last executing test programs:

20m35.205861417s ago: executing program 32 (id=18):
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
migrate_pages(0x0, 0x8000, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2, {0x1}}, 0x18)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_io_uring_setup(0x31c7, &(0x7f0000000400)={0x0, 0x0, 0x2}, &(0x7f00000001c0), 0x0)
unshare(0x2040400)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r2)
connect$inet6(r1, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000080)
socket$nl_generic(0x10, 0x3, 0x10)

19m9.312475456s ago: executing program 33 (id=154):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[])
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f00000000c0))
io_setup(0x4, &(0x7f0000000240))

16m48.815027654s ago: executing program 34 (id=340):
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
write(0xffffffffffffffff, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000)
socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = userfaultfd(0x801)
getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000000180)=""/16, &(0x7f0000000080)=0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

8m11.002595423s ago: executing program 35 (id=1075):
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc)
close(r0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x410000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0xfffffffd)

8m10.854679368s ago: executing program 36 (id=1074):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x80)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x0)
signalfd4(r2, &(0x7f0000000180), 0x8, 0x800)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000010c0)={@map=r1, 0x1d, 0x0, 0x1, &(0x7f0000000fc0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001080), <r3=>0x0}, 0x40)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001180)=@generic={&(0x7f0000001140)='./file1\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="190000000c00000000000000", @ANYRES32=r4, @ANYBLOB='\x00', @ANYRES64=r3], 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f00000000c0)=0x5, 0x4)
sendmmsg$inet(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r6, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01)

6m57.845350266s ago: executing program 9 (id=1206):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r0, 0x701, 0x70bd26, 0x25dfdbfb, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
request_key(&(0x7f0000000100)='.request_key_auth\x00', 0x0, 0x0, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x4c095)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffff31, &(0x7f0000000300)=0x7fffffff)
syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='fd/4\x00')
prlimit64(0x0, 0xf, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x86)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000100)=0x2)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40186f40, 0x20000502)

6m55.682460952s ago: executing program 9 (id=1208):
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x410000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0xfffffffd)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x40)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private1, 0x2}, 0x9)

6m50.641739898s ago: executing program 9 (id=1215):
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave'])
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)

6m48.51439337s ago: executing program 9 (id=1218):
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x410000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x40)

6m32.666899859s ago: executing program 37 (id=1218):
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x410000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x40)

6m22.567722246s ago: executing program 8 (id=1259):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setaffinity(0x0, 0x58, &(0x7f00000002c0)=0xffffffffffffe5f6)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
fanotify_init(0x7c59848bb7be4ac, 0x1000)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c)
r5 = dup2(r4, r4)
recvfrom$unix(r5, &(0x7f0000000300)=""/225, 0xe1, 0x40012000, 0x0, 0x0)
write$P9_RREADDIR(r5, &(0x7f0000000180)={0xb, 0x29, 0x2, {0x2}}, 0xb)

6m20.170969584s ago: executing program 8 (id=1261):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_io_uring_setup(0x4172, 0x0, 0x0, &(0x7f0000000040))
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x3}}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
getpeername(r0, 0x0, &(0x7f0000000380))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast1, @multicast2}, &(0x7f0000000480)=0xc)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[], &(0x7f0000000540)=""/232, 0x6a, 0xe8, 0x0, 0x80000001, 0x0, @void, @value}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x80000001}, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102, 0x4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GSO_MAX_SEGS={0xffffffffffffffbf, 0x28, 0x259c}]}, 0x34}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000000000000500000000000000000000000000000000000000c785e15a8719e8684afb9a5a8c11571df4892f5de4c61d32b5c1af5f49c9463244ec9ea209629c00499db86ac4225e0885b105a5aab0f9eafb67875094e3d30700000000000000f723346f00a1a6ae6d1375388909e0a9112def0746db23e871476268a4dec80c26e52862f0c37b69d87f1275b1c60adbf69e60a3ed60fa10767f5ec269"], 0x50)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x0)

6m15.324219153s ago: executing program 8 (id=1268):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect$hid(0x6, 0x36, 0x0, &(0x7f0000000540)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0xfa, 0x3, 0x1, 0x20, 0xbd}, 0x31, &(0x7f0000000340)={0x5, 0xf, 0x31, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x80, 0x5, 0x8, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0xc, 0x2, 0x7ff}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x9, 0x2, 0x1}]}, 0x4, [{0x5f, &(0x7f0000000380)=@string={0x5f, 0x3, "0b921c6b681969b72a14622a73d1e6d7d28922a62ce792f26010cc4ddbae1d11a9c0503bc7be848a1bd4fbe6481d648abdd2702e6bb80da0090f407ce1cebe29c06a826e1017148870fe9ac439368796aedd8325d7c0f60bbcc27015d1"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x423}}, {0x3d, &(0x7f00000004c0)=@string={0x3d, 0x3, "83b323efbd5d1c856b3799e8cd74f8ccb410a5ba1a350fcffe0cde66c13c52059e3d7d0daa5ef369bc91005c9d570460e4afaba1bc13b24f2c207e"}}]})
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB], &(0x7f0000000900)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0x0, 0xf9, 0x6, 0xff, 0x4}, 0x43, &(0x7f0000000640)={0x5, 0xf, 0x43, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "df609f5fe96e0f9f608415b53d8e603d"}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "aa248fe78fcd6054763f40fafe9ad434"}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x0, 0x880, 0x2, [0x0]}]}, 0x3, [{0x2, &(0x7f0000000740)=@string={0x2}}, {0x0, 0x0}, {0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="a8c12c1f05d95a4219d38046edc312485ea29d88"]}]})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_emit_ethernet(0x36, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0)

6m12.10817566s ago: executing program 8 (id=1276):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x62, @local, 0x4e20, 0x2, 'ovf\x00', 0x4, 0x9, 0x1}, 0x2c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)
sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
openat$snapshot(0xffffff9c, &(0x7f0000000a40), 0x81, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3})

6m6.55683313s ago: executing program 8 (id=1285):
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x410000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x40)

6m5.374712486s ago: executing program 8 (id=1287):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000240), 0x49, 0x880000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
lsm_get_self_attr(0x64, 0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
fsopen(&(0x7f0000000040)='afs\x00', 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0, <r4=>0x0})
prlimit64(r4, 0x8, &(0x7f0000000100)={0x3, 0x2005}, &(0x7f0000000440))
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x80000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}]})
chdir(&(0x7f0000000140)='./bus\x00')
listen(r3, 0x200)

5m51.860274579s ago: executing program 38 (id=1282):
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc)
close(r0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x410000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)

5m51.581652806s ago: executing program 39 (id=1283):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x62, @local, 0x4e20, 0x2, 'ovf\x00', 0x4, 0x9, 0x1}, 0x2c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28)
sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)

5m50.279155678s ago: executing program 40 (id=1287):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000240), 0x49, 0x880000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
lsm_get_self_attr(0x64, 0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
fsopen(&(0x7f0000000040)='afs\x00', 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0, <r4=>0x0})
prlimit64(r4, 0x8, &(0x7f0000000100)={0x3, 0x2005}, &(0x7f0000000440))
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x80000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}]})
chdir(&(0x7f0000000140)='./bus\x00')
listen(r3, 0x200)

3m13.119406922s ago: executing program 4 (id=1508):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x6a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getpid()
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xe9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1020)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

3m10.410420147s ago: executing program 4 (id=1513):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setaffinity(0x0, 0x58, &(0x7f00000002c0)=0xffffffffffffe5f6)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
fanotify_init(0x7c59848bb7be4ac, 0x1000)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c)
r5 = dup2(r4, r4)
recvfrom$unix(r5, &(0x7f0000000300)=""/225, 0xe1, 0x40012000, 0x0, 0x0)
write$P9_RREADDIR(r5, &(0x7f0000000180)={0xb, 0x29, 0x2, {0x2}}, 0xb)

3m8.530816948s ago: executing program 4 (id=1514):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000900000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

3m7.977535477s ago: executing program 4 (id=1515):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0xb001, 0x2, 0x1}, 0x6c, 0x0)
landlock_restrict_self(r2, 0x0)

3m5.962737891s ago: executing program 4 (id=1517):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_io_uring_setup(0x4172, 0x0, 0x0, &(0x7f0000000040))
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x3}}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
getpeername(r0, 0x0, &(0x7f0000000380))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast1, @multicast2}, &(0x7f0000000480)=0xc)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[], &(0x7f0000000540)=""/232, 0x6a, 0xe8, 0x0, 0x80000001, 0x0, @void, @value}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x80000001}, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102, 0x4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GSO_MAX_SEGS={0xffffffffffffffbf, 0x28, 0x259c}]}, 0x34}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000000000000500000000000000000000000000000000000000c785e15a8719e8684afb9a5a8c11571df4892f5de4c61d32b5c1af5f49c9463244ec9ea209629c00499db86ac4225e0885b105a5aab0f9eafb67875094e3d30700000000000000f723346f00a1a6ae6d1375388909e0a9112def0746db23e871476268a4dec80c26e52862f0c37b69d87f1275b1c60adbf69e60a3ed60fa10767f5ec269"], 0x50)
r5 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
symlinkat(&(0x7f0000000200)='./file0\x00', r6, &(0x7f0000000240)='./file0\x00')

3m4.694316903s ago: executing program 4 (id=1518):
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x410000002)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0xfffffffd)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x40)

3m2.179683573s ago: executing program 2 (id=1525):
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
sendto$packet(r1, &(0x7f00000000c0)="3f0336082608123a2c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c", 0x3f, 0xa0c4, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(0xffffffffffffffff, 0x3)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)

2m57.752844699s ago: executing program 3 (id=1529):
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8004000000071, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @raw_data=[0x0, 0x0, 0x9, 0xfffffffc, 0xffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x57b9b7ab, 0x1, 0x2, 0x0, 0x0, 0x3]})
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x24, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0x5)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184520, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r4, 0x400, 0x1)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open$dir(&(0x7f0000000000)='./file1/file0\x00', 0x801, 0x0)

2m57.549892604s ago: executing program 2 (id=1530):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r0, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008810}}], 0x1, 0x0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000080)={0xa, {0x0, 0x6, 0x8}}, 0xa)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
getrlimit(0xe, &(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
landlock_restrict_self(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
pipe(0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
ptrace$ARCH_SHSTK_ENABLE(0x1e, r4, 0x3, 0x5001)
syz_open_procfs$userns(r4, &(0x7f00000000c0))
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1)

2m54.483625568s ago: executing program 3 (id=1535):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r0, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008810}}], 0x1, 0x0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000080)={0xa, {0x0, 0x6, 0x8}}, 0xa)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
landlock_restrict_self(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
pipe(0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_procfs$userns(r4, &(0x7f00000000c0))
r5 = inotify_init()
readv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

2m54.412529425s ago: executing program 2 (id=1536):
r0 = syz_open_dev$I2C(0x0, 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0xff, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
link(0x0, &(0x7f00000000c0)='./file0\x00')
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x850)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

2m53.041181921s ago: executing program 2 (id=1537):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x80)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x0)
signalfd4(r2, &(0x7f0000000180), 0x8, 0x800)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001180)=@generic={&(0x7f0000001140)='./file1\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="190000000c00000000000000", @ANYRES32=r3, @ANYBLOB='\x00', @ANYRES64], 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f00000000c0)=0x5, 0x4)
sendmmsg$inet(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0xe1, 0x9, @loopback}, 0x1c)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x8000000000000000, 0xefffffffffff7ffe}]})
socket$tipc(0x1e, 0x2, 0x0)
setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@any, 0x8, 0x7, 0x3, "87c925", 0x8000}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x3, 0x3, "388233"}, {@any, 0x2, 0x9, 0x7, "b47d6d", 0x41eb}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x6, 0x2, ',\b]', 0x3}]}}}, 0x3c)

2m51.960872729s ago: executing program 3 (id=1540):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x6a)
socket$nl_route(0x10, 0x3, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getpid()
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x7)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0xe9)

2m48.622863569s ago: executing program 41 (id=1518):
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x410000002)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0xfffffffd)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x40)

2m48.598713074s ago: executing program 3 (id=1544):
r0 = socket(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x24, 0x14, 0xf0b, 0xfffffffc, 0x4, {0x2, 0x0, 0x0, 0x0, {0xd, 0xd}, {0x2}, {0x9, 0x11}}}, 0x24}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)

2m48.597597849s ago: executing program 2 (id=1545):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x10b942, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xcc}}, 0x0)

2m46.206829003s ago: executing program 3 (id=1550):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r0, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008810}}], 0x1, 0x0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000080)={0xa, {0x0, 0x6, 0x8}}, 0xa)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
getrlimit(0xe, &(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
landlock_restrict_self(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
pipe(0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r4, 0x3, 0x5001)
syz_open_procfs$userns(r4, &(0x7f00000000c0))
r5 = inotify_init()
readv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

2m43.646578816s ago: executing program 2 (id=1551):
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc)
close(r0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x410000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0xfffffffd)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x40)

2m42.166856942s ago: executing program 3 (id=1554):
r0 = syz_open_dev$I2C(0x0, 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0xff, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
link(0x0, &(0x7f00000000c0)='./file0\x00')
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x850)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

2m27.843493799s ago: executing program 42 (id=1551):
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc)
close(r0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x410000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0xfffffffd)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x40)

2m26.798751403s ago: executing program 43 (id=1554):
r0 = syz_open_dev$I2C(0x0, 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0xff, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
link(0x0, &(0x7f00000000c0)='./file0\x00')
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x850)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

1m18.221329075s ago: executing program 1 (id=1670):
mkdir(0x0, 0xd0939199c36b4d28)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$random(0xffffffffffffff9c, 0x0, 0x478a01, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)
mkdir(0x0, 0x18e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78)
timer_create(0x9, &(0x7f0000000100)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000500))
syz_open_dev$sndpcmc(&(0x7f0000002600), 0x10021, 0x60000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002ab844a9000b00c9009e1800000000000000000008000000"], 0x1c}}, 0x4004000)
sendmmsg(r1, 0x0, 0x0, 0x8040)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg0\x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)

1m17.048597355s ago: executing program 5 (id=1671):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x6a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getpid()
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xe9)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0x9)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1020)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

1m16.967754204s ago: executing program 1 (id=1672):
r0 = syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m15.379830427s ago: executing program 1 (id=1673):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000240), 0x49, 0x880000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
lsm_get_self_attr(0x64, 0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0, <r5=>0x0})
prlimit64(r5, 0x8, &(0x7f0000000100)={0x3, 0x2005}, &(0x7f0000000440))
mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x80000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}]})
chdir(&(0x7f0000000140)='./bus\x00')
listen(r3, 0x200)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
setxattr$security_ima(&(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)

1m15.269241191s ago: executing program 5 (id=1674):
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r2)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r4, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000))
syz_init_net_socket$x25(0x9, 0x5, 0x0)
close(r3)

1m13.603604721s ago: executing program 5 (id=1675):
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x410000002)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0xfffffffd)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x40)

1m12.882934491s ago: executing program 1 (id=1676):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r0, 0x701, 0x70bd26, 0x25dfdbfb, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
request_key(&(0x7f0000000100)='.request_key_auth\x00', 0x0, 0x0, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x4c095)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffff31, &(0x7f0000000300)=0x7fffffff)
syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='fd/4\x00')
prlimit64(0x0, 0xf, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x86)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000100)=0x2)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0x40186f40, 0x20000502)

1m11.832417753s ago: executing program 1 (id=1678):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='R', 0x1}], 0x1}}], 0x2, 0x10)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f0000000400)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000580)="e200183d", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000140)='\')\x00', 0x3)

1m11.829769265s ago: executing program 5 (id=1679):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x10b942, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xc8}}, 0x0)

1m10.397079333s ago: executing program 9 (id=1543):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f00000000c0))
io_setup(0x4, &(0x7f0000000240)=<r2=>0x0)
eventfd2(0xc, 0x80800)
io_cancel(r2, 0x0, &(0x7f0000000480))
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x71, 0x2, {{0x8, 0x2, 0x1}, 0x9}}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0)
syz_open_dev$MSR(&(0x7f0000000140), 0x6, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m8.520285959s ago: executing program 1 (id=1682):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[])
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, &(0x7f00000000c0))
io_setup(0x4, &(0x7f0000000240)=<r1=>0x0)
io_cancel(r1, 0x0, &(0x7f0000000480))
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
syz_open_dev$MSR(&(0x7f0000000140), 0x6, 0x0)

1m8.111578985s ago: executing program 9 (id=1683):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_io_uring_setup(0x4172, 0x0, 0x0, &(0x7f0000000040))
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x3}}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
getpeername(r0, 0x0, &(0x7f0000000380))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast1, @multicast2}, &(0x7f0000000480)=0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[], &(0x7f0000000540)=""/232, 0x6a, 0xe8, 0x0, 0x80000001, 0x0, @void, @value}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x80000001}, 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102, 0x4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GSO_MAX_SEGS={0xffffffffffffffbf, 0x28, 0x259c}]}, 0x34}}, 0x0)

1m8.110939987s ago: executing program 5 (id=1684):
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r2)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
syz_init_net_socket$x25(0x9, 0x5, 0x0)
close(r3)

1m6.066160157s ago: executing program 5 (id=1689):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x80)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x0)
signalfd4(r2, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001180)=@generic={&(0x7f0000001140)='./file1\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000000c0)=0x5, 0x4)
sendmmsg$inet(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0xe1, 0x9, @loopback}, 0x1c)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x8000000000000000, 0xefffffffffff7ffe}]})
socket$tipc(0x1e, 0x2, 0x0)
setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01)

52.043742325s ago: executing program 44 (id=1683):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_io_uring_setup(0x4172, 0x0, 0x0, &(0x7f0000000040))
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x3}}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
getpeername(r0, 0x0, &(0x7f0000000380))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast1, @multicast2}, &(0x7f0000000480)=0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[], &(0x7f0000000540)=""/232, 0x6a, 0xe8, 0x0, 0x80000001, 0x0, @void, @value}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x80000001}, 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102, 0x4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GSO_MAX_SEGS={0xffffffffffffffbf, 0x28, 0x259c}]}, 0x34}}, 0x0)

51.8800802s ago: executing program 45 (id=1682):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[])
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, &(0x7f00000000c0))
io_setup(0x4, &(0x7f0000000240)=<r1=>0x0)
io_cancel(r1, 0x0, &(0x7f0000000480))
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
syz_open_dev$MSR(&(0x7f0000000140), 0x6, 0x0)

50.616423077s ago: executing program 46 (id=1689):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x80)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x0)
signalfd4(r2, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001180)=@generic={&(0x7f0000001140)='./file1\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000000c0)=0x5, 0x4)
sendmmsg$inet(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0xe1, 0x9, @loopback}, 0x1c)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x8000000000000000, 0xefffffffffff7ffe}]})
socket$tipc(0x1e, 0x2, 0x0)
setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01)

15.624997717s ago: executing program 7 (id=1767):
bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000003c0))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0x1002, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x80000, 0x0)
finit_module(r3, 0x0, 0x3)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1)
mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfd)
migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa)
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @private=0xa010101}, 0x10)

12.941919711s ago: executing program 7 (id=1769):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0x20000020, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000380)=<r5=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c707fe81436b024c2574980397bc49d70c060d57bc88fbe3bbaa058b040362ab926150763fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f91b18725704a01c56009a9f748e5aaf30a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(r4, r5, 0x0)
io_uring_enter(r3, 0x5b43, 0x8200, 0x0, 0x0, 0x0)

12.927941016s ago: executing program 0 (id=1770):
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r1)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3})

11.61581601s ago: executing program 7 (id=1772):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='sessionid\x00')
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
r1 = dup(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0)
r2 = openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0)
fcntl$dupfd(r1, 0x406, r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000000000000000000000020000001e01060001"], 0x154}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x0, 0xff, 0x8})

11.614635712s ago: executing program 0 (id=1773):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ptrace$setregset(0x4205, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
ptrace$getregset(0x21, 0x0, 0x202, &(0x7f0000000000)={0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44})

9.080483712s ago: executing program 0 (id=1774):
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x17, 0xe2, 0xdd, 0x8, 0x763, 0x2080, 0xd940, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xe4, 0x60}}]}}]}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

7.861126071s ago: executing program 7 (id=1776):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x10b942, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00'}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xc8}}, 0x0)

5.949035616s ago: executing program 7 (id=1777):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x62, @local, 0x4e20, 0x2, 'ovf\x00', 0x4, 0x9, 0x1}, 0x2c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28)
sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r3, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
openat$snapshot(0xffffff9c, &(0x7f0000000a40), 0x81, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4})

5.902843486s ago: executing program 6 (id=1778):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x61, 0x2e, 0x5f, 0x61, 0x4f]}}, 0x0, 0x1f, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28)

5.419462352s ago: executing program 6 (id=1779):
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x410000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(0xffffffffffffffff, 0xfffffffd)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x40)

4.315585804s ago: executing program 0 (id=1780):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r0, 0x701, 0x70bd26, 0x25dfdbfb, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
request_key(&(0x7f0000000100)='.request_key_auth\x00', 0x0, 0x0, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x4c095)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffff31, &(0x7f0000000300)=0x7fffffff)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='fd/4\x00')
prlimit64(0x0, 0xf, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x86)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000100)=0x2)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0x40186f40, 0x20000502)

3.597324552s ago: executing program 6 (id=1781):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040050}, 0x4081)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940805891550f4a8000000006700008000f00002000009000080fff5dd000000100001000004", 0x4e}], 0x1)
socketpair(0x1d, 0x4, 0x9, &(0x7f0000000000))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x0, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x21}, 0x40000, 0x0, 0x1, 0x1, 0x3f}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r5=>0x0})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x38}, 0x40000, 0x0, 0x1, 0x1, 0x3f}, 0x20)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000180)={@empty, 0x0, r5})
bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x8, @any, 0xfffe, 0x2}, 0xe)

2.565920535s ago: executing program 6 (id=1782):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0x20000020, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000380)=<r5=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(r4, r5, 0x0)
io_uring_enter(r3, 0x5b43, 0x8200, 0x0, 0x0, 0x0)

1.283778593s ago: executing program 6 (id=1783):
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r2)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r4, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000))
syz_init_net_socket$x25(0x9, 0x5, 0x0)
close(r3)

461.366793ms ago: executing program 0 (id=1784):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000900000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

350.953739ms ago: executing program 7 (id=1785):
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
sendto$packet(r1, &(0x7f00000000c0)="3f0336082608123a2c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c", 0x3f, 0xa0c4, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r5, 0x3)
pread64(0xffffffffffffffff, &(0x7f0000000440)=""/240, 0xf0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)

281.435407ms ago: executing program 0 (id=1786):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = getpid()
sched_setaffinity(0x0, 0x58, &(0x7f00000002c0)=0xffffffffffffe5f6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
fanotify_init(0x7c59848bb7be4ac, 0x1000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000300)=""/225, 0xe1, 0x40012000, 0x0, 0x0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000180)={0xb, 0x29, 0x2, {0x2}}, 0xb)

0s ago: executing program 6 (id=1787):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x10b942, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00'}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xc8}}, 0x0)

kernel console output (not intermixed with test programs):

ace: batadv_slave_0
[ 1296.108175][T12413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1296.155674][T12413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1296.510571][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'.
[ 1296.781836][T12413] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1296.789011][T12413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1296.813804][    T8] usb 4-1: USB disconnect, device number 12
[ 1296.816099][T12413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1296.843968][T12693] IPVS: ovf: UDP 0.0.0.0:0 - no destination available
[ 1296.844553][    T8] ch341 4-1:0.0: device disconnected
[ 1297.020404][ T5867] Bluetooth: hci0: command tx timeout
[ 1297.227708][T12413] hsr_slave_0: entered promiscuous mode
[ 1297.242427][T12413] hsr_slave_1: entered promiscuous mode
[ 1298.255013][T12618] chnl_net:caif_netlink_parms(): no params data found
[ 1299.245588][T12618] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1299.273240][T12618] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1299.298473][T12618] bridge_slave_0: entered allmulticast mode
[ 1299.340726][T12618] bridge_slave_0: entered promiscuous mode
[ 1299.407632][T12618] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1299.470391][T12618] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1299.477745][T12618] bridge_slave_1: entered allmulticast mode
[ 1299.500901][T12618] bridge_slave_1: entered promiscuous mode
[ 1299.548041][  T205] IPVS: stop unused estimator thread 0...
[ 1300.345500][T12618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1300.370716][T12438] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1300.418952][T12438] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1300.487917][T12438] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1300.529360][T12618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1300.640572][T12438] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1300.705419][T12618] team0: Port device team_slave_0 added
[ 1301.563858][T12618] team0: Port device team_slave_1 added
[ 1302.101459][T12739] loop3: detected capacity change from 0 to 128
[ 1302.893692][T12618] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1302.907800][T12618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1302.957113][T12618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1303.089724][ T5934] kworker/u8:3: attempt to access beyond end of device
[ 1303.089724][ T5934] loop3: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1303.189824][T12618] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1303.199995][T12618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1303.226076][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1303.232331][T12618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1304.898122][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1304.904677][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1305.829036][T12618] hsr_slave_0: entered promiscuous mode
[ 1305.853392][T12618] hsr_slave_1: entered promiscuous mode
[ 1305.879462][T12618] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1305.900170][T12618] Cannot create hsr debugfs directory
[ 1306.000387][   T51] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1306.073462][T12438] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1306.162610][   T51] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1306.185035][   T51] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1306.220187][   T51] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1306.250270][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1306.278546][T12769] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1306.335048][   T51] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1306.656887][T12438] 8021q: adding VLAN 0 to HW filter on device team0
[ 1306.762666][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1306.769905][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1306.852866][ T5925] usb 3-1: USB disconnect, device number 4
[ 1307.023434][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1307.030650][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1307.197494][  T205] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1307.876247][  T205] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1308.051654][  T205] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1308.432582][  T205] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1310.432361][T12438] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1310.458579][T12811] random: crng reseeded on system resumption
[ 1310.851905][  T205] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1311.392257][  T205] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1311.567262][  T205] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1311.693218][  T205] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1311.779731][T12436] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1311.808971][T12436] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1311.846060][T12436] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1311.904475][T12436] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1311.948954][T12438] veth0_vlan: entered promiscuous mode
[ 1312.059261][T12438] veth1_vlan: entered promiscuous mode
[ 1312.159038][  T205] bridge_slave_1: left allmulticast mode
[ 1312.172955][  T205] bridge_slave_1: left promiscuous mode
[ 1312.178711][  T205] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1312.212404][  T205] bridge_slave_0: left allmulticast mode
[ 1312.229205][  T205] bridge_slave_0: left promiscuous mode
[ 1312.237141][  T205] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1312.253298][  T205] bridge_slave_1: left allmulticast mode
[ 1312.259129][  T205] bridge_slave_1: left promiscuous mode
[ 1312.267581][  T205] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1312.280456][ T5925] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1312.293927][  T205] bridge_slave_0: left allmulticast mode
[ 1312.301647][  T205] bridge_slave_0: left promiscuous mode
[ 1312.307376][  T205] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1312.320523][  T205] bridge_slave_1: left allmulticast mode
[ 1312.326203][  T205] bridge_slave_1: left promiscuous mode
[ 1312.333013][  T205] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1312.343145][  T205] bridge_slave_0: left allmulticast mode
[ 1312.349002][  T205] bridge_slave_0: left promiscuous mode
[ 1312.356068][  T205] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1312.457369][ T5925] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1312.480168][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1312.498433][ T5925] usb 4-1: Product: syz
[ 1312.508543][ T5925] usb 4-1: Manufacturer: syz
[ 1312.518661][ T5925] usb 4-1: SerialNumber: syz
[ 1312.541861][ T5925] usb 4-1: config 0 descriptor??
[ 1312.553054][ T5925] ch341 4-1:0.0: ch341-uart converter detected
[ 1312.780431][ T5867] Bluetooth: hci5: command 0x0406 tx timeout
[ 1312.799092][ T5925] usb 4-1: failed to receive control message: -71
[ 1312.810927][ T5925] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1312.823834][ T5925] usb 4-1: USB disconnect, device number 13
[ 1312.835569][ T5925] ch341 4-1:0.0: device disconnected
[ 1314.493121][ T5867] Bluetooth: hci7: Ignoring HCI_Connection_Complete for existing connection
[ 1316.278638][  T205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1316.707409][  T205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1316.722148][  T205] bond0 (unregistering): Released all slaves
[ 1317.642511][  T205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1317.682884][  T205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1317.812004][  T205] bond0 (unregistering): Released all slaves
[ 1317.979046][  T205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1318.117280][  T205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1318.139846][  T205] bond0 (unregistering): Released all slaves
[ 1318.661245][T12903] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1318.667514][T12903] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1318.673732][T12903] Bluetooth: hci7: Opcode 0x0406 failed: -4
[ 1319.264372][T12903] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1319.273649][T12903] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1319.281639][T12903] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1319.289439][T12438] veth0_macvtap: entered promiscuous mode
[ 1319.301519][T12903] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1319.307508][T12903] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1319.331400][T12903] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1319.338438][T12903] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[ 1319.344504][T12903] Bluetooth: hci8: Opcode 0x0406 failed: -4
[ 1319.392140][T12903] Bluetooth: hci8: Opcode 0x0406 failed: -4
[ 1319.399415][T12903] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1319.405554][T12903] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1319.433843][T12903] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1319.563276][T12438] veth1_macvtap: entered promiscuous mode
[ 1319.643637][T12413] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1320.510686][ T5882] Bluetooth: hci5: command 0x0406 tx timeout
[ 1320.690606][ T5882] Bluetooth: hci7: command 0x040f tx timeout
[ 1321.141650][T12413] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1321.330446][ T5882] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1321.330553][ T5867] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1321.426625][ T5867] Bluetooth: hci8: command 0x0c1a tx timeout
[ 1321.510620][ T5867] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1321.600675][T12413] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1321.847416][T12413] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1321.968887][T12436] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1323.147733][ T5882] Bluetooth: hci7: command 0x040f tx timeout
[ 1323.396472][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1323.410243][ T5882] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1323.416391][ T5882] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1323.430247][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1323.440242][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1323.450948][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1323.461129][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1323.472237][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1323.482245][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1323.492897][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1323.504219][T12438] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1323.689707][T12436] 8021q: adding VLAN 0 to HW filter on device team0
[ 1323.729324][ T5867] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1323.735574][ T5882] Bluetooth: hci8: command 0x0c1a tx timeout
[ 1323.825813][T12943] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 1323.833177][T12943] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 1324.716947][T12618] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1326.095069][ T5882] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1326.101374][ T5882] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1326.107515][ T5882] Bluetooth: hci8: command 0x0c1a tx timeout
[ 1326.113731][ T5882] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1326.587161][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1326.594587][ T6138] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1328.172962][T12618] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1328.270781][T12959] Falling back ldisc for ttyprintk.
[ 1328.851430][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1328.877940][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1328.980177][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1329.018735][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1329.098562][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1329.140345][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1329.199915][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1329.260264][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1329.314224][T12438] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1330.474320][ T6897] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1330.481515][ T6897] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1330.540256][T12618] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1330.596830][T12618] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1330.700552][T12975] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1330.706721][T12975] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1330.712853][T12975] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1330.718904][T12975] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1330.724993][T12975] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[ 1330.731092][T12975] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1330.844703][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1330.856890][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1330.866259][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1330.889223][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1330.900789][ T5867] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1330.909857][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1331.241926][T12453] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1331.251217][T12453] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1331.263813][T12453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1331.280795][T12453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1331.288764][T12453] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1331.310481][T12453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1331.489926][T12453] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1331.500706][T12453] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1331.508771][T12453] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1331.518415][T12453] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1331.537249][T12453] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1331.546573][T12453] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1331.703963][  T205] hsr_slave_0: left promiscuous mode
[ 1331.714536][  T205] hsr_slave_1: left promiscuous mode
[ 1331.724790][  T205] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1331.748051][  T205] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1331.769485][  T205] hsr_slave_0: left promiscuous mode
[ 1331.781948][  T205] hsr_slave_1: left promiscuous mode
[ 1331.798796][  T205] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1331.806445][  T205] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1331.815994][  T205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1331.825432][  T205] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1331.837982][  T205] hsr_slave_0: left promiscuous mode
[ 1331.845488][  T205] hsr_slave_1: left promiscuous mode
[ 1331.851873][  T205] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1331.859412][  T205] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1331.878094][  T205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1331.885669][  T205] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1331.919635][  T205] veth1_macvtap: left promiscuous mode
[ 1331.925510][  T205] veth0_macvtap: left promiscuous mode
[ 1331.931336][  T205] veth1_vlan: left promiscuous mode
[ 1331.936693][  T205] veth0_vlan: left promiscuous mode
[ 1331.943278][  T205] veth1_macvtap: left promiscuous mode
[ 1331.948832][  T205] veth0_macvtap: left promiscuous mode
[ 1331.954718][  T205] veth1_vlan: left promiscuous mode
[ 1331.960130][  T205] veth0_vlan: left promiscuous mode
[ 1332.770532][ T5867] Bluetooth: hci5: command 0x0406 tx timeout
[ 1332.776913][ T5867] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1332.782991][T12453] Bluetooth: hci7: command 0x040f tx timeout
[ 1333.006900][  T205] team0 (unregistering): Port device team_slave_1 removed
[ 1333.014902][ T5867] Bluetooth: hci1: command tx timeout
[ 1333.094721][  T205] team0 (unregistering): Port device team_slave_0 removed
[ 1333.434453][ T5867] Bluetooth: hci2: command tx timeout
[ 1333.664039][ T5867] Bluetooth: hci3: command tx timeout
[ 1334.629118][  T205] team0 (unregistering): Port device team_slave_1 removed
[ 1334.688984][  T205] team0 (unregistering): Port device team_slave_0 removed
[ 1335.090465][ T5867] Bluetooth: hci1: command tx timeout
[ 1335.500230][ T5867] Bluetooth: hci2: command tx timeout
[ 1335.730778][ T5867] Bluetooth: hci3: command tx timeout
[ 1336.255812][  T205] team0 (unregistering): Port device team_slave_1 removed
[ 1336.299247][  T205] team0 (unregistering): Port device team_slave_0 removed
[ 1337.171835][ T5867] Bluetooth: hci1: command tx timeout
[ 1337.378409][T12618] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1337.543946][T12618] 8021q: adding VLAN 0 to HW filter on device team0
[ 1337.570814][ T5867] Bluetooth: hci2: command tx timeout
[ 1337.592753][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1337.600310][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1337.830423][ T5867] Bluetooth: hci3: command tx timeout
[ 1338.237110][T13037] Falling back ldisc for ttyprintk.
[ 1338.549801][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1338.557047][ T5921] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1338.981490][T12985] chnl_net:caif_netlink_parms(): no params data found
[ 1339.263344][ T5867] Bluetooth: hci1: command tx timeout
[ 1339.327062][T12992] chnl_net:caif_netlink_parms(): no params data found
[ 1339.652216][ T5867] Bluetooth: hci2: command tx timeout
[ 1339.890162][ T5867] Bluetooth: hci3: command tx timeout
[ 1340.262075][T12985] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1340.281358][T12985] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1340.288650][T12985] bridge_slave_0: entered allmulticast mode
[ 1340.331732][T12985] bridge_slave_0: entered promiscuous mode
[ 1340.420275][T12995] chnl_net:caif_netlink_parms(): no params data found
[ 1340.458039][T12985] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1340.576780][T12985] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1340.682755][T12985] bridge_slave_1: entered allmulticast mode
[ 1340.805561][T12985] bridge_slave_1: entered promiscuous mode
[ 1341.335836][T12618] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1342.103869][T12992] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1342.111606][T12992] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1342.118880][T12992] bridge_slave_0: entered allmulticast mode
[ 1342.135437][T12992] bridge_slave_0: entered promiscuous mode
[ 1342.164466][T12985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1342.177176][T12985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1342.286099][T12992] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1342.293958][T12992] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1342.301413][T12992] bridge_slave_1: entered allmulticast mode
[ 1342.308612][T12992] bridge_slave_1: entered promiscuous mode
[ 1342.564021][T12995] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1342.574416][T12995] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1342.583532][T12995] bridge_slave_0: entered allmulticast mode
[ 1342.590859][T12995] bridge_slave_0: entered promiscuous mode
[ 1342.624257][T12985] team0: Port device team_slave_0 added
[ 1342.634498][T12985] team0: Port device team_slave_1 added
[ 1343.038625][T12995] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1343.046686][T12995] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1343.054655][T12995] bridge_slave_1: entered allmulticast mode
[ 1343.062362][T12995] bridge_slave_1: entered promiscuous mode
[ 1343.072526][T12992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1343.100730][T12618] veth0_vlan: entered promiscuous mode
[ 1343.109273][T12985] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1343.123929][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1343.170467][T13082] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1343.177423][T13082] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1343.178542][T12985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1343.184003][T13082] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1343.200559][T13082] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1343.206579][T13082] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1343.214773][T13082] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1343.223826][T13082] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1343.229837][T13082] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1343.233778][T12985] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1343.269588][T13082] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1343.270541][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1343.301947][T12985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1343.332884][T13082] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1343.339477][T13082] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1343.394965][T13082] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1343.477610][T12992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1343.564258][T12985] hsr_slave_0: entered promiscuous mode
[ 1343.579618][T12985] hsr_slave_1: entered promiscuous mode
[ 1343.598451][T12985] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1343.607213][T12985] Cannot create hsr debugfs directory
[ 1343.623701][T12995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1343.715158][  T205] IPVS: stop unused estimator thread 0...
[ 1343.766952][T12995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1343.828932][T12992] team0: Port device team_slave_0 added
[ 1343.883156][T12618] veth1_vlan: entered promiscuous mode
[ 1343.939291][T12618] veth0_macvtap: entered promiscuous mode
[ 1343.949085][T12618] veth1_macvtap: entered promiscuous mode
[ 1343.965253][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1343.976575][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1344.020271][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1344.040079][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1344.049959][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1344.063683][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1344.122178][T12618] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1344.569504][T12992] team0: Port device team_slave_1 added
[ 1344.832994][T12995] team0: Port device team_slave_0 added
[ 1344.840949][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1344.852679][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1344.865042][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1344.886323][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1344.901437][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1344.925392][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1344.943819][T12618] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1344.985387][T12618] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1345.004907][T12618] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1345.024879][T12618] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1345.049084][T12618] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1345.594407][T12992] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1345.634876][T12992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1345.940832][ T5882] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1345.947031][ T5882] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1345.953212][ T5867] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1345.959265][ T5867] Bluetooth: hci7: command 0x040f tx timeout
[ 1345.965588][ T5882] Bluetooth: hci5: command 0x0406 tx timeout
[ 1345.971682][ T5867] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1345.998144][T12992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1346.037693][T12992] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1346.045427][T12992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1346.071352][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1346.077663][T12992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1346.304909][T12995] team0: Port device team_slave_1 added
[ 1346.981473][T12992] hsr_slave_0: entered promiscuous mode
[ 1346.993104][T12992] hsr_slave_1: entered promiscuous mode
[ 1347.008890][T12992] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1347.030897][T12992] Cannot create hsr debugfs directory
[ 1347.077838][T12995] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1347.085132][T12995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1347.116020][T12995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1347.133152][T12995] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1347.140489][T12995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1347.197894][T12995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1347.443387][T12995] hsr_slave_0: entered promiscuous mode
[ 1347.453757][T12995] hsr_slave_1: entered promiscuous mode
[ 1347.464307][T12995] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1347.473838][T12995] Cannot create hsr debugfs directory
[ 1348.050782][T12453] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1348.056861][T12453] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1348.063160][ T5882] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1348.136163][ T5882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1348.147308][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1348.155479][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1348.201218][ T5882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1348.208850][ T5882] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1348.222423][ T5882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1348.605934][T13113] ubi: mtd0 is already attached to ubi0
[ 1350.130688][T12453] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1350.137060][ T5867] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1350.137090][T12451] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1350.342916][T12453] Bluetooth: hci4: command tx timeout
[ 1351.927389][T12985] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1352.380623][T12453] Bluetooth: hci4: command 0x041b tx timeout
[ 1352.424047][T12985] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1352.712913][T12985] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1352.825881][T12985] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1352.834497][T13134] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1352.840588][T13134] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1352.846599][T13134] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1352.853308][T13134] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1352.859680][T13134] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1352.865718][T13134] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1352.871697][T13134] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1352.884579][T13134] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1352.904246][T13107] chnl_net:caif_netlink_parms(): no params data found
[ 1353.354267][T13107] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1353.369477][T13107] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1353.385466][T13107] bridge_slave_0: entered allmulticast mode
[ 1353.615082][T13107] bridge_slave_0: entered promiscuous mode
[ 1353.636673][T13107] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1353.652023][T13107] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1354.520461][T13107] bridge_slave_1: entered allmulticast mode
[ 1354.527380][T13107] bridge_slave_1: entered promiscuous mode
[ 1354.562812][ T5895] bridge_slave_1: left allmulticast mode
[ 1354.570327][ T5895] bridge_slave_1: left promiscuous mode
[ 1354.595180][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1354.671373][ T5895] bridge_slave_0: left allmulticast mode
[ 1354.684460][ T5895] bridge_slave_0: left promiscuous mode
[ 1354.930499][ T5867] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1354.937758][ T5867] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1354.940745][T12451] Bluetooth: hci7: command 0x040f tx timeout
[ 1354.944663][ T5867] Bluetooth: hci5: command 0x0406 tx timeout
[ 1354.957048][T12453] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1354.963685][ T5882] Bluetooth: hci4: command 0x041b tx timeout
[ 1355.160183][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1355.242400][ T5895] bridge_slave_1: left allmulticast mode
[ 1355.248112][ T5895] bridge_slave_1: left promiscuous mode
[ 1355.304987][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1355.331784][ T5895] bridge_slave_0: left allmulticast mode
[ 1355.340245][ T5895] bridge_slave_0: left promiscuous mode
[ 1355.346079][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1355.369476][ T5895] bridge_slave_1: left allmulticast mode
[ 1355.379234][ T5895] bridge_slave_1: left promiscuous mode
[ 1355.386509][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1355.599404][ T5895] bridge_slave_0: left allmulticast mode
[ 1355.621876][ T5895] bridge_slave_0: left promiscuous mode
[ 1355.629359][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1357.070252][ T5882] Bluetooth: hci4: command 0x041b tx timeout
[ 1357.738578][T13167] IPVS: ovf: UDP 0.0.0.0:0 - no destination available
[ 1359.150344][ T5882] Bluetooth: hci4: command 0x041b tx timeout
[ 1359.464790][T13172] loop3: detected capacity change from 0 to 128
[ 1359.762977][  T129] kworker/u8:5: attempt to access beyond end of device
[ 1359.762977][  T129] loop3: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1360.613772][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1360.654689][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1360.699194][ T5895] bond0 (unregistering): Released all slaves
[ 1360.840237][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1360.920668][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1360.949821][ T5895] bond0 (unregistering): Released all slaves
[ 1361.171006][ T5882] Bluetooth: hci4: command 0x041b tx timeout
[ 1361.293297][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1361.313685][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1361.329646][ T5895] bond0 (unregistering): Released all slaves
[ 1362.203880][T13107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1362.272601][T13107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1362.345262][ T5895] hsr_slave_0: left promiscuous mode
[ 1362.351748][ T5895] hsr_slave_1: left promiscuous mode
[ 1362.357822][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1362.376009][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1362.486057][ T5895] hsr_slave_0: left promiscuous mode
[ 1362.498173][ T5895] hsr_slave_1: left promiscuous mode
[ 1362.518582][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1362.545479][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1362.617956][ T5895] hsr_slave_0: left promiscuous mode
[ 1362.777722][ T5895] hsr_slave_1: left promiscuous mode
[ 1362.881095][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1362.889599][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1362.932515][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1362.943546][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1362.994752][ T5895] veth1_macvtap: left promiscuous mode
[ 1363.000921][ T5895] veth0_macvtap: left promiscuous mode
[ 1363.006551][ T5895] veth1_vlan: left promiscuous mode
[ 1363.012044][ T5895] veth0_vlan: left promiscuous mode
[ 1363.250996][ T5882] Bluetooth: hci4: command 0x041b tx timeout
[ 1363.275868][T13199] ubi: mtd0 is already attached to ubi0
[ 1363.643074][ T5895] team0 (unregistering): Port device team_slave_1 removed
[ 1363.682302][ T5895] team0 (unregistering): Port device team_slave_0 removed
[ 1363.813193][T13205] IPVS: ovf: UDP 0.0.0.0:0 - no destination available
[ 1364.859492][ T5895] team0 (unregistering): Port device team_slave_1 removed
[ 1364.909610][ T5895] team0 (unregistering): Port device team_slave_0 removed
[ 1365.685549][ T5895] team0 (unregistering): Port device team_slave_1 removed
[ 1365.732420][ T5895] team0 (unregistering): Port device team_slave_0 removed
[ 1366.298048][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1366.304646][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1366.381307][T12985] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1366.398414][T13107] team0: Port device team_slave_0 added
[ 1366.447349][T12985] 8021q: adding VLAN 0 to HW filter on device team0
[ 1366.494859][T13107] team0: Port device team_slave_1 added
[ 1366.727933][T13211] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1367.051661][ T9307] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1367.058854][ T9307] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1367.127466][T13107] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1367.165517][T13107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1367.193211][T13107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1367.272036][T13107] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1367.289434][T13107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1367.329594][T13107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1367.366792][ T6973] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1367.374001][ T6973] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1368.687937][T13107] hsr_slave_0: entered promiscuous mode
[ 1369.029588][T13107] hsr_slave_1: entered promiscuous mode
[ 1369.165749][T12992] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1369.219927][T12992] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1369.271761][T12985] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1369.378620][T12992] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1369.722386][T12992] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1370.169797][T12995] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1370.260187][T12995] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1370.353611][T12995] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1370.424429][T12995] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1370.590382][T13107] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1370.690219][T12992] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1370.772509][T12992] 8021q: adding VLAN 0 to HW filter on device team0
[ 1370.793275][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1370.800432][ T5921] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1370.831764][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1370.838923][ T5921] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1370.912521][T13107] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1370.986144][T12985] veth0_vlan: entered promiscuous mode
[ 1371.063180][T13107] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1371.194210][T13107] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1371.225877][T12985] veth1_vlan: entered promiscuous mode
[ 1371.333335][ T9307] bridge_slave_1: left allmulticast mode
[ 1371.339052][ T9307] bridge_slave_1: left promiscuous mode
[ 1371.377014][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1371.426786][ T9307] bridge_slave_0: left allmulticast mode
[ 1371.446626][ T9307] bridge_slave_0: left promiscuous mode
[ 1371.463723][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1372.063002][ T9307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1372.122659][ T9307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1372.178832][ T9307] bond0 (unregistering): Released all slaves
[ 1372.331486][T12985] veth0_macvtap: entered promiscuous mode
[ 1372.433736][T13254] ubi: mtd0 is already attached to ubi0
[ 1372.470992][T12985] veth1_macvtap: entered promiscuous mode
[ 1372.589615][ T9307] hsr_slave_0: left promiscuous mode
[ 1372.607588][ T9307] hsr_slave_1: left promiscuous mode
[ 1372.655040][ T9307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1372.664045][ T9307] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1372.694615][ T9307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1372.702566][ T9307] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1372.740317][ T9307] veth1_macvtap: left promiscuous mode
[ 1372.746555][ T9307] veth0_macvtap: left promiscuous mode
[ 1372.753709][ T9307] veth1_vlan: left promiscuous mode
[ 1372.759784][ T9307] veth0_vlan: left promiscuous mode
[ 1373.961255][ T9307] team0 (unregistering): Port device team_slave_1 removed
[ 1374.001778][ T9307] team0 (unregistering): Port device team_slave_0 removed
[ 1374.604565][T13107] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1374.636784][T12995] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1374.661999][T13107] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1374.714350][T13107] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1374.754917][T13107] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1374.778521][T12992] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1374.826435][T12995] 8021q: adding VLAN 0 to HW filter on device team0
[ 1374.851155][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1374.894032][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1374.922089][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1374.933352][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1374.968666][T12985] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1374.998611][T12548] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1375.005740][T12548] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1375.061280][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1375.086164][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1375.116783][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1375.132280][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1375.203511][T12985] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1375.259525][T12985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.278962][T12985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.288519][T12985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.297604][T12985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.331584][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1375.338944][ T5921] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1376.219805][T12995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1376.417629][ T9307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1376.426059][ T9307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1376.446172][T13107] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1376.452912][ T5882] Bluetooth: hci4: command 0x041b tx timeout
[ 1377.087047][ T5921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1377.124606][T13107] 8021q: adding VLAN 0 to HW filter on device team0
[ 1377.141493][ T5921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1377.206016][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1377.213309][ T5921] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1377.313219][T12992] veth0_vlan: entered promiscuous mode
[ 1377.365494][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1377.372773][ T5921] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1377.555871][T13107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1377.595294][T13107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1378.607696][T12992] veth1_vlan: entered promiscuous mode
[ 1378.770950][T13299] loop4: detected capacity change from 0 to 128
[ 1379.851749][T12995] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1379.898197][ T9307] kworker/u8:4: attempt to access beyond end of device
[ 1379.898197][ T9307] loop4: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1379.958146][T12992] veth0_macvtap: entered promiscuous mode
[ 1380.001325][T12992] veth1_macvtap: entered promiscuous mode
[ 1380.075861][T12992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.123392][T12992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.170698][T12992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.197423][T12992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.220217][T11590] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1380.240935][T12992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.262235][T12992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.293326][T12992] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1380.332709][T12992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1380.366128][T12992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.391268][T12992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1380.413435][T11590] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1380.424051][T11590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1380.440313][T12992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.460121][T11590] usb 4-1: Product: syz
[ 1380.464357][T11590] usb 4-1: Manufacturer: syz
[ 1380.468991][T11590] usb 4-1: SerialNumber: syz
[ 1380.484561][T12992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1380.545849][T12992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.559520][T11590] usb 4-1: config 0 descriptor??
[ 1380.595515][T11590] ch341 4-1:0.0: ch341-uart converter detected
[ 1380.621936][T12992] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1380.671044][T12992] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1380.701088][T12992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1380.730135][T12992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1380.775016][T12992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1380.824873][T11590] usb 4-1: failed to receive control message: -71
[ 1380.863400][T11590] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1380.947848][T11590] usb 4-1: USB disconnect, device number 14
[ 1381.023815][T11590] ch341 4-1:0.0: device disconnected
[ 1381.194415][ T6897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1381.231462][ T6897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1381.323092][T13107] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1381.372109][ T5921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1381.402225][T13107] veth0_vlan: entered promiscuous mode
[ 1381.441211][T13107] veth1_vlan: entered promiscuous mode
[ 1381.499569][ T5921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1381.627290][T12995] veth0_vlan: entered promiscuous mode
[ 1382.312153][T13107] veth0_macvtap: entered promiscuous mode
[ 1382.432190][T13107] veth1_macvtap: entered promiscuous mode
[ 1382.441223][T12995] veth1_vlan: entered promiscuous mode
[ 1382.538860][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1382.840098][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1382.851327][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1382.889731][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1383.150216][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1383.161633][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1383.185166][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1383.199214][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1383.249238][T13107] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1383.474396][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1383.485429][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1383.495904][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1383.506399][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1383.526799][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1383.825362][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1383.914114][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1384.044952][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1384.093834][T13107] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1384.125719][T13107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1384.135717][T13107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1384.157388][T13107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1384.177184][T13107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1384.356212][T12995] veth0_macvtap: entered promiscuous mode
[ 1384.471775][T12995] veth1_macvtap: entered promiscuous mode
[ 1384.530866][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1384.551430][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1384.561426][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1384.580209][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1384.590108][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1384.600704][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1384.611135][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1384.622061][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1384.631949][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1384.642484][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1384.653324][T12995] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1384.662520][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1384.673022][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1384.682910][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1384.693417][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1384.703281][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1384.714103][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1384.724322][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1384.734798][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1384.744750][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1384.755239][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1384.765950][T12995] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1384.776280][T12995] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1384.785056][T12995] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1384.793840][T12995] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1384.802602][T12995] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1384.831123][T13377] netlink: 'syz.3.1447': attribute type 1 has an invalid length.
[ 1384.956620][ T5934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1384.964585][ T5934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1385.003717][ T5934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1385.012493][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1385.406573][T13381] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1385.921688][T13391] sp0: Synchronizing with TNC
[ 1385.935741][T13391] sp0: Found TNC
[ 1386.210948][T13385] [U] è`
[ 1387.139622][T13398] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1389.175639][ T9307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1389.197947][ T9307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1389.261892][  T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1389.272422][  T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1391.763134][T13434] ubi: mtd0 is already attached to ubi0
[ 1392.174054][ T5882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1392.185254][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1392.193154][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1392.233094][ T5882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1392.240821][ T5882] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1392.248222][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1393.258886][ T6973] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1393.420712][ T5925] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1393.491461][ T6973] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1393.574637][ T5925] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1393.584311][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1393.629191][ T5925] usb 4-1: Product: syz
[ 1393.650418][ T5925] usb 4-1: Manufacturer: syz
[ 1393.663366][ T6973] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1393.680138][ T5925] usb 4-1: SerialNumber: syz
[ 1393.711555][ T5925] usb 4-1: config 0 descriptor??
[ 1393.784172][ T5925] ch341 4-1:0.0: ch341-uart converter detected
[ 1393.957919][ T6973] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1394.095937][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1459'.
[ 1394.107379][ T5925] usb 4-1: failed to receive control message: -71
[ 1394.133285][ T5925] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1394.268067][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'.
[ 1394.300843][ T5882] Bluetooth: hci0: command tx timeout
[ 1394.350882][ T5925] usb 4-1: USB disconnect, device number 15
[ 1394.407535][ T5925] ch341 4-1:0.0: device disconnected
[ 1395.032749][T13475] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1396.124106][T13484] ubi: mtd0 is already attached to ubi0
[ 1396.374165][T12453] Bluetooth: hci0: command tx timeout
[ 1396.672497][T13435] chnl_net:caif_netlink_parms(): no params data found
[ 1396.762646][ T6973] bridge_slave_1: left allmulticast mode
[ 1396.768356][ T6973] bridge_slave_1: left promiscuous mode
[ 1396.829929][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1397.216837][T12453] Bluetooth: hci7: unexpected event for opcode 0x1005
[ 1399.074032][T13504] Falling back ldisc for ttyprintk.
[ 1399.079761][T13505] [U] `è
[ 1399.178517][T12453] Bluetooth: hci0: command tx timeout
[ 1399.444701][ T6973] bridge_slave_0: left allmulticast mode
[ 1399.450499][ T6973] bridge_slave_0: left promiscuous mode
[ 1399.457745][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1399.592124][T13512] Invalid ELF header magic: != ELF
[ 1401.250315][ T5882] Bluetooth: hci0: command tx timeout
[ 1403.597995][ T6973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1403.759870][ T6973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1403.806147][ T6973] bond0 (unregistering): Released all slaves
[ 1404.830374][T13563] loop2: detected capacity change from 0 to 128
[ 1405.642242][ T5989] kworker/u8:8: attempt to access beyond end of device
[ 1405.642242][ T5989] loop2: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1405.750260][T13435] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1406.046546][T13435] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1406.155020][T13435] bridge_slave_0: entered allmulticast mode
[ 1406.332434][T13435] bridge_slave_0: entered promiscuous mode
[ 1406.351060][T13435] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1406.358247][T13435] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1406.399844][T13435] bridge_slave_1: entered allmulticast mode
[ 1406.426724][T13435] bridge_slave_1: entered promiscuous mode
[ 1406.690414][T11590] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1406.844064][T11590] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1406.862671][T11590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1406.918364][T11590] usb 3-1: Product: syz
[ 1406.940257][T11590] usb 3-1: Manufacturer: syz
[ 1406.953724][T11590] usb 3-1: SerialNumber: syz
[ 1406.998962][ T6973] hsr_slave_0: left promiscuous mode
[ 1407.051967][T11590] usb 3-1: config 0 descriptor??
[ 1407.066860][T11590] ch341 3-1:0.0: ch341-uart converter detected
[ 1407.151444][ T6973] hsr_slave_1: left promiscuous mode
[ 1407.163716][ T6973] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1407.181346][ T6973] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1407.209687][ T6973] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1407.228180][ T6973] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1407.303918][ T6973] veth1_macvtap: left promiscuous mode
[ 1407.326410][ T6973] veth0_macvtap: left promiscuous mode
[ 1407.348562][ T6973] veth1_vlan: left promiscuous mode
[ 1407.367336][ T6973] veth0_vlan: left promiscuous mode
[ 1407.761115][T13582] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1408.161019][T11590] usb 3-1: failed to receive control message: -110
[ 1408.171702][T11590] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110
[ 1408.190509][ T5867] Bluetooth: hci4: command 0x041b tx timeout
[ 1409.766306][ T6973] team0 (unregistering): Port device team_slave_1 removed
[ 1409.831876][ T6973] team0 (unregistering): Port device team_slave_0 removed
[ 1410.519752][T13435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1410.540184][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'.
[ 1410.565681][T13435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1410.679584][T11590] usb 3-1: USB disconnect, device number 5
[ 1410.689470][T11590] ch341 3-1:0.0: device disconnected
[ 1410.751959][T13435] team0: Port device team_slave_0 added
[ 1411.008961][T13435] team0: Port device team_slave_1 added
[ 1413.563469][T13435] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1413.579627][T13435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1413.610332][T13435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1413.680396][T13435] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1413.883415][T13435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1414.930915][T13435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1417.299179][T13637] Falling back ldisc for ttyprintk.
[ 1417.697891][T13435] hsr_slave_0: entered promiscuous mode
[ 1417.822324][T13435] hsr_slave_1: entered promiscuous mode
[ 1417.859398][T13435] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1417.868265][T13435] Cannot create hsr debugfs directory
[ 1421.175585][ T5882] Bluetooth: hci4: command 0x041b tx timeout
[ 1421.404136][T13683] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1424.127711][T13435] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1424.208818][T13435] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1424.281172][T13435] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1425.560208][T13435] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1425.585262][T13724] ubi: mtd0 is already attached to ubi0
[ 1426.172241][T13435] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1426.193426][T13435] 8021q: adding VLAN 0 to HW filter on device team0
[ 1426.290998][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1426.298124][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1426.341720][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1426.349053][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1427.128065][T13739] loop2: detected capacity change from 0 to 128
[ 1427.284360][T13740] sp0: Synchronizing with TNC
[ 1427.306719][T13740] sp0: Found TNC
[ 1427.956686][T13727] [U] è`
[ 1428.323159][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1428.340210][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1428.747721][ T9307] kworker/u8:4: attempt to access beyond end of device
[ 1428.747721][ T9307] loop2: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1429.197932][T13435] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1431.465541][T13435] veth0_vlan: entered promiscuous mode
[ 1431.498117][T13435] veth1_vlan: entered promiscuous mode
[ 1431.609182][T13435] veth0_macvtap: entered promiscuous mode
[ 1431.648732][T13435] veth1_macvtap: entered promiscuous mode
[ 1431.720726][T13435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1431.778211][T13435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1431.838196][T13435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1431.890343][T13435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1431.925388][T13435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1431.979164][T13435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.240068][T13435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1432.260050][T13435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.275089][T13435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1432.288826][T13435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.300173][T13435] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1432.345971][T13435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1432.356867][T13435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.367049][T13435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1432.377793][T13435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.387761][T13435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1432.398351][T13435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.408303][T13435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1432.418937][T13435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.433738][T13435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1432.450313][T13435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.472524][T13435] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1432.568647][T13435] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1432.660083][T13435] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1432.880564][T13435] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1432.895764][T13435] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1433.286018][ T6138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1433.330317][T11590] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1433.358297][ T6138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1433.515012][ T5989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1433.522572][T11590] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1433.559346][ T5989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1433.564300][T11590] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1433.812889][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1517'.
[ 1434.102649][T11590] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1434.134766][T11590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1434.182244][T13790] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1434.217508][T11590] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1434.641081][   T51] usb 4-1: USB disconnect, device number 16
[ 1434.723804][T10166] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1435.503711][T10166] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1435.546815][T10166] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1435.639533][T10166] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1435.843319][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'.
[ 1436.210121][T10166] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1436.258753][T13800] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1436.310624][T10166] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 1436.348935][T13823] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1436.852788][T10252] usb 7-1: USB disconnect, device number 2
[ 1437.216687][ T7925] udevd[7925]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1437.317391][T13832] loop3: detected capacity change from 0 to 128
[ 1438.403226][ T5895] kworker/u8:0: attempt to access beyond end of device
[ 1438.403226][ T5895] loop3: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1439.595266][T12453] Bluetooth: hci7: Ignoring HCI_Connection_Complete for existing connection
[ 1444.153457][T12453] Bluetooth: hci0: command 0x0405 tx timeout
[ 1448.206145][T13909] sp0: Synchronizing with TNC
[ 1448.224796][T13909] sp0: Found TNC
[ 1448.306038][T10252] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1448.721381][T13906] [U] è`
[ 1449.241670][T10252] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1449.253235][T10252] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1449.267200][T10252] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1449.376177][T10252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1449.565858][T13901] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1449.614012][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1542'.
[ 1450.125629][T10252] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1451.223063][T13931] ubi: mtd0 is already attached to ubi0
[ 1453.718556][T12453] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1453.729533][T12453] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1453.738243][T12453] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1453.752908][T12453] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1453.764482][T12453] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1453.773830][T12453] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1453.845203][T13951] loop2: detected capacity change from 0 to 128
[ 1454.647576][T10252] usb 2-1: USB disconnect, device number 2
[ 1455.970309][T12453] Bluetooth: hci3: command tx timeout
[ 1456.270165][ T6138] kworker/u8:11: attempt to access beyond end of device
[ 1456.270165][ T6138] loop2: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1456.353693][ T7924] udevd[7924]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1457.176886][ T6138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1457.457180][ T6138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1458.032333][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1555'.
[ 1458.060312][ T5882] Bluetooth: hci3: command tx timeout
[ 1458.117100][ T6138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1458.376508][ T6138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1458.932884][T13999] sp0: Synchronizing with TNC
[ 1458.946988][T13999] sp0: Found TNC
[ 1459.390308][T13992] [U] è`
[ 1459.710872][T13940] chnl_net:caif_netlink_parms(): no params data found
[ 1460.186557][ T5882] Bluetooth: hci3: command tx timeout
[ 1460.555096][ T6138] bridge_slave_1: left allmulticast mode
[ 1460.561188][ T6138] bridge_slave_1: left promiscuous mode
[ 1460.567441][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1460.681137][ T5932] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1460.836761][ T6138] bridge_slave_0: left allmulticast mode
[ 1460.901821][ T6138] bridge_slave_0: left promiscuous mode
[ 1460.908873][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1461.005513][ T5932] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1461.017126][ T5932] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1461.027502][ T5932] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1461.036783][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1461.073861][T14009] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1461.161317][ T5932] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1462.279550][T14028] ubi: mtd0 is already attached to ubi0
[ 1462.322588][T12453] Bluetooth: hci3: command tx timeout
[ 1462.656372][ T5932] usb 2-1: USB disconnect, device number 3
[ 1463.492305][T12453] Bluetooth: hci4: command 0x041b tx timeout
[ 1464.333429][ T6138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1464.948739][ T6138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1464.983844][ T6138] bond0 (unregistering): Released all slaves
[ 1465.088440][T13940] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1465.137128][T13940] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1465.177874][T13940] bridge_slave_0: entered allmulticast mode
[ 1465.230609][T13940] bridge_slave_0: entered promiscuous mode
[ 1465.297088][T13940] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1465.343961][T13940] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1465.372223][T13940] bridge_slave_1: entered allmulticast mode
[ 1465.449017][T13940] bridge_slave_1: entered promiscuous mode
[ 1465.589140][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1564'.
[ 1466.922168][T13940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1466.936184][T13940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1467.894968][ T6138] hsr_slave_0: left promiscuous mode
[ 1468.619220][T14068] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1468.860286][ T6138] hsr_slave_1: left promiscuous mode
[ 1468.920479][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1468.927995][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1468.967923][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1468.998911][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1469.136732][ T6138] veth1_macvtap: left promiscuous mode
[ 1469.220134][ T6138] veth0_macvtap: left promiscuous mode
[ 1469.226158][ T6138] veth1_vlan: left promiscuous mode
[ 1469.260190][ T6138] veth0_vlan: left promiscuous mode
[ 1469.472500][T14076] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1470.415268][T14084] Invalid ELF header magic: != ELF
[ 1472.573715][ T5882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1472.630288][ T5882] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1472.650423][ T5882] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1472.668954][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1472.677429][ T5882] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1472.686805][ T5882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1473.988134][T12453] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1473.996861][T12453] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1474.031417][T12453] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1474.042531][T12453] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1474.053380][T12453] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1474.063611][T12453] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1474.698405][T12453] Bluetooth: hci4: command 0x041b tx timeout
[ 1474.770160][T12453] Bluetooth: hci1: command tx timeout
[ 1474.895885][T14119] [U] é
[ 1475.149052][ T6138] team0 (unregistering): Port device team_slave_1 removed
[ 1475.346896][ T6138] team0 (unregistering): Port device team_slave_0 removed
[ 1476.230858][ T5867] Bluetooth: hci5: command tx timeout
[ 1476.851210][ T5867] Bluetooth: hci1: command tx timeout
[ 1477.775031][T14154] Falling back ldisc for ttyprintk.
[ 1477.921566][T13940] team0: Port device team_slave_0 added
[ 1477.953275][T13940] team0: Port device team_slave_1 added
[ 1478.188359][T14164] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1478.350952][ T5867] Bluetooth: hci5: command tx timeout
[ 1479.079466][ T5867] Bluetooth: hci1: command tx timeout
[ 1479.149903][T14172] loop5: detected capacity change from 0 to 128
[ 1480.411979][ T5867] Bluetooth: hci5: command tx timeout
[ 1480.473363][ T9307] kworker/u8:4: attempt to access beyond end of device
[ 1480.473363][ T9307] loop5: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1481.238962][ T5867] Bluetooth: hci1: command tx timeout
[ 1481.255549][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'.
[ 1481.907017][T13940] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1481.928616][T13940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1481.971146][T13940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1482.152797][T13940] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1482.159844][T13940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1482.190707][T13940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1482.510878][T12453] Bluetooth: hci5: command tx timeout
[ 1483.142727][T13940] hsr_slave_0: entered promiscuous mode
[ 1483.188542][T13940] hsr_slave_1: entered promiscuous mode
[ 1483.249770][T13940] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1483.277223][T13940] Cannot create hsr debugfs directory
[ 1484.776680][T14112] chnl_net:caif_netlink_parms(): no params data found
[ 1484.893918][ T6138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1484.966724][T14096] chnl_net:caif_netlink_parms(): no params data found
[ 1485.304737][ T6138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1485.524596][ T6138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1485.563530][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1592'.
[ 1486.096151][ T6138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1487.213030][T14112] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1487.230414][T14112] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1487.237825][T14112] bridge_slave_0: entered allmulticast mode
[ 1487.850240][T14112] bridge_slave_0: entered promiscuous mode
[ 1488.065824][T14096] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1488.108473][T14096] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1488.170639][T14096] bridge_slave_0: entered allmulticast mode
[ 1488.222402][T14096] bridge_slave_0: entered promiscuous mode
[ 1488.350264][T14112] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1488.357455][T14112] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1488.364984][T14112] bridge_slave_1: entered allmulticast mode
[ 1488.372411][T14112] bridge_slave_1: entered promiscuous mode
[ 1488.421661][T13940] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1488.433903][T13940] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1488.463826][T13940] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1488.482755][T14096] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1488.489935][T14096] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1488.498829][T14096] bridge_slave_1: entered allmulticast mode
[ 1489.011615][T14096] bridge_slave_1: entered promiscuous mode
[ 1489.180889][T14112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1489.208686][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1489.212043][T13940] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1489.215133][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1489.382191][T14096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1489.496693][T14112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1489.653047][T14096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1490.076010][ T6138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1490.381227][T14112] team0: Port device team_slave_0 added
[ 1490.589956][ T5867] Bluetooth: hci5: command 0x0405 tx timeout
[ 1490.745730][T14112] team0: Port device team_slave_1 added
[ 1491.007576][T14310] Falling back ldisc for ttyprintk.
[ 1491.142586][T14096] team0: Port device team_slave_0 added
[ 1491.192260][ T6138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1491.494199][T14315] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1491.834402][T14096] team0: Port device team_slave_1 added
[ 1491.960546][ T6138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1492.054573][T14112] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1492.061809][T14112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1492.140119][T14112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1493.371656][T14096] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1493.378635][T14096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1493.515640][T14096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1493.567162][T14112] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1493.576861][T14112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1493.648592][T14112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1493.711591][ T6138] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1493.737791][T14096] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1493.748362][T14096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1493.802638][T14096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1493.904863][T14329] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1494.872726][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1607'.
[ 1495.443777][T14096] hsr_slave_0: entered promiscuous mode
[ 1495.475016][T14096] hsr_slave_1: entered promiscuous mode
[ 1495.481616][T14096] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1495.489205][T14096] Cannot create hsr debugfs directory
[ 1496.541836][T14112] hsr_slave_0: entered promiscuous mode
[ 1496.548810][T14112] hsr_slave_1: entered promiscuous mode
[ 1496.556910][T14112] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1496.567736][T14112] Cannot create hsr debugfs directory
[ 1496.902695][T14362] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1496.940803][T14362] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1496.946892][T14362] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1496.959915][T14362] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1497.077456][T14362] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1497.103878][T14362] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1497.110392][T14362] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1497.126479][ T6138] bridge_slave_1: left allmulticast mode
[ 1497.133938][ T6138] bridge_slave_1: left promiscuous mode
[ 1497.147667][T14362] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1497.161710][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1497.181164][T14362] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1497.198378][ T6138] bridge_slave_0: left allmulticast mode
[ 1497.200225][T14362] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1497.213682][ T6138] bridge_slave_0: left promiscuous mode
[ 1497.232214][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1497.304401][ T6138] bridge_slave_1: left allmulticast mode
[ 1497.315838][T14362] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1497.363916][ T6138] bridge_slave_1: left promiscuous mode
[ 1497.390305][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1497.418376][ T6138] bridge_slave_0: left allmulticast mode
[ 1497.425910][T14362] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1497.443794][ T6138] bridge_slave_0: left promiscuous mode
[ 1497.469899][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1497.479420][T14362] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1497.536706][T14362] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1498.918670][T14378] Falling back ldisc for ttyprintk.
[ 1499.021394][ T5867] Bluetooth: hci0: command 0x0405 tx timeout
[ 1499.027581][ T5882] Bluetooth: hci4: command 0x041b tx timeout
[ 1499.037116][T12453] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1499.170329][T12453] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1499.260078][T12453] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1499.490769][T12453] Bluetooth: hci5: command 0x0405 tx timeout
[ 1500.030566][ T6138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1500.115201][ T6138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1500.198434][ T6138] bond0 (unregistering): Released all slaves
[ 1500.859965][ T6138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1500.881141][ T6138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1500.902149][ T6138] bond0 (unregistering): Released all slaves
[ 1501.041044][ T6138] bond1 (unregistering): Released all slaves
[ 1501.120279][ T5882] Bluetooth: hci0: command 0x0405 tx timeout
[ 1501.250491][ T5882] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1501.330995][ T5882] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1501.634093][ T5882] Bluetooth: hci5: command 0x0405 tx timeout
[ 1502.087249][T13940] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1502.384873][T13940] 8021q: adding VLAN 0 to HW filter on device team0
[ 1502.585113][  T129] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1502.592604][  T129] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1502.762389][ T6632] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1502.769495][ T6632] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1502.981661][ T6138] hsr_slave_0: left promiscuous mode
[ 1503.017542][ T6138] hsr_slave_1: left promiscuous mode
[ 1503.042036][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1503.073075][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1503.093118][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1503.107911][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1503.241902][ T5882] Bluetooth: hci0: command 0x0405 tx timeout
[ 1503.332172][ T5882] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1503.422577][ T5882] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1503.535896][ T6138] hsr_slave_0: left promiscuous mode
[ 1503.607725][ T6138] hsr_slave_1: left promiscuous mode
[ 1503.680613][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1503.720373][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1503.729612][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1503.730341][ T5882] Bluetooth: hci5: command 0x0405 tx timeout
[ 1503.744691][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1503.881487][ T6138] veth1_macvtap: left promiscuous mode
[ 1503.980176][ T6138] veth0_macvtap: left promiscuous mode
[ 1504.003207][ T6138] veth1_vlan: left promiscuous mode
[ 1504.018874][ T6138] veth0_vlan: left promiscuous mode
[ 1504.049518][ T6138] veth1_macvtap: left promiscuous mode
[ 1504.059290][ T6138] veth0_macvtap: left promiscuous mode
[ 1504.090183][ T6138] veth1_vlan: left promiscuous mode
[ 1504.099852][ T6138] veth0_vlan: left promiscuous mode
[ 1505.961512][ T5882] Bluetooth: hci5: command 0x0405 tx timeout
[ 1506.476589][ T6138] team0 (unregistering): Port device team_slave_1 removed
[ 1506.569867][ T6138] team0 (unregistering): Port device team_slave_0 removed
[ 1507.808861][T14431] netlink: 'syz.6.1620': attribute type 1 has an invalid length.
[ 1508.040604][ T6138] team0 (unregistering): Port device team_slave_1 removed
[ 1508.080442][ T6138] team0 (unregistering): Port device team_slave_0 removed
[ 1508.415731][T13940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1508.450426][T13940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1508.630804][T14433] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1508.767897][T14112] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1509.365843][T14112] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1509.402201][T14112] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1509.477348][T14112] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1509.763371][T14096] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1510.028611][T14096] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1510.569411][T14456] Falling back ldisc for ttyprintk.
[ 1510.899752][T14096] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1511.498296][ T5882] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[ 1512.183417][T14112] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1512.206352][T14112] 8021q: adding VLAN 0 to HW filter on device team0
[ 1512.239835][T14112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1512.250882][T14112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1512.274228][T14096] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1512.288131][ T5867] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1512.300270][ T5867] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1512.308787][ T5867] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1512.316971][ T5867] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1512.325239][ T5867] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1512.333902][ T5867] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1512.367794][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1512.374955][ T5921] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1512.501809][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1512.509004][ T5921] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1513.104984][T14112] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1513.409461][T14096] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1513.503898][T14096] 8021q: adding VLAN 0 to HW filter on device team0
[ 1513.580983][ T5867] Bluetooth: hci0: command 0x0405 tx timeout
[ 1513.613685][ T6973] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1513.620827][ T6973] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1513.685265][T14469] chnl_net:caif_netlink_parms(): no params data found
[ 1513.747419][  T129] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1513.755212][  T129] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1514.373097][T12453] Bluetooth: hci6: command tx timeout
[ 1514.813989][T14469] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1514.822494][T14469] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1514.830034][T14469] bridge_slave_0: entered allmulticast mode
[ 1514.837203][T14469] bridge_slave_0: entered promiscuous mode
[ 1514.919368][T14469] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1514.926820][T14469] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1514.934869][T14469] bridge_slave_1: entered allmulticast mode
[ 1514.958745][T14469] bridge_slave_1: entered promiscuous mode
[ 1515.697353][T14469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1515.757393][T14469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1515.902085][T14112] veth0_vlan: entered promiscuous mode
[ 1515.924750][T14112] veth1_vlan: entered promiscuous mode
[ 1515.949161][T14112] veth0_macvtap: entered promiscuous mode
[ 1516.041474][ T6138] IPVS: stop unused estimator thread 0...
[ 1516.115355][ T6138] IPVS: stop unused estimator thread 0...
[ 1516.336662][T14469] team0: Port device team_slave_0 added
[ 1516.354360][T14469] team0: Port device team_slave_1 added
[ 1516.450429][T12453] Bluetooth: hci6: command tx timeout
[ 1516.745360][T14112] veth1_macvtap: entered promiscuous mode
[ 1516.972891][T14550] Falling back ldisc for ttyprintk.
[ 1517.244167][T14548] ubi: mtd0 is already attached to ubi0
[ 1517.856069][T14096] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1517.887892][T14096] veth0_vlan: entered promiscuous mode
[ 1517.899188][T14096] veth1_vlan: entered promiscuous mode
[ 1517.921133][T14096] veth0_macvtap: entered promiscuous mode
[ 1517.931677][T14096] veth1_macvtap: entered promiscuous mode
[ 1518.057114][T14096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1518.069168][T14096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1518.079100][T14096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1518.089702][T14096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1518.099698][T14096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1518.110381][T14096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1518.120406][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1636'.
[ 1518.130637][T14096] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1518.141005][T14096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1518.151600][T14096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1518.161507][T14096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1518.172148][T14096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1518.182295][T14096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1518.193049][T14096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1518.204855][T14096] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1518.219906][T14096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1518.229640][T14096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1518.238931][T14096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1518.248181][T14096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1518.291343][T14469] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1518.298471][T14469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1518.363149][T14469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1518.561121][T14469] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1518.568119][T14469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1518.600610][T12453] Bluetooth: hci6: command tx timeout
[ 1518.810645][T14469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1519.553776][T14469] hsr_slave_0: entered promiscuous mode
[ 1519.601395][T14469] hsr_slave_1: entered promiscuous mode
[ 1519.607792][T14469] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1519.634657][T14469] Cannot create hsr debugfs directory
[ 1519.874939][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1519.907691][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1519.940034][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1519.952404][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1519.962301][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1519.973144][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1519.983414][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1520.000069][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1520.011097][T14112] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1520.735601][ T5867] Bluetooth: hci6: command tx timeout
[ 1521.076416][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1521.109470][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1521.121155][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1521.132351][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1521.143100][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1521.156890][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1521.168595][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1521.182632][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1521.211466][T14112] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1521.226408][  T129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1521.258501][  T129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1521.416601][ T5921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1521.442463][T14112] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1521.451576][ T5921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1521.468747][T14112] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1521.518242][T14112] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1521.568906][T14112] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.033093][ T5934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1522.105319][ T5934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1522.156860][ T6138] bridge_slave_1: left allmulticast mode
[ 1522.172834][ T6138] bridge_slave_1: left promiscuous mode
[ 1522.187837][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1522.221608][ T6138] bridge_slave_0: left allmulticast mode
[ 1522.236426][ T6138] bridge_slave_0: left promiscuous mode
[ 1522.254519][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1524.860028][T14631] loop1: detected capacity change from 0 to 128
[ 1525.263052][T14627] Falling back ldisc for ttyprintk.
[ 1525.682773][ T5934] kworker/u8:3: attempt to access beyond end of device
[ 1525.682773][ T5934] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1525.996462][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'.
[ 1526.641717][T14645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'.
[ 1527.363035][ T6138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1527.437113][ T6138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1527.483958][ T6138] bond0 (unregistering): Released all slaves
[ 1527.571357][T12453] Bluetooth: hci4: command 0x041b tx timeout
[ 1527.731659][ T6138] hsr_slave_0: left promiscuous mode
[ 1527.990152][T14676] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1528.103844][ T6138] hsr_slave_1: left promiscuous mode
[ 1528.560342][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1528.572172][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1528.742091][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'.
[ 1530.001467][ T6138] team0 (unregistering): Port device team_slave_1 removed
[ 1530.121572][ T6138] team0 (unregistering): Port device team_slave_0 removed
[ 1530.927034][ T6897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1530.971196][ T6897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1532.265384][T14721] loop1: detected capacity change from 0 to 128
[ 1533.942387][ T5867] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1535.561257][T14693] sched: DL replenish lagged too much
[ 1536.481791][ T5921] kworker/u8:1: attempt to access beyond end of device
[ 1536.481791][ T5921] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1536.697364][T14469] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1536.812252][T14469] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1536.876342][T14469] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1536.904981][T14469] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1537.110115][T14738] ubi: mtd0 is already attached to ubi0
[ 1537.781823][T14469] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1537.799524][T14469] 8021q: adding VLAN 0 to HW filter on device team0
[ 1537.823105][ T6632] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1537.830360][ T6632] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1538.311792][ T6632] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1538.319028][ T6632] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1538.382009][T14469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1538.444280][T14469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1538.976902][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1665'.
[ 1539.297071][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'.
[ 1540.009809][T14469] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1541.300231][T14780] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1542.715336][T14469] veth0_vlan: entered promiscuous mode
[ 1542.769289][T14469] veth1_vlan: entered promiscuous mode
[ 1542.859204][T14469] veth0_macvtap: entered promiscuous mode
[ 1542.909577][T14469] veth1_macvtap: entered promiscuous mode
[ 1543.024746][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1543.076590][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1543.618499][T14799] Falling back ldisc for ttyprintk.
[ 1543.783377][ T5882] Bluetooth: hci0: command 0x0405 tx timeout
[ 1543.789583][T12451] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1543.806473][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1543.817514][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1543.827806][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1543.838965][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1543.859792][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1543.870528][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1543.880426][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1543.891288][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1543.902517][T14469] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1543.995389][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1544.035588][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1544.129277][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1544.167979][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1544.714048][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1544.752631][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1544.968038][T14813] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1545.364674][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1545.440010][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1545.449870][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1545.510097][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1545.651059][T14469] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1545.990169][T14469] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1546.003057][T14469] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1546.420075][T14469] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1546.428842][T14469] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1546.822770][T14823] ubi: mtd0 is already attached to ubi0
[ 1547.302077][T12548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1547.345217][T12548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1547.605702][ T6138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1547.678951][ T6138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1547.690404][T14831] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1548.417632][T14840] random: crng reseeded on system resumption
[ 1550.657155][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1550.664613][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1553.321593][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1683'.
[ 1554.053444][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1686'.
[ 1555.359284][T14901] ubi: mtd0 is already attached to ubi0
[ 1556.435306][T14911] IPVS: ovf: UDP 0.0.0.0:0 - no destination available
[ 1557.111081][ T5986] IPVS: starting estimator thread 0...
[ 1557.487960][T14918] loop6: detected capacity change from 0 to 128
[ 1558.468349][T14912] IPVS: using max 21 ests per chain, 50400 per kthread
[ 1558.715819][ T6973] kworker/u8:16: attempt to access beyond end of device
[ 1558.715819][ T6973] loop6: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1560.173777][T14939] random: crng reseeded on system resumption
[ 1561.840076][ T5925] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1562.087218][ T5925] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1562.359440][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1562.449056][T14967] loop7: detected capacity change from 0 to 128
[ 1563.278882][  T205] kworker/u8:6: attempt to access beyond end of device
[ 1563.278882][  T205] loop7: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1563.343610][ T5925] usb 7-1: Product: syz
[ 1563.347842][ T5925] usb 7-1: Manufacturer: syz
[ 1563.453775][ T5925] usb 7-1: SerialNumber: syz
[ 1563.538469][ T5925] usb 7-1: config 0 descriptor??
[ 1564.197665][T14984] sp0: Synchronizing with TNC
[ 1564.203687][T14984] sp0: Found TNC
[ 1565.202776][T14976] [U] è`
[ 1565.530381][ T5925] usb 7-1: can't set config #0, error -71
[ 1567.244799][ T5925] usb 7-1: USB disconnect, device number 3
[ 1569.921871][T12453] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1569.993922][T12453] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1570.004988][T12453] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1570.024053][T12453] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1570.033181][T12453] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1570.040814][T12453] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1570.294680][T15022] chnl_net:caif_netlink_parms(): no params data found
[ 1570.410746][T12453] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1570.433429][T12453] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1570.441485][T12453] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1570.449948][T12453] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1570.459899][T12453] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1570.467283][T12453] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1570.573045][ T5867] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1570.583316][ T5867] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1570.592332][ T5867] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1570.601169][ T5867] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1570.610162][ T5867] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1570.617909][ T5867] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1571.170689][T15022] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1571.188776][T15022] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1571.244944][T15047] loop7: detected capacity change from 0 to 128
[ 1571.273546][T15022] bridge_slave_0: entered allmulticast mode
[ 1571.318938][T15022] bridge_slave_0: entered promiscuous mode
[ 1571.445590][T15022] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1571.524086][T15022] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1571.843268][T15022] bridge_slave_1: entered allmulticast mode
[ 1571.910844][T15022] bridge_slave_1: entered promiscuous mode
[ 1572.026012][    T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1572.143343][ T5867] Bluetooth: hci3: command tx timeout
[ 1572.287467][ T5921] kworker/u8:1: attempt to access beyond end of device
[ 1572.287467][ T5921] loop7: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1572.328302][    T8] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1572.337433][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1572.377060][    T8] usb 7-1: Product: syz
[ 1572.430283][    T8] usb 7-1: Manufacturer: syz
[ 1572.434912][    T8] usb 7-1: SerialNumber: syz
[ 1572.498953][    T8] usb 7-1: config 0 descriptor??
[ 1572.511273][    T8] ch341 7-1:0.0: ch341-uart converter detected
[ 1572.574117][T15022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1572.610125][ T5867] Bluetooth: hci7: command tx timeout
[ 1572.749435][T15022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1572.759699][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1716'.
[ 1572.824931][    T8] usb 7-1: failed to receive control message: -71
[ 1572.850725][ T5867] Bluetooth: hci8: command tx timeout
[ 1572.867481][    T8] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1572.900994][    T8] usb 7-1: USB disconnect, device number 4
[ 1572.942308][    T8] ch341 7-1:0.0: device disconnected
[ 1573.323256][T15033] chnl_net:caif_netlink_parms(): no params data found
[ 1573.708929][T15022] team0: Port device team_slave_0 added
[ 1573.761160][T15022] team0: Port device team_slave_1 added
[ 1574.454936][T15085] sp0: Synchronizing with TNC
[ 1574.461007][T15085] sp0: Found TNC
[ 1575.199855][T15073] [U] è`
[ 1575.755461][ T5867] Bluetooth: hci3: command tx timeout
[ 1575.755478][T12453] Bluetooth: hci7: command tx timeout
[ 1575.761093][ T5867] Bluetooth: hci8: command tx timeout
[ 1575.913539][T15022] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1575.960149][T15022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1576.635382][T15022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1576.685397][T15030] chnl_net:caif_netlink_parms(): no params data found
[ 1576.732366][T15022] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1576.766914][T15022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1577.225576][T15104] Invalid ELF header magic: != ELF
[ 1578.002972][T12453] Bluetooth: hci8: command tx timeout
[ 1578.008602][T12453] Bluetooth: hci7: command tx timeout
[ 1578.015056][T12453] Bluetooth: hci3: command tx timeout
[ 1578.300280][T15022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1578.598984][T15022] hsr_slave_0: entered promiscuous mode
[ 1578.609481][T15022] hsr_slave_1: entered promiscuous mode
[ 1578.670875][T15022] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1578.707020][T15022] Cannot create hsr debugfs directory
[ 1578.733551][T15033] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1578.784889][T15033] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1578.820251][T15033] bridge_slave_0: entered allmulticast mode
[ 1578.847611][T15033] bridge_slave_0: entered promiscuous mode
[ 1579.165424][T15033] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1579.187773][T15033] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1579.213703][T15033] bridge_slave_1: entered allmulticast mode
[ 1579.501693][T15033] bridge_slave_1: entered promiscuous mode
[ 1580.291315][T12451] Bluetooth: hci3: command tx timeout
[ 1580.296779][T12451] Bluetooth: hci7: command tx timeout
[ 1580.310457][T12453] Bluetooth: hci8: command tx timeout
[ 1580.580209][    T8] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1580.634823][T15033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1581.023815][    T8] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1581.033145][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1581.041952][    T8] usb 8-1: Product: syz
[ 1581.046188][    T8] usb 8-1: Manufacturer: syz
[ 1581.051209][    T8] usb 8-1: SerialNumber: syz
[ 1581.057604][    T8] usb 8-1: config 0 descriptor??
[ 1581.067909][    T8] ch341 8-1:0.0: ch341-uart converter detected
[ 1581.104720][T15033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1581.156587][T15030] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1581.189798][T15030] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1581.250530][T15030] bridge_slave_0: entered allmulticast mode
[ 1581.279311][T15030] bridge_slave_0: entered promiscuous mode
[ 1581.306965][T15030] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1581.338166][T15030] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1581.367246][T15030] bridge_slave_1: entered allmulticast mode
[ 1581.392455][T15030] bridge_slave_1: entered promiscuous mode
[ 1581.471370][T15033] team0: Port device team_slave_0 added
[ 1581.531757][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1729'.
[ 1581.570276][    T8] usb 8-1: failed to receive control message: -71
[ 1581.576825][    T8] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1581.661256][    T8] usb 8-1: USB disconnect, device number 4
[ 1581.875649][    T8] ch341 8-1:0.0: device disconnected
[ 1582.570945][T15033] team0: Port device team_slave_1 added
[ 1582.602780][T15030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1582.660334][T15030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1582.980322][T15152] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1583.651845][T10166] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1583.970211][T10166] usb 8-1: Using ep0 maxpacket: 8
[ 1583.979609][T10166] usb 8-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40
[ 1583.989181][T10166] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1584.046436][T10166] usb 8-1: Product: syz
[ 1584.066239][T10166] usb 8-1: Manufacturer: syz
[ 1584.090092][T10166] usb 8-1: SerialNumber: syz
[ 1584.119938][T10166] usb 8-1: config 0 descriptor??
[ 1585.516625][T15033] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1585.562941][T15033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1585.660283][T10166] usb 8-1: USB disconnect, device number 5
[ 1585.683754][T15033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1585.769739][T15030] team0: Port device team_slave_0 added
[ 1585.880777][T15030] team0: Port device team_slave_1 added
[ 1585.978127][T15033] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1586.854880][T15033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1587.054761][T15033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1588.630401][T15193] loop7: detected capacity change from 0 to 128
[ 1589.500721][ T5921] kworker/u8:1: attempt to access beyond end of device
[ 1589.500721][ T5921] loop7: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1589.596366][T15030] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1589.605206][T15030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1590.000126][T15030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1590.016832][T15030] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1590.079442][T15030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1590.198135][T15030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1591.222928][T15208] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1591.701481][ T5867] Bluetooth: hci0: command 0x0405 tx timeout
[ 1591.933514][T15033] hsr_slave_0: entered promiscuous mode
[ 1591.958955][T15033] hsr_slave_1: entered promiscuous mode
[ 1591.990486][T15033] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1592.020283][T15033] Cannot create hsr debugfs directory
[ 1592.296583][T15030] hsr_slave_0: entered promiscuous mode
[ 1592.315645][T15227] random: crng reseeded on system resumption
[ 1592.640408][T15030] hsr_slave_1: entered promiscuous mode
[ 1592.866095][T15030] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1592.884947][T15030] Cannot create hsr debugfs directory
[ 1594.343183][T15242] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1595.090119][T15022] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1598.411368][T15277] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1598.933563][T15022] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1598.973665][T15022] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1599.001034][T15282] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1601.822343][T15022] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1602.491165][ T5921] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1602.721858][ T5921] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1603.491461][T12453] Bluetooth: hci8: command 0x0405 tx timeout
[ 1604.794346][T15331] Invalid ELF header magic: != ELF
[ 1604.813667][T15331] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 1604.821068][T15331] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 1606.328220][ T5921] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1606.588507][T15022] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1606.680956][T15022] 8021q: adding VLAN 0 to HW filter on device team0
[ 1606.828069][ T5921] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1607.656122][T15339] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1607.674674][  T129] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1607.681837][  T129] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1607.772458][  T129] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1607.779565][  T129] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1609.410357][  T970] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1609.508493][T15033] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1610.522808][  T970] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1610.813938][  T970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1610.822243][  T970] usb 8-1: Product: syz
[ 1610.826425][  T970] usb 8-1: Manufacturer: syz
[ 1610.831238][  T970] usb 8-1: SerialNumber: syz
[ 1610.899826][  T970] usb 8-1: config 0 descriptor??
[ 1611.213272][  T970] usb 8-1: can't set config #0, error -71
[ 1611.227291][T15033] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1611.237617][  T970] usb 8-1: USB disconnect, device number 6
[ 1611.280099][ T5943] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1611.304364][T15033] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1611.333289][T15033] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1611.531092][ T5943] usb 1-1: Using ep0 maxpacket: 8
[ 1611.556170][ T5943] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40
[ 1611.637077][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1612.058249][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1612.074382][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1612.269283][ T5943] usb 1-1: Product: syz
[ 1612.274120][ T5943] usb 1-1: Manufacturer: syz
[ 1612.278758][ T5943] usb 1-1: SerialNumber: syz
[ 1612.507380][ T5921] bridge_slave_1: left allmulticast mode
[ 1612.513625][ T5921] bridge_slave_1: left promiscuous mode
[ 1612.519316][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1612.641239][T15373] loop7: detected capacity change from 0 to 128
[ 1613.441192][ T5943] usb 1-1: config 0 descriptor??
[ 1613.475768][ T5921] bridge_slave_0: left allmulticast mode
[ 1613.477812][ T3567] kworker/u8:10: attempt to access beyond end of device
[ 1613.477812][ T3567] loop7: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1613.494745][ T5921] bridge_slave_0: left promiscuous mode
[ 1613.534577][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1613.931220][ T5943] usb 1-1: USB disconnect, device number 11
[ 1614.051985][T15382] random: crng reseeded on system resumption
[ 1614.962857][ T7923] udevd[7923]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1616.807914][ T5921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1616.858457][ T5921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1616.916292][ T5921] bond0 (unregistering): Released all slaves
[ 1618.911516][T15022] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1619.362314][T15033] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1619.379325][T15033] 8021q: adding VLAN 0 to HW filter on device team0
[ 1619.979398][T12453] ==================================================================
[ 1619.987721][T12453] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x22a/0x240
[ 1619.996665][T12453] Read of size 8 at addr ffff8880597ad580 by task kworker/u9:3/12453
[ 1620.004761][T12453] 
[ 1620.007104][T12453] CPU: 0 UID: 0 PID: 12453 Comm: kworker/u9:3 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[ 1620.018077][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1620.028161][T12453] Workqueue: hci5 hci_rx_work
[ 1620.032990][T12453] Call Trace:
[ 1620.036289][T12453]  <TASK>
[ 1620.039240][T12453]  dump_stack_lvl+0x116/0x1f0
[ 1620.043977][T12453]  print_report+0xc3/0x620
[ 1620.048437][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1620.054110][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1620.059779][T12453]  ? __phys_addr+0xc6/0x150
[ 1620.064334][T12453]  kasan_report+0xd9/0x110
[ 1620.068790][T12453]  ? l2cap_sock_new_connection_cb+0x22a/0x240
[ 1620.074923][T12453]  ? l2cap_sock_new_connection_cb+0x22a/0x240
[ 1620.081063][T12453]  l2cap_sock_new_connection_cb+0x22a/0x240
[ 1620.087026][T12453]  l2cap_connect_cfm+0x862/0xf10
[ 1620.092023][T12453]  ? _raw_spin_unlock_irq+0x41/0x50
[ 1620.097267][T12453]  ? rcu_preempt_deferred_qs_irqrestore+0x8a9/0xb80
[ 1620.103908][T12453]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1620.109424][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1620.115529][T12453]  ? rcu_is_watching+0x12/0xc0
[ 1620.120350][T12453]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1620.125861][T12453]  le_conn_complete_evt+0x1690/0x1da0
[ 1620.131295][T12453]  ? __pfx_lock_release+0x10/0x10
[ 1620.136363][T12453]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1620.142135][T12453]  ? trace_contention_end+0xee/0x140
[ 1620.147465][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1620.153137][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1620.158808][T12453]  hci_le_conn_complete_evt+0x23c/0x370
[ 1620.164414][T12453]  hci_le_meta_evt+0x2e5/0x5d0
[ 1620.169236][T12453]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1620.175360][T12453]  hci_event_packet+0x669/0x1180
[ 1620.180348][T12453]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1620.185693][T12453]  ? __pfx_hci_event_packet+0x10/0x10
[ 1620.191120][T12453]  ? kcov_remote_start+0x3df/0x6e0
[ 1620.196282][T12453]  hci_rx_work+0x2c5/0x16b0
[ 1620.200842][T12453]  ? process_one_work+0x921/0x1ba0
[ 1620.206002][T12453]  process_one_work+0x9c8/0x1ba0
[ 1620.210992][T12453]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1620.216668][T12453]  ? __pfx_process_one_work+0x10/0x10
[ 1620.222343][T12453]  ? rcu_is_watching+0x12/0xc0
[ 1620.227252][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1620.232927][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1620.238599][T12453]  ? assign_work+0x1a0/0x250
[ 1620.243228][T12453]  worker_thread+0x6c8/0xf00
[ 1620.247865][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1620.253533][T12453]  ? __kthread_parkme+0x148/0x220
[ 1620.258614][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1620.264286][T12453]  ? __pfx_worker_thread+0x10/0x10
[ 1620.269445][T12453]  kthread+0x2c4/0x3a0
[ 1620.273744][T12453]  ? _raw_spin_unlock_irq+0x23/0x50
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1620.278990][T12453]  ? __pfx_kthread+0x10/0x10
[ 1620.283675][T12453]  ret_from_fork+0x48/0x80
[ 1620.288218][T12453]  ? __pfx_kthread+0x10/0x10
[ 1620.292951][T12453]  ret_from_fork_asm+0x1a/0x30
[ 1620.297820][T12453]  </TASK>
[ 1620.300857][T12453] 
[ 1620.303198][T12453] Allocated by task 12453:
[ 1620.307628][T12453]  kasan_save_stack+0x33/0x60
[ 1620.312412][T12453]  kasan_save_track+0x14/0x30
[ 1620.317109][T12453]  __kasan_kmalloc+0xaa/0xb0
[ 1620.321719][T12453]  __kmalloc_noprof+0x21c/0x510
[ 1620.326588][T12453]  sk_prot_alloc+0x1a8/0x2a0
[ 1620.331210][T12453]  sk_alloc+0x36/0xb90
[ 1620.335322][T12453]  bt_sock_alloc+0x3b/0x3a0
[ 1620.339857][T12453]  l2cap_sock_alloc.constprop.0+0x33/0x1c0
[ 1620.345708][T12453]  l2cap_sock_new_connection_cb+0x101/0x240
[ 1620.351647][T12453]  l2cap_connect_cfm+0x862/0xf10
[ 1620.356617][T12453]  le_conn_complete_evt+0x1690/0x1da0
[ 1620.362020][T12453]  hci_le_conn_complete_evt+0x23c/0x370
[ 1620.367600][T12453]  hci_le_meta_evt+0x2e5/0x5d0
[ 1620.372400][T12453]  hci_event_packet+0x669/0x1180
[ 1620.377366][T12453]  hci_rx_work+0x2c5/0x16b0
[ 1620.381906][T12453]  process_one_work+0x9c8/0x1ba0
[ 1620.386873][T12453]  worker_thread+0x6c8/0xf00
[ 1620.391485][T12453]  kthread+0x2c4/0x3a0
[ 1620.395587][T12453]  ret_from_fork+0x48/0x80
[ 1620.400023][T12453]  ret_from_fork_asm+0x1a/0x30
[ 1620.404824][T12453] 
[ 1620.407151][T12453] Freed by task 15431:
[ 1620.411228][T12453]  kasan_save_stack+0x33/0x60
[ 1620.415922][T12453]  kasan_save_track+0x14/0x30
[ 1620.420800][T12453]  kasan_save_free_info+0x3b/0x60
[ 1620.425857][T12453]  __kasan_slab_free+0x51/0x70
[ 1620.430648][T12453]  kfree+0x14f/0x4b0
[ 1620.434593][T12453]  __sk_destruct+0x5eb/0x720
[ 1620.439227][T12453]  sk_destruct+0xc2/0xf0
[ 1620.443485][T12453]  __sk_free+0xf4/0x3e0
[ 1620.447685][T12453]  sk_free+0x6a/0x90
[ 1620.451596][T12453]  l2cap_sock_kill+0x171/0x2d0
[ 1620.456397][T12453]  l2cap_sock_cleanup_listen+0x3d/0x2a0
[ 1620.461989][T12453]  l2cap_sock_release+0x5c/0x210
[ 1620.466972][T12453]  __sock_release+0xb3/0x270
[ 1620.471671][T12453]  sock_close+0x1c/0x30
[ 1620.475848][T12453]  __fput+0x3fb/0xb60
[ 1620.479850][T12453]  task_work_run+0x151/0x250
[ 1620.484464][T12453]  syscall_exit_to_user_mode+0x27b/0x2a0
[ 1620.490134][T12453]  do_syscall_64+0xda/0x250
[ 1620.494673][T12453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1620.500604][T12453] 
[ 1620.502930][T12453] The buggy address belongs to the object at ffff8880597ad000
[ 1620.502930][T12453]  which belongs to the cache kmalloc-2k of size 2048
[ 1620.517001][T12453] The buggy address is located 1408 bytes inside of
[ 1620.517001][T12453]  freed 2048-byte region [ffff8880597ad000, ffff8880597ad800)
[ 1620.531081][T12453] 
[ 1620.533413][T12453] The buggy address belongs to the physical page:
[ 1620.539914][T12453] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x597a8
[ 1620.548706][T12453] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1620.557224][T12453] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1620.564870][T12453] page_type: f5(slab)
[ 1620.568870][T12453] raw: 00fff00000000040 ffff88801b042000 ffffea0001b1ae00 dead000000000002
[ 1620.577475][T12453] raw: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000
[ 1620.586083][T12453] head: 00fff00000000040 ffff88801b042000 ffffea0001b1ae00 dead000000000002
[ 1620.594773][T12453] head: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000
[ 1620.603550][T12453] head: 00fff00000000003 ffffea000165ea01 ffffffffffffffff 0000000000000000
[ 1620.612240][T12453] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 1620.620920][T12453] page dumped because: kasan: bad access detected
[ 1620.627340][T12453] page_owner tracks the page as allocated
[ 1620.633056][T12453] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3010, tgid 3010 (kworker/u8:7), ts 812909242554, free_ts 812601178487
[ 1620.654639][T12453]  post_alloc_hook+0x2d1/0x350
[ 1620.659542][T12453]  get_page_from_freelist+0xfce/0x2f80
[ 1620.665026][T12453]  __alloc_pages_noprof+0x223/0x25b0
[ 1620.670338][T12453]  alloc_pages_mpol_noprof+0x2c9/0x610
[ 1620.675827][T12453]  new_slab+0x2c9/0x410
[ 1620.680021][T12453]  ___slab_alloc+0xd7d/0x17a0
[ 1620.684743][T12453]  __slab_alloc.constprop.0+0x56/0xb0
[ 1620.690248][T12453]  __kmalloc_node_track_caller_noprof+0x2f1/0x510
[ 1620.696699][T12453]  kmalloc_reserve+0xef/0x2c0
[ 1620.701410][T12453]  __alloc_skb+0x164/0x380
[ 1620.705842][T12453]  rtmsg_ifinfo_build_skb+0x81/0x280
[ 1620.711151][T12453]  unregister_netdevice_many_notify+0x983/0x1e60
[ 1620.717543][T12453]  default_device_exit_batch+0x867/0xae0
[ 1620.723204][T12453]  ops_exit_list+0x12b/0x180
[ 1620.727814][T12453]  cleanup_net+0x5b7/0xbd0
[ 1620.732254][T12453]  process_one_work+0x9c8/0x1ba0
[ 1620.737222][T12453] page last free pid 9120 tgid 9120 stack trace:
[ 1620.743565][T12453]  free_unref_page+0x661/0x1080
[ 1620.748451][T12453]  __put_partials+0x14c/0x170
[ 1620.753167][T12453]  qlist_free_all+0x4e/0x120
[ 1620.757797][T12453]  kasan_quarantine_reduce+0x195/0x1e0
[ 1620.763300][T12453]  __kasan_slab_alloc+0x69/0x90
[ 1620.768173][T12453]  kmem_cache_alloc_noprof+0x226/0x3d0
[ 1620.773657][T12453]  vm_area_dup+0x21/0x2f0
[ 1620.778021][T12453]  __split_vma+0x181/0x1160
[ 1620.782545][T12453]  vms_gather_munmap_vmas+0x1c3/0x1730
[ 1620.788028][T12453]  __mmap_region+0x32c/0x2760
[ 1620.792733][T12453]  mmap_region+0x270/0x320
[ 1620.797187][T12453]  do_mmap+0xc00/0xfc0
[ 1620.801290][T12453]  vm_mmap_pgoff+0x1ba/0x360
[ 1620.805898][T12453]  ksys_mmap_pgoff+0x32c/0x5c0
[ 1620.810700][T12453]  __x64_sys_mmap+0x125/0x190
[ 1620.815402][T12453]  do_syscall_64+0xcd/0x250
[ 1620.819943][T12453] 
[ 1620.822277][T12453] Memory state around the buggy address:
[ 1620.827910][T12453]  ffff8880597ad480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1620.835992][T12453]  ffff8880597ad500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1620.844071][T12453] >ffff8880597ad580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1620.852231][T12453]                    ^
[ 1620.856309][T12453]  ffff8880597ad600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1620.864384][T12453]  ffff8880597ad680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1620.872631][T12453] ==================================================================
[ 1620.887512][T12453] Disabling lock debugging due to kernel taint
[ 1620.893738][T12453] ==================================================================
[ 1620.901813][T12453] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x884/0xf10
[ 1620.909763][T12453] Write of size 6 at addr ffff8880597ab018 by task kworker/u9:3/12453
[ 1620.917946][T12453] 
[ 1620.920301][T12453] CPU: 0 UID: 0 PID: 12453 Comm: kworker/u9:3 Tainted: G    B              6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[ 1620.932769][T12453] Tainted: [B]=BAD_PAGE
[ 1620.936939][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1620.947029][T12453] Workqueue: hci5 hci_rx_work
[ 1620.951773][T12453] Call Trace:
[ 1620.955070][T12453]  <TASK>
[ 1620.958019][T12453]  dump_stack_lvl+0x116/0x1f0
[ 1620.962752][T12453]  print_report+0xc3/0x620
[ 1620.967209][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1620.972880][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1620.978556][T12453]  ? __phys_addr+0xc6/0x150
[ 1620.983114][T12453]  kasan_report+0xd9/0x110
[ 1620.987576][T12453]  ? l2cap_connect_cfm+0x884/0xf10
[ 1620.992750][T12453]  ? l2cap_connect_cfm+0x884/0xf10
[ 1620.997923][T12453]  kasan_check_range+0xef/0x1a0
[ 1621.002837][T12453]  __asan_memcpy+0x3c/0x60
[ 1621.007319][T12453]  l2cap_connect_cfm+0x884/0xf10
[ 1621.012311][T12453]  ? _raw_spin_unlock_irq+0x41/0x50
[ 1621.017570][T12453]  ? rcu_preempt_deferred_qs_irqrestore+0x8a9/0xb80
[ 1621.024213][T12453]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1621.029728][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1621.035403][T12453]  ? rcu_is_watching+0x12/0xc0
[ 1621.040231][T12453]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1621.045753][T12453]  le_conn_complete_evt+0x1690/0x1da0
[ 1621.051189][T12453]  ? __pfx_lock_release+0x10/0x10
[ 1621.056256][T12453]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1621.062030][T12453]  ? trace_contention_end+0xee/0x140
[ 1621.067371][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1621.073087][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1621.078765][T12453]  hci_le_conn_complete_evt+0x23c/0x370
[ 1621.084372][T12453]  hci_le_meta_evt+0x2e5/0x5d0
[ 1621.089282][T12453]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1621.095494][T12453]  hci_event_packet+0x669/0x1180
[ 1621.100486][T12453]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1621.105851][T12453]  ? __pfx_hci_event_packet+0x10/0x10
[ 1621.111290][T12453]  ? kcov_remote_start+0x3df/0x6e0
[ 1621.116455][T12453]  hci_rx_work+0x2c5/0x16b0
[ 1621.121191][T12453]  ? process_one_work+0x921/0x1ba0
[ 1621.126432][T12453]  process_one_work+0x9c8/0x1ba0
[ 1621.131424][T12453]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1621.137108][T12453]  ? __pfx_process_one_work+0x10/0x10
[ 1621.142528][T12453]  ? rcu_is_watching+0x12/0xc0
[ 1621.147350][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1621.153033][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1621.158708][T12453]  ? assign_work+0x1a0/0x250
[ 1621.163339][T12453]  worker_thread+0x6c8/0xf00
[ 1621.167987][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1621.171915][T15030] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1621.173636][T12453]  ? __kthread_parkme+0x148/0x220
[ 1621.185375][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1621.191054][T12453]  ? __pfx_worker_thread+0x10/0x10
[ 1621.196565][T12453]  kthread+0x2c4/0x3a0
[ 1621.200695][T12453]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1621.205948][T12453]  ? __pfx_kthread+0x10/0x10
[ 1621.210604][T12453]  ret_from_fork+0x48/0x80
[ 1621.215066][T12453]  ? __pfx_kthread+0x10/0x10
[ 1621.219717][T12453]  ret_from_fork_asm+0x1a/0x30
[ 1621.224552][T12453]  </TASK>
[ 1621.227678][T12453] 
[ 1621.230103][T12453] Allocated by task 12453:
[ 1621.234537][T12453]  kasan_save_stack+0x33/0x60
[ 1621.239246][T12453]  kasan_save_track+0x14/0x30
[ 1621.243958][T12453]  __kasan_kmalloc+0xaa/0xb0
[ 1621.248585][T12453]  l2cap_chan_create+0x44/0x920
[ 1621.253474][T12453]  l2cap_sock_alloc.constprop.0+0xf5/0x1c0
[ 1621.259336][T12453]  l2cap_sock_new_connection_cb+0x101/0x240
[ 1621.265284][T12453]  l2cap_connect_cfm+0x862/0xf10
[ 1621.270272][T12453]  le_conn_complete_evt+0x1690/0x1da0
[ 1621.275692][T12453]  hci_le_conn_complete_evt+0x23c/0x370
[ 1621.281284][T12453]  hci_le_meta_evt+0x2e5/0x5d0
[ 1621.286096][T12453]  hci_event_packet+0x669/0x1180
[ 1621.291068][T12453]  hci_rx_work+0x2c5/0x16b0
[ 1621.295624][T12453]  process_one_work+0x9c8/0x1ba0
[ 1621.300602][T12453]  worker_thread+0x6c8/0xf00
[ 1621.305236][T12453]  kthread+0x2c4/0x3a0
[ 1621.309359][T12453]  ret_from_fork+0x48/0x80
[ 1621.313813][T12453]  ret_from_fork_asm+0x1a/0x30
[ 1621.318638][T12453] 
[ 1621.320980][T12453] Freed by task 15431:
[ 1621.325101][T12453]  kasan_save_stack+0x33/0x60
[ 1621.329811][T12453]  kasan_save_track+0x14/0x30
[ 1621.334514][T12453]  kasan_save_free_info+0x3b/0x60
[ 1621.339589][T12453]  __kasan_slab_free+0x51/0x70
[ 1621.344390][T12453]  kfree+0x14f/0x4b0
[ 1621.348338][T12453]  l2cap_chan_put+0x216/0x2c0
[ 1621.353053][T12453]  l2cap_sock_cleanup_listen+0x4d/0x2a0
[ 1621.358658][T12453]  l2cap_sock_release+0x5c/0x210
[ 1621.363653][T12453]  __sock_release+0xb3/0x270
[ 1621.368283][T12453]  sock_close+0x1c/0x30
[ 1621.372474][T12453]  __fput+0x3fb/0xb60
[ 1621.376492][T12453]  task_work_run+0x151/0x250
[ 1621.381116][T12453]  syscall_exit_to_user_mode+0x27b/0x2a0
[ 1621.386806][T12453]  do_syscall_64+0xda/0x250
[ 1621.391362][T12453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1621.397307][T12453] 
[ 1621.399639][T12453] The buggy address belongs to the object at ffff8880597ab000
[ 1621.399639][T12453]  which belongs to the cache kmalloc-2k of size 2048
[ 1621.413730][T12453] The buggy address is located 24 bytes inside of
[ 1621.413730][T12453]  freed 2048-byte region [ffff8880597ab000, ffff8880597ab800)
[ 1621.427569][T12453] 
[ 1621.429913][T12453] The buggy address belongs to the physical page:
[ 1621.436336][T12453] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x597a8
[ 1621.445130][T12453] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1621.453659][T12453] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1621.461236][T12453] page_type: f5(slab)
[ 1621.465247][T12453] raw: 00fff00000000040 ffff88801b042000 ffffea0001b1ae00 dead000000000002
[ 1621.473866][T12453] raw: 0000000000000000 0000000000080008 00000001f5000000 0000000000000000
[ 1621.482493][T12453] head: 00fff00000000040 ffff88801b042000 ffffea0001b1ae00 dead000000000002
[ 1621.491292][T12453] head: 0000000000000000 0000000000080008 00000001f5000000 0000000000000000
[ 1621.500008][T12453] head: 00fff00000000003 ffffea000165ea01 ffffffffffffffff 0000000000000000
[ 1621.508891][T12453] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 1621.517757][T12453] page dumped because: kasan: bad access detected
[ 1621.524192][T12453] page_owner tracks the page as allocated
[ 1621.529922][T12453] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3010, tgid 3010 (kworker/u8:7), ts 812909242554, free_ts 812601178487
[ 1621.551612][T12453]  post_alloc_hook+0x2d1/0x350
[ 1621.556533][T12453]  get_page_from_freelist+0xfce/0x2f80
[ 1621.562030][T12453]  __alloc_pages_noprof+0x223/0x25b0
[ 1621.567353][T12453]  alloc_pages_mpol_noprof+0x2c9/0x610
[ 1621.572951][T12453]  new_slab+0x2c9/0x410
[ 1621.577172][T12453]  ___slab_alloc+0xd7d/0x17a0
[ 1621.581909][T12453]  __slab_alloc.constprop.0+0x56/0xb0
[ 1621.587344][T12453]  __kmalloc_node_track_caller_noprof+0x2f1/0x510
[ 1621.593886][T12453]  kmalloc_reserve+0xef/0x2c0
[ 1621.598616][T12453]  __alloc_skb+0x164/0x380
[ 1621.603062][T12453]  rtmsg_ifinfo_build_skb+0x81/0x280
[ 1621.608381][T12453]  unregister_netdevice_many_notify+0x983/0x1e60
[ 1621.614737][T12453]  default_device_exit_batch+0x867/0xae0
[ 1621.620396][T12453]  ops_exit_list+0x12b/0x180
[ 1621.625004][T12453]  cleanup_net+0x5b7/0xbd0
[ 1621.629445][T12453]  process_one_work+0x9c8/0x1ba0
[ 1621.634408][T12453] page last free pid 9120 tgid 9120 stack trace:
[ 1621.640741][T12453]  free_unref_page+0x661/0x1080
[ 1621.645612][T12453]  __put_partials+0x14c/0x170
[ 1621.650330][T12453]  qlist_free_all+0x4e/0x120
[ 1621.654961][T12453]  kasan_quarantine_reduce+0x195/0x1e0
[ 1621.660468][T12453]  __kasan_slab_alloc+0x69/0x90
[ 1621.665534][T12453]  kmem_cache_alloc_noprof+0x226/0x3d0
[ 1621.671038][T12453]  vm_area_dup+0x21/0x2f0
[ 1621.675400][T12453]  __split_vma+0x181/0x1160
[ 1621.679922][T12453]  vms_gather_munmap_vmas+0x1c3/0x1730
[ 1621.685414][T12453]  __mmap_region+0x32c/0x2760
[ 1621.690118][T12453]  mmap_region+0x270/0x320
[ 1621.694656][T12453]  do_mmap+0xc00/0xfc0
[ 1621.698763][T12453]  vm_mmap_pgoff+0x1ba/0x360
[ 1621.703388][T12453]  ksys_mmap_pgoff+0x32c/0x5c0
[ 1621.708189][T12453]  __x64_sys_mmap+0x125/0x190
[ 1621.712889][T12453]  do_syscall_64+0xcd/0x250
[ 1621.717429][T12453] 
[ 1621.719757][T12453] Memory state around the buggy address:
[ 1621.725390][T12453]  ffff8880597aaf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1621.733464][T12453]  ffff8880597aaf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1621.741541][T12453] >ffff8880597ab000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1621.749608][T12453]                             ^
[ 1621.754463][T12453]  ffff8880597ab080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1621.762541][T12453]  ffff8880597ab100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1621.770612][T12453] ==================================================================
[ 1621.782102][T12453] Kernel panic - not syncing: kasan.fault=panic_on_write set ...
[ 1621.789852][T12453] CPU: 0 UID: 0 PID: 12453 Comm: kworker/u9:3 Tainted: G    B              6.13.0-rc4-syzkaller-00078-g059dd502b263 #0
[ 1621.802309][T12453] Tainted: [B]=BAD_PAGE
[ 1621.806473][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1621.816555][T12453] Workqueue: hci5 hci_rx_work
[ 1621.821381][T12453] Call Trace:
[ 1621.824679][T12453]  <TASK>
[ 1621.827635][T12453]  dump_stack_lvl+0x3d/0x1f0
[ 1621.832283][T12453]  panic+0x71d/0x800
[ 1621.836233][T12453]  ? rcu_is_watching+0x12/0xc0
[ 1621.841057][T12453]  ? __pfx_panic+0x10/0x10
[ 1621.845540][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1621.851212][T12453]  ? preempt_schedule_common+0x44/0xc0
[ 1621.856721][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1621.862392][T12453]  ? preempt_schedule_thunk+0x1a/0x30
[ 1621.867811][T12453]  end_report+0x169/0x180
[ 1621.872191][T12453]  kasan_report+0xe9/0x110
[ 1621.876651][T12453]  ? l2cap_connect_cfm+0x884/0xf10
[ 1621.881822][T12453]  ? l2cap_connect_cfm+0x884/0xf10
[ 1621.886997][T12453]  kasan_check_range+0xef/0x1a0
[ 1621.891899][T12453]  __asan_memcpy+0x3c/0x60
[ 1621.896376][T12453]  l2cap_connect_cfm+0x884/0xf10
[ 1621.901366][T12453]  ? _raw_spin_unlock_irq+0x41/0x50
[ 1621.906619][T12453]  ? rcu_preempt_deferred_qs_irqrestore+0x8a9/0xb80
[ 1621.913430][T12453]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1621.918942][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1621.924619][T12453]  ? rcu_is_watching+0x12/0xc0
[ 1621.929442][T12453]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[ 1621.934966][T12453]  le_conn_complete_evt+0x1690/0x1da0
[ 1621.940396][T12453]  ? __pfx_lock_release+0x10/0x10
[ 1621.945469][T12453]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1621.951239][T12453]  ? trace_contention_end+0xee/0x140
[ 1621.956558][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1621.962221][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1621.967885][T12453]  hci_le_conn_complete_evt+0x23c/0x370
[ 1621.973479][T12453]  hci_le_meta_evt+0x2e5/0x5d0
[ 1621.978288][T12453]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1621.984398][T12453]  hci_event_packet+0x669/0x1180
[ 1621.989371][T12453]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1621.994699][T12453]  ? __pfx_hci_event_packet+0x10/0x10
[ 1622.000110][T12453]  ? kcov_remote_start+0x3df/0x6e0
[ 1622.005259][T12453]  hci_rx_work+0x2c5/0x16b0
[ 1622.009804][T12453]  ? process_one_work+0x921/0x1ba0
[ 1622.014949][T12453]  process_one_work+0x9c8/0x1ba0
[ 1622.019925][T12453]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1622.025607][T12453]  ? __pfx_process_one_work+0x10/0x10
[ 1622.031008][T12453]  ? rcu_is_watching+0x12/0xc0
[ 1622.035814][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1622.041474][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1622.047128][T12453]  ? assign_work+0x1a0/0x250
[ 1622.051744][T12453]  worker_thread+0x6c8/0xf00
[ 1622.056366][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1622.062024][T12453]  ? __kthread_parkme+0x148/0x220
[ 1622.067086][T12453]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1622.072745][T12453]  ? __pfx_worker_thread+0x10/0x10
[ 1622.077885][T12453]  kthread+0x2c4/0x3a0
[ 1622.081995][T12453]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1622.087234][T12453]  ? __pfx_kthread+0x10/0x10
[ 1622.091870][T12453]  ret_from_fork+0x48/0x80
[ 1622.096310][T12453]  ? __pfx_kthread+0x10/0x10
[ 1622.100941][T12453]  ret_from_fork_asm+0x1a/0x30
[ 1622.105763][T12453]  </TASK>
[ 1622.109016][T12453] Kernel Offset: disabled
[ 1622.113340][T12453] Rebooting in 86400 seconds..