2
[  146.773551][ T6476] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  147.164408][ T5838] BTRFS info (device loop5): last unmount of filesystem 19e1062b-f06b-4d3a-94f8-de4f425ed605
[  147.395850][ T6475] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  147.417945][ T6475] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  147.424540][ T5836] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.434633][ T6475] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  147.664362][ T6475] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  148.285889][ T6475] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  148.292058][ T6475] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  148.824302][ T5846] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  148.964443][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout
[  149.095699][ T5846] usb 4-1: Using ep0 maxpacket: 8
[  149.111411][ T5846] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  149.494877][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[  149.553469][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout
[  149.650505][ T6502] ubi31: attaching mtd0
[  149.663502][ T6502] ubi31: scanning is finished
[  149.777492][ T6503] tc_dump_action: action bad kind
[  149.788268][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout
[  150.050146][ T5846] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  150.067076][ T5846] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  150.350496][ T5846] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  150.370689][ T5846] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  150.389264][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout
[  150.392175][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout
[  150.489203][ T6502] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  150.498474][ T5846] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  150.714192][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.724851][ T6507] trusted_key: encrypted_key: insufficient parameters specified
[  150.755081][ T5846] usb 4-1: can't set config #16, error -71
[  150.805544][ T5846] usb 4-1: USB disconnect, device number 3
[  150.845691][ T6513] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  151.074667][ T3072] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  151.629757][ T3072] usb 3-1: Using ep0 maxpacket: 16
[  151.683184][ T3072] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.742614][ T3072] usb 3-1: config 0 interface 0 has no altsetting 0
[  151.841646][ T3072] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  151.841848][ T3072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.965957][ T3072] usb 3-1: config 0 descriptor??
[  153.834844][ T3072] usbhid 3-1:0.0: can't add hid device: -71
[  153.834971][ T3072] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  153.837002][ T3072] usb 3-1: USB disconnect, device number 3
[  155.769366][ T6547] libceph: resolve '0.0' (ret=-3): failed
[  156.491033][   T30] audit: type=1804 audit(1742175071.188:5): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.140" name="/newroot/26/file0" dev="tmpfs" ino=157 res=1 errno=0
[  157.252701][ T6546] netdevsim netdevsim3: Direct firmware load for .
[  157.252701][ T6546]  failed with error -2
[  157.252939][ T6546] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  157.252939][ T6546] 
[  157.523420][   T30] audit: type=1804 audit(1742175071.768:6): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.141" name="/newroot/22/file0" dev="tmpfs" ino=132 res=1 errno=0
[  157.995850][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'.
[  158.093888][ T6565] ubi31: attaching mtd0
[  158.099458][ T6565] ubi31: scanning is finished
[  158.508665][ T6565] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  159.116949][ T6566] tc_dump_action: action bad kind
[  159.494437][ T1201] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  159.704225][ T1201] usb 4-1: Using ep0 maxpacket: 32
[  160.175114][ T1201] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  160.183317][ T1201] usb 4-1: config 0 has no interface number 0
[  160.213996][ T1201] usb 4-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  160.267632][ T1201] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  160.321053][ T1201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.358314][ T1201] usb 4-1: Product: syz
[  160.385775][ T1201] usb 4-1: Manufacturer: syz
[  160.413218][ T1201] usb 4-1: SerialNumber: syz
[  160.426733][ T1201] usb 4-1: config 0 descriptor??
[  161.026067][ T1201] hub 4-1:0.89: bad descriptor, ignoring hub
[  161.032508][ T1201] hub 4-1:0.89: probe with driver hub failed with error -5
[  161.059694][ T1201] option 4-1:0.89: GSM modem (1-port) converter detected
[  161.695020][ T1201] usb 4-1: USB disconnect, device number 4
[  161.731306][ T1201] option 4-1:0.89: device disconnected
[  168.147490][ T6001] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  168.214423][ T1201] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  168.596603][ T6001] usb 1-1: Using ep0 maxpacket: 8
[  168.820614][ T6001] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.854241][ T1201] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  168.910474][ T6001] usb 1-1: config 0 has no interfaces?
[  168.916311][ T1201] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  168.939097][ T6001] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  168.959440][ T1201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.973920][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.003409][ T1201] usb 3-1: config 0 descriptor??
[  169.033956][ T6001] usb 1-1: config 0 descriptor??
[  169.299331][ T6001] usb 1-1: USB disconnect, device number 2
[  169.664395][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout
[  170.191862][ T5846] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  170.444718][ T5846] usb 6-1: Using ep0 maxpacket: 32
[  170.466626][ T5846] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  170.500878][ T5846] usb 6-1: config 0 has no interface number 0
[  170.622346][ T5846] usb 6-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  170.739328][ T6665] netdevsim netdevsim3: Direct firmware load for .
[  170.739328][ T6665]  failed with error -2
[  170.753906][ T6665] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  170.753906][ T6665] 
[  170.772955][ T5846] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  170.851287][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.080633][ T5846] usb 6-1: Product: syz
[  171.084359][ T6671] libceph: resolve '0.0' (ret=-3): failed
[  171.085013][ T5846] usb 6-1: Manufacturer: syz
[  171.085076][ T5846] usb 6-1: SerialNumber: syz
[  171.950449][ T5846] usb 6-1: config 0 descriptor??
[  172.117271][ T5846] hub 6-1:0.89: bad descriptor, ignoring hub
[  172.124437][ T5846] hub 6-1:0.89: probe with driver hub failed with error -5
[  172.165416][ T5846] option 6-1:0.89: GSM modem (1-port) converter detected
[  172.244250][ T3072] usb 3-1: USB disconnect, device number 4
[  172.416425][ T1201] usb 6-1: USB disconnect, device number 2
[  172.499637][ T1201] option 6-1:0.89: device disconnected
[  172.674500][ T5846] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  172.731796][   T30] audit: type=1804 audit(1742175087.408:7): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.175" name="/newroot/33/file0" dev="tmpfs" ino=193 res=1 errno=0
[  173.144401][ T5846] usb 4-1: Using ep0 maxpacket: 8
[  173.475933][ T5846] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  173.484765][ T5846] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  173.499407][ T5846] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  173.797707][ T5846] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  173.983482][ T5846] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  174.132794][ T5846] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  174.273567][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.172856][ T5846] usb 4-1: usb_control_msg returned -71
[  176.186186][ T3072] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  176.210085][ T5846] usbtmc 4-1:16.0: can't read capabilities
[  176.237330][ T5846] usb 4-1: USB disconnect, device number 5
[  176.364557][ T3072] usb 6-1: Using ep0 maxpacket: 32
[  176.496086][ T3072] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  176.841341][ T3072] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  176.909649][ T3072] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  176.986232][   T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  176.989274][ T6712] netdevsim netdevsim3: Direct firmware load for .
[  176.989274][ T6712]  failed with error -2
[  177.008410][ T6712] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  177.008410][ T6712] 
[  177.018292][ T3072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.025864][ T3072] usb 6-1: config 0 descriptor??
[  177.243459][ T3072] hub 6-1:0.0: bad descriptor, ignoring hub
[  177.264269][ T3072] hub 6-1:0.0: probe with driver hub failed with error -5
[  177.274736][ T3072] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  178.146126][   T26] usb 2-1: Using ep0 maxpacket: 32
[  178.185715][   T26] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  178.236872][   T26] usb 2-1: config 0 has no interface number 0
[  178.251126][   T26] usb 2-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  178.438443][   T26] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  178.931412][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.952737][   T26] usb 2-1: Product: syz
[  178.971952][   T26] usb 2-1: Manufacturer: syz
[  178.987646][   T26] usb 2-1: SerialNumber: syz
[  179.005953][   T26] usb 2-1: config 0 descriptor??
[  179.018036][   T26] hub 2-1:0.89: bad descriptor, ignoring hub
[  179.055832][   T26] hub 2-1:0.89: probe with driver hub failed with error -5
[  179.102777][   T26] option 2-1:0.89: GSM modem (1-port) converter detected
[  179.259332][   T26] usb 2-1: USB disconnect, device number 2
[  179.261179][   T26] option 2-1:0.89: device disconnected
[  179.414831][ T6001] usb 6-1: USB disconnect, device number 3
[  179.773134][   T30] audit: type=1804 audit(1742175094.468:8): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.193" name="/newroot/28/file0" dev="tmpfs" ino=166 res=1 errno=0
[  181.232460][    C0] vkms_vblank_simulate: vblank timer overrun
[  182.093400][ T6754] overlayfs: missing 'lowerdir'
[  183.280182][ T6758] random: crng reseeded on system resumption
[  183.989668][ T6771] bridge0: port 3(gretap0) entered blocking state
[  183.996701][ T6771] bridge0: port 3(gretap0) entered disabled state
[  184.004527][ T6771] gretap0: entered allmulticast mode
[  184.019493][ T6771] gretap0: entered promiscuous mode
[  184.028361][ T6771] bridge0: port 3(gretap0) entered blocking state
[  184.034920][ T6771] bridge0: port 3(gretap0) entered forwarding state
[  184.906966][ T6773] netdevsim netdevsim0: Direct firmware load for .
[  184.906966][ T6773]  failed with error -2
[  184.918766][ T6773] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  184.918766][ T6773] 
[  185.091089][ T6774] libceph: resolve '0.0' (ret=-3): failed
[  186.175493][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'.
[  187.435609][   T30] audit: type=1804 audit(1742175102.138:9): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.208" name="/newroot/30/file0" dev="tmpfs" ino=196 res=1 errno=0
[  187.486810][ T6791] fuse: Unknown parameter 'fd0x0000000000000003'
[  188.644251][ T6810] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  188.984493][ T1201] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  189.244510][ T1201] usb 2-1: Using ep0 maxpacket: 32
[  189.428411][ T1201] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  189.453609][ T1201] usb 2-1: config 0 has no interface number 0
[  189.471676][ T1201] usb 2-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  189.509359][ T1201] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  189.524239][ T1201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.532650][ T1201] usb 2-1: Product: syz
[  189.542847][ T1201] usb 2-1: Manufacturer: syz
[  189.547683][ T1201] usb 2-1: SerialNumber: syz
[  189.566131][ T1201] usb 2-1: config 0 descriptor??
[  189.598118][ T1201] hub 2-1:0.89: bad descriptor, ignoring hub
[  189.605231][ T1201] hub 2-1:0.89: probe with driver hub failed with error -5
[  189.635009][ T1201] option 2-1:0.89: GSM modem (1-port) converter detected
[  189.820329][ T6817] mmap: syz.3.217 (6817) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  189.926853][ T1201] usb 2-1: USB disconnect, device number 3
[  189.953632][ T1201] option 2-1:0.89: device disconnected
[  191.316723][ T6827] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  192.147303][ T3072] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  192.454496][ T3072] usb 4-1: Using ep0 maxpacket: 32
[  192.496550][ T3072] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  192.690795][ T3072] usb 4-1: config 0 has no interface number 0
[  192.701061][ T3072] usb 4-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  192.724910][ T3072] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  192.988326][ T6836] ubi31: attaching mtd0
[  193.000220][ T6836] ubi31: scanning is finished
[  193.106808][ T6837] tc_dump_action: action bad kind
[  193.619542][ T3072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.629380][ T6836] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  193.776902][ T3072] usb 4-1: Product: syz
[  193.851214][ T3072] usb 4-1: Manufacturer: syz
[  193.856380][ T3072] usb 4-1: SerialNumber: syz
[  193.881580][ T3072] usb 4-1: config 0 descriptor??
[  194.114716][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.121090][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  194.134934][ T3072] hub 4-1:0.89: bad descriptor, ignoring hub
[  194.153584][ T3072] hub 4-1:0.89: probe with driver hub failed with error -5
[  194.175054][ T3072] option 4-1:0.89: GSM modem (1-port) converter detected
[  195.878454][ T3072] usb 4-1: USB disconnect, device number 6
[  195.892985][ T3072] option 4-1:0.89: device disconnected
[  196.319194][ T3072] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  196.327775][ T6853] fuse: Unknown parameter 'fd0x0000000000000003'
[  196.484697][ T3072] usb 4-1: device descriptor read/64, error -71
[  197.198479][ T6860] 9pnet_fd: Insufficient options for proto=fd
[  197.234851][ T3072] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  197.497995][ T3072] usb 4-1: device descriptor read/64, error -71
[  197.659994][ T3072] usb usb4-port1: attempt power cycle
[  199.317424][ T3072] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  199.373441][ T6870] ubi31: attaching mtd0
[  199.378918][ T6870] ubi31: scanning is finished
[  199.430846][ T6875] tc_dump_action: action bad kind
[  200.008667][ T3072] usb 4-1: device descriptor read/8, error -71
[  200.048254][ T6870] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  208.070264][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  208.825047][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  208.839191][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  208.849580][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  208.935274][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  208.974392][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  210.272220][ T6949] CIFS: Unable to determine destination address
[  210.898405][   T82] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.014319][ T5841] Bluetooth: hci2: command tx timeout
[  211.138945][ T6953] 9pnet_fd: Insufficient options for proto=fd
[  211.945012][   T82] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.261645][   T82] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.125998][ T5841] Bluetooth: hci2: command tx timeout
[  213.159343][   T82] team0: Port device netdevsim0 removed
[  213.245144][   T82] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.132644][ T6970] syz.1.265 (6970) used greatest stack depth: 18384 bytes left
[  215.174231][ T5841] Bluetooth: hci2: command tx timeout
[  215.189949][ T6934] chnl_net:caif_netlink_parms(): no params data found
[  215.408984][ T6996] syz.2.271 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  215.561349][   T82] gretap0: left allmulticast mode
[  215.594288][   T82] gretap0: left promiscuous mode
[  215.792788][   T82] bridge0: port 3(gretap0) entered disabled state
[  216.289276][   T82] bridge_slave_1: left allmulticast mode
[  216.341014][   T82] bridge_slave_1: left promiscuous mode
[  216.373823][   T82] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.512116][   T82] bridge_slave_0: left allmulticast mode
[  216.558023][   T82] bridge_slave_0: left promiscuous mode
[  216.575425][   T82] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.294199][ T5841] Bluetooth: hci2: command tx timeout
[  217.313140][ T6990] Cannot find set identified by id 0 to match
[  220.075086][   T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.097135][   T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.114586][   T82] bond0 (unregistering): Released all slaves
[  224.426596][ T7079] loop1: detected capacity change from 0 to 128
[  224.623119][ T6934] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.654338][ T6934] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.698895][ T6934] bridge_slave_0: entered allmulticast mode
[  224.731474][ T6934] bridge_slave_0: entered promiscuous mode
[  224.751458][ T6934] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.774949][ T6934] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.003130][ T6934] bridge_slave_1: entered allmulticast mode
[  225.014274][ T5901] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  225.936784][ T6934] bridge_slave_1: entered promiscuous mode
[  226.073409][ T5901] usb 5-1: device descriptor read/64, error -71
[  226.394869][ T5901] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  227.224249][ T5901] usb 5-1: device descriptor read/64, error -71
[  227.278712][   T82] hsr_slave_0: left promiscuous mode
[  227.285445][   T82] hsr_slave_1: left promiscuous mode
[  227.340397][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.354804][ T5901] usb usb5-port1: attempt power cycle
[  227.372093][   T82] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.438105][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.477141][   T82] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.905886][ T5901] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  228.100537][   T82] veth1_macvtap: left promiscuous mode
[  228.109134][ T7116] XFS (nullb0): Invalid superblock magic number
[  228.119426][   T82] veth0_macvtap: left promiscuous mode
[  228.132185][ T5901] usb 5-1: device descriptor read/8, error -71
[  228.170347][   T82] veth1_vlan: left promiscuous mode
[  228.286857][   T82] veth0_vlan: left promiscuous mode
[  228.695063][ T5846] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  229.834456][ T5846] usb 4-1: Using ep0 maxpacket: 16
[  229.870411][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.906100][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  229.953284][ T5846] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  229.990493][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.021371][ T5846] usb 4-1: config 0 descriptor??
[  230.045845][ T5846] pxrc 4-1:0.0: Could not find endpoint
[  230.052646][ T5846] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  230.433456][ T5901] usb 4-1: USB disconnect, device number 11
[  231.391208][ T7142] random: crng reseeded on system resumption
[  232.010394][ T7146] loop2: detected capacity change from 0 to 128
[  232.412731][   T82] team0 (unregistering): Port device team_slave_1 removed
[  232.477775][   T82] team0 (unregistering): Port device team_slave_0 removed
[  233.190696][ T6934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  233.254911][ T6934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.204772][ T6934] team0: Port device team_slave_0 added
[  235.285673][ T6934] team0: Port device team_slave_1 added
[  235.306342][ T7162] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.312'.
[  235.659832][ T7169] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  236.794569][ T5832] Bluetooth: hci2: command 0x0405 tx timeout
[  237.763943][ T7172] XFS (nullb0): Invalid superblock magic number
[  237.866600][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.876891][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.914538][ T6934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.249531][ T7183] libceph: resolve '0.0' (ret=-3): failed
[  238.270819][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.310782][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.423421][ T6934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.542641][ T7189] 9pnet_fd: Insufficient options for proto=fd
[  239.821646][ T6934] hsr_slave_0: entered promiscuous mode
[  239.843185][ T7201] loop1: detected capacity change from 0 to 128
[  239.852106][ T6934] hsr_slave_1: entered promiscuous mode
[  239.948300][ T6934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.007258][ T6934] Cannot create hsr debugfs directory
[  242.981184][ T7233] trusted_key: encrypted_key: insufficient parameters specified
[  243.081361][ T7232] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.328'.
[  243.686896][ T7244] XFS (nullb0): Invalid superblock magic number
[  244.979357][ T6934] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  245.485618][ T6934] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  245.520854][ T6934] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  247.224673][ T6934] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  247.709989][ T6934] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.300514][ T6934] 8021q: adding VLAN 0 to HW filter on device team0
[  249.576010][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.583166][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.239799][ T7303] trusted_key: encrypted_key: insufficient parameters specified
[  250.304551][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.304691][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.056631][ T7322] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.347'.
[  253.090231][ T6934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.722350][ T7334] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR
[  254.985780][ T7344] CIFS: Unable to determine destination address
[  255.336696][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  255.343177][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  258.934823][ T7372] trusted_key: encrypted_key: insufficient parameters specified
[  260.330772][ T6934] veth0_vlan: entered promiscuous mode
[  260.687689][ T6934] veth1_vlan: entered promiscuous mode
[  260.777536][ T6934] veth0_macvtap: entered promiscuous mode
[  260.867339][ T6934] veth1_macvtap: entered promiscuous mode
[  260.927912][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.113661][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.125064][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.147618][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.245203][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.481364][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.724233][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.806021][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.844162][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.871955][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.482977][ T6934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.556396][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.601525][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.614324][ T5846] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  262.617974][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.644879][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.666229][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.695023][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.714193][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.257322][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.270530][ T5846] usb 3-1: Using ep0 maxpacket: 32
[  263.282436][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.294586][ T5846] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  263.405428][ T5846] usb 3-1: config 0 has no interface number 0
[  263.421216][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.442041][ T5846] usb 3-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  263.875416][ T6934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.900770][ T5846] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  263.930153][ T6934] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.944044][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.952432][ T6934] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.962684][ T5846] usb 3-1: Product: syz
[  263.967910][ T7404] XFS (nullb0): Invalid superblock magic number
[  263.982010][ T5846] usb 3-1: Manufacturer: syz
[  264.023795][ T6934] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.032976][ T6934] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.080046][ T5846] usb 3-1: SerialNumber: syz
[  264.160739][ T5846] usb 3-1: config 0 descriptor??
[  264.202096][ T5846] hub 3-1:0.89: bad descriptor, ignoring hub
[  264.275336][ T5846] hub 3-1:0.89: probe with driver hub failed with error -5
[  264.372096][ T5846] option 3-1:0.89: GSM modem (1-port) converter detected
[  264.549156][ T5846] usb 3-1: USB disconnect, device number 5
[  264.602375][ T5846] option 3-1:0.89: device disconnected
[  267.739116][ T7436] trusted_key: encrypted_key: insufficient parameters specified
[  268.420329][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  268.430107][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  268.439638][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  268.448079][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  268.456867][ T5832] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  268.595171][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  270.934150][ T5832] Bluetooth: hci6: command tx timeout
[  273.014121][ T5832] Bluetooth: hci6: command tx timeout
[  273.803460][ T5846] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  273.820773][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'.
[  274.335739][ T6310] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.349889][ T5846] usb 2-1: Using ep0 maxpacket: 32
[  274.377442][ T5846] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  274.409998][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  274.460231][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  274.494085][ T5846] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  274.544227][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.580606][ T5846] usb 2-1: config 0 descriptor??
[  274.597024][ T7472] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  274.688326][ T5846] hub 2-1:0.0: USB hub found
[  274.716204][ T6310] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.893729][ T5846] hub 2-1:0.0: 1 port detected
[  274.981879][ T6310] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.094118][ T5832] Bluetooth: hci6: command tx timeout
[  276.358545][ T6310] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.547588][ T7438] chnl_net:caif_netlink_parms(): no params data found
[  276.610558][ T7508] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  276.725736][ T5888] usb 2-1: USB disconnect, device number 4
[  276.731734][ T5890] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  276.762051][ T5890] usb 2-1-port1: connect-debounce failed
[  277.174293][ T5832] Bluetooth: hci6: command tx timeout
[  277.246023][ T7438] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.455894][ T7507] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  277.467639][ T7507] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  277.482244][ T7507] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  277.529459][ T7507] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  277.577186][ T7507] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  277.619766][ T7507] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  277.670196][ T7507] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  277.685654][ T7438] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.693389][ T7438] bridge_slave_0: entered allmulticast mode
[  277.770309][ T7438] bridge_slave_0: entered promiscuous mode
[  277.838618][ T7507] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  278.918649][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[  279.214334][ T7438] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.221530][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.239112][ T7438] bridge_slave_1: entered allmulticast mode
[  279.494234][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[  279.500918][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[  279.574217][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout
[  279.655385][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout
[  279.661788][ T5832] Bluetooth: hci6: command 0x0c1a tx timeout
[  279.722940][ T7438] bridge_slave_1: entered promiscuous mode
[  280.661172][ T6310] bridge_slave_1: left allmulticast mode
[  281.367429][ T6310] bridge_slave_1: left promiscuous mode
[  281.373276][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.514983][ T6310] bridge_slave_0: left allmulticast mode
[  281.520780][ T6310] bridge_slave_0: left promiscuous mode
[  281.531258][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.820577][ T5832] Bluetooth: hci6: command 0x0c1a tx timeout
[  282.696617][   T30] audit: type=1804 audit(1742175197.368:10): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.395" name="/newroot/63/file0" dev="tmpfs" ino=358 res=1 errno=0
[  282.843773][ T7554] ------------[ cut here ]------------
[  282.843929][ T7554] WARNING: CPU: 0 PID: 7554 at drivers/gpu/drm/vkms/vkms_crtc.c:98 vkms_get_vblank_timestamp+0x183/0x1b0
[  282.844144][ T7554] Modules linked in:
[  282.844189][ T7554] CPU: 0 UID: 0 PID: 7554 Comm: syz.1.395 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0
[  282.844238][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  282.844279][ T7554] RIP: 0010:vkms_get_vblank_timestamp+0x183/0x1b0
[  282.844333][ T7554] Code: 42 80 3c 30 00 74 08 48 89 ef e8 48 68 f7 fb 48 89 5d 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6e 8f de fa e8 2e 2e 90 fb 90 <0f> 0b 90 eb e4 89 d9 80 e1 07 38 c1 0f 8c cd fe ff ff 48 89 df e8
[  282.844375][ T7554] RSP: 0018:ffffc9000c7374c8 EFLAGS: 00010287
[  282.844448][ T7554] RAX: ffffffff8631b1a2 RBX: 00000041d9407bdc RCX: 0000000000080000
[  282.844493][ T7554] RDX: ffffc9000f5b3000 RSI: 00000000000016b3 RDI: 00000000000016b4
[  282.844533][ T7554] RBP: ffffc9000c737660 R08: ffffffff8631b10f R09: 1ffff11005cee522
[  282.844574][ T7554] R10: dffffc0000000000 R11: ffffffff8631b020 R12: 00000041d9407bdc
[  282.844614][ T7554] R13: ffff888025822150 R14: 1ffff920018e6ecc R15: ffff888025320000
[  282.844675][ T7554] FS:  00007fdbc899e6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  282.844720][ T7554] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  282.844761][ T7554] CR2: 0000001b30311ff8 CR3: 0000000029740000 CR4: 0000000000350ef0
[  282.844804][ T7554] Call Trace:
[  282.844839][ T7554]  <TASK>
[  282.844881][ T7554]  ? __warn+0x165/0x4d0
[  282.844950][ T7554]  ? vkms_get_vblank_timestamp+0x183/0x1b0
[  282.845007][ T7554]  ? report_bug+0x2b3/0x500
[  282.845066][ T7554]  ? vkms_get_vblank_timestamp+0x183/0x1b0
[  282.845123][ T7554]  ? handle_bug+0x60/0x90
[  282.845169][ T7554]  ? exc_invalid_op+0x1a/0x50
[  282.845215][ T7554]  ? asm_exc_invalid_op+0x1a/0x20
[  282.845278][ T7554]  ? __pfx_vkms_get_vblank_timestamp+0x10/0x10
[  282.845330][ T7554]  ? vkms_get_vblank_timestamp+0xef/0x1b0
[  282.845378][ T7554]  ? vkms_get_vblank_timestamp+0x182/0x1b0
[  282.845432][ T7554]  ? vkms_get_vblank_timestamp+0x183/0x1b0
[  282.845486][ T7554]  ? vkms_get_vblank_timestamp+0x182/0x1b0
[  282.845535][ T7554]  ? __pfx_vkms_get_vblank_timestamp+0x10/0x10
[  282.845588][ T7554]  drm_crtc_next_vblank_start+0x22b/0x490
[  282.845638][ T7554]  ? lockdep_hardirqs_on+0x99/0x150
[  282.845712][ T7554]  ? __pfx_drm_crtc_next_vblank_start+0x10/0x10
[  282.845763][ T7554]  ? __pfx_vkms_prepare_fb+0x10/0x10
[  282.845859][ T7554]  drm_atomic_helper_wait_for_fences+0x277/0x8e0
[  282.845925][ T7554]  ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10
[  282.845978][ T7554]  ? drm_atomic_helper_prepare_planes+0x65f/0xb50
[  282.846053][ T7554]  drm_atomic_helper_commit+0x53a/0x9f0
[  282.846113][ T7554]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[  282.846177][ T7554]  drm_atomic_commit+0x296/0x2f0
[  282.846232][ T7554]  ? __pfx_drm_atomic_commit+0x10/0x10
[  282.846281][ T7554]  ? __pfx___drm_printfn_info+0x10/0x10
[  282.846348][ T7554]  ? drm_client_rotation+0x28b/0x550
[  282.846408][ T7554]  ? srso_alias_return_thunk+0x5/0xfbef5
[  282.846482][ T7554]  drm_client_modeset_commit_atomic+0x670/0x7d0
[  282.846578][ T7554]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  282.846621][ T7554]  ? __mutex_lock+0x397/0x1010
[  282.846731][ T7554]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  282.846807][ T7554]  drm_client_modeset_commit_locked+0xe0/0x520
[  282.846875][ T7554]  drm_fb_helper_pan_display+0x3e8/0xc20
[  282.846971][ T7554]  fb_pan_display+0x3a5/0x680
[  282.847023][ T7554]  ? __pfx_drm_fb_helper_pan_display+0x10/0x10
[  282.847082][ T7554]  bit_update_start+0x4d/0x1c0
[  282.847149][ T7554]  fbcon_modechanged+0xb7d/0x1200
[  282.847228][ T7554]  do_fb_ioctl+0x742/0x7d0
[  282.847290][ T7554]  ? __pfx_do_fb_ioctl+0x10/0x10
[  282.847461][ T7554]  ? srso_alias_return_thunk+0x5/0xfbef5
[  282.847523][ T7554]  ? __rcu_read_unlock+0xa1/0x110
[  282.847583][ T7554]  ? __fget_files+0x2a/0x410
[  282.847649][ T7554]  ? __fget_files+0x2a/0x410
[  282.847720][ T7554]  ? srso_alias_return_thunk+0x5/0xfbef5
[  282.847782][ T7554]  ? __pfx_fb_ioctl+0x10/0x10
[  282.847841][ T7554]  __se_sys_ioctl+0xf7/0x170
[  282.847896][ T7554]  do_syscall_64+0xf3/0x230
[  282.847958][ T7554]  ? srso_alias_return_thunk+0x5/0xfbef5
[  282.848025][ T7554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.848082][ T7554] RIP: 0033:0x7fdbc7b8d169
[  282.848126][ T7554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.848169][ T7554] RSP: 002b:00007fdbc899e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  282.848250][ T7554] RAX: ffffffffffffffda RBX: 00007fdbc7da6080 RCX: 00007fdbc7b8d169
[  282.848296][ T7554] RDX: 0000400000000140 RSI: 0000000000004601 RDI: 0000000000000003
[  282.848338][ T7554] RBP: 00007fdbc7c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  282.848358][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  282.848400][ T7554] R13: 0000000000000000 R14: 00007fdbc7da6080 R15: 00007fff2405ef88
[  282.848486][ T7554]  </TASK>
[  282.848505][ T7554] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  282.848520][ T7554] CPU: 0 UID: 0 PID: 7554 Comm: syz.1.395 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0
[  282.848548][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  282.848564][ T7554] Call Trace:
[  282.848575][ T7554]  <TASK>
[  282.848585][ T7554]  dump_stack_lvl+0x241/0x360
[  282.848619][ T7554]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.848648][ T7554]  ? __pfx__printk+0x10/0x10
[  282.848675][ T7554]  ? _printk+0xd5/0x120
[  282.848701][ T7554]  ? __init_begin+0x41000/0x41000
[  282.848736][ T7554]  ? srso_alias_return_thunk+0x5/0xfbef5
[  282.848775][ T7554]  ? vscnprintf+0x5d/0x90
[  282.848808][ T7554]  panic+0x349/0x880
[  282.848834][ T7554]  ? __warn+0x174/0x4d0
[  282.848875][ T7554]  ? __pfx_panic+0x10/0x10
[  282.848921][ T7554]  __warn+0x344/0x4d0
[  282.848959][ T7554]  ? vkms_get_vblank_timestamp+0x183/0x1b0
[  282.848993][ T7554]  report_bug+0x2b3/0x500
[  282.849028][ T7554]  ? vkms_get_vblank_timestamp+0x183/0x1b0
[  282.849062][ T7554]  handle_bug+0x60/0x90
[  282.849085][ T7554]  exc_invalid_op+0x1a/0x50
[  282.849110][ T7554]  asm_exc_invalid_op+0x1a/0x20
[  282.849144][ T7554] RIP: 0010:vkms_get_vblank_timestamp+0x183/0x1b0
[  282.849173][ T7554] Code: 42 80 3c 30 00 74 08 48 89 ef e8 48 68 f7 fb 48 89 5d 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6e 8f de fa e8 2e 2e 90 fb 90 <0f> 0b 90 eb e4 89 d9 80 e1 07 38 c1 0f 8c cd fe ff ff 48 89 df e8
[  282.849193][ T7554] RSP: 0018:ffffc9000c7374c8 EFLAGS: 00010287
[  282.849216][ T7554] RAX: ffffffff8631b1a2 RBX: 00000041d9407bdc RCX: 0000000000080000
[  282.849235][ T7554] RDX: ffffc9000f5b3000 RSI: 00000000000016b3 RDI: 00000000000016b4
[  282.849252][ T7554] RBP: ffffc9000c737660 R08: ffffffff8631b10f R09: 1ffff11005cee522
[  282.849272][ T7554] R10: dffffc0000000000 R11: ffffffff8631b020 R12: 00000041d9407bdc
[  282.849291][ T7554] R13: ffff888025822150 R14: 1ffff920018e6ecc R15: ffff888025320000
[  282.849316][ T7554]  ? __pfx_vkms_get_vblank_timestamp+0x10/0x10
[  282.849345][ T7554]  ? vkms_get_vblank_timestamp+0xef/0x1b0
[  282.849371][ T7554]  ? vkms_get_vblank_timestamp+0x182/0x1b0
[  282.849406][ T7554]  ? vkms_get_vblank_timestamp+0x182/0x1b0
[  282.849435][ T7554]  ? __pfx_vkms_get_vblank_timestamp+0x10/0x10
[  282.849466][ T7554]  drm_crtc_next_vblank_start+0x22b/0x490
[  282.849492][ T7554]  ? lockdep_hardirqs_on+0x99/0x150
[  282.849537][ T7554]  ? __pfx_drm_crtc_next_vblank_start+0x10/0x10
[  282.849565][ T7554]  ? __pfx_vkms_prepare_fb+0x10/0x10
[  282.849616][ T7554]  drm_atomic_helper_wait_for_fences+0x277/0x8e0
[  282.849690][ T7554]  ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10
[  282.849720][ T7554]  ? drm_atomic_helper_prepare_planes+0x65f/0xb50
[  282.849760][ T7554]  drm_atomic_helper_commit+0x53a/0x9f0
[  282.849793][ T7554]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[  282.849826][ T7554]  drm_atomic_commit+0x296/0x2f0
[  282.849857][ T7554]  ? __pfx_drm_atomic_commit+0x10/0x10
[  282.849883][ T7554]  ? __pfx___drm_printfn_info+0x10/0x10
[  282.849928][ T7554]  ? drm_client_rotation+0x28b/0x550
[  282.849966][ T7554]  ? srso_alias_return_thunk+0x5/0xfbef5
[  282.850016][ T7554]  drm_client_modeset_commit_atomic+0x670/0x7d0
[  282.850066][ T7554]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  282.850104][ T7554]  ? __mutex_lock+0x397/0x1010
[  282.850164][ T7554]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  282.850216][ T7554]  drm_client_modeset_commit_locked+0xe0/0x520
[  282.850261][ T7554]  drm_fb_helper_pan_display+0x3e8/0xc20
[  282.850308][ T7554]  fb_pan_display+0x3a5/0x680
[  282.850336][ T7554]  ? __pfx_drm_fb_helper_pan_display+0x10/0x10
[  282.850373][ T7554]  bit_update_start+0x4d/0x1c0
[  282.850412][ T7554]  fbcon_modechanged+0xb7d/0x1200
[  282.850464][ T7554]  do_fb_ioctl+0x742/0x7d0
[  282.850502][ T7554]  ? __pfx_do_fb_ioctl+0x10/0x10
[  282.850578][ T7554]  ? srso_alias_return_thunk+0x5/0xfbef5
[  282.850619][ T7554]  ? __rcu_read_unlock+0xa1/0x110
[  282.850663][ T7554]  ? __fget_files+0x2a/0x410
[  282.850706][ T7554]  ? __fget_files+0x2a/0x410
[  282.850750][ T7554]  ? srso_alias_return_thunk+0x5/0xfbef5
[  282.850789][ T7554]  ? __pfx_fb_ioctl+0x10/0x10
[  282.850824][ T7554]  __se_sys_ioctl+0xf7/0x170
[  282.850857][ T7554]  do_syscall_64+0xf3/0x230
[  282.850897][ T7554]  ? srso_alias_return_thunk+0x5/0xfbef5
[  282.850941][ T7554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.850977][ T7554] RIP: 0033:0x7fdbc7b8d169
[  282.850998][ T7554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.851018][ T7554] RSP: 002b:00007fdbc899e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  282.851045][ T7554] RAX: ffffffffffffffda RBX: 00007fdbc7da6080 RCX: 00007fdbc7b8d169
[  282.851065][ T7554] RDX: 0000400000000140 RSI: 0000000000004601 RDI: 0000000000000003
[  282.851082][ T7554] RBP: 00007fdbc7c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  282.851099][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  282.851115][ T7554] R13: 0000000000000000 R14: 00007fdbc7da6080 R15: 00007fff2405ef88
[  282.851152][ T7554]  </TASK>
[  282.851377][ T7554] Kernel Offset: disabled