last executing test programs:

1m5.97101658s ago: executing program 1 (id=121):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0)
r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc029900000000761ad367dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33719cb230328931deb95ef3fcafb1de27743a93f4715976edec860ab4dc3a4f514173187437437938d275a6d39cea", 0xd7, r3)
keyctl$search(0xa, r3, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff)
chdir(&(0x7f0000000280)='./file0\x00')
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe)
r6 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r6)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCOUTQ(r7, 0x5411, 0x0)
sendfile(r4, r5, 0x0, 0x80000001)

56.691060378s ago: executing program 1 (id=133):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x141842, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f00000000c0), 0xfea7)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbb00bbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100"], 0x0)
copy_file_range(r6, &(0x7f00000001c0), r5, 0x0, 0x81, 0x10000000000000)
ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f0000000380)={0x2, 0x10000, 0x77, &(0x7f0000000240)=""/119})

54.875372578s ago: executing program 1 (id=136):
socket(0x11, 0x2, 0x80000001)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000008000000e27f"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x2005, 0x0, 0x7}, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}])
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
get_robust_list(0x0, &(0x7f0000000580)=&(0x7f0000000540)={&(0x7f0000000480)={&(0x7f0000000440)}, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)}}, &(0x7f00000005c0)=0xc)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
socket$nl_route(0x10, 0x3, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080), 0x2000011a)
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)

46.879492006s ago: executing program 1 (id=151):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_emit_ethernet(0x32, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186", 0x4b}, {0x0}], 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x98}, 0x1, 0x7}, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @rand_addr=0x64010100}, 0xc)
timerfd_create(0x8, 0x1000)
r4 = socket$netlink(0x10, 0x3, 0x7)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r4, 0x0, 0x0)
setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x57)
sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf25150000000c009900090000002700000a00060008021100000000000e001a00ffffffffffff00000a000600ffffffffffff0000f598e039f08de80bb8479ec7c21847"], 0x50}, 0x1, 0x0, 0x0, 0x4018800}, 0x20000804)

43.149007092s ago: executing program 1 (id=154):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r2, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @initial, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x1, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x27, 0x3}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000001880)={0x424, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0xbe, 0x2a, [@peer_mgmt={0x75, 0x8, {0x1, 0x4, @val=0x6, @val=0x28, @void}}, @random_vendor={0xdd, 0x7f, "a36e897bfe2f388b0190fd80a1e2b1dcadc308afb36b2c986552f1076a150a529592b94ab59b8d2838820fe6cd35bae11e0e27065b4524d54b1acf346fee0cdac53bec71c1207435eb16a0070d86750875aad905e249b3d078285d358ce7cdf19cd7cbdaed1103226c1c71f79c48d63e9dbfb481fd999f315b03f5b8ad7a17"}, @peer_mgmt={0x75, 0x16, {0x0, 0x7, @val=0x9, @void, @val="a7d436de704955486047897cdd4bbe4d"}}, @rann={0x7e, 0x15, {{0x0, 0x5e}, 0x4, 0x3, @device_b, 0x8faa, 0x6, 0x4}}]}, @NL80211_ATTR_IE={0x77, 0x2a, [@supported_rates, @mesh_chsw={0x76, 0x6, {0x4, 0xae, 0x11, 0x8}}, @preq={0x82, 0x67, {{0x0, 0x1}, 0x28, 0xfa, 0x1, @device_b, 0x7f, @void, 0x401, 0x8, 0x7, [{{0x1, 0x0, 0x1}, @device_a, 0x3}, {{0x1}, @device_b, 0x99c}, {{}, @device_b, 0x5}, {{0x1}, @device_b, 0x3101}, {{0x1}, @device_a, 0x7}, {{0x1}, @device_b, 0x400}, {{}, @device_a, 0xfffffff7}]}}]}, @NL80211_ATTR_IE={0x143, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @prep={0x83, 0x1f, {{}, 0x1, 0xec, @device_a, 0x0, @void, 0xea0, 0x5, @broadcast, 0xffffffff}}, @random_vendor={0xdd, 0x6, "44ef3d696aee"}, @random={0x9, 0xd6, "fdb2361c22a89f5e87c04e0b4ac05e12decd0fb9f905f30ac2dd229be80a1ea2e311baa8bfbaac7bc658742113a2261bc128222c6c43a14437bb7fa42f305dd3fdd1a875bbfc8e5bc9b0282cf9944c28d955483c9063ded4084c0dda197af88bc382d2405e8ea4dffc659789f2f24f015dd49f825ecddd48c3074bbdf60e5ae1aca777ac42d277074f54185d9a1387f50839726090af4bf877c50543385d675961ef70e553ebf3355195c5343e2cb4014e4ec6a9ef57e9d7779eb2b60166ed02c2352421f0b7680b995a834d7a8ec846e4f1b90705af"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x80, 0x4}}, @mesh_id={0x72, 0x6}, @tim={0x5, 0x23, {0x0, 0xde, 0x4, "a17fe0850a3a9a80ba79e594b729e30729b184595944f60edf1bdee3015d6e08"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x22e9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfff7}, @NL80211_ATTR_IE={0x161, 0x2a, [@tim={0x5, 0xbc, {0x0, 0x27, 0x80, "6d72b3eb76a72e3d43ca08073b366952e3986e243b8e3922f88c9bda1050fc7c4f0aef0ca2edabd198ce59a5513eeb59305b7c62bec69cddc8ed4cf9fdd1719bfd829303dc4f3734034411c2dc277c9ad9e7a70f1c124ee1c4ef988112dabae712961c58a0fefa819f82f8634324b6277ec8f0c091810002140bbd580b02cfcf23d615541274b3e0ab826ac0f0e3c397b4e6311dcade3423557504ec7888b640d40b7a01e93f941f13d8cea1e4947a9e9f76ba2e849d96e113"}}, @random={0xff, 0x9d, "262bde79d4d27d5b78b1ccd4b661538a7d229b1150bc137719f70a0b951ca5c4c1a248910695ad4e0194fe06b971eb93958f2ecab910ee1ff818b51f5b001e1a358d038cb4195f1547b00b0228972ed0c5c944b6e73648be13c91958053beeb611074d49e2e1b23916a068c51e8ff2310bcdcb10d73edb6f9ddd0dbe8f8860b8505f8f6f1199c57ca8c2aef99d9492cfbcdc319873c56622e5ca283457"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xd8b}]}, 0x424}, 0x1, 0x0, 0x0, 0x8101}, 0x6400c8c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
execve(0x0, 0x0, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe45)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r8=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x0, 0x9}}, 0x0)
timer_settime(r8, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x5, 0x1}, {}, {}, @raw32}], 0x1c)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'})

39.429691295s ago: executing program 1 (id=158):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100)
connect$packet(r2, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
shutdown(r2, 0x1)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
ppoll(&(0x7f00000002c0)=[{r4, 0x41}, {r1, 0x8254}], 0x2, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
rt_sigprocmask(0x5, &(0x7f0000000040), 0x0, 0x8)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$RTC_UIE_ON(r6, 0x7003)
ioctl$RTC_AIE_ON(r6, 0x7001)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
listen(r0, 0x1ad72f7)

27.736412508s ago: executing program 3 (id=170):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r4, 0x0, 0x607a9e0a432a4785)
ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x810)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f00000005c0)={0x1, 0xfffffff3})
mount$9p_rdma(&(0x7f00000002c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1000401, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e23,timeout=0x0000000000000004,timeout=0x0000000000000002,sq=0x0000000000000401,sq=0x000000007fffffff,uid<', @ANYBLOB="2c7065726d69745f646972650300000000000000000000743d756e636f6e666d6e65645f752c7569643e197cddbb056672c09d84f2ca4da843e9a26aefda24f56292c90d0b", @ANYRESDEC=0x0, @ANYBLOB=',smackfsroot=\'#,'])
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000ccaf4d59a528b90f30a391ac1778a957ec6cf18d3d5651ca6b6700b6b3a4afc099b68c0031e249c008e0ee7d206ee8"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810)
socket$l2tp6(0xa, 0x2, 0x73)

25.036005886s ago: executing program 3 (id=173):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0000000400000004000000030000", @ANYBLOB], 0x48)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r4)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

23.576164313s ago: executing program 32 (id=158):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100)
connect$packet(r2, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
shutdown(r2, 0x1)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
ppoll(&(0x7f00000002c0)=[{r4, 0x41}, {r1, 0x8254}], 0x2, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
rt_sigprocmask(0x5, &(0x7f0000000040), 0x0, 0x8)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$RTC_UIE_ON(r6, 0x7003)
ioctl$RTC_AIE_ON(r6, 0x7001)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
listen(r0, 0x1ad72f7)

20.483852566s ago: executing program 3 (id=180):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r2, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @initial, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x1, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x27, 0x3}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000001880)={0x424, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0xbe, 0x2a, [@peer_mgmt={0x75, 0x8, {0x1, 0x4, @val=0x6, @val=0x28, @void}}, @random_vendor={0xdd, 0x7f, "a36e897bfe2f388b0190fd80a1e2b1dcadc308afb36b2c986552f1076a150a529592b94ab59b8d2838820fe6cd35bae11e0e27065b4524d54b1acf346fee0cdac53bec71c1207435eb16a0070d86750875aad905e249b3d078285d358ce7cdf19cd7cbdaed1103226c1c71f79c48d63e9dbfb481fd999f315b03f5b8ad7a17"}, @peer_mgmt={0x75, 0x16, {0x0, 0x7, @val=0x9, @void, @val="a7d436de704955486047897cdd4bbe4d"}}, @rann={0x7e, 0x15, {{0x0, 0x5e}, 0x4, 0x3, @device_b, 0x8faa, 0x6, 0x4}}]}, @NL80211_ATTR_IE={0x77, 0x2a, [@supported_rates, @mesh_chsw={0x76, 0x6, {0x4, 0xae, 0x11, 0x8}}, @preq={0x82, 0x67, {{0x0, 0x1}, 0x28, 0xfa, 0x1, @device_b, 0x7f, @void, 0x401, 0x8, 0x7, [{{0x1, 0x0, 0x1}, @device_a, 0x3}, {{0x1}, @device_b, 0x99c}, {{}, @device_b, 0x5}, {{0x1}, @device_b, 0x3101}, {{0x1}, @device_a, 0x7}, {{0x1}, @device_b, 0x400}, {{}, @device_a, 0xfffffff7}]}}]}, @NL80211_ATTR_IE={0x143, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @prep={0x83, 0x1f, {{}, 0x1, 0xec, @device_a, 0x0, @void, 0xea0, 0x5, @broadcast, 0xffffffff}}, @random_vendor={0xdd, 0x6, "44ef3d696aee"}, @random={0x9, 0xd6, "fdb2361c22a89f5e87c04e0b4ac05e12decd0fb9f905f30ac2dd229be80a1ea2e311baa8bfbaac7bc658742113a2261bc128222c6c43a14437bb7fa42f305dd3fdd1a875bbfc8e5bc9b0282cf9944c28d955483c9063ded4084c0dda197af88bc382d2405e8ea4dffc659789f2f24f015dd49f825ecddd48c3074bbdf60e5ae1aca777ac42d277074f54185d9a1387f50839726090af4bf877c50543385d675961ef70e553ebf3355195c5343e2cb4014e4ec6a9ef57e9d7779eb2b60166ed02c2352421f0b7680b995a834d7a8ec846e4f1b90705af"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x80, 0x4}}, @mesh_id={0x72, 0x6}, @tim={0x5, 0x23, {0x0, 0xde, 0x4, "a17fe0850a3a9a80ba79e594b729e30729b184595944f60edf1bdee3015d6e08"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x22e9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfff7}, @NL80211_ATTR_IE={0x161, 0x2a, [@tim={0x5, 0xbc, {0x0, 0x27, 0x80, "6d72b3eb76a72e3d43ca08073b366952e3986e243b8e3922f88c9bda1050fc7c4f0aef0ca2edabd198ce59a5513eeb59305b7c62bec69cddc8ed4cf9fdd1719bfd829303dc4f3734034411c2dc277c9ad9e7a70f1c124ee1c4ef988112dabae712961c58a0fefa819f82f8634324b6277ec8f0c091810002140bbd580b02cfcf23d615541274b3e0ab826ac0f0e3c397b4e6311dcade3423557504ec7888b640d40b7a01e93f941f13d8cea1e4947a9e9f76ba2e849d96e113"}}, @random={0xff, 0x9d, "262bde79d4d27d5b78b1ccd4b661538a7d229b1150bc137719f70a0b951ca5c4c1a248910695ad4e0194fe06b971eb93958f2ecab910ee1ff818b51f5b001e1a358d038cb4195f1547b00b0228972ed0c5c944b6e73648be13c91958053beeb611074d49e2e1b23916a068c51e8ff2310bcdcb10d73edb6f9ddd0dbe8f8860b8505f8f6f1199c57ca8c2aef99d9492cfbcdc319873c56622e5ca283457"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xd8b}]}, 0x424}, 0x1, 0x0, 0x0, 0x8101}, 0x6400c8c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
execve(0x0, 0x0, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe45)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r8=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x0, 0x9}}, 0x0)
timer_settime(r8, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x5, 0x1}, {}, {}, @raw32}], 0x1c)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0)

19.191439788s ago: executing program 2 (id=182):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
unshare(0x60600)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
chmod(&(0x7f0000000080)='./file0\x00', 0x1)
mkdir(0x0, 0x0)

17.553077679s ago: executing program 2 (id=185):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, 0x0, &(0x7f0000001880))
mkdirat(r4, &(0x7f0000000100)='./file0/file0\x00', 0x120)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000340)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r6, 0x0, 0x4008004)

16.149679215s ago: executing program 2 (id=186):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6982a9, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc})
close(r7)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b20a5a5ae0000", @ANYRES8=r2])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0)
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9)

15.052269009s ago: executing program 0 (id=187):
socket(0x11, 0x2, 0x80000001)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000008000000e27f"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
get_robust_list(0x0, &(0x7f0000000580)=&(0x7f0000000540)={&(0x7f0000000480)={&(0x7f0000000440)}, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)}}, &(0x7f00000005c0)=0xc)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
r4 = socket(0x1e, 0x1, 0x0)
write$binfmt_misc(r4, &(0x7f0000000080), 0x2000011a)
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)

15.051343499s ago: executing program 4 (id=188):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
ppoll(&(0x7f00000002c0)=[{r2, 0x8254}], 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
rt_sigprocmask(0x5, &(0x7f0000000040), 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$RTC_UIE_ON(r6, 0x7003)
ioctl$RTC_AIE_ON(r6, 0x7001)
ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000080)={0x3, 0x1, 0x3, 0x3, 0x5, 0x81, 0x6, 0x152, 0xffffffffffffffff})
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691]}}, 0x5c)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
listen(r0, 0x1ad72f7)

13.740047801s ago: executing program 0 (id=189):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100)
connect$packet(r3, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
ppoll(&(0x7f00000002c0)=[{r2, 0x8254}], 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
rt_sigprocmask(0x5, &(0x7f0000000040), 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$RTC_UIE_ON(r6, 0x7003)
ioctl$RTC_AIE_ON(r6, 0x7001)
ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000080)={0x3, 0x1, 0x3, 0x3, 0x5, 0x81, 0x6, 0x152, 0xffffffffffffffff})
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691]}}, 0x5c)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
listen(r0, 0x1ad72f7)

13.573299824s ago: executing program 4 (id=190):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6982a9, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc})
close(r7)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b20a5a5ae0000", @ANYRES8=r2])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0)
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9)

12.152921134s ago: executing program 4 (id=191):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc029900000000761ad367dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33719cb230328931deb95ef3fcafb1de27743a93f4715976edec860ab4dc3a4f514173187437437938d275a6d39cea", 0xd7, r3)
chdir(&(0x7f0000000280)='./file0\x00')
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000180)="7a55a740051702", 0x7}], 0x2)
creat(&(0x7f0000000300)='./bus\x00', 0x15d)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe)
ftruncate(r6, 0x2008002)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
socket$vsock_stream(0x28, 0x1, 0x0)
sendfile(r5, r6, 0x0, 0x80000001)

11.706821198s ago: executing program 0 (id=192):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, 0x0, &(0x7f0000001880))
mkdirat(r4, &(0x7f0000000100)='./file0/file0\x00', 0x120)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000340)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r6, 0x0, 0x4008004)

9.506549961s ago: executing program 0 (id=193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6982a9, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc})
close(r7)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b20a5a5ae0000", @ANYRES8=r2])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0)
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9)

8.036557271s ago: executing program 4 (id=194):
r0 = socket$packet(0x11, 0x3, 0x300)
getsockname(r0, &(0x7f0000000100)=@isdn, &(0x7f0000000180)=0x80)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x5490, 0x1000, 0x3a}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x458, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x15c, 0x180, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b4)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f040f000b0837137a8790e0f33641931fcbe6e8defdfd1adda8c7e3dde006cd92bb8843210e9a33e802d959d26e9ae65af21a3a1a411dc09091abbe74dbf3305b89f3c3c6bfcb1cc13c1b9e0cbd20f43a62a5b1"], 0x7)

7.62454343s ago: executing program 3 (id=195):
modify_ldt$write2(0x11, &(0x7f0000000040), 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, &(0x7f0000000000))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='f2fs_get_victim\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
prlimit64(r0, 0x3, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x6, 0x1}, 0xc)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

7.214560156s ago: executing program 2 (id=196):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socket$caif_stream(0x25, 0x1, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2)
readv(r3, &(0x7f0000000580)=[{&(0x7f0000000040)=""/176, 0xb0}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/181, 0xb5}], 0x4)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x2)

6.335620934s ago: executing program 3 (id=197):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6982a9, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc})
close(r7)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b20a5a5ae0000", @ANYRES8=r2])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r8)

4.78943709s ago: executing program 2 (id=198):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socket$caif_stream(0x25, 0x1, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2)
readv(r4, &(0x7f0000000580)=[{&(0x7f0000000040)=""/176, 0xb0}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/181, 0xb5}], 0x4)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)
ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x9)
mount$overlay(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180))
r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r5, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f0000000280)='./file1\x00')

4.744998964s ago: executing program 4 (id=199):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
unshare(0x60600)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
chmod(&(0x7f0000000080)='./file0\x00', 0x1)
mkdir(0x0, 0x0)

4.443144589s ago: executing program 0 (id=200):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6982a9, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc})
close(r7)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b20a5a5ae0000", @ANYRES8=r2])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0)
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9)

2.983152076s ago: executing program 2 (id=201):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
prlimit64(0x0, 0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='attr/sockcreate\x00')
read$FUSE(r2, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)
syz_io_uring_setup(0x39, &(0x7f0000001800)={0x0, 0xfffffffe, 0x80}, &(0x7f0000000240), &(0x7f0000001880)=<r3=>0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES64=r3], 0x74}, 0x1, 0x0, 0x0, 0x440400c4}, 0x8000)
umount2(&(0x7f0000000340)='./file1\x00', 0x4)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setreuid(0xee01, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setreuid(0xee01, 0xffffffffffffffff)

2.807604552s ago: executing program 3 (id=202):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r1, &(0x7f0000000500)="f415078807f6d8e5d630008956beb76bb69d8aae5ee308748adc607af549c702a83b4e2c6d42bac509bb61603783667f4af91eb3b9cfa4eeb06d4aa5c05e48b51e143c50256f9500866d2abb5ad49d65869cef56edd0f8d76af4035859583e756da45b432d606a72e43c202565388f843619e08fd0876e0973438b3f4df68bddf77ce3950c739f4c947605ed5f0b52e08fd5e72dc6864278ef87ceb0b612ff28f97c2d5c2c0eaf149a2f3edd9a70a2e1c04b19484870354f63c6a81db93033f32fc8a91c13b49ef4db855568cf28774e23ea55d688ebc68c6c587d130fc4ea56edcf7497554f6685cb9ed8533f45f2", 0xef, 0x48004, &(0x7f0000000180)={0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10})
r7 = syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x0)
ioctl$UI_DEV_DESTROY(r6, 0x5502)
poll(&(0x7f0000000080)=[{r7, 0x8024}], 0x1, 0xfffffff9)
lseek(r5, 0x9, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

1.249324779s ago: executing program 4 (id=203):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc029900000000761ad367dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33719cb230328931deb95ef3fcafb1de27743a93f4715976edec860ab4dc3a4f514173187437437938d275a6d39cea", 0xd7, r3)
chdir(&(0x7f0000000280)='./file0\x00')
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000180)="7a55a740051702", 0x7}], 0x2)
creat(&(0x7f0000000300)='./bus\x00', 0x15d)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe)
ftruncate(r6, 0x2008002)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
socket$vsock_stream(0x28, 0x1, 0x0)
sendfile(r5, r6, 0x0, 0x80000001)

0s ago: executing program 0 (id=204):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x34)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
close(r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts.
[   69.763395][ T5811] cgroup: Unknown subsys name 'net'
[   69.900695][ T5811] cgroup: Unknown subsys name 'cpuset'
[   69.908963][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   71.441825][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.609852][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[   71.616375][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[   73.838282][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.853811][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.861669][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.871147][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.931525][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   73.933596][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.946544][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.947170][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.970191][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.978153][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.987117][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.987282][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   74.002117][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   74.007461][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   74.010352][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   74.016390][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   74.023928][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   74.030363][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.038410][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   74.057118][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.064462][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   74.064539][ T5135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.079659][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   74.087813][ T5135] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   74.095203][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   74.102312][ T5135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.110676][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.121213][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   74.139123][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   74.146888][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   74.432005][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   74.614988][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   74.678631][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   74.701988][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.710229][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.719433][ T5822] bridge_slave_0: entered allmulticast mode
[   74.727318][ T5822] bridge_slave_0: entered promiscuous mode
[   74.750725][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.758852][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.766002][ T5822] bridge_slave_1: entered allmulticast mode
[   74.773502][ T5822] bridge_slave_1: entered promiscuous mode
[   74.827972][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   74.847501][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   74.878969][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.890980][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.999199][ T5822] team0: Port device team_slave_0 added
[   75.019009][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.026182][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.033912][ T5824] bridge_slave_0: entered allmulticast mode
[   75.041217][ T5824] bridge_slave_0: entered promiscuous mode
[   75.064118][ T5822] team0: Port device team_slave_1 added
[   75.103676][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.111113][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.118923][ T5824] bridge_slave_1: entered allmulticast mode
[   75.125633][ T5824] bridge_slave_1: entered promiscuous mode
[   75.135921][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.143322][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.150545][ T5835] bridge_slave_0: entered allmulticast mode
[   75.157640][ T5835] bridge_slave_0: entered promiscuous mode
[   75.174372][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.181661][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.207673][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.245026][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.252679][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.260376][ T5835] bridge_slave_1: entered allmulticast mode
[   75.267338][ T5835] bridge_slave_1: entered promiscuous mode
[   75.274774][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.282543][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.308690][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.325219][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.332559][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.339906][ T5830] bridge_slave_0: entered allmulticast mode
[   75.346635][ T5830] bridge_slave_0: entered promiscuous mode
[   75.393573][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.405124][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.412386][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.420097][ T5830] bridge_slave_1: entered allmulticast mode
[   75.427000][ T5830] bridge_slave_1: entered promiscuous mode
[   75.436405][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.451537][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.466645][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.475439][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.482680][ T5840] bridge_slave_0: entered allmulticast mode
[   75.490007][ T5840] bridge_slave_0: entered promiscuous mode
[   75.506234][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.541972][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.549397][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.556560][ T5840] bridge_slave_1: entered allmulticast mode
[   75.563692][ T5840] bridge_slave_1: entered promiscuous mode
[   75.582687][ T5822] hsr_slave_0: entered promiscuous mode
[   75.589382][ T5822] hsr_slave_1: entered promiscuous mode
[   75.631971][ T5824] team0: Port device team_slave_0 added
[   75.649172][ T5835] team0: Port device team_slave_0 added
[   75.657427][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.668523][ T5824] team0: Port device team_slave_1 added
[   75.675916][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.696522][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.708917][ T5835] team0: Port device team_slave_1 added
[   75.741466][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.796554][ T5830] team0: Port device team_slave_0 added
[   75.833578][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.840973][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.867438][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.881749][ T5830] team0: Port device team_slave_1 added
[   75.899278][ T5840] team0: Port device team_slave_0 added
[   75.909669][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.916640][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.946923][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.959793][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.967160][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.993508][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.016185][ T5840] team0: Port device team_slave_1 added
[   76.036512][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.043594][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.070333][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.086125][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.094290][ T5841] Bluetooth: hci0: command tx timeout
[   76.096420][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.126670][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.166946][ T5841] Bluetooth: hci1: command tx timeout
[   76.172624][ T5829] Bluetooth: hci2: command tx timeout
[   76.172635][   T56] Bluetooth: hci3: command tx timeout
[   76.187519][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.194500][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.220622][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.232777][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.240068][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.247322][ T5829] Bluetooth: hci4: command tx timeout
[   76.272266][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.284485][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.291516][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.317669][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.377489][ T5835] hsr_slave_0: entered promiscuous mode
[   76.383838][ T5835] hsr_slave_1: entered promiscuous mode
[   76.390567][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.398536][ T5835] Cannot create hsr debugfs directory
[   76.425307][ T5824] hsr_slave_0: entered promiscuous mode
[   76.431611][ T5824] hsr_slave_1: entered promiscuous mode
[   76.438036][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.445634][ T5824] Cannot create hsr debugfs directory
[   76.523666][ T5830] hsr_slave_0: entered promiscuous mode
[   76.530152][ T5830] hsr_slave_1: entered promiscuous mode
[   76.536087][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.543872][ T5830] Cannot create hsr debugfs directory
[   76.585399][ T5840] hsr_slave_0: entered promiscuous mode
[   76.591633][ T5840] hsr_slave_1: entered promiscuous mode
[   76.597930][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.605530][ T5840] Cannot create hsr debugfs directory
[   76.746263][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   76.785998][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   76.804788][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   76.842675][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   76.996795][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   77.022900][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   77.041926][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   77.064668][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   77.086166][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   77.097439][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   77.117428][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   77.150100][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   77.203498][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.214669][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   77.238803][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   77.255383][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   77.282914][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   77.291155][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   77.330584][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.338153][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.347880][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.354975][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.392519][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   77.403635][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   77.414070][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   77.436653][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   77.485511][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.564958][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   77.619787][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.626963][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.641160][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.648328][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.742699][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.781561][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   77.805014][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.812255][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.880862][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.892570][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.899764][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.922749][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.935026][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.987668][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   78.024366][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.031527][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.061575][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.068744][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.084088][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   78.112124][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.119268][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.132256][ T5822] veth0_vlan: entered promiscuous mode
[   78.168739][ T5829] Bluetooth: hci0: command tx timeout
[   78.182900][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.190078][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.216585][ T5822] veth1_vlan: entered promiscuous mode
[   78.241764][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   78.248470][ T5829] Bluetooth: hci2: command tx timeout
[   78.253456][ T5841] Bluetooth: hci1: command tx timeout
[   78.259530][ T5829] Bluetooth: hci3: command tx timeout
[   78.274024][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.328968][ T5829] Bluetooth: hci4: command tx timeout
[   78.411088][ T5822] veth0_macvtap: entered promiscuous mode
[   78.453052][ T5822] veth1_macvtap: entered promiscuous mode
[   78.524087][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.560703][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.569354][ T5835] veth0_vlan: entered promiscuous mode
[   78.582454][ T5835] veth1_vlan: entered promiscuous mode
[   78.590692][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.605425][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.616144][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.633572][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.642652][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.683350][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.712648][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.829105][ T5835] veth0_macvtap: entered promiscuous mode
[   78.840568][ T5824] veth0_vlan: entered promiscuous mode
[   78.848440][ T5835] veth1_macvtap: entered promiscuous mode
[   78.891022][ T5824] veth1_vlan: entered promiscuous mode
[   78.931866][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.935711][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.960240][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.963351][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.981759][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.035501][ T5830] veth0_vlan: entered promiscuous mode
[   79.044043][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.060593][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.074200][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.091611][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.106354][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.124267][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.134047][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.143698][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.152738][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.167769][ T5824] veth0_macvtap: entered promiscuous mode
[   79.197708][ T5830] veth1_vlan: entered promiscuous mode
[   79.221928][ T5824] veth1_macvtap: entered promiscuous mode
[   79.263842][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.274919][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.288694][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.299350][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.310749][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.354811][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   79.358108][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.387454][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.397423][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.407946][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.420025][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.441241][ T5830] veth0_macvtap: entered promiscuous mode
[   79.471013][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.495179][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.512622][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.524282][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.724730][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.732176][ T5840] veth0_vlan: entered promiscuous mode
[   79.739061][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.757942][ T5830] veth1_macvtap: entered promiscuous mode
[   79.813396][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.834014][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.845579][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.857717][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.867697][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.878413][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.889477][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.903694][ T5840] veth1_vlan: entered promiscuous mode
[   80.043516][ T5911] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0
[   80.078919][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.092673][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.099505][ T5912] IPVS: stopping backup sync thread 5911 ...
[   80.109819][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.110181][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.129829][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.141108][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.165882][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.178114][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.190695][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.241915][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.251373][ T5829] Bluetooth: hci0: command tx timeout
[   80.258513][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.277123][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.285958][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.319232][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.327883][ T5829] Bluetooth: hci1: command tx timeout
[   80.327941][ T5841] Bluetooth: hci2: command tx timeout
[   80.333299][ T5829] Bluetooth: hci3: command tx timeout
[   80.395253][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.407103][ T5829] Bluetooth: hci4: command tx timeout
[   80.590469][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.606888][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.610615][ T5840] veth0_macvtap: entered promiscuous mode
[   80.659029][ T5840] veth1_macvtap: entered promiscuous mode
[   80.827140][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.852283][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.997132][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.017143][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.102471][ T5918] input: syz1 as /devices/virtual/input/input5
[   81.798769][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.828826][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.895077][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.909748][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.920000][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.937560][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.966987][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.987149][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.000917][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.035057][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.083788][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   82.125310][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.163037][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.174549][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.189813][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.200535][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.212783][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.223520][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.234782][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.329178][ T5829] Bluetooth: hci0: command tx timeout
[   82.426766][ T5829] Bluetooth: hci3: command tx timeout
[   82.432659][   T56] Bluetooth: hci2: command tx timeout
[   82.432704][ T5841] Bluetooth: hci1: command tx timeout
[   82.474299][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.490546][ T5841] Bluetooth: hci4: command tx timeout
[   83.276810][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.285583][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.328601][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.870552][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.108217][ T5934] lo speed is unknown, defaulting to 1000
[   84.114213][ T5934] lo speed is unknown, defaulting to 1000
[   84.121866][ T5934] lo speed is unknown, defaulting to 1000
[   84.133026][ T5934] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   84.146814][ T5934] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   84.297662][ T5934] lo speed is unknown, defaulting to 1000
[   84.309659][ T5934] lo speed is unknown, defaulting to 1000
[   84.320984][ T5934] lo speed is unknown, defaulting to 1000
[   84.333212][ T5934] lo speed is unknown, defaulting to 1000
[   84.345704][ T5934] lo speed is unknown, defaulting to 1000
[   85.088428][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.195106][ T5939] netlink: 'syz.1.2': attribute type 3 has an invalid length.
[   85.203408][ T5939] netlink: 'syz.1.2': attribute type 3 has an invalid length.
[   85.222165][ T5939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'.
[   85.258110][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   86.101077][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.127505][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.135172][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.697644][ T5956] Zero length message leads to an empty skb
[   89.090273][ T5962] sctp: [Deprecated]: syz.0.12 (pid 5962) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.090273][ T5962] Use struct sctp_sack_info instead
[   89.109096][ T5962] sctp: [Deprecated]: syz.0.12 (pid 5962) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.109096][ T5962] Use struct sctp_sack_info instead
[   89.425777][ T5965] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[5965]
[   90.477069][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   90.485914][    T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!!
[   90.489431][ T5966] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   91.857109][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.138395][    T9] cfg80211: failed to load regulatory.db
[   93.326580][ T5829] Bluetooth: hci4: command 0x0405 tx timeout
[   94.781962][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  105.947290][ T5829] Bluetooth: hci4: command 0x0405 tx timeout
[  111.758170][ T5940] lo speed is unknown, defaulting to 1000
[  112.613442][ T6094] siw: device registration error -23
[  114.179095][ T6103] infiniband syz1: set down
[  114.183890][ T6103] infiniband syz1: added ipvlan0
[  114.222128][ T6104] pimreg: entered allmulticast mode
[  114.584118][ T6103] RDS/IB: syz1: added
[  114.589042][ T6103] smc: adding ib device syz1 with port count 1
[  114.595403][ T6103] smc:    ib device syz1 port 1 has pnetid 
[  114.902338][ T6106] hub 2-0:1.0: USB hub found
[  114.935508][ T6106] hub 2-0:1.0: 1 port detected
[  118.304220][ T6103] syz.3.41 (6103) used greatest stack depth: 19568 bytes left
[  118.961882][ T6128] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  118.977404][ T6128] batman_adv: batadv0: Adding interface: gretap1
[  118.983854][ T6128] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.009330][ T6128] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  120.156453][ T6128] tty tty27: ldisc open failed (-12), clearing slot 26
[  125.697007][    T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!!
[  125.706126][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  132.874398][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  133.051114][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  133.057606][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  135.051727][ T6209] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  135.064330][ T6209] pimreg: entered allmulticast mode
[  143.969516][ T6274] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  145.300477][ T6279] serio: Serial port ttyS3
[  147.193586][ T6279] overlayfs: missing 'lowerdir'
[  147.207712][ T6287] serio: Serial port ttyS3
[  147.280244][ T6287] overlayfs: missing 'lowerdir'
[  150.219280][ T6304] input: syz1 as /devices/virtual/input/input10
[  153.748614][ T6310] syz.1.88 (6310) used greatest stack depth: 18896 bytes left
[  154.462409][ T6323] hub 2-0:1.0: USB hub found
[  154.506765][ T6323] hub 2-0:1.0: 1 port detected
[  156.103137][ T6335] 8021q: VLANs not supported on ip6gre0
[  157.492909][ T6346] serio: Serial port ttyS3
[  163.325329][ T6387] hub 2-0:1.0: USB hub found
[  163.330865][ T6387] hub 2-0:1.0: 1 port detected
[  164.259715][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  166.919032][ T6409] kAFS: No cell specified
[  169.780856][ T6431] hub 2-0:1.0: USB hub found
[  169.786971][ T6431] hub 2-0:1.0: 1 port detected
[  173.917915][ T6457] fuse: Bad value for 'fd'
[  177.511038][ T6473] fuse: Bad value for 'fd'
[  178.875550][ T6477] hub 2-0:1.0: USB hub found
[  178.881302][ T6477] hub 2-0:1.0: 1 port detected
[  182.824761][ T5841] Bluetooth: hci4: link tx timeout
[  182.831174][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  184.888596][ T5829] Bluetooth: hci4: command 0x0405 tx timeout
[  189.755166][ T6546] siw: device registration error -23
[  194.495205][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  194.505088][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  195.050023][ T6571] sctp: [Deprecated]: syz.2.152 (pid 6571) Use of struct sctp_assoc_value in delayed_ack socket option.
[  195.050023][ T6571] Use struct sctp_sack_info instead
[  195.352590][ T6576] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[6576]
[  196.581817][   T56] Bluetooth: hci0: command 0x0406 tx timeout
[  196.586513][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[  196.589103][ T5135] Bluetooth: hci1: command 0x0406 tx timeout
[  196.596458][ T5832] Bluetooth: hci2: command 0x0406 tx timeout
[  201.073698][ T6605] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0
[  201.176965][ T6611] IPVS: stopping backup sync thread 6605 ...
[  208.325354][ T6644] netlink: 'syz.4.168': attribute type 32 has an invalid length.
[  210.882177][ T6663] siw: device registration error -23
[  211.693958][ T6658] serio: Serial port ttyS3
[  211.903295][ T6665] overlayfs: missing 'lowerdir'
[  217.257112][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  217.268783][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  217.277328][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  217.286257][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  217.295508][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  217.506044][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  217.696309][ T6705] serio: Serial port ttyS3
[  219.843630][ T5832] Bluetooth: hci1: command tx timeout
[  219.920706][ T6715] vlan2: entered allmulticast mode
[  220.145363][ T6697] lo speed is unknown, defaulting to 1000
[  220.504653][ T5926] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.692832][ T6728] serio: Serial port ttyS3
[  221.774443][ T6728] overlayfs: missing 'lowerdir'
[  221.928060][ T5829] Bluetooth: hci1: command tx timeout
[  222.720466][ T5926] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.829561][ T5926] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.144862][ T5926] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.332665][ T5829] Bluetooth: hci1: command 0x040f tx timeout
[  224.373901][ T6697] chnl_net:caif_netlink_parms(): no params data found
[  226.871710][ T5829] Bluetooth: hci1: command 0x040f tx timeout
[  227.201796][ T6697] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.188514][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.200630][ T6697] bridge_slave_0: entered allmulticast mode
[  228.210610][ T6697] bridge_slave_0: entered promiscuous mode
[  228.228303][ T6697] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.245041][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.275262][ T6697] bridge_slave_1: entered allmulticast mode
[  228.302554][ T6697] bridge_slave_1: entered promiscuous mode
[  228.592475][ T6697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.026889][ T5829] Bluetooth: hci1: command 0x040f tx timeout
[  229.617908][ T5926] bridge_slave_1: left allmulticast mode
[  229.638868][ T5926] bridge_slave_1: left promiscuous mode
[  229.683564][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.766611][ T5926] bridge_slave_0: left allmulticast mode
[  229.772498][ T5926] bridge_slave_0: left promiscuous mode
[  229.800052][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.565926][ T6783] hub 2-0:1.0: USB hub found
[  230.576901][ T6783] hub 2-0:1.0: 1 port detected
[  231.092788][ T5829] Bluetooth: hci1: command 0x040f tx timeout
[  231.666565][ T6789] serio: Serial port ttyS3
[  232.431319][ T5832] Bluetooth: hci4: unexpected event for opcode 0x080b
[  232.883467][ T5926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.934421][ T5926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.969450][ T5926] bond0 (unregistering): Released all slaves
[  232.998249][ T6697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.160560][ T6800] serio: Serial port ttyS3
[  233.287833][ T6802] overlayfs: missing 'lowerdir'
[  236.499723][ T5829] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  236.509719][ T5829] Bluetooth: hci4: Injecting HCI hardware error event
[  236.531579][ T5829] Bluetooth: hci4: hardware error 0x00
[  238.177160][ T6697] team0: Port device team_slave_0 added
[  238.186057][ T6697] team0: Port device team_slave_1 added
[  238.880382][ T5940] ==================================================================
[  238.888683][ T5940] BUG: KASAN: slab-use-after-free in __mutex_lock+0x830/0x1010
[  238.896267][ T5940] Read of size 8 at addr ffff88805c3d5b20 by task kworker/1:5/5940
[  238.904163][ T5940] 
[  238.906507][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: kworker/1:5 Not tainted 6.14.0-rc6-syzkaller #0
[  238.906525][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  238.906536][ T5940] Workqueue: events l2cap_chan_timeout
[  238.906568][ T5940] Call Trace:
[  238.906575][ T5940]  <TASK>
[  238.906581][ T5940]  dump_stack_lvl+0x241/0x360
[  238.906600][ T5940]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.906615][ T5940]  ? __pfx__printk+0x10/0x10
[  238.906644][ T5940]  ? _printk+0xd5/0x120
[  238.906671][ T5940]  ? __virt_addr_valid+0x183/0x530
[  238.906701][ T5940]  ? __virt_addr_valid+0x183/0x530
[  238.906732][ T5940]  print_report+0x16e/0x5b0
[  238.906761][ T5940]  ? __virt_addr_valid+0x183/0x530
[  238.906789][ T5940]  ? __virt_addr_valid+0x183/0x530
[  238.906817][ T5940]  ? __virt_addr_valid+0x45f/0x530
[  238.906846][ T5940]  ? __phys_addr+0xba/0x170
[  238.906874][ T5940]  ? __mutex_lock+0x830/0x1010
[  238.906897][ T5940]  kasan_report+0x143/0x180
[  238.906922][ T5940]  ? __mutex_lock+0x830/0x1010
[  238.906948][ T5940]  __mutex_lock+0x830/0x1010
[  238.906972][ T5940]  ? __mutex_lock+0x602/0x1010
[  238.906997][ T5940]  ? l2cap_chan_timeout+0x63/0x360
[  238.907014][ T5940]  ? __pfx___mutex_lock+0x10/0x10
[  238.907037][ T5940]  ? __pfx_lock_acquire+0x10/0x10
[  238.907062][ T5940]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  238.907087][ T5940]  l2cap_chan_timeout+0x63/0x360
[  238.907105][ T5940]  ? process_scheduled_works+0x9c6/0x18e0
[  238.907124][ T5940]  process_scheduled_works+0xabe/0x18e0
[  238.907152][ T5940]  ? __pfx_process_scheduled_works+0x10/0x10
[  238.907174][ T5940]  ? assign_work+0x364/0x3d0
[  238.907194][ T5940]  worker_thread+0x870/0xd30
[  238.907216][ T5940]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  238.907238][ T5940]  ? __kthread_parkme+0x169/0x1d0
[  238.907260][ T5940]  ? __pfx_worker_thread+0x10/0x10
[  238.907279][ T5940]  kthread+0x7a9/0x920
[  238.907301][ T5940]  ? __pfx_kthread+0x10/0x10
[  238.907324][ T5940]  ? __pfx_worker_thread+0x10/0x10
[  238.907344][ T5940]  ? __pfx_kthread+0x10/0x10
[  238.907366][ T5940]  ? __pfx_kthread+0x10/0x10
[  238.907389][ T5940]  ? __pfx_kthread+0x10/0x10
[  238.907418][ T5940]  ? _raw_spin_unlock_irq+0x23/0x50
[  238.907438][ T5940]  ? lockdep_hardirqs_on+0x99/0x150
[  238.907459][ T5940]  ? __pfx_kthread+0x10/0x10
[  238.907482][ T5940]  ret_from_fork+0x4b/0x80
[  238.907502][ T5940]  ? __pfx_kthread+0x10/0x10
[  238.907525][ T5940]  ret_from_fork_asm+0x1a/0x30
[  238.907547][ T5940]  </TASK>
[  238.907553][ T5940] 
[  239.144751][ T5940] Allocated by task 5972:
[  239.149081][ T5940]  kasan_save_track+0x3f/0x80
[  239.153774][ T5940]  __kasan_kmalloc+0x98/0xb0
[  239.158390][ T5940]  __kmalloc_cache_noprof+0x243/0x390
[  239.163765][ T5940]  l2cap_conn_add+0xa9/0x8e0
[  239.168368][ T5940]  l2cap_chan_connect+0x61e/0xeb0
[  239.173412][ T5940]  lowpan_control_write+0x568/0x850
[  239.178626][ T5940]  full_proxy_write+0x17b/0x250
[  239.183481][ T5940]  vfs_write+0x29f/0xd10
[  239.187729][ T5940]  ksys_write+0x18f/0x2b0
[  239.192066][ T5940]  do_syscall_64+0xf3/0x230
[  239.196581][ T5940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.202483][ T5940] 
[  239.204807][ T5940] Freed by task 5829:
[  239.208781][ T5940]  kasan_save_track+0x3f/0x80
[  239.213488][ T5940]  kasan_save_free_info+0x40/0x50
[  239.218515][ T5940]  __kasan_slab_free+0x59/0x70
[  239.223289][ T5940]  kfree+0x196/0x430
[  239.227184][ T5940]  hci_conn_hash_flush+0x1be/0x350
[  239.232299][ T5940]  hci_dev_close_sync+0xa8b/0x1260
[  239.237420][ T5940]  hci_error_reset+0x12c/0x3f0
[  239.242189][ T5940]  process_scheduled_works+0xabe/0x18e0
[  239.247742][ T5940]  worker_thread+0x870/0xd30
[  239.252342][ T5940]  kthread+0x7a9/0x920
[  239.256444][ T5940]  ret_from_fork+0x4b/0x80
[  239.260869][ T5940]  ret_from_fork_asm+0x1a/0x30
[  239.265648][ T5940] 
[  239.267979][ T5940] The buggy address belongs to the object at ffff88805c3d5800
[  239.267979][ T5940]  which belongs to the cache kmalloc-1k of size 1024
[  239.282038][ T5940] The buggy address is located 800 bytes inside of
[  239.282038][ T5940]  freed 1024-byte region [ffff88805c3d5800, ffff88805c3d5c00)
[  239.295928][ T5940] 
[  239.298258][ T5940] The buggy address belongs to the physical page:
[  239.304676][ T5940] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c3d0
[  239.313444][ T5940] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  239.321944][ T5940] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  239.329923][ T5940] page_type: f5(slab)
[  239.333911][ T5940] raw: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001
[  239.342495][ T5940] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  239.351084][ T5940] head: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001
[  239.359763][ T5940] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  239.368487][ T5940] head: 00fff00000000003 ffffea000170f401 ffffffffffffffff 0000000000000000
[  239.377183][ T5940] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  239.385861][ T5940] page dumped because: kasan: bad access detected
[  239.392283][ T5940] page_owner tracks the page as allocated
[  239.398000][ T5940] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12, tgid 12 (kworker/u8:0), ts 90897503656, free_ts 25811414275
[  239.417029][ T5940]  post_alloc_hook+0x1f4/0x240
[  239.421804][ T5940]  get_page_from_freelist+0x3651/0x37a0
[  239.427367][ T5940]  __alloc_frozen_pages_noprof+0x292/0x710
[  239.433187][ T5940]  alloc_pages_mpol+0x311/0x660
[  239.438062][ T5940]  allocate_slab+0x8f/0x3a0
[  239.442574][ T5940]  ___slab_alloc+0xc27/0x14a0
[  239.447260][ T5940]  __slab_alloc+0x58/0xa0
[  239.451595][ T5940]  __kmalloc_noprof+0x2e6/0x4c0
[  239.456450][ T5940]  ieee802_11_parse_elems_full+0x166/0x2ef0
[  239.462356][ T5940]  ieee80211_inform_bss+0x15f/0x10d0
[  239.467650][ T5940]  cfg80211_inform_single_bss_data+0xf63/0x1ee0
[  239.473905][ T5940]  cfg80211_inform_bss_data+0x3c3/0x5820
[  239.479552][ T5940]  cfg80211_inform_bss_frame_data+0x3bb/0x720
[  239.485627][ T5940]  ieee80211_bss_info_update+0x8a7/0xbc0
[  239.491268][ T5940]  ieee80211_ibss_rx_queued_mgmt+0x1993/0x2e00
[  239.497440][ T5940]  ieee80211_iface_work+0x8dc/0xf90
[  239.502648][ T5940] page last free pid 1 tgid 1 stack trace:
[  239.508451][ T5940]  free_frozen_pages+0xe04/0x10e0
[  239.513479][ T5940]  free_contig_range+0x14c/0x430
[  239.518426][ T5940]  destroy_args+0x94/0x4b0
[  239.522843][ T5940]  debug_vm_pgtable+0x551/0x590
[  239.527702][ T5940]  do_one_initcall+0x248/0x930
[  239.532470][ T5940]  do_initcall_level+0x157/0x210
[  239.537409][ T5940]  do_initcalls+0x71/0xd0
[  239.541738][ T5940]  kernel_init_freeable+0x435/0x5d0
[  239.546937][ T5940]  kernel_init+0x1d/0x2b0
[  239.551359][ T5940]  ret_from_fork+0x4b/0x80
[  239.555781][ T5940]  ret_from_fork_asm+0x1a/0x30
[  239.560646][ T5940] 
[  239.562976][ T5940] Memory state around the buggy address:
[  239.568616][ T5940]  ffff88805c3d5a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  239.576681][ T5940]  ffff88805c3d5a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  239.584753][ T5940] >ffff88805c3d5b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  239.592822][ T5940]                                ^
[  239.597929][ T5940]  ffff88805c3d5b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  239.605990][ T5940]  ffff88805c3d5c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  239.614047][ T5940] ==================================================================
[  239.622902][ T5940] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  239.630113][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: kworker/1:5 Not tainted 6.14.0-rc6-syzkaller #0
[  239.639140][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  239.649297][ T5940] Workqueue: events l2cap_chan_timeout
[  239.654779][ T5940] Call Trace:
[  239.658061][ T5940]  <TASK>
[  239.661001][ T5940]  dump_stack_lvl+0x241/0x360
[  239.665683][ T5940]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.670882][ T5940]  ? __pfx__printk+0x10/0x10
[  239.675487][ T5940]  ? lock_release+0xbf/0xa30
[  239.680089][ T5940]  ? vscnprintf+0x5d/0x90
[  239.684427][ T5940]  panic+0x349/0x880
[  239.688347][ T5940]  ? check_panic_on_warn+0x21/0xb0
[  239.693474][ T5940]  ? __pfx_panic+0x10/0x10
[  239.697924][ T5940]  ? mark_lock+0x9a/0x360
[  239.702370][ T5940]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  239.708291][ T5940]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  239.714213][ T5940]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  239.720562][ T5940]  ? print_report+0x519/0x5b0
[  239.725256][ T5940]  check_panic_on_warn+0x86/0xb0
[  239.730221][ T5940]  ? __mutex_lock+0x830/0x1010
[  239.735007][ T5940]  end_report+0x77/0x160
[  239.739272][ T5940]  kasan_report+0x154/0x180
[  239.743810][ T5940]  ? __mutex_lock+0x830/0x1010
[  239.748596][ T5940]  __mutex_lock+0x830/0x1010
[  239.753206][ T5940]  ? __mutex_lock+0x602/0x1010
[  239.757992][ T5940]  ? l2cap_chan_timeout+0x63/0x360
[  239.763126][ T5940]  ? __pfx___mutex_lock+0x10/0x10
[  239.768251][ T5940]  ? __pfx_lock_acquire+0x10/0x10
[  239.773305][ T5940]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  239.779656][ T5940]  l2cap_chan_timeout+0x63/0x360
[  239.784613][ T5940]  ? process_scheduled_works+0x9c6/0x18e0
[  239.790342][ T5940]  process_scheduled_works+0xabe/0x18e0
[  239.795909][ T5940]  ? __pfx_process_scheduled_works+0x10/0x10
[  239.801902][ T5940]  ? assign_work+0x364/0x3d0
[  239.806500][ T5940]  worker_thread+0x870/0xd30
[  239.811101][ T5940]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  239.817005][ T5940]  ? __kthread_parkme+0x169/0x1d0
[  239.822040][ T5940]  ? __pfx_worker_thread+0x10/0x10
[  239.827174][ T5940]  kthread+0x7a9/0x920
[  239.831285][ T5940]  ? __pfx_kthread+0x10/0x10
[  239.835896][ T5940]  ? __pfx_worker_thread+0x10/0x10
[  239.841031][ T5940]  ? __pfx_kthread+0x10/0x10
[  239.845638][ T5940]  ? __pfx_kthread+0x10/0x10
[  239.850262][ T5940]  ? __pfx_kthread+0x10/0x10
[  239.854875][ T5940]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.860086][ T5940]  ? lockdep_hardirqs_on+0x99/0x150
[  239.865304][ T5940]  ? __pfx_kthread+0x10/0x10
[  239.869922][ T5940]  ret_from_fork+0x4b/0x80
[  239.874362][ T5940]  ? __pfx_kthread+0x10/0x10
[  239.878977][ T5940]  ret_from_fork_asm+0x1a/0x30
[  239.883761][ T5940]  </TASK>
[  239.887075][ T5940] Kernel Offset: disabled
[  239.891416][ T5940] Rebooting in 86400 seconds..