last executing test programs:

16m33.423594139s ago: executing program 3 (id=62):
socket$nl_route(0x10, 0x3, 0x0)
eventfd2(0x9, 0x800)
socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
pipe2$9p(&(0x7f0000001900), 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
dup(r0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
pipe2$9p(&(0x7f00000000c0), 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

16m33.105460511s ago: executing program 3 (id=64):
socket$netlink(0x10, 0x3, 0x10)
r0 = getpgrp(0x0)
syz_pidfd_open(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r8, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

16m31.376627665s ago: executing program 3 (id=69):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vim2m(0x0, 0x47b, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045730, &(0x7f0000001080))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
lseek(r3, 0x851, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000040))
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0)

16m27.238001865s ago: executing program 3 (id=72):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb, 0x0, &(0x7f0000000300)="0101000071a78326c799db", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB])
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = accept(r6, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)

16m25.272589464s ago: executing program 3 (id=76):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
gettid()
chmod(&(0x7f0000000000)='./file0\x00', 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
creat(&(0x7f0000000200)='./file0\x00', 0x90)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

16m18.808581731s ago: executing program 3 (id=85):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(0xffffffffffffffff, 0x8)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4000050, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'erspan0\x00', 0x0})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x10, 0x20, 0xc90, 0x81, {{0x5, 0x4, 0x3, 0x21, 0x14, 0x64, 0x0, 0x45, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40060}, 0x400c044)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

16m2.576390947s ago: executing program 32 (id=85):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(0xffffffffffffffff, 0x8)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4000050, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'erspan0\x00', 0x0})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x10, 0x20, 0xc90, 0x81, {{0x5, 0x4, 0x3, 0x21, 0x14, 0x64, 0x0, 0x45, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40060}, 0x400c044)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

13m44.08348674s ago: executing program 4 (id=273):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4)

13m42.601070154s ago: executing program 4 (id=274):
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e4b0422, 0x3, 0xffff, 0x5, 0x9, 0x0, 0x0, 0x80, 0x80000001}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x0, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e)
connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3ff, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'BRTI'}, 0x0, 0x1, {}, 0xc93})
writev(r6, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1)
r8 = dup3(r1, r6, 0x6700000000000000)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r8)

13m37.289802041s ago: executing program 4 (id=280):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
getpgid(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r3)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
pipe(0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc)
r5 = accept4(r4, 0x0, 0x0, 0x800)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}], 0x1}], 0x1, 0x40800)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff040, 0x1200000000000000)

13m32.959271991s ago: executing program 4 (id=284):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_open_dev$video(0x0, 0x485, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(r1, &(0x7f0000000040)='net/raw6\x00')
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000380)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#%\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce5+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8<dR}\x8e\b\x16\x8c\xa6\x01\x11\x97S\x99k\x1e\x03\x8e\xea\v}+\".\xda,\xfe\xb7\xbf\x01T\x99\xbdF\xd4\x925[\xd1\xeb\xdf\x98\xfa\xb0\x93\xc3>\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ<pCoa\xf2\xd1\x96\x8f\xf3>\xa1\xed', 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000680)=""/4096, 0x1000)
getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5, 0x0, 0x4}, 0x18)
memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a\x17\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bp\'\xd4\xbc', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))

13m30.455136393s ago: executing program 4 (id=287):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000300)={0x0})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r5 = fanotify_init(0xf00, 0x0)
fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'})
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x4040000}, 0x0)
socket(0x10, 0x3, 0x0)

13m27.788578596s ago: executing program 4 (id=291):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0xe00, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
get_robust_list(0x0, &(0x7f0000000400)=&(0x7f00000003c0), &(0x7f0000000540)=0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)

13m11.195736622s ago: executing program 33 (id=291):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0xe00, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
get_robust_list(0x0, &(0x7f0000000400)=&(0x7f00000003c0), &(0x7f0000000540)=0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)

12m32.156552481s ago: executing program 0 (id=342):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e24, 0x3, @local, 0x6}, 0x1c)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_int(r3, 0x1, 0x13, 0x0, &(0x7f0000000080))
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, r2, 0x0, <r4=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r2, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x1, 0x1000})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000017a6a5c8a070aaa32ce599dc5143d163801db2facc8eb5ee66ec344f1179989bf3ad6fe868fe0e1ce2d157996cabc594e0eaf47cc5"], 0x24, 0x0)
mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000000010108000000000000000002000000240001801400018008000100e000000108000200e00000010c000280"], 0x54}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000300))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
userfaultfd(0x801)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

12m31.70073846s ago: executing program 0 (id=345):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, r0})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fremovexattr(r0, &(0x7f0000000400)=@random={'security.', ':\'\x00'})
capset(&(0x7f0000000000)={0x20080522}, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6(0xa, 0x2, 0x0)
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000040)={{r5}, 0x401, 0x2, 0x7})
socket$phonet_pipe(0x23, 0x5, 0x2)
setgroups(0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)

12m29.369125588s ago: executing program 0 (id=347):
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioprio_get$uid(0x3, 0xffffffffffffffff)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)

12m26.277879587s ago: executing program 0 (id=350):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x2000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)

12m21.78481936s ago: executing program 0 (id=355):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c)

12m19.967661036s ago: executing program 0 (id=358):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000540))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r9, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x400, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

12m4.557417028s ago: executing program 34 (id=358):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000540))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r9, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x400, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

9m31.749057077s ago: executing program 1 (id=496):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4004004)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f00000000c0))
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_clone(0x99a1cfb1edd42446, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0)
lstat(&(0x7f0000000400)='./cgroup\x00', 0x0)
stat(&(0x7f0000000580)='./cgroup\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
lstat(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x0, 0x0, 0x0, r4, r5, 0x13, 0x6}, 0x0, 0x0, 0x4, 0x9, 0x0, 0x1, 0xeb4f, 0xff, 0x4, 0x8, r2, r2})
r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2)
capset(0x0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8)
setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000100), 0x4)
getsockopt$inet6_tcp_buf(r8, 0x6, 0x1a, 0x0, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x3131354f, [0x400, 0x8000000], [0x8200, 0x1]}}})
ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x2, {}, {0x0, 0x8, 0xfd, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0xfffffffd})
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r9, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48)

9m27.23477372s ago: executing program 1 (id=491):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
shmctl$SHM_UNLOCK(0x0, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
fcntl$getownex(r3, 0x10, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0)
r7 = fsopen(&(0x7f0000000500)='exfat\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000c0000000001a0000f7"], 0x48)

9m22.393986846s ago: executing program 1 (id=498):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7, 0x0, 0x80000}, 0x18)
kexec_load(0x0, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
memfd_secret(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)

9m18.631820158s ago: executing program 1 (id=500):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000036d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000240), 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
shutdown(r6, 0x1)

9m14.644202688s ago: executing program 5 (id=506):
userfaultfd(0x80801)
r0 = fanotify_init(0x200, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x71, 0x40000009, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x161, 0x40000867, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00')
preadv(r3, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
close(r4)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
r7 = syz_io_uring_setup(0x4fe8, &(0x7f00000001c0)={0x0, 0xce0a, 0x10000, 0x3, 0x34f, 0x0, r6}, &(0x7f0000000140)=<r8=>0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3)
r9 = userfaultfd(0x801)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1, 0x900})
r10 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r10, 0x0, 0x0, 0x4840)
syz_io_uring_submit(r8, 0x0, 0x0)
io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000680))
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x3b6, 0x0, 0x0)

9m12.749255176s ago: executing program 1 (id=508):
symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00')
r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0'}, 0xb)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024})
r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}})
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}})
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18)
prctl$PR_SET_NAME(0xf, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
execveat(r0, 0x0, 0x0, 0x0, 0x1000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r5}, 0x18)
mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0)
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14)

9m9.398960389s ago: executing program 1 (id=513):
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x897)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff}, 0x2}}, 0x20)
r3 = gettid()
waitid(0x2, r3, 0xfffffffffffffffd, 0x8, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {0x0, r2, 0x2}}, 0x18)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r5 = fsopen(&(0x7f0000000440)='nfsd\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getrlimit(0x4, &(0x7f0000000280))
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0)

9m3.239023803s ago: executing program 5 (id=519):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x10)
sched_setparam(r0, &(0x7f0000000040)=0x1)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0)
unlink(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10001})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r6 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
r7 = syz_open_dev$cec(0x0, 0x0, 0xc0b02)
ioctl$CEC_TRANSMIT(r7, 0xc0386105, 0x0)
ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29})

9m1.410192732s ago: executing program 5 (id=520):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000"], 0x8c}}, 0x0)
listen(r4, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r10, 0x0, 0x0, 0x43, &(0x7f0000000240)="eeaa327af1976a5790f526f61a108cba7e979ec9a0d3c6c46b9a6880af1cc8658705c1b5901e989b7daf7e79ba82ffd3d334ddecdefc605268c876ea9ada98dd460709"})
recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])

8m59.156813197s ago: executing program 5 (id=523):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00'}, 0x18)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10)
socket$inet(0x2b, 0x801, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40046f41, &(0x7f0000000440)=0x1f)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
fsopen(0x0, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000000c0)=0x13)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15)
r7 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r7, 0x0, 0x0)

8m56.611132634s ago: executing program 5 (id=527):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioprio_get$pid(0x2, r0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCGETD(r3, 0x5424, 0x0)
poll(0x0, 0x0, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = syz_open_dev$loop(0x0, 0x8, 0x503842)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4, 0x8f, 0x0, 0x5, 0x14, 0x19, "8f2c499f8b47577c709d4e981a781dcf794fa9680393200cf722ce3487246b738d01f205700d55ac7de06057421ce2ce2e3a8c09bb7331939de0d0dba2aeec2f", "0a9a872d4da6a26a329142c8756a56bccefc5ee04e46167477651115a2c0b8a15f26fac4ad01e5151395d280f632111cb4660775fd58e1c17fcac90433d73764", "979e2a2e3cb1b996ffd50ceb2121405e97f2443e85c5925c452ea4b8122a36d3", [0x3, 0x400]})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r6, 0x2}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8)

8m49.020653456s ago: executing program 35 (id=513):
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x897)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff}, 0x2}}, 0x20)
r3 = gettid()
waitid(0x2, r3, 0xfffffffffffffffd, 0x8, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {0x0, r2, 0x2}}, 0x18)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r5 = fsopen(&(0x7f0000000440)='nfsd\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getrlimit(0x4, &(0x7f0000000280))
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0)

8m48.947845061s ago: executing program 5 (id=532):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$cont(0x20, r1, 0x9, 0x3)
ptrace$getregs(0xc, r1, 0x21aa, &(0x7f0000000000)=""/56)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x9, 0x81, 0xa00, 0xbe, 0x2, r1})
open$dir(&(0x7f0000000180)='./file0\x00', 0x20200, 0x81)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x48081, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x9}, 0x94)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4f27, 0x2, 0x10000, 0x4, 0x4, 0x0, 0x8, 0x7, 0xa, 0x0, 0x2, 0x1, 0xff6b, 0x800, 0xfffffffe, 0xb4c, 0xffffffff, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x65c, 0xfffffffd, 0xfffffff8]})
pwrite64(r4, 0x0, 0x0, 0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x1}, 0x12)
socket$kcm(0xa, 0x5, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4)
syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x800100fd}, &(0x7f0000000180), &(0x7f0000000100))

8m33.465127163s ago: executing program 36 (id=532):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$cont(0x20, r1, 0x9, 0x3)
ptrace$getregs(0xc, r1, 0x21aa, &(0x7f0000000000)=""/56)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x9, 0x81, 0xa00, 0xbe, 0x2, r1})
open$dir(&(0x7f0000000180)='./file0\x00', 0x20200, 0x81)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x48081, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x9}, 0x94)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4f27, 0x2, 0x10000, 0x4, 0x4, 0x0, 0x8, 0x7, 0xa, 0x0, 0x2, 0x1, 0xff6b, 0x800, 0xfffffffe, 0xb4c, 0xffffffff, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x65c, 0xfffffffd, 0xfffffff8]})
pwrite64(r4, 0x0, 0x0, 0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x1}, 0x12)
socket$kcm(0xa, 0x5, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4)
syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x800100fd}, &(0x7f0000000180), &(0x7f0000000100))

6m54.549803315s ago: executing program 6 (id=655):
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, 0x0, 0x0)
ioctl$PIO_SCRNMAP(r6, 0x4b52, &(0x7f0000000000))
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000010280)={0x0, 0x9, 0x0, 0x5}, 0x10)
ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3})
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="02aaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000000000000000000000aa2c0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0)
ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000100)=[0xffffffff, 0x19f, 0x48, 0x3, 0x68b, 0xe016, 0xfffffffb, 0x5])
syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)

6m51.108226685s ago: executing program 6 (id=658):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}})
fcntl$setlease(r4, 0x400, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x480, 0x0)

6m47.588897067s ago: executing program 6 (id=660):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setattr(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = dup2(r0, r1)
bind$l2tp6(r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0)
write$binfmt_misc(r4, &(0x7f0000001280), 0x6)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x45]}}]})
statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/144)
openat$tun(0xffffffffffffff9c, 0x0, 0x20a00, 0x0)
rt_sigaction(0x19, &(0x7f0000000400)={&(0x7f0000000000)="676466f087bc76ded361b62e26c07fff00c4a3a1cea37b07f38af90000d3a41039000000f344aa643e3ef08504dc8319b4fe00c4011d1da1956ce08f080895dd638f4818ee16e6c442e13ae4470f69a342cb0000", 0x9c000002, 0x0}, 0x0, 0x8, &(0x7f0000000440))
fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7)
prlimit64(0x0, 0xa, 0x0, &(0x7f0000000180))
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="040600000000041b00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6m45.109786466s ago: executing program 6 (id=664):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
chmod(&(0x7f0000000000)='./file0\x00', 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(0x0, 0x90)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
fsopen(&(0x7f0000000000)='bpf\x00', 0x0)

6m42.871302768s ago: executing program 6 (id=666):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_clone3(0x0, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6(0xa, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES16=r2], 0x0, 0x40}, 0x28)
mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
chroot(&(0x7f0000000080)='./file0/file0\x00')

6m38.419099072s ago: executing program 6 (id=668):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000240)={{0x32, @loopback, 0x4e22, 0x2, 'dh\x00', 0x20, 0xd049, 0x55}, {@broadcast, 0x4e23, 0x2004, 0x8, 0x8, 0x374}}, 0x44)
sched_rr_get_interval(r2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
r7 = inotify_init1(0x0)
inotify_add_watch(r7, &(0x7f0000000080)='./file1\x00', 0x2000757)
ftruncate(r6, 0x6000000)
copy_file_range(r6, 0x0, r6, &(0x7f00000004c0)=0x100, 0x9, 0x0)
pipe(&(0x7f0000000d00))
r8 = getpgrp(0x0)
r9 = syz_pidfd_open(r8, 0x0)
pidfd_send_signal(r9, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc6}, 0x0)
close(0xffffffffffffffff)
ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x121)

6m21.82708917s ago: executing program 37 (id=668):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000240)={{0x32, @loopback, 0x4e22, 0x2, 'dh\x00', 0x20, 0xd049, 0x55}, {@broadcast, 0x4e23, 0x2004, 0x8, 0x8, 0x374}}, 0x44)
sched_rr_get_interval(r2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
r7 = inotify_init1(0x0)
inotify_add_watch(r7, &(0x7f0000000080)='./file1\x00', 0x2000757)
ftruncate(r6, 0x6000000)
copy_file_range(r6, 0x0, r6, &(0x7f00000004c0)=0x100, 0x9, 0x0)
pipe(&(0x7f0000000d00))
r8 = getpgrp(0x0)
r9 = syz_pidfd_open(r8, 0x0)
pidfd_send_signal(r9, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc6}, 0x0)
close(0xffffffffffffffff)
ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x121)

3m37.87547025s ago: executing program 7 (id=857):
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xc0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000060000000405000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="80000000000000bfd6000000000000e4000000001000000000000000"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socket$xdp(0x2c, 0x3, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000380)={0x6, 0xffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB])
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400061400060069703667726530000000000000000000080007003a090000140002"], 0x58}, 0x1, 0xffffffff00000003}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x2, 0x0, 0x1000001000, 0x4d}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0x283507e9, 0x80000006}, 0x0, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
eventfd(0x3)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf)
close_range(r2, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)

3m36.332390909s ago: executing program 7 (id=853):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)

3m36.168687795s ago: executing program 7 (id=854):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000500)="665831f2bb", 0x5}], 0x1}}, {{&(0x7f0000001c40)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002c80)=[{&(0x7f0000001c80)="b9", 0x1}], 0x1, &(0x7f0000003140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x18}}], 0x2, 0x20000000)

3m36.042143713s ago: executing program 7 (id=855):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3m34.735438829s ago: executing program 7 (id=856):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
chmod(&(0x7f0000000000)='./file0\x00', 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f0000000200)='./file0\x00', 0x90)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
fsopen(&(0x7f0000000000)='bpf\x00', 0x0)

3m33.058266059s ago: executing program 7 (id=859):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0})

3m17.861858389s ago: executing program 38 (id=859):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0})

29.396726518s ago: executing program 2 (id=1044):
unshare(0x20000400)
r0 = memfd_create(&(0x7f00000001c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9bq^\xb3\xda\xeaTX2\x86\x1cP\xfcX\xc1y\x12\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W', 0x3)
fallocate(r0, 0x2, 0x2000604, 0x3)

29.358138155s ago: executing program 2 (id=1045):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x6, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}], 0x1, 0x0)

29.133329528s ago: executing program 2 (id=1046):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="10", 0x5e0, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x6, 0x6, @broadcast}, 0x14)

28.978948555s ago: executing program 2 (id=1047):
rseq(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
pread64(r0, 0x0, 0x0, 0xce2)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2)
futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$kcm(0x29, 0x5, 0x0)
userfaultfd(0x801)
openat$tun(0xffffffffffffff9c, 0x0, 0x4e681, 0x0)
r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x8}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r5, 0x0, 0x0, 0x1}}, 0x20)
socket$unix(0x1, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0)
io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, 0x0, 0x1)

25.578390151s ago: executing program 2 (id=1048):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)={0x20, 0x15, 0xb, {0xb, 0xe, "af7d6d280f34844e9a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

22.896954431s ago: executing program 2 (id=1052):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)

19.549533664s ago: executing program 8 (id=1059):
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0xe524, 0xa9, 0x2, 0x6}, {0x88, 0x7, 0x1, 0x8}, {0xfffd, 0x4, 0x6, 0x8}]}, 0x10)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x3ffffddc, &(0x7f0000000180), 0x9, 0x5000004})

19.488360086s ago: executing program 8 (id=1060):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
chmod(&(0x7f0000000000)='./file0\x00', 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f0000000200)='./file0\x00', 0x90)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
fsopen(&(0x7f0000000000)='bpf\x00', 0x0)

18.251451358s ago: executing program 8 (id=1061):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)
ioctl$TCXONC(r0, 0x540a, 0x0)

17.486396977s ago: executing program 8 (id=1062):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0)

16.940895938s ago: executing program 8 (id=1063):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
chmod(&(0x7f0000000000)='./file0\x00', 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
creat(&(0x7f0000000200)='./file0\x00', 0x90)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
fsopen(&(0x7f0000000000)='bpf\x00', 0x0)

15.446816242s ago: executing program 8 (id=1064):
rseq(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
pread64(r0, 0x0, 0x0, 0xce2)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2)
futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$kcm(0x29, 0x5, 0x0)
userfaultfd(0x801)
openat$tun(0xffffffffffffff9c, 0x0, 0x4e681, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r4, 0x8}}, 0x10)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4, 0xdf}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r4, 0x0, 0x0, 0x1}}, 0x20)
socket$unix(0x1, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r5 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0)
io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, 0x0, 0x1)

7.024891637s ago: executing program 39 (id=1052):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)

0s ago: executing program 40 (id=1064):
rseq(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
pread64(r0, 0x0, 0x0, 0xce2)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2)
futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$kcm(0x29, 0x5, 0x0)
userfaultfd(0x801)
openat$tun(0xffffffffffffff9c, 0x0, 0x4e681, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r4, 0x8}}, 0x10)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4, 0xdf}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r4, 0x0, 0x0, 0x1}}, 0x20)
socket$unix(0x1, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r5 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0)
io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, 0x0, 0x1)

kernel console output (not intermixed with test programs):

2][ T7159] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  739.912546][ T7159] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.996713][ T7159] usb 8-1: config 0 descriptor??
[  741.670778][ T7159] usbhid 8-1:0.0: can't add hid device: -71
[  741.670896][ T7159] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  741.724626][ T7159] usb 8-1: USB disconnect, device number 3
[  742.519640][    C1] vkms_vblank_simulate: vblank timer overrun
[  742.696834][    C1] vkms_vblank_simulate: vblank timer overrun
[  743.049349][    C1] vkms_vblank_simulate: vblank timer overrun
[  743.266795][    C1] vkms_vblank_simulate: vblank timer overrun
[  743.484727][    C1] vkms_vblank_simulate: vblank timer overrun
[  744.243897][    C1] vkms_vblank_simulate: vblank timer overrun
[  744.941242][    C1] vkms_vblank_simulate: vblank timer overrun
[  745.415354][    C1] vkms_vblank_simulate: vblank timer overrun
[  745.943622][    C1] vkms_vblank_simulate: vblank timer overrun
[  746.037423][    C1] vkms_vblank_simulate: vblank timer overrun
[  747.036838][    C1] vkms_vblank_simulate: vblank timer overrun
[  747.870854][    C1] vkms_vblank_simulate: vblank timer overrun
[  748.553351][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  748.553433][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  750.604001][ T9505] Bluetooth: MGMT ver 1.23
[  758.236593][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  758.260482][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  758.263478][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  758.364037][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  758.366346][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  759.555754][ T1010] hsr_slave_0: left promiscuous mode
[  759.742360][ T1010] hsr_slave_1: left promiscuous mode
[  759.744248][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  759.744275][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_0
[  760.055800][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  760.055831][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_1
[  761.083277][ T5849] Bluetooth: hci2: command tx timeout
[  761.354864][ T1010] veth1_macvtap: left promiscuous mode
[  761.374534][ T1010] veth0_macvtap: left promiscuous mode
[  761.374831][ T1010] veth1_vlan: left promiscuous mode
[  761.375023][ T1010] veth0_vlan: left promiscuous mode
[  763.136618][ T5849] Bluetooth: hci2: command tx timeout
[  764.019002][ T9568] binder: BC_ATTEMPT_ACQUIRE not supported
[  764.019067][ T9568] binder: 9560:9568 ioctl c0306201 2000000001c0 returned -22
[  764.064286][ T9568] delete_channel: no stack
[  765.215878][ T5849] Bluetooth: hci2: command tx timeout
[  765.997330][ T9577] netlink: 'syz.7.675': attribute type 3 has an invalid length.
[  766.076445][ T9578] fuse: Bad value for 'fd'
[  766.222427][ T9578] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  767.299858][   T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  767.325204][   T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  767.347160][   T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  767.350093][   T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  767.350852][   T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  767.464550][   T59] Bluetooth: hci2: command tx timeout
[  768.913620][ T9587] evm: overlay not supported
[  769.454665][   T59] Bluetooth: hci0: command tx timeout
[  770.653863][ T9602] syz.2.679 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  771.534600][   T59] Bluetooth: hci0: command tx timeout
[  774.137523][   T59] Bluetooth: hci0: command tx timeout
[  776.134627][   T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  776.174598][   T59] Bluetooth: hci0: command tx timeout
[  776.353984][   T45] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  776.354019][   T45] usb 3-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  776.354032][   T45] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  776.354057][   T45] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  776.354077][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  776.425907][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  776.458024][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  776.461900][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  776.466413][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  776.469412][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  777.130544][   T45] ath6kl: Failed to submit usb control message: -71
[  777.130589][   T45] ath6kl: unable to send the bmi data to the device: -71
[  777.130602][   T45] ath6kl: Unable to send get target info: -71
[  777.614748][   T45] ath6kl: Failed to init ath6kl core: -71
[  777.615319][   T45] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71
[  777.619939][   T45] usb 3-1: USB disconnect, device number 3
[  784.096602][ T5849] Bluetooth: hci5: command tx timeout
[  784.729049][ T9652] netlink: 780 bytes leftover after parsing attributes in process `syz.2.690'.
[  786.215509][   T59] Bluetooth: hci5: command tx timeout
[  788.352022][   T59] Bluetooth: hci5: command tx timeout
[  788.576209][   T45] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  788.607595][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[  788.889952][    C0] vkms_vblank_simulate: vblank timer overrun
[  788.958583][    C0] vkms_vblank_simulate: vblank timer overrun
[  789.144806][   T45] usb 3-1: device descriptor read/64, error -32
[  789.147768][ T1010] team0 (unregistering): Port device team_slave_1 removed
[  789.384495][   T45] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  789.424978][ T1010] team0 (unregistering): Port device team_slave_0 removed
[  789.446029][ T7159] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  789.549566][   T45] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  789.549591][   T45] usb 3-1: config 0 has no interface number 0
[  789.549634][   T45] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  789.549654][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.563619][   T45] usb 3-1: config 0 descriptor??
[  789.605960][   T45] usb 3-1: selecting invalid altsetting 1
[  789.606862][   T45] dvb_ttusb_budget: ttusb_init_controller: error
[  789.610551][   T45] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  789.636535][ T7159] usb 8-1: Using ep0 maxpacket: 16
[  789.648509][ T7159] usb 8-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  789.648539][ T7159] usb 8-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[  789.648560][ T7159] usb 8-1: Product: syz
[  789.648575][ T7159] usb 8-1: Manufacturer: syz
[  789.648590][ T7159] usb 8-1: SerialNumber: syz
[  789.666096][ T7159] usb 8-1: config 0 descriptor??
[  789.714788][ T7159] ums-onetouch 8-1:0.0: USB Mass Storage device detected
[  789.907305][   T45] DVB: Unable to find symbol cx22700_attach()
[  790.204137][   T45] DVB: Unable to find symbol tda10046_attach()
[  790.204176][   T45] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  790.266511][   T45] usb 3-1: USB disconnect, device number 5
[  790.418431][   T59] Bluetooth: hci5: command tx timeout
[  790.589906][ T7159] usb 8-1: USB disconnect, device number 4
[  790.831040][    C0] vkms_vblank_simulate: vblank timer overrun
[  791.054084][ T9688] Bluetooth: MGMT ver 1.23
[  791.605482][    C0] vkms_vblank_simulate: vblank timer overrun
[  791.877834][ T9692] netlink: 20 bytes leftover after parsing attributes in process `syz.7.699'.
[  792.307069][    C0] vkms_vblank_simulate: vblank timer overrun
[  793.144731][   T59] Bluetooth: hci0: command tx timeout
[  793.952193][    C0] vkms_vblank_simulate: vblank timer overrun
[  794.441003][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.699'.
[  794.908562][    C0] vkms_vblank_simulate: vblank timer overrun
[  804.124672][ T9758] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  805.688216][ T9764] program syz.2.714 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  807.678076][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.7.715'.
[  807.678098][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.7.715'.
[  809.476131][ T9781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  809.856420][ T9789] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  811.950378][   T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  811.979152][   T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  811.982873][   T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  812.001466][   T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  812.008942][   T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  812.303810][ T1010] IPVS: stop unused estimator thread 0...
[  814.040064][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  814.040128][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  814.134956][ T5849] Bluetooth: hci7: command tx timeout
[  816.091049][ T9836] program syz.2.723 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  816.095575][ T9836] program syz.2.723 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  816.095840][ T9836] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  816.845316][ T5849] Bluetooth: hci7: command tx timeout
[  816.845353][ T5849] Bluetooth: hci1: command 0x0406 tx timeout
[  820.048502][   T59] Bluetooth: hci7: command tx timeout
[  822.110012][   T59] Bluetooth: hci7: command tx timeout
[  824.799161][ T5857] Bluetooth: hci6: command 0x0406 tx timeout
[  826.838902][ T1529] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  826.898463][ T9880] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  827.535398][   T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  827.539440][   T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  827.543160][   T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  827.566054][   T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  827.566808][   T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  829.283486][ T9896] CUSE: unknown device info "�KJéH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,�°
ð<Ö_e¤FÀÆ"
[  829.283510][ T9896] CUSE: unknown device info "3�ÜŸ•,²¥Ì˜õ"
[  829.283523][ T9896] CUSE: unknown device info "Jô©Ð2SZûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q	´ƒ
[  829.283523][ T9896] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR�É�Q÷®(hÒ�j	pøVdY0¨Æ|M?2JÿúIšvö^
RÎ@´å"
[  829.283543][ T9896] CUSE: unknown device info "!ToÛ}Ý�&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E•gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô"
[  829.283558][ T9896] CUSE: DEVNAME unspecified
[  829.381860][   T37] audit: type=1326 audit(1757944477.733:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.2.736" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a4de0eba9 code=0x0
[  829.738553][ T1529] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  830.494422][ T9901] ptrace attach of "./syz-executor exec"[5856] was attempted by "                                                                ú“\x0c¬¹H;¤'ýëãSde/È�|¥zPüÚиWåÌ\x0b”PŠ<ÇI7ô{‚ŸûWr•×¢Ó‡am�L5Ûï{ô„Þ¶-Ú¨ÜøžØ¸­…›¼»E“fŽYSõ7£?šVê½sˆëŒ\x0b†MÈüÚáÐ÷Æ`ÖÓðg‰ï°Ø±/â—’ýäUéµCŽÎ�öOGËDn›û\x07Âæw™¹m}O²ñq¦ã�¬�p×]ŒðK|I(Ùïó‹9¯/èk¾ìY_¡Ö¤vqyØóÿ×rƲÈ.+/ñnîyŠ]§6ÖB\x5c
*‰ÈõLo§Ÿ× …\x0a ¢BÚ\x0dáÛAnÿë¬õ\x0bptQU�olLê„ÓobBàÀM¦ñÖãóȹ.š»T3#(Dª\x1bªº˜™ä?-íMóŠMÞ\x0dÅ{ÞX¯óâ˜Lhl1G‡J(°ï‰Ÿ™\x0a˜«À¹\x07ê‚b\x0cf¸Û\x5c–L™e#ç½y„wÝO%Ë0õ¥,Ž¨zÇ‚œrÏ\x5cHô\x22ý@)EâlĪoª´=æÉ0}Æ|šö�¶—m ÀÉ~ŽM÷ÏUK\x0býQoDU1h$étïQf‘\x0b½;\x0bvNõT/ñörP£Àx0mþ؇dG>Ît5QêI§¡šÝ0kŸópžì”;†€Èî©tÒ>?7~ðéÕžþç8ç)>‡\x0a.Fâv\x5c0CPª{©\x07Ô­4OT)®¥ü%ù³DkfCkF ç±¥�;¡Ðm\x0c•vä\x0cTʪz5©ñmÖ¢´�—ïvÜÄà‰Ä«'c®üß^ت°g_\x0bÆ��…8±)c,¨(qøáeäB¾ðãã‘»SPt4äo¹ 
¾I„HwL#©–@mU¡pªE¢^aÒÉgh~d¬_ö­9\x07r|ÖçGJj+&Ò½k(‘\x07”êërnéE§4¼(ŸõÇó#ë×\x0b YÅβBÇäˆ\x0aЦ&ÆþRý�`µ?èóL1t¸Ž÷ÎÕ«wËÑ.Mç=3ª|G‹÷ƒ“sùmƒgî4`|\x22{б�춋¬½†1â[{�þȯw/B‹_g»6-òqyk*™o¯’\x0d\x5cc8ÀèÌÿ\x5
[  830.769712][ T9902] netlink: 'syz.2.737': attribute type 2 has an invalid length.
[  830.769825][ T9902] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.737'.
[  831.394478][ T5857] Bluetooth: hci1: command tx timeout
[  833.345814][ T9910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  834.124504][ T5857] Bluetooth: hci1: command tx timeout
[  835.342182][ T9918] input: syz0 as /devices/virtual/input/input10
[  836.340108][ T9924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  836.698080][ T5857] Bluetooth: hci1: command tx timeout
[  837.606319][   T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  837.618274][   T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  837.619769][   T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  837.641392][ T1529] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.793511][   T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  838.597142][   T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  839.127145][ T9936] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  839.258824][   T59] Bluetooth: hci1: command tx timeout
[  840.120843][ T9936] orangefs_mount: mount request failed with -4
[  842.662489][ T5857] Bluetooth: hci0: command tx timeout
[  844.895652][ T5857] Bluetooth: hci0: command tx timeout
[  846.228590][ T1529] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  846.604466][ T6574] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  847.112474][ T5857] Bluetooth: hci0: command tx timeout
[  847.711958][ T9802] chnl_net:caif_netlink_parms(): no params data found
[  847.766303][ T6574] usb 3-1: Using ep0 maxpacket: 16
[  847.794169][ T6574] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  847.794193][ T6574] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  847.794212][ T6574] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  847.794229][ T6574] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  847.794247][ T6574] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  847.794265][ T6574] usb 3-1: config 0 has no interface number 0
[  847.794306][ T6574] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  847.853306][ T6574] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  847.853334][ T6574] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  847.875200][ T6574] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  847.875231][ T6574] usb 3-1: config 0 interface 125 has no altsetting 0
[  847.875249][ T6574] usb 3-1: config 0 interface 125 has no altsetting 2
[  847.878238][ T6574] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  847.878261][ T6574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.878280][ T6574] usb 3-1: Product: syz
[  847.878291][ T6574] usb 3-1: Manufacturer: syz
[  847.878302][ T6574] usb 3-1: SerialNumber: syz
[  847.962064][ T6574] usb 3-1: config 0 descriptor??
[  847.979395][ T6574] usb 3-1: selecting invalid altsetting 2
[  848.592897][ T9997] overlayfs: failed to resolve './file0': -2
[  849.184769][ T5857] Bluetooth: hci0: command tx timeout
[  849.191415][ T6574] get_1284_register timeout
[  849.193969][    C1] usb 3-1: async_complete: urb error -104
[  849.197771][    C1] usb 3-1: async_complete: urb error -104
[  849.197869][    C1] usb 3-1: async_complete: urb error -104
[  849.197958][    C1] usb 3-1: async_complete: urb error -104
[  849.231239][ T6574] uss720 3-1:0.125: probe with driver uss720 failed with error -5
[  849.939742][ T9802] bridge0: port 1(bridge_slave_0) entered blocking state
[  849.940101][ T9802] bridge0: port 1(bridge_slave_0) entered disabled state
[  849.940296][ T9802] bridge_slave_0: entered allmulticast mode
[  849.943012][ T9802] bridge_slave_0: entered promiscuous mode
[  850.029271][ T9802] bridge0: port 2(bridge_slave_1) entered blocking state
[  850.029357][ T9802] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.029484][ T9802] bridge_slave_1: entered allmulticast mode
[  850.032702][ T9802] bridge_slave_1: entered promiscuous mode
[  850.381374][ T9802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  850.419315][ T9802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  850.425155][ T9929] chnl_net:caif_netlink_parms(): no params data found
[  850.589743][   T45] usb 3-1: USB disconnect, device number 6
[  850.969058][T10014] Bluetooth: MGMT ver 1.23
[  851.415776][ T1529] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  855.459841][T10032] smk_cipso_doi:679 remove rc = -2
[  855.531135][ T1529] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  855.625992][ T9802] team0: Port device team_slave_0 added
[  855.990432][ T9887] chnl_net:caif_netlink_parms(): no params data found
[  856.122488][ T9802] team0: Port device team_slave_1 added
[  858.260529][ T1529] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  859.240009][    C1] vkms_vblank_simulate: vblank timer overrun
[  859.260518][    C1] vkms_vblank_simulate: vblank timer overrun
[  859.388594][    C1] vkms_vblank_simulate: vblank timer overrun
[  859.586375][    C1] vkms_vblank_simulate: vblank timer overrun
[  859.733621][    C1] vkms_vblank_simulate: vblank timer overrun
[  859.952935][    C1] vkms_vblank_simulate: vblank timer overrun
[  860.416746][    C1] vkms_vblank_simulate: vblank timer overrun
[  860.594105][    C1] vkms_vblank_simulate: vblank timer overrun
[  860.749019][    C1] vkms_vblank_simulate: vblank timer overrun
[  860.894658][    C1] vkms_vblank_simulate: vblank timer overrun
[  861.317228][    C1] vkms_vblank_simulate: vblank timer overrun
[  861.320722][T10058] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  861.648503][    C1] vkms_vblank_simulate: vblank timer overrun
[  861.814040][ T9802] batman_adv: batadv0: Adding interface: batadv_slave_0
[  861.814055][ T9802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  861.814080][ T9802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  861.966631][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'.
[  862.082510][    C1] vkms_vblank_simulate: vblank timer overrun
[  862.161249][    C1] vkms_vblank_simulate: vblank timer overrun
[  863.088993][    C1] vkms_vblank_simulate: vblank timer overrun
[  863.113515][    C1] vkms_vblank_simulate: vblank timer overrun
[  863.220800][    C1] vkms_vblank_simulate: vblank timer overrun
[  865.008184][    C1] vkms_vblank_simulate: vblank timer overrun
[  865.029534][    C1] vkms_vblank_simulate: vblank timer overrun
[  865.493621][    C1] vkms_vblank_simulate: vblank timer overrun
[  865.549167][ T1529] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.842184][T10087] block nbd2: Attempted send on invalid socket
[  865.842207][T10087] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  865.844619][T10087] ADFS-fs (nbd2): error: unable to read block 3, try 0
[  865.848911][    C1] vkms_vblank_simulate: vblank timer overrun
[  866.103963][    C1] vkms_vblank_simulate: vblank timer overrun
[  866.849753][ T9802] batman_adv: batadv0: Adding interface: batadv_slave_1
[  866.849770][ T9802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  866.849796][ T9802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  869.443345][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state
[  869.477062][ T9929] bridge0: port 1(bridge_slave_0) entered disabled state
[  869.960076][ T9929] bridge_slave_0: entered allmulticast mode
[  870.184609][ T9929] bridge_slave_0: entered promiscuous mode
[  870.224986][ T9929] bridge0: port 2(bridge_slave_1) entered blocking state
[  870.225113][ T9929] bridge0: port 2(bridge_slave_1) entered disabled state
[  870.225306][ T9929] bridge_slave_1: entered allmulticast mode
[  870.232142][ T9929] bridge_slave_1: entered promiscuous mode
[  870.631688][T10112] ubi31: attaching mtd0
[  870.714668][T10112] ubi31: scanning is finished
[  871.569139][T10112] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  875.078739][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  875.078810][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  875.301058][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.301191][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state
[  875.301421][ T9887] bridge_slave_0: entered allmulticast mode
[  875.304195][ T9887] bridge_slave_0: entered promiscuous mode
[  875.362261][ T9929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  875.601436][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.601553][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state
[  875.601737][ T9887] bridge_slave_1: entered allmulticast mode
[  875.603920][ T9887] bridge_slave_1: entered promiscuous mode
[  875.788374][   T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  875.962304][   T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  876.052820][   T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  876.225138][   T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  876.232274][   T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  876.273877][ T9929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  878.743425][ T5857] Bluetooth: hci2: command tx timeout
[  879.319201][ T9887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  879.323399][ T9929] team0: Port device team_slave_0 added
[  879.445549][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.7.781'.
[  879.445645][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.7.781'.
[  879.966870][ T9887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  880.541801][T10158] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  880.558845][ T9929] team0: Port device team_slave_1 added
[  880.814961][   T59] Bluetooth: hci2: command tx timeout
[  881.429268][ T9887] team0: Port device team_slave_0 added
[  881.867770][ T9887] team0: Port device team_slave_1 added
[  881.870344][ T1529] bridge_slave_1: left allmulticast mode
[  881.870372][ T1529] bridge_slave_1: left promiscuous mode
[  881.870639][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.956037][ T1529] bridge_slave_0: left allmulticast mode
[  881.956067][ T1529] bridge_slave_0: left promiscuous mode
[  881.956347][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state
[  882.622648][ T1529] bridge_slave_1: left allmulticast mode
[  882.622674][ T1529] bridge_slave_1: left promiscuous mode
[  882.622858][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state
[  882.901886][ T5857] Bluetooth: hci2: command tx timeout
[  883.113118][T10170] netlink: 44 bytes leftover after parsing attributes in process `syz.7.787'.
[  883.136128][ T1529] bridge_slave_0: left allmulticast mode
[  883.136156][ T1529] bridge_slave_0: left promiscuous mode
[  883.136376][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state
[  883.187189][T10175] 9pnet: Could not find request transport: fd0x0000000000000003
[  883.191941][T10175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.788'.
[  883.252369][ T1529] bridge_slave_1: left allmulticast mode
[  883.252389][ T1529] bridge_slave_1: left promiscuous mode
[  883.252553][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state
[  883.541822][ T1529] bridge_slave_0: left allmulticast mode
[  883.541846][ T1529] bridge_slave_0: left promiscuous mode
[  883.542012][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state
[  885.536929][ T5857] Bluetooth: hci2: command tx timeout
[  886.310191][ T5857] Bluetooth: hci6: unexpected event for opcode 0x0419
[  886.847819][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  887.815837][   T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  887.824798][   T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  887.826809][   T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  887.828103][   T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  891.992423][   T59] Bluetooth: hci3: command tx timeout
[  891.993192][ T5929] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  892.315279][ T5929] usb 8-1: Using ep0 maxpacket: 8
[  892.358150][ T5929] usb 8-1: config 11 has an invalid interface number: 95 but max is 0
[  892.358176][ T5929] usb 8-1: config 11 has no interface number 0
[  892.358222][ T5929] usb 8-1: config 11 interface 95 has no altsetting 0
[  892.412022][ T5929] usb 8-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[  892.412048][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  892.412065][ T5929] usb 8-1: Product: syz
[  892.412078][ T5929] usb 8-1: Manufacturer: syz
[  892.412091][ T5929] usb 8-1: SerialNumber: syz
[  893.272213][ T5929] usb 8-1: USB disconnect, device number 5
[  894.014537][   T59] Bluetooth: hci3: command tx timeout
[  897.089665][   T59] Bluetooth: hci3: command tx timeout
[  898.726271][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  898.752178][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  898.753414][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  898.754283][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  898.890136][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  899.137047][   T59] Bluetooth: hci3: command tx timeout
[  901.570820][   T59] Bluetooth: hci5: command tx timeout
[  903.674002][   T59] Bluetooth: hci5: command tx timeout
[  905.694498][   T59] Bluetooth: hci5: command tx timeout
[  911.116005][ T5857] Bluetooth: hci5: command tx timeout
[  912.923765][T10279] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  913.040469][ T1529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  914.857178][ T1529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  915.319581][ T1529] bond0 (unregistering): Released all slaves
[  918.632800][ T1529] bond0 (unregistering): Released all slaves
[  918.854575][ T6037] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  918.931888][ T1529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  919.010565][ T6037] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  919.010593][ T6037] usb 3-1: config 0 has no interface number 0
[  919.010636][ T6037] usb 3-1: config 0 interface 51 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  919.012946][ T6037] usb 3-1: New USB device found, idVendor=12d1, idProduct=8869, bcdDevice=3b.15
[  919.012975][ T6037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  919.012996][ T6037] usb 3-1: Product: syz
[  919.013014][ T6037] usb 3-1: Manufacturer: syz
[  919.013029][ T6037] usb 3-1: SerialNumber: syz
[  919.036966][ T6037] usb 3-1: config 0 descriptor??
[  919.059762][ T6037] huawei_cdc_ncm 3-1:0.51: CDC Union missing and no IAD found
[  919.059873][ T6037] huawei_cdc_ncm 3-1:0.51: bind() failure
[  919.096651][ T1529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  919.144520][ T7197] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  919.153187][ T1529] bond0 (unregistering): Released all slaves
[  919.281966][ T1231] usb 3-1: USB disconnect, device number 7
[  919.304684][ T7197] usb 8-1: Using ep0 maxpacket: 32
[  919.307183][ T7197] usb 8-1: config 0 has an invalid interface number: 230 but max is 0
[  919.307206][ T7197] usb 8-1: config 0 has no interface number 0
[  919.307258][ T7197] usb 8-1: config 0 interface 230 has no altsetting 0
[  919.311681][ T7197] usb 8-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  919.311706][ T7197] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  919.311724][ T7197] usb 8-1: Product: syz
[  919.311737][ T7197] usb 8-1: Manufacturer: syz
[  919.311750][ T7197] usb 8-1: SerialNumber: syz
[  919.383040][ T7197] usb 8-1: config 0 descriptor??
[  919.396786][ T7197] ums-usbat 8-1:0.230: USB Mass Storage device detected
[  919.459520][ T7197] ums-usbat 8-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  919.718498][ T7197] ums-usbat 8-1:0.230: probe with driver ums-usbat failed with error -5
[  919.743809][ T7197] usb 8-1: USB disconnect, device number 6
[  920.354601][ T1231] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  921.264255][ T1231] usb 3-1: config 4 has an invalid interface number: 88 but max is 1
[  921.264282][ T1231] usb 3-1: config 4 has an invalid interface number: 29 but max is 1
[  921.264383][ T1231] usb 3-1: config 4 has no interface number 0
[  921.264400][ T1231] usb 3-1: config 4 has no interface number 1
[  921.264469][ T1231] usb 3-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping
[  921.264492][ T1231] usb 3-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85
[  921.264517][ T1231] usb 3-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64
[  921.264543][ T1231] usb 3-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  921.264584][ T1231] usb 3-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86
[  921.264608][ T1231] usb 3-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64
[  921.264634][ T1231] usb 3-1: config 4 interface 88 has no altsetting 0
[  921.264651][ T1231] usb 3-1: config 4 interface 29 has no altsetting 0
[  921.361424][ T1231] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[  921.361452][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  921.361470][ T1231] usb 3-1: Product: syz
[  921.361483][ T1231] usb 3-1: Manufacturer: syz
[  921.361496][ T1231] usb 3-1: SerialNumber: syz
[  921.435757][T10319] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  921.652982][ T1231] chaoskey 3-1:4.29: Unable to register with hwrng
[  921.697316][ T1231] usb 3-1: USB disconnect, device number 8
[  924.656250][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.830'.
[  926.695333][ T1529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  926.735209][ T7159] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  926.799529][ T1529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  927.022875][ T1529] bond0 (unregistering): Released all slaves
[  927.074625][ T7159] usb 3-1: Using ep0 maxpacket: 8
[  927.078052][ T7159] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  927.177639][T10354] UBIFS error (pid: 10354): cannot open "c:::", error -22
[  927.178502][T10354] netlink: 24 bytes leftover after parsing attributes in process `syz.7.836'.
[  928.033403][T10355] tty tty1: ldisc open failed (-12), clearing slot 0
[  928.053398][ T7159] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  928.053430][ T7159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  928.053453][ T7159] usb 3-1: Product: syz
[  928.053468][ T7159] usb 3-1: Manufacturer: syz
[  928.053484][ T7159] usb 3-1: SerialNumber: syz
[  928.089316][ T7159] usb 3-1: config 0 descriptor??
[  928.103189][ T7159] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  928.169756][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_0
[  928.169771][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  928.169797][ T9929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  928.320535][ T7159] usb 3-1: USB disconnect, device number 9
[  930.145663][T10371] vivid-000: disconnect
[  930.193356][T10371] Bluetooth: MGMT ver 1.23
[  932.969293][T10375] vivid-000: reconnect
[  933.885085][ T5957] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  933.889836][ T5929] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  934.054585][ T5929] usb 3-1: Using ep0 maxpacket: 16
[  934.056991][ T5929] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  934.057011][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  934.063396][ T5929] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  934.063425][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.063445][ T5929] usb 3-1: Product: syz
[  934.063468][ T5929] usb 3-1: Manufacturer: syz
[  934.063484][ T5929] usb 3-1: SerialNumber: syz
[  934.067237][ T5957] usb 8-1: unable to get BOS descriptor or descriptor too short
[  934.085761][ T5957] usb 8-1: config 11 has an invalid interface number: 79 but max is 0
[  934.085788][ T5957] usb 8-1: config 11 has no interface number 0
[  934.085843][ T5957] usb 8-1: config 11 interface 79 has no altsetting 0
[  934.090271][ T5957] usb 8-1: string descriptor 0 read error: -22
[  934.090421][ T5957] usb 8-1: New USB device found, idVendor=0424, idProduct=9906, bcdDevice=f0.06
[  934.090445][ T5957] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.442301][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  934.460793][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  934.464177][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  934.477353][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  934.478197][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  934.517514][ T5957] smsc95xx v2.0.0
[  934.517535][ T5957] smsc95xx 8-1:11.79 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  934.517740][ T5957] smsc95xx 8-1:11.79: probe with driver smsc95xx failed with error -22
[  934.552511][ T5929] usb 3-1: 0:2 : does not exist
[  934.637549][ T5929] usb 3-1: USB disconnect, device number 10
[  934.640396][ T7197] usb 8-1: USB disconnect, device number 7
[  934.783733][T10405] udevd[10405]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  935.332009][ T5929] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  935.474477][ T5929] usb 3-1: Using ep0 maxpacket: 8
[  935.476684][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  935.476707][ T5929] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[  935.476729][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  935.481891][ T5929] usb 3-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d
[  935.481914][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.481933][ T5929] usb 3-1: Product: syz
[  935.481946][ T5929] usb 3-1: Manufacturer: syz
[  935.481959][ T5929] usb 3-1: SerialNumber: syz
[  935.573094][ T5929] ti_usb_3410_5052 3-1:1.0: TI USB 3410 1 port adapter converter detected
[  935.785553][ T5957] usb 3-1: USB disconnect, device number 11
[  936.501051][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  936.501120][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  936.655379][   T59] Bluetooth: hci0: command tx timeout
[  936.819862][ T5957] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  937.354505][ T5957] usb 3-1: Using ep0 maxpacket: 32
[  937.358312][ T5957] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  937.358339][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  937.358362][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  937.358382][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  937.372334][ T5957] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  937.372367][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  937.372389][ T5957] usb 3-1: Product: syz
[  937.372404][ T5957] usb 3-1: Manufacturer: syz
[  937.372419][ T5957] usb 3-1: SerialNumber: syz
[  937.459652][ T5957] usb 3-1: config 0 descriptor??
[  937.560394][T10200] chnl_net:caif_netlink_parms(): no params data found
[  937.584760][T10239] chnl_net:caif_netlink_parms(): no params data found
[  937.697370][ T5957] usb 3-1: USB disconnect, device number 12
[  938.757606][   T59] Bluetooth: hci0: command tx timeout
[  939.430936][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.7.857'.
[  939.431043][T10452] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  939.994151][T10200] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.995149][T10200] bridge0: port 1(bridge_slave_0) entered disabled state
[  939.995411][T10200] bridge_slave_0: entered allmulticast mode
[  939.998244][T10200] bridge_slave_0: entered promiscuous mode
[  940.024460][ T7197] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  940.068325][T10239] bridge0: port 1(bridge_slave_0) entered blocking state
[  940.068445][T10239] bridge0: port 1(bridge_slave_0) entered disabled state
[  940.068646][T10239] bridge_slave_0: entered allmulticast mode
[  940.071196][T10239] bridge_slave_0: entered promiscuous mode
[  940.078244][T10200] bridge0: port 2(bridge_slave_1) entered blocking state
[  940.078392][T10200] bridge0: port 2(bridge_slave_1) entered disabled state
[  940.078596][T10200] bridge_slave_1: entered allmulticast mode
[  940.081315][T10200] bridge_slave_1: entered promiscuous mode
[  940.187577][ T7197] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  940.187600][ T7197] usb 3-1: config 0 has no interface number 0
[  940.193715][ T7197] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  940.193745][ T7197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.193766][ T7197] usb 3-1: Product: syz
[  940.193792][ T7197] usb 3-1: Manufacturer: syz
[  940.193806][ T7197] usb 3-1: SerialNumber: syz
[  940.199575][ T7197] usb 3-1: config 0 descriptor??
[  940.427523][ T7197] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[  940.439889][ T7197] usb 3-1: USB disconnect, device number 13
[  940.915191][   T59] Bluetooth: hci0: command tx timeout
[  940.923392][ T1529] hsr_slave_0: left promiscuous mode
[  941.254861][ T1529] hsr_slave_1: left promiscuous mode
[  941.255763][ T1529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  941.255789][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  941.310892][ T1529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  941.310921][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  942.974535][   T59] Bluetooth: hci0: command tx timeout
[  943.113965][ T1529] hsr_slave_0: left promiscuous mode
[  943.147726][ T1529] hsr_slave_1: left promiscuous mode
[  943.148611][ T1529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  943.148640][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  943.195940][ T1529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  943.195969][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  943.234664][ T5957] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  943.399962][ T5957] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  943.427666][ T5957] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  943.427692][ T5957] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  943.427711][ T5957] usb 3-1: Manufacturer: syz
[  943.437856][ T5957] usb 3-1: config 0 descriptor??
[  943.466570][ T1529] veth1_macvtap: left promiscuous mode
[  943.466681][ T1529] veth0_macvtap: left promiscuous mode
[  943.466946][ T1529] veth1_vlan: left promiscuous mode
[  943.467139][ T1529] veth0_vlan: left promiscuous mode
[  943.604814][ T1529] veth1_macvtap: left promiscuous mode
[  943.604927][ T1529] veth0_macvtap: left promiscuous mode
[  943.605260][ T1529] veth1_vlan: left promiscuous mode
[  943.605453][ T1529] veth0_vlan: left promiscuous mode
[  943.664694][ T5957] usb 3-1: USB disconnect, device number 14
[  946.544537][ T6096] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  946.714423][ T6096] usb 3-1: Using ep0 maxpacket: 32
[  946.716912][ T6096] usb 3-1: unable to get BOS descriptor or descriptor too short
[  946.718211][ T6096] usb 3-1: config 5 has an invalid interface number: 52 but max is 0
[  946.718233][ T6096] usb 3-1: config 5 has no interface number 0
[  946.718277][ T6096] usb 3-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  946.721630][ T6096] usb 3-1: string descriptor 0 read error: -22
[  946.721765][ T6096] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58
[  946.721793][ T6096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.746680][T10498] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  946.757852][ T6096] aircable 3-1:5.52: aircable converter detected
[  946.814140][ T6096] usb 3-1: aircable converter now attached to ttyUSB0
[  947.004709][ T6096] usb 3-1: USB disconnect, device number 15
[  947.026596][ T6096] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0
[  947.027658][ T6096] aircable 3-1:5.52: device disconnected
[  947.430863][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  947.439645][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  947.441778][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  947.444048][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  947.444935][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  949.548403][   T59] Bluetooth: hci1: command tx timeout
[  951.690906][   T59] Bluetooth: hci1: command tx timeout
[  952.740506][ T1529] team0 (unregistering): Port device team_slave_1 removed
[  953.482412][ T1529] team0 (unregistering): Port device team_slave_0 removed
[  953.694693][   T59] Bluetooth: hci1: command tx timeout
[  955.816098][   T59] Bluetooth: hci1: command tx timeout
[  956.625237][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  956.629458][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  956.643270][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  956.647302][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  956.648210][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  958.661265][ T5857] Bluetooth: hci2: command tx timeout
[  959.488177][   T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  959.503858][   T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  959.507649][   T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  959.515906][   T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  959.516660][   T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  960.734517][   T59] Bluetooth: hci2: command tx timeout
[  961.704459][   T59] Bluetooth: hci7: command tx timeout
[  962.824950][   T59] Bluetooth: hci2: command tx timeout
[  963.095389][ T1529] team0 (unregistering): Port device team_slave_1 removed
[  963.315957][ T1529] team0 (unregistering): Port device team_slave_0 removed
[  963.774645][   T59] Bluetooth: hci7: command tx timeout
[  964.894502][   T59] Bluetooth: hci2: command tx timeout
[  965.855113][   T59] Bluetooth: hci7: command tx timeout
[  965.896839][T10239] bridge0: port 2(bridge_slave_1) entered blocking state
[  965.896966][T10239] bridge0: port 2(bridge_slave_1) entered disabled state
[  965.897203][T10239] bridge_slave_1: entered allmulticast mode
[  965.899724][T10239] bridge_slave_1: entered promiscuous mode
[  966.479185][T10400] chnl_net:caif_netlink_parms(): no params data found
[  968.538383][   T59] Bluetooth: hci7: command tx timeout
[  969.521222][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'.
[  969.521253][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'.
[  969.521272][T10590] netlink: 2 bytes leftover after parsing attributes in process `syz.2.882'.
[  970.200046][T10400] bridge0: port 1(bridge_slave_0) entered blocking state
[  970.200246][T10400] bridge0: port 1(bridge_slave_0) entered disabled state
[  970.200437][T10400] bridge_slave_0: entered allmulticast mode
[  970.203072][T10400] bridge_slave_0: entered promiscuous mode
[  970.275693][T10400] bridge0: port 2(bridge_slave_1) entered blocking state
[  970.276923][T10400] bridge0: port 2(bridge_slave_1) entered disabled state
[  970.277151][T10400] bridge_slave_1: entered allmulticast mode
[  970.279773][T10400] bridge_slave_1: entered promiscuous mode
[  970.677515][T10400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  970.712602][T10400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  972.058114][T10400] team0: Port device team_slave_0 added
[  972.135905][T10400] team0: Port device team_slave_1 added
[  972.484634][ T6096] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  972.616808][T10400] batman_adv: batadv0: Adding interface: batadv_slave_0
[  972.616825][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  972.616851][T10400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  972.644410][ T6096] usb 3-1: Using ep0 maxpacket: 8
[  972.675891][ T6096] usb 3-1: unable to get BOS descriptor or descriptor too short
[  972.684388][ T6096] usb 3-1: config 7 has an invalid interface number: 148 but max is 0
[  972.684412][ T6096] usb 3-1: config 7 has no interface number 0
[  972.715251][ T6096] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=1c.76
[  972.715275][ T6096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.715293][ T6096] usb 3-1: Product: syz
[  972.715307][ T6096] usb 3-1: Manufacturer: syz
[  972.715318][ T6096] usb 3-1: SerialNumber: syz
[  972.725876][T10400] batman_adv: batadv0: Adding interface: batadv_slave_1
[  972.725891][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  972.725916][T10400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  972.730473][T10548] chnl_net:caif_netlink_parms(): no params data found
[  973.026688][ T6096] ldusb 3-1:7.148: Interrupt in endpoint not found
[  973.030963][ T6096] usb 3-1: USB disconnect, device number 16
[  973.258461][T10500] chnl_net:caif_netlink_parms(): no params data found
[  973.434770][T10400] hsr_slave_0: entered promiscuous mode
[  973.436068][T10400] hsr_slave_1: entered promiscuous mode
[  973.477462][T10563] chnl_net:caif_netlink_parms(): no params data found
[  973.894500][ T7197] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  974.044928][ T7197] usb 3-1: Using ep0 maxpacket: 16
[  974.051512][ T7197] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  974.051543][ T7197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.051561][ T7197] usb 3-1: Product: syz
[  974.051574][ T7197] usb 3-1: Manufacturer: syz
[  974.051587][ T7197] usb 3-1: SerialNumber: syz
[  974.067978][ T7197] usb 3-1: config 0 descriptor??
[  974.280889][ T7197] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  974.293298][ T7197] usb 3-1: USB disconnect, device number 17
[  974.355335][T10548] bridge0: port 1(bridge_slave_0) entered blocking state
[  974.361385][T10548] bridge0: port 1(bridge_slave_0) entered disabled state
[  974.361620][T10548] bridge_slave_0: entered allmulticast mode
[  974.368168][T10548] bridge_slave_0: entered promiscuous mode
[  974.525538][T10548] bridge0: port 2(bridge_slave_1) entered blocking state
[  974.525668][T10548] bridge0: port 2(bridge_slave_1) entered disabled state
[  974.525864][T10548] bridge_slave_1: entered allmulticast mode
[  974.529193][T10548] bridge_slave_1: entered promiscuous mode
[  975.011740][T10500] bridge0: port 1(bridge_slave_0) entered blocking state
[  975.014002][T10500] bridge0: port 1(bridge_slave_0) entered disabled state
[  975.014223][T10500] bridge_slave_0: entered allmulticast mode
[  975.030939][T10500] bridge_slave_0: entered promiscuous mode
[  975.059062][T10548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  975.157079][T10500] bridge0: port 2(bridge_slave_1) entered blocking state
[  975.157206][T10500] bridge0: port 2(bridge_slave_1) entered disabled state
[  975.157407][T10500] bridge_slave_1: entered allmulticast mode
[  975.166686][T10500] bridge_slave_1: entered promiscuous mode
[  975.194909][T10548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  975.208011][T10563] bridge0: port 1(bridge_slave_0) entered blocking state
[  975.208176][T10563] bridge0: port 1(bridge_slave_0) entered disabled state
[  975.208423][T10563] bridge_slave_0: entered allmulticast mode
[  975.211231][T10563] bridge_slave_0: entered promiscuous mode
[  975.467245][T10563] bridge0: port 2(bridge_slave_1) entered blocking state
[  975.467385][T10563] bridge0: port 2(bridge_slave_1) entered disabled state
[  975.467581][T10563] bridge_slave_1: entered allmulticast mode
[  975.470004][T10563] bridge_slave_1: entered promiscuous mode
[  976.921173][T10500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  976.934078][T10548] team0: Port device team_slave_0 added
[  977.120968][T10500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  977.126385][T10548] team0: Port device team_slave_1 added
[  977.147277][T10563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  977.313831][T10563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  977.899284][T10500] team0: Port device team_slave_0 added
[  977.900864][T10548] batman_adv: batadv0: Adding interface: batadv_slave_0
[  977.900876][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  977.900901][T10548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  978.167195][T10548] batman_adv: batadv0: Adding interface: batadv_slave_1
[  978.167211][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  978.167246][T10548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  978.170081][T10500] team0: Port device team_slave_1 added
[  978.310413][T10563] team0: Port device team_slave_0 added
[  978.420163][T10563] team0: Port device team_slave_1 added
[  978.790007][T10500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  978.790023][T10500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  978.790047][T10500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  979.087087][T10500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  979.087101][T10500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  979.087120][T10500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  979.092662][T10563] batman_adv: batadv0: Adding interface: batadv_slave_0
[  979.092678][T10563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  979.092708][T10563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  979.244978][T10563] batman_adv: batadv0: Adding interface: batadv_slave_1
[  979.244994][T10563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  979.245020][T10563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  979.259345][T10548] hsr_slave_0: entered promiscuous mode
[  979.260801][T10548] hsr_slave_1: entered promiscuous mode
[  979.261742][T10548] debugfs: 'hsr0' already exists in 'hsr'
[  979.261766][T10548] Cannot create hsr debugfs directory
[  979.513337][ T1529] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.170766][ T1529] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.221708][T10500] hsr_slave_0: entered promiscuous mode
[  980.222551][T10500] hsr_slave_1: entered promiscuous mode
[  980.223244][T10500] debugfs: 'hsr0' already exists in 'hsr'
[  980.223262][T10500] Cannot create hsr debugfs directory
[  980.429200][T10400] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  980.669820][ T1529] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.725906][T10563] hsr_slave_0: entered promiscuous mode
[  980.727175][T10563] hsr_slave_1: entered promiscuous mode
[  980.728012][T10563] debugfs: 'hsr0' already exists in 'hsr'
[  980.728041][T10563] Cannot create hsr debugfs directory
[  980.728437][T10400] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  980.888112][T10400] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  981.092091][ T1529] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.146793][T10400] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  982.508189][ T1529] bridge_slave_1: left allmulticast mode
[  982.508220][ T1529] bridge_slave_1: left promiscuous mode
[  982.508462][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state
[  982.585845][ T1529] bridge_slave_0: left allmulticast mode
[  982.585877][ T1529] bridge_slave_0: left promiscuous mode
[  982.588253][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state
[  982.648557][ T1529] bridge_slave_1: left allmulticast mode
[  982.648588][ T1529] bridge_slave_1: left promiscuous mode
[  982.648809][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state
[  982.716411][ T1529] bridge_slave_0: left allmulticast mode
[  982.716442][ T1529] bridge_slave_0: left promiscuous mode
[  982.716670][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state
[  982.778486][ T1529] bridge_slave_1: left allmulticast mode
[  982.778509][ T1529] bridge_slave_1: left promiscuous mode
[  982.778664][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state
[  982.855954][ T1529] bridge_slave_0: left allmulticast mode
[  982.855985][ T1529] bridge_slave_0: left promiscuous mode
[  982.856213][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state
[  982.928729][ T1529] bridge_slave_1: left allmulticast mode
[  982.928759][ T1529] bridge_slave_1: left promiscuous mode
[  982.928989][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state
[  982.995849][ T1529] bridge_slave_0: left allmulticast mode
[  982.995887][ T1529] bridge_slave_0: left promiscuous mode
[  982.996114][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state
[  983.086955][ T1529] bridge_slave_1: left allmulticast mode
[  983.086978][ T1529] bridge_slave_1: left promiscuous mode
[  983.087161][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state
[  983.145785][ T1529] bridge_slave_0: left allmulticast mode
[  983.145807][ T1529] bridge_slave_0: left promiscuous mode
[  983.145974][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state
[  983.207657][ T1529] bridge_slave_1: left allmulticast mode
[  983.207679][ T1529] bridge_slave_1: left promiscuous mode
[  983.207833][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state
[  983.286043][ T1529] bridge_slave_0: left allmulticast mode
[  983.286076][ T1529] bridge_slave_0: left promiscuous mode
[  983.286352][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state
[  983.837235][ T1529] bond0 (unregistering): Released all slaves
[  985.776198][ T1529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  985.835269][ T1529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  985.890023][ T1529] bond0 (unregistering): Released all slaves
[  986.062165][ T1529] bond0 (unregistering): Released all slaves
[  986.345086][ T1529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  986.451462][ T1529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  986.508105][ T1529] bond0 (unregistering): Released all slaves
[  986.705422][ T1529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  986.825279][ T1529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  986.892322][ T1529] bond0 (unregistering): Released all slaves
[  987.145112][ T1529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  987.228123][ T1529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  987.308234][ T1529] bond0 (unregistering): Released all slaves
[  987.468155][ T1529] bond0 (unregistering): Released all slaves
[  987.633002][ T1529] bond0 (unregistering): Released all slaves
[  988.816345][T10400] 8021q: adding VLAN 0 to HW filter on device bond0
[  988.893762][T10400] 8021q: adding VLAN 0 to HW filter on device team0
[  988.908607][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state
[  988.908795][ T9034] bridge0: port 1(bridge_slave_0) entered forwarding state
[  988.978717][  T984] bridge0: port 2(bridge_slave_1) entered blocking state
[  988.978901][  T984] bridge0: port 2(bridge_slave_1) entered forwarding state
[  991.024547][ T1529] hsr_slave_0: left promiscuous mode
[  991.066161][ T1529] hsr_slave_1: left promiscuous mode
[  991.067821][ T1529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  991.067848][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  991.105210][ T1529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  991.105231][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  991.156682][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  991.175545][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  991.215371][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  991.320851][ T1529] veth1_macvtap: left promiscuous mode
[  991.320965][ T1529] veth0_macvtap: left promiscuous mode
[  991.321227][ T1529] veth1_vlan: left promiscuous mode
[  991.321420][ T1529] veth0_vlan: left promiscuous mode
[  994.005265][ T1529] team0 (unregistering): Port device team_slave_1 removed
[  994.225392][ T1529] team0 (unregistering): Port device team_slave_0 removed
[  994.855417][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  994.882539][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  994.896080][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  994.902777][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  994.903628][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  996.974487][   T59] Bluetooth: hci3: command tx timeout
[  997.095183][ T1529] team0 (unregistering): Port device team_slave_1 removed
[  997.228428][ T1529] team0 (unregistering): Port device team_slave_0 removed
[  997.786506][ T1529] team0 (unregistering): Port device team_slave_1 removed
[  997.925819][ T1529] team0 (unregistering): Port device team_slave_0 removed
[  997.940453][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  997.940520][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  998.555155][ T1529] team0 (unregistering): Port device team_slave_1 removed
[  998.685159][ T1529] team0 (unregistering): Port device team_slave_0 removed
[  999.064496][   T59] Bluetooth: hci3: command tx timeout
[ 1000.041200][T10500] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1000.166233][T10500] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1000.306664][T10500] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1000.636269][T10500] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1000.904219][T10548] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1000.993754][T10548] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1001.091900][T10548] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1001.134812][   T59] Bluetooth: hci3: command tx timeout
[ 1001.136112][T10548] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1001.256721][T10702] chnl_net:caif_netlink_parms(): no params data found
[ 1001.588090][T10563] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1001.657630][T10563] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1001.871894][T10563] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1002.020867][T10563] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1002.063811][T10702] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1002.064021][T10702] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1002.064194][T10702] bridge_slave_0: entered allmulticast mode
[ 1002.068103][T10702] bridge_slave_0: entered promiscuous mode
[ 1002.082289][T10702] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1002.082461][T10702] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1002.082672][T10702] bridge_slave_1: entered allmulticast mode
[ 1002.096223][T10702] bridge_slave_1: entered promiscuous mode
[ 1002.347905][T10702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1002.372266][T10702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1002.590863][T10702] team0: Port device team_slave_0 added
[ 1002.609524][T10702] team0: Port device team_slave_1 added
[ 1002.927109][T10702] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1002.927123][T10702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1002.927144][T10702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1002.983115][T10702] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1002.983133][T10702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1002.983162][T10702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1003.214438][   T59] Bluetooth: hci3: command tx timeout
[ 1003.413695][T10702] hsr_slave_0: entered promiscuous mode
[ 1003.417328][T10702] hsr_slave_1: entered promiscuous mode
[ 1003.418254][T10702] debugfs: 'hsr0' already exists in 'hsr'
[ 1003.418278][T10702] Cannot create hsr debugfs directory
[ 1003.582034][T10500] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1004.020494][T10500] 8021q: adding VLAN 0 to HW filter on device team0
[ 1004.089801][T10548] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1004.118132][ T6098] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1004.118315][ T6098] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1004.174160][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1004.175145][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1004.508823][T10563] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1004.525309][T10548] 8021q: adding VLAN 0 to HW filter on device team0
[ 1004.811193][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1004.811338][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1005.128066][ T6098] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1005.128211][ T6098] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1005.135936][T10563] 8021q: adding VLAN 0 to HW filter on device team0
[ 1005.452086][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1005.452357][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1005.508663][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1005.509498][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1006.080376][T10702] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1006.140939][T10702] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1006.173972][T10702] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1006.336918][T10702] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1006.374921][ T1529] bridge_slave_1: left allmulticast mode
[ 1006.374951][ T1529] bridge_slave_1: left promiscuous mode
[ 1006.375203][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.468614][ T1529] bridge_slave_0: left allmulticast mode
[ 1006.468645][ T1529] bridge_slave_0: left promiscuous mode
[ 1006.468908][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1008.116578][ T1529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1008.195072][ T1529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1008.221274][ T1529] bond0 (unregistering): Released all slaves
[ 1008.806140][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1008.813829][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1008.829801][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1008.830764][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1008.832523][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1008.874236][ T1529] hsr_slave_0: left promiscuous mode
[ 1008.914424][ T1529] hsr_slave_1: left promiscuous mode
[ 1008.915287][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1008.969005][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1009.978727][ T1529] team0 (unregistering): Port device team_slave_1 removed
[ 1010.215919][ T1529] team0 (unregistering): Port device team_slave_0 removed
[ 1010.894614][   T59] Bluetooth: hci0: command tx timeout
[ 1012.416943][T10548] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1012.602797][T10563] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1012.941760][T10548] veth0_vlan: entered promiscuous mode
[ 1012.979574][   T59] Bluetooth: hci0: command tx timeout
[ 1013.087615][T10548] veth1_vlan: entered promiscuous mode
[ 1013.272928][T10702] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1013.309607][T10749] chnl_net:caif_netlink_parms(): no params data found
[ 1013.551028][T10702] 8021q: adding VLAN 0 to HW filter on device team0
[ 1013.646735][T10563] veth0_vlan: entered promiscuous mode
[ 1013.740054][T10548] veth0_macvtap: entered promiscuous mode
[ 1013.747204][T10749] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1013.747429][T10749] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1013.747651][T10749] bridge_slave_0: entered allmulticast mode
[ 1013.752846][T10749] bridge_slave_0: entered promiscuous mode
[ 1013.766623][T10749] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1013.766796][T10749] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1013.766982][T10749] bridge_slave_1: entered allmulticast mode
[ 1013.770344][T10749] bridge_slave_1: entered promiscuous mode
[ 1013.784248][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1013.786588][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1013.904059][T10548] veth1_macvtap: entered promiscuous mode
[ 1014.119310][T10749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1014.120776][T10563] veth1_vlan: entered promiscuous mode
[ 1014.158290][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1014.158486][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1014.363743][T10749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1014.573038][T10749] team0: Port device team_slave_0 added
[ 1014.750592][T10749] team0: Port device team_slave_1 added
[ 1014.975010][T10548] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1015.054385][   T59] Bluetooth: hci0: command tx timeout
[ 1015.148805][T10749] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1015.148817][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1015.148835][T10749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1015.156398][T10749] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1015.156412][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1015.156437][T10749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1015.210751][T10548] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1015.282739][ T3711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1015.375994][ T3711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1015.666661][ T3711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1015.687627][ T3711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1015.697404][T10749] hsr_slave_0: entered promiscuous mode
[ 1015.698777][T10749] hsr_slave_1: entered promiscuous mode
[ 1015.724919][T10563] veth0_macvtap: entered promiscuous mode
[ 1016.032596][T10563] veth1_macvtap: entered promiscuous mode
[ 1016.623749][T10563] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1016.788114][T10563] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1016.948482][ T1529] bridge_slave_1: left allmulticast mode
[ 1016.948511][ T1529] bridge_slave_1: left promiscuous mode
[ 1016.948708][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1017.066176][ T1529] bridge_slave_0: left allmulticast mode
[ 1017.066206][ T1529] bridge_slave_0: left promiscuous mode
[ 1017.066446][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1017.149523][   T59] Bluetooth: hci0: command tx timeout
[ 1017.332868][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1017.353189][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1017.362073][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1017.366866][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1017.369244][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1018.766930][   T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1018.771433][   T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1018.772576][   T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1018.793664][   T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1018.802529][   T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1019.032148][ T1529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1019.115667][ T1529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1019.138872][ T1529] bond0 (unregistering): Released all slaves
[ 1019.374867][   T59] Bluetooth: hci1: command tx timeout
[ 1019.754670][ T1529] hsr_slave_0: left promiscuous mode
[ 1019.805383][ T1529] hsr_slave_1: left promiscuous mode
[ 1019.806228][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1019.855102][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1020.888043][ T1529] team0 (unregistering): Port device team_slave_1 removed
[ 1020.911985][   T59] Bluetooth: hci2: command tx timeout
[ 1021.095300][ T1529] team0 (unregistering): Port device team_slave_0 removed
[ 1021.454557][   T59] Bluetooth: hci1: command tx timeout
[ 1022.974530][   T59] Bluetooth: hci2: command tx timeout
[ 1023.497678][T10702] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1023.534424][   T59] Bluetooth: hci1: command tx timeout
[ 1024.486058][T10749] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1024.567024][T10749] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1024.641145][T10749] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1024.673078][T10773] chnl_net:caif_netlink_parms(): no params data found
[ 1024.682394][T10776] chnl_net:caif_netlink_parms(): no params data found
[ 1024.698869][T10749] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1024.991441][T10702] veth0_vlan: entered promiscuous mode
[ 1025.054512][   T59] Bluetooth: hci2: command tx timeout
[ 1025.614593][   T59] Bluetooth: hci1: command tx timeout
[ 1026.238233][T10773] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1026.238363][T10773] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1026.238558][T10773] bridge_slave_0: entered allmulticast mode
[ 1026.241115][T10773] bridge_slave_0: entered promiscuous mode
[ 1026.256726][T10776] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1026.256882][T10776] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1026.257093][T10776] bridge_slave_0: entered allmulticast mode
[ 1026.259885][T10776] bridge_slave_0: entered promiscuous mode
[ 1026.283001][T10702] veth1_vlan: entered promiscuous mode
[ 1026.307364][T10773] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1026.307509][T10773] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1026.307695][T10773] bridge_slave_1: entered allmulticast mode
[ 1026.313031][T10773] bridge_slave_1: entered promiscuous mode
[ 1026.334773][T10776] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1026.334923][T10776] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1026.335123][T10776] bridge_slave_1: entered allmulticast mode
[ 1026.337825][T10776] bridge_slave_1: entered promiscuous mode
[ 1027.134540][   T59] Bluetooth: hci2: command tx timeout
[ 1027.192384][T10773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1027.489204][T10776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1027.500305][T10773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1027.518087][T10776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1028.137348][T10773] team0: Port device team_slave_0 added
[ 1028.143453][T10776] team0: Port device team_slave_0 added
[ 1028.348353][T10773] team0: Port device team_slave_1 added
[ 1028.376929][T10776] team0: Port device team_slave_1 added
[ 1028.836518][T10773] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1028.836536][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1028.836562][T10773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1028.839256][T10776] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1028.839269][T10776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1028.839295][T10776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1028.946228][T10776] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1028.946244][T10776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1028.946269][T10776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1029.000519][T10773] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1029.000535][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1029.000563][T10773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1029.179046][T10702] veth0_macvtap: entered promiscuous mode
[ 1029.706791][T10776] hsr_slave_0: entered promiscuous mode
[ 1029.707976][T10776] hsr_slave_1: entered promiscuous mode
[ 1029.708782][T10776] debugfs: 'hsr0' already exists in 'hsr'
[ 1029.708803][T10776] Cannot create hsr debugfs directory
[ 1029.739636][T10773] hsr_slave_0: entered promiscuous mode
[ 1029.740780][T10773] hsr_slave_1: entered promiscuous mode
[ 1029.741611][T10773] debugfs: 'hsr0' already exists in 'hsr'
[ 1029.741632][T10773] Cannot create hsr debugfs directory
[ 1029.743059][T10702] veth1_macvtap: entered promiscuous mode
[ 1030.873487][ T1529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.010609][T10702] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1031.239351][ T1529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.426336][T10702] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1031.890015][ T1529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.984216][T10749] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1032.041075][   T86] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.043685][   T86] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.268549][ T1529] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1032.322531][   T86] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.332793][   T86] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.601062][T10749] 8021q: adding VLAN 0 to HW filter on device team0
[ 1032.798110][ T6098] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1032.800982][ T6098] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1033.099263][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1033.099437][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1033.452704][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1033.452726][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1033.791080][ T1529] bridge_slave_1: left allmulticast mode
[ 1033.791111][ T1529] bridge_slave_1: left promiscuous mode
[ 1033.791353][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1033.872391][ T1529] bridge_slave_0: left allmulticast mode
[ 1033.872423][ T1529] bridge_slave_0: left promiscuous mode
[ 1033.872664][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1033.998378][ T1529] bridge_slave_1: left allmulticast mode
[ 1033.998408][ T1529] bridge_slave_1: left promiscuous mode
[ 1033.998656][ T1529] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1034.095847][ T1529] bridge_slave_0: left allmulticast mode
[ 1034.095877][ T1529] bridge_slave_0: left promiscuous mode
[ 1034.096099][ T1529] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1036.004973][ T1529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1036.065344][ T1529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1036.110084][ T1529] bond0 (unregistering): Released all slaves
[ 1037.656911][ T1529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1037.736468][ T1529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1037.758811][ T1529] bond0 (unregistering): Released all slaves
[ 1038.006085][   T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1038.006106][   T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1039.219771][T10985] (syz.8.530,10985,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1039.219805][T10985] (syz.8.530,10985,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 1039.426824][T10985] Bluetooth: Invalid esc byte 0x02
[ 1040.412983][ T1529] hsr_slave_0: left promiscuous mode
[ 1041.325129][ T1529] hsr_slave_1: left promiscuous mode
[ 1041.325971][ T1529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1041.325997][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1041.387351][ T1529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1041.387379][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1042.829354][ T1529] hsr_slave_0: left promiscuous mode
[ 1042.864450][ T1529] hsr_slave_1: left promiscuous mode
[ 1042.866946][ T1529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1042.866973][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1042.909647][ T1529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1042.909678][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1043.179890][ T1529] veth1_macvtap: left promiscuous mode
[ 1043.179971][ T1529] veth0_macvtap: left promiscuous mode
[ 1043.180259][ T1529] veth1_vlan: left promiscuous mode
[ 1043.180451][ T1529] veth0_vlan: left promiscuous mode
[ 1043.222370][ T1529] veth1_macvtap: left promiscuous mode
[ 1043.222488][ T1529] veth0_macvtap: left promiscuous mode
[ 1043.222785][ T1529] veth1_vlan: left promiscuous mode
[ 1043.223005][ T1529] veth0_vlan: left promiscuous mode
[ 1045.779037][ T1529] team0 (unregistering): Port device team_slave_1 removed
[ 1046.025133][ T1529] team0 (unregistering): Port device team_slave_0 removed
[ 1050.116546][ T1529] team0 (unregistering): Port device team_slave_1 removed
[ 1050.305246][ T1529] team0 (unregistering): Port device team_slave_0 removed
[ 1053.669403][T10749] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1053.699717][T10776] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1054.026080][T11060] netlink: 24 bytes leftover after parsing attributes in process `syz.8.906'.
[ 1056.195700][T10776] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1056.394418][T10776] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1056.654193][T10776] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1059.409795][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1059.410126][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1060.091969][T10773] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1060.193348][T10773] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1060.259934][T10773] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1060.763556][T11124] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1060.835402][T11124] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1061.364011][T10773] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1063.569317][T10749] veth0_vlan: entered promiscuous mode
[ 1064.367818][T10749] veth1_vlan: entered promiscuous mode
[ 1065.112844][T10776] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1065.190095][T10749] veth0_macvtap: entered promiscuous mode
[ 1065.289571][T10749] veth1_macvtap: entered promiscuous mode
[ 1065.333963][T10776] 8021q: adding VLAN 0 to HW filter on device team0
[ 1065.512352][   T86] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1065.512487][   T86] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1065.541200][T10773] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1066.624918][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1066.625058][ T6097] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1066.657796][T10749] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1066.782737][T10749] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1066.868017][T10773] 8021q: adding VLAN 0 to HW filter on device team0
[ 1066.918132][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1066.918691][ T9034] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1066.944392][ T8927] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.964985][ T8927] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.028257][T11191] ieee802154 phy0 wpan0: encryption failed: -90
[ 1067.033934][   T43] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.488188][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1067.488572][ T6166] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1067.536562][   T43] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.131464][T10776] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1069.234578][T10773] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1069.602585][T10773] veth0_vlan: entered promiscuous mode
[ 1069.810413][T10773] veth1_vlan: entered promiscuous mode
[ 1070.515366][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1070.522462][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1070.523887][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1070.550745][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1070.551951][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1070.924538][ T6037] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1071.079673][ T6037] usb 9-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[ 1071.079731][ T6037] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 97, changing to 7
[ 1071.079753][ T6037] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24929, setting to 1024
[ 1071.079777][ T6037] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1071.079870][ T6037] usb 9-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[ 1071.079890][ T6037] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1071.152330][ T6037] usb 9-1: config 0 descriptor??
[ 1071.253960][ T6037] em28xx 9-1:0.0: New device   @ 480 Mbps (2040:1605, interface 0, class 0)
[ 1071.254001][ T6037] em28xx 9-1:0.0: DVB interface 0 found: isoc
[ 1072.298941][ T6097] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1072.344874][ T6037] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 1072.404071][T10773] veth0_macvtap: entered promiscuous mode
[ 1072.463131][T10773] veth1_macvtap: entered promiscuous mode
[ 1072.489560][ T6037] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1072.489596][ T6037] em28xx 9-1:0.0: board has no eeprom
[ 1072.614362][ T6037] em28xx 9-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81)
[ 1072.614400][ T6037] em28xx 9-1:0.0: dvb set to isoc mode.
[ 1072.642068][   T10] em28xx 9-1:0.0: Binding DVB extension
[ 1072.654852][   T59] Bluetooth: hci0: command tx timeout
[ 1072.662366][ T6037] usb 9-1: USB disconnect, device number 2
[ 1072.694581][ T6037] em28xx 9-1:0.0: Disconnecting em28xx
[ 1072.853952][ T6097] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1072.879037][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.8.948'.
[ 1073.049880][   T10] DVB: Unable to find symbol drxk_attach()
[ 1073.053245][   T10] em28xx 9-1:0.0: Registering input extension
[ 1073.056291][ T6037] em28xx 9-1:0.0: Closing input extension
[ 1073.400776][ T6037] em28xx 9-1:0.0: Freeing device
[ 1073.578051][T11283] netlink: 'syz.2.950': attribute type 303 has an invalid length.
[ 1074.130041][ T6097] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.193556][T10773] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1074.289589][T10776] veth0_vlan: entered promiscuous mode
[ 1074.303073][T10773] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1074.734362][   T59] Bluetooth: hci0: command tx timeout
[ 1075.673741][ T6097] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.814447][   T59] Bluetooth: hci0: command tx timeout
[ 1077.546834][  T984] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.552624][  T984] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.592781][  T984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.607853][T10776] veth1_vlan: entered promiscuous mode
[ 1077.611019][  T984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1078.008805][T11250] chnl_net:caif_netlink_parms(): no params data found
[ 1078.894450][   T59] Bluetooth: hci0: command tx timeout
[ 1085.443054][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1085.454907][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1085.464483][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1085.494546][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1085.526444][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1086.277980][   T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1086.293754][   T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1086.304637][   T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1086.342490][   T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1086.344198][   T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1086.474965][ T6097] bridge_slave_1: left allmulticast mode
[ 1086.474995][ T6097] bridge_slave_1: left promiscuous mode
[ 1086.475246][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1086.598282][ T6097] bridge_slave_0: left allmulticast mode
[ 1086.598312][ T6097] bridge_slave_0: left promiscuous mode
[ 1086.598566][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1087.615335][   T59] Bluetooth: hci1: command tx timeout
[ 1088.494474][   T59] Bluetooth: hci5: command tx timeout
[ 1089.694551][   T59] Bluetooth: hci1: command tx timeout
[ 1090.574468][   T59] Bluetooth: hci5: command tx timeout
[ 1091.795962][   T59] Bluetooth: hci1: command tx timeout
[ 1092.364387][ T7197] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1092.530088][ T7197] usb 3-1: Using ep0 maxpacket: 16
[ 1092.531761][ T7197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1092.531782][ T7197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1092.531806][ T7197] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00
[ 1092.531828][ T7197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1092.583354][ T7197] usb 3-1: config 0 descriptor??
[ 1092.637127][ T6097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1092.658418][   T59] Bluetooth: hci5: command tx timeout
[ 1092.705560][ T6097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1092.738621][ T6097] bond0 (unregistering): Released all slaves
[ 1093.095849][ T7197] kye 0003:0458:5014.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[ 1093.097392][ T7197] kye 0003:0458:5014.0002: item fetching failed at offset 5/7
[ 1093.098187][ T7197] kye 0003:0458:5014.0002: parse failed
[ 1093.098258][ T7197] kye 0003:0458:5014.0002: probe with driver kye failed with error -22
[ 1093.236867][ T6096] usb 3-1: USB disconnect, device number 18
[ 1093.424557][T11181] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[ 1093.597560][T11250] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1093.597740][T11250] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1093.597922][T11250] bridge_slave_0: entered allmulticast mode
[ 1093.600095][T11250] bridge_slave_0: entered promiscuous mode
[ 1093.603345][T11181] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1093.603378][T11181] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1093.603426][T11181] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c23, bcdDevice= 0.00
[ 1093.603450][T11181] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1093.635899][T11181] usb 9-1: config 0 descriptor??
[ 1093.664869][T11376] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1093.705376][T11250] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1093.705930][T11250] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1093.706238][T11250] bridge_slave_1: entered allmulticast mode
[ 1093.708913][T11250] bridge_slave_1: entered promiscuous mode
[ 1093.854695][ T5857] Bluetooth: hci1: command tx timeout
[ 1093.884484][ T6097] hsr_slave_0: left promiscuous mode
[ 1093.926460][ T6097] hsr_slave_1: left promiscuous mode
[ 1093.928161][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1093.928203][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1093.979059][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1093.979090][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1094.098987][T11181] corsair-psu 0003:1B1C:1C23.0003: unbalanced collection at end of report description
[ 1094.099685][T11181] corsair-psu 0003:1B1C:1C23.0003: probe with driver corsair-psu failed with error -22
[ 1094.169105][ T6097] veth1_macvtap: left promiscuous mode
[ 1094.169217][ T6097] veth0_macvtap: left promiscuous mode
[ 1094.169479][ T6097] veth1_vlan: left promiscuous mode
[ 1094.169667][ T6097] veth0_vlan: left promiscuous mode
[ 1094.298116][ T6574] usb 9-1: USB disconnect, device number 3
[ 1094.734667][ T5857] Bluetooth: hci5: command tx timeout
[ 1097.864925][ T6097] team0 (unregistering): Port device team_slave_1 removed
[ 1098.075400][ T6097] team0 (unregistering): Port device team_slave_0 removed
[ 1100.564807][T11250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1100.610455][T11250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1100.754518][T11181] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[ 1100.774460][ T5929] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[ 1100.863090][T11250] team0: Port device team_slave_0 added
[ 1100.881812][T11250] team0: Port device team_slave_1 added
[ 1100.925800][T11181] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1100.926872][ T5929] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1100.926894][ T5929] usb 3-1: config 0 has no interface number 0
[ 1100.926936][ T5929] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1100.926958][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1100.948618][T11181] usb 9-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[ 1100.948648][T11181] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1100.948670][T11181] usb 9-1: Product: syz
[ 1100.948684][T11181] usb 9-1: Manufacturer: syz
[ 1100.948699][T11181] usb 9-1: SerialNumber: syz
[ 1100.964897][T11181] usb 9-1: config 0 descriptor??
[ 1100.978980][T11181] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[ 1100.979478][T11181] dvb-usb: bulk message failed: -22 (3/0)
[ 1101.037042][T11181] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1101.040708][T11181] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[ 1101.041388][T11181] usb 9-1: media controller created
[ 1101.044869][ T5929] usb 3-1: config 0 descriptor??
[ 1101.052281][T11181] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1101.105276][ T5929] usb 3-1: selecting invalid altsetting 1
[ 1101.105410][ T5929] dvb_ttusb_budget: ttusb_init_controller: error
[ 1101.146926][ T5929] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1101.147627][T11181] dvb-usb: bulk message failed: -22 (6/0)
[ 1101.147734][T11181] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[ 1101.158986][T11181] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input12
[ 1101.208921][T11399] dvb-usb: bulk message failed: -22 (2/0)
[ 1101.213632][T11181] dvb-usb: schedule remote query interval to 150 msecs.
[ 1101.213691][T11181] dvb-usb: bulk message failed: -22 (3/0)
[ 1101.224626][T11181] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[ 1101.272096][T11181] usb 9-1: USB disconnect, device number 4
[ 1101.288282][T11400] dvb-usb: bulk message failed: -22 (3/0)
[ 1101.347393][ T5929] DVB: Unable to find symbol cx22700_attach()
[ 1101.447826][ T5929] DVB: Unable to find symbol tda10046_attach()
[ 1101.447841][ T5929] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1101.473584][ T5929] usb 3-1: USB disconnect, device number 19
[ 1101.589019][T11181] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[ 1101.848882][T11250] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1101.848898][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1101.848924][T11250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1101.896578][T11250] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1101.896595][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1101.896625][T11250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1102.746396][ T5929] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1102.906722][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1102.906753][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1102.906791][ T5929] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[ 1102.906812][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.957514][ T5929] usb 3-1: config 0 descriptor??
[ 1103.126499][T11250] hsr_slave_0: entered promiscuous mode
[ 1103.135182][T11250] hsr_slave_1: entered promiscuous mode
[ 1103.439051][ T5929] hid_parser_main: 128 callbacks suppressed
[ 1103.439074][ T5929] ortek 0003:1223:3F07.0004: unknown main item tag 0x3
[ 1103.439100][ T5929] ortek 0003:1223:3F07.0004: item fetching failed at offset 48/69
[ 1103.439972][ T5929] ortek 0003:1223:3F07.0004: probe with driver ortek failed with error -22
[ 1103.534074][T11329] chnl_net:caif_netlink_parms(): no params data found
[ 1103.627512][ T6096] usb 3-1: USB disconnect, device number 20
[ 1104.410641][T11437] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1104.580892][T11444] xt_nfacct: accounting object `\�$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist
[ 1104.719269][T11339] chnl_net:caif_netlink_parms(): no params data found
[ 1107.897180][T11329] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1107.897311][T11329] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1107.897494][T11329] bridge_slave_0: entered allmulticast mode
[ 1107.899956][T11329] bridge_slave_0: entered promiscuous mode
[ 1107.914422][T11181] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1108.024968][T11329] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1108.025139][T11329] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1108.025331][T11329] bridge_slave_1: entered allmulticast mode
[ 1108.030892][T11329] bridge_slave_1: entered promiscuous mode
[ 1108.144501][T11181] usb 3-1: Using ep0 maxpacket: 16
[ 1108.147899][T11181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1108.147936][T11181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1108.147972][T11181] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[ 1108.147993][T11181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1108.152892][T11181] usb 3-1: config 0 descriptor??
[ 1108.254379][ T5929] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1108.422481][ T5929] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1108.422511][ T5929] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1108.422545][ T5929] usb 9-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00
[ 1108.422566][ T5929] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1108.472454][ T5929] usb 9-1: config 0 descriptor??
[ 1108.597521][T11181] konepure 0003:1E7D:2DB4.0005: item fetching failed at offset 0/4
[ 1108.598326][T11181] konepure 0003:1E7D:2DB4.0005: parse failed
[ 1108.598390][T11181] konepure 0003:1E7D:2DB4.0005: probe with driver konepure failed with error -22
[ 1108.797011][T11181] usb 3-1: USB disconnect, device number 21
[ 1108.868199][T11329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1108.872565][T11339] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1108.872895][T11339] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1108.873204][T11339] bridge_slave_0: entered allmulticast mode
[ 1108.892611][T11339] bridge_slave_0: entered promiscuous mode
[ 1108.928282][ T5929] ortek 0003:05A4:2000.0006: item fetching failed at offset 3/5
[ 1108.929078][ T5929] ortek 0003:05A4:2000.0006: probe with driver ortek failed with error -22
[ 1108.948029][T11329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1109.025686][T11339] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1109.025829][T11339] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1109.026015][T11339] bridge_slave_1: entered allmulticast mode
[ 1109.029487][T11339] bridge_slave_1: entered promiscuous mode
[ 1109.136722][T11181] usb 9-1: USB disconnect, device number 5
[ 1109.622211][T11329] team0: Port device team_slave_0 added
[ 1109.786092][T11339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1109.809101][T11329] team0: Port device team_slave_1 added
[ 1109.969919][T11339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1110.064622][T11181] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[ 1110.224821][T11181] usb 9-1: config 0 has an invalid interface number: 93 but max is 0
[ 1110.224849][T11181] usb 9-1: config 0 has no interface number 0
[ 1110.245040][T11181] usb 9-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[ 1110.245071][T11181] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1110.245092][T11181] usb 9-1: Product: syz
[ 1110.245107][T11181] usb 9-1: Manufacturer: syz
[ 1110.245123][T11181] usb 9-1: SerialNumber: syz
[ 1110.292041][T11181] usb 9-1: config 0 descriptor??
[ 1110.512852][T11181] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[ 1110.538941][T11181] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1110.540981][T11181] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[ 1110.541033][T11181] usb 9-1: media controller created
[ 1110.553657][T11181] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1111.029087][T11181] DVB: Unable to find symbol dib7000p_attach()
[ 1111.029102][T11181] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[ 1111.029116][T11181] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1111.030005][T11181] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[ 1111.030059][T11181] usb 9-1: media controller created
[ 1111.033965][T11181] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1111.113521][T11181] dib0700: the master dib7090 has to be initialized first
[ 1111.113538][T11181] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[ 1111.265710][T11181] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1111.265884][T11181] Registered IR keymap rc-empty
[ 1111.266189][T11181] dvb-usb: could not initialize remote control.
[ 1111.266199][T11181] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[ 1111.744699][ T5929] usb 9-1: USB disconnect, device number 6
[ 1111.766480][T11329] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1111.766496][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1111.766522][T11329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1112.528383][T11339] team0: Port device team_slave_0 added
[ 1112.530730][ T5929] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[ 1112.545777][T11329] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1112.545790][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1112.545817][T11329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1112.560383][T11339] team0: Port device team_slave_1 added
[ 1113.480049][ T6097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1114.409372][T11339] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1114.409388][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1114.409413][T11339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1115.012105][ T6097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.807928][T11339] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1115.807945][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1115.807972][T11339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1116.236150][T11329] hsr_slave_0: entered promiscuous mode
[ 1116.245536][T11329] hsr_slave_1: entered promiscuous mode
[ 1116.246637][T11329] debugfs: 'hsr0' already exists in 'hsr'
[ 1116.246663][T11329] Cannot create hsr debugfs directory
[ 1116.476963][ T6097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.796597][ T6574] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1116.948650][ T6097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.964582][ T6574] usb 3-1: Using ep0 maxpacket: 32
[ 1116.970602][ T6574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1116.970632][ T6574] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1116.970670][ T6574] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[ 1116.970691][ T6574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.019412][ T6574] usb 3-1: config 0 descriptor??
[ 1117.354375][ T6037] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1117.444188][ T6574] shield 0003:0955:7214.0007: item fetching failed at offset 0/1
[ 1117.448630][ T6574] shield 0003:0955:7214.0007: Parse failed
[ 1117.448719][ T6574] shield 0003:0955:7214.0007: probe with driver shield failed with error -22
[ 1117.525863][ T6037] usb 9-1: config 220 has an invalid interface number: 76 but max is 2
[ 1117.525890][ T6037] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1117.525908][ T6037] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1117.525926][ T6037] usb 9-1: config 220 has no interface number 2
[ 1117.525995][ T6037] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1117.526021][ T6037] usb 9-1: config 220 interface 0 has no altsetting 0
[ 1117.526037][ T6037] usb 9-1: config 220 interface 76 has no altsetting 0
[ 1117.526053][ T6037] usb 9-1: config 220 interface 1 has no altsetting 0
[ 1117.533179][ T6037] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1117.533210][ T6037] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1117.533231][ T6037] usb 9-1: Product: syz
[ 1117.533258][ T6037] usb 9-1: Manufacturer: syz
[ 1117.533274][ T6037] usb 9-1: SerialNumber: syz
[ 1117.655987][   T10] usb 3-1: USB disconnect, device number 22
[ 1117.863318][T11339] hsr_slave_0: entered promiscuous mode
[ 1117.879450][T11339] hsr_slave_1: entered promiscuous mode
[ 1117.882127][T11339] debugfs: 'hsr0' already exists in 'hsr'
[ 1117.882148][T11339] Cannot create hsr debugfs directory
[ 1117.930306][ T6037] usb 9-1: selecting invalid altsetting 0
[ 1117.930827][ T6037] usb 9-1: Found UVC 7.01 device syz (8086:0b07)
[ 1117.930865][ T6037] usb 9-1: No valid video chain found.
[ 1117.987043][ T6037] usb 9-1: selecting invalid altsetting 0
[ 1117.987078][ T6037] usbtest 9-1:220.1: probe with driver usbtest failed with error -22
[ 1118.014593][   T59] Bluetooth: hci3: command 0x0406 tx timeout
[ 1118.014706][ T6037] usb 9-1: USB disconnect, device number 7
[ 1118.429701][T11250] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1119.308470][T11615] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[ 1119.685795][T11250] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1119.805943][ T1231] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1119.865972][T11250] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1119.966437][ T1231] usb 3-1: Using ep0 maxpacket: 32
[ 1119.968577][ T1231] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[ 1119.968600][ T1231] usb 3-1: config 0 has no interface number 0
[ 1119.973040][T11250] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1119.973999][ T1231] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1119.974024][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1119.974043][ T1231] usb 3-1: Product: syz
[ 1119.974062][ T1231] usb 3-1: Manufacturer: syz
[ 1119.974075][ T1231] usb 3-1: SerialNumber: syz
[ 1119.982940][ T1231] usb 3-1: config 0 descriptor??
[ 1120.006865][ T1231] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1120.114677][ T6574] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1120.253626][ T1231] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1120.270298][ T6574] usb 9-1: Using ep0 maxpacket: 16
[ 1120.273791][ T6574] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1120.273816][ T6574] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1120.285718][ T6574] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1120.285748][ T6574] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.285831][ T6574] usb 9-1: Product: syz
[ 1120.285847][ T6574] usb 9-1: Manufacturer: syz
[ 1120.285863][ T6574] usb 9-1: SerialNumber: syz
[ 1120.417183][ T1231] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1120.660056][ T6574] usb 9-1: 0:2 : does not exist
[ 1120.688474][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1120.696197][ T6574] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 1120.702230][ T5929] usb 3-1: USB disconnect, device number 23
[ 1120.828129][ T5929] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1120.849812][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1120.849881][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1120.950022][ T5929] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1120.950913][ T5929] quatech2 3-1:0.51: device disconnected
[ 1120.957100][ T6574] usb 9-1: USB disconnect, device number 8
[ 1121.326524][T11369] udevd[11369]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1121.461355][T11650] tipc: Started in network mode
[ 1121.461384][T11650] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711
[ 1121.461434][T11650] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1121.667503][ T6097] bridge_slave_1: left allmulticast mode
[ 1121.667535][ T6097] bridge_slave_1: left promiscuous mode
[ 1121.667811][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1122.491099][ T6097] bridge_slave_0: left allmulticast mode
[ 1122.491130][ T6097] bridge_slave_0: left promiscuous mode
[ 1122.491393][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1122.594370][ T6574] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[ 1122.609034][ T6097] bridge_slave_1: left allmulticast mode
[ 1122.609067][ T6097] bridge_slave_1: left promiscuous mode
[ 1122.609334][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1122.695906][ T6097] bridge_slave_0: left allmulticast mode
[ 1122.695936][ T6097] bridge_slave_0: left promiscuous mode
[ 1122.696172][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1122.746735][ T6574] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1122.746762][ T6574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1122.776487][ T6574] usb 3-1: config 0 descriptor??
[ 1122.791324][ T6574] cp210x 3-1:0.0: cp210x converter detected
[ 1123.218926][ T6574] usb 3-1: cp210x converter now attached to ttyUSB0
[ 1123.406008][ T6037] usb 3-1: USB disconnect, device number 24
[ 1123.420968][ T6037] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1123.565370][ T6037] cp210x 3-1:0.0: device disconnected
[ 1125.515890][ T6097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1125.595023][ T6097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1125.624129][ T6097] bond0 (unregistering): Released all slaves
[ 1129.980956][ T6097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1130.258598][ T6097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1130.299058][ T6097] bond0 (unregistering): Released all slaves
[ 1130.964374][ T6096] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1131.116682][ T6096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1131.116713][ T6096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1131.116747][ T6096] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[ 1131.116768][ T6096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1131.183366][ T6096] usb 3-1: config 0 descriptor??
[ 1131.421862][   T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1131.452392][   T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1131.463935][   T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1131.480135][   T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1131.491463][   T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1131.755090][ T6096] hid_mf 0003:0079:1846.0008: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0
[ 1131.755121][ T6096] hid_mf 0003:0079:1846.0008: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[ 1131.944588][ T6096] usb 3-1: USB disconnect, device number 25
[ 1132.454553][ T6097] hsr_slave_0: left promiscuous mode
[ 1133.420861][ T6097] hsr_slave_1: left promiscuous mode
[ 1133.421735][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1133.470257][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1133.615149][ T5857] Bluetooth: hci2: command tx timeout
[ 1133.934771][ T6097] hsr_slave_0: left promiscuous mode
[ 1134.863256][ T6097] hsr_slave_1: left promiscuous mode
[ 1134.870996][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1134.871023][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1134.925091][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1134.925121][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1135.300214][ T6097] veth1_vlan: left promiscuous mode
[ 1135.300417][ T6097] veth0_vlan: left promiscuous mode
[ 1135.338377][ T6097] veth1_macvtap: left promiscuous mode
[ 1135.338448][ T6097] veth0_macvtap: left promiscuous mode
[ 1135.338857][ T6097] veth1_vlan: left promiscuous mode
[ 1135.339057][ T6097] veth0_vlan: left promiscuous mode
[ 1135.696050][ T5857] Bluetooth: hci2: command tx timeout
[ 1137.774444][ T5857] Bluetooth: hci2: command tx timeout
[ 1139.966917][ T5857] Bluetooth: hci2: command tx timeout
[ 1140.501746][   T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1140.534059][   T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1140.545168][   T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1140.552006][   T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1140.552810][   T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1142.654508][ T5857] Bluetooth: hci0: command tx timeout
[ 1144.374765][   T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1144.401836][   T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1144.414812][   T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1144.445046][   T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1144.446070][   T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1144.734553][   T59] Bluetooth: hci0: command tx timeout
[ 1146.575526][   T59] Bluetooth: hci6: command tx timeout
[ 1146.814609][   T59] Bluetooth: hci0: command tx timeout
[ 1148.657437][   T59] Bluetooth: hci6: command tx timeout
[ 1148.894610][   T59] Bluetooth: hci0: command tx timeout
[ 1150.191027][ T5857] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1150.218696][ T5857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1150.220139][ T5857] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1150.240570][ T5857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1150.256674][ T5857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1150.734690][   T59] Bluetooth: hci6: command tx timeout
[ 1150.801959][    C0] sched: DL replenish lagged too much
[ 1152.414777][   T59] Bluetooth: hci7: command tx timeout
[ 1152.814763][   T59] Bluetooth: hci6: command tx timeout
[ 1154.494574][   T59] Bluetooth: hci7: command tx timeout
[ 1156.575423][   T59] Bluetooth: hci7: command tx timeout
[ 1157.295818][ T5857] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1157.326875][ T5857] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1157.329818][ T5857] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1157.333201][ T5857] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1157.361813][ T5857] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1158.654664][   T59] Bluetooth: hci7: command tx timeout
[ 1159.455457][   T59] Bluetooth: hci8: command tx timeout
[ 1161.534547][   T59] Bluetooth: hci8: command tx timeout
[ 1163.614582][   T59] Bluetooth: hci8: command tx timeout
[ 1165.694627][   T59] Bluetooth: hci8: command tx timeout
[ 1182.326175][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.326257][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1223.779721][ T5849] Bluetooth: hci5: command 0x0406 tx timeout
[ 1224.254378][ T5849] Bluetooth: hci1: command 0x0406 tx timeout
[ 1226.898753][T11821] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1226.925566][T11821] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1226.929116][T11821] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1226.932576][T11821] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1226.949534][T11821] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1227.801613][T11835] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1227.848593][T11835] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1227.860543][T11835] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1227.870602][T11835] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1227.873483][T11835] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1228.015770][T11838] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1228.037600][T11838] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1228.039044][T11838] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1228.041524][T11838] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1228.075039][T11843] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1228.089903][T11843] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1228.102539][T11843] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1228.120761][ T5849] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1228.135580][ T5849] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1228.141459][ T5849] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1228.539720][T11841] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1228.575577][T11841] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1228.576991][T11841] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1228.579585][T11841] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1228.582411][T11841] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1238.654465][T11821] Bluetooth: hci13: command tx timeout
[ 1238.655135][T11821] Bluetooth: hci9: command tx timeout
[ 1238.660462][T11843] Bluetooth: hci12: command tx timeout
[ 1238.660772][T11843] Bluetooth: hci10: command tx timeout
[ 1238.661020][T11843] Bluetooth: hci11: command tx timeout
[ 1241.088723][T11821] Bluetooth: hci13: command tx timeout
[ 1241.088757][T11821] Bluetooth: hci10: command tx timeout
[ 1241.290999][ T6097] team0 (unregistering): Port device team_slave_1 removed
[ 1241.294447][T11830] Bluetooth: hci11: command tx timeout
[ 1241.294474][T11830] Bluetooth: hci9: command tx timeout
[ 1241.296376][ T5857] Bluetooth: hci12: command tx timeout
[ 1243.144395][ T5857] Bluetooth: hci13: command tx timeout
[ 1243.147637][T11830] Bluetooth: hci10: command tx timeout
[ 1243.374434][T11830] Bluetooth: hci9: command tx timeout
[ 1243.454433][T11830] Bluetooth: hci11: command tx timeout
[ 1243.454464][T11830] Bluetooth: hci12: command tx timeout
[ 1243.989603][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1243.989675][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1245.304471][ T5857] Bluetooth: hci10: command tx timeout
[ 1245.304504][ T5857] Bluetooth: hci13: command tx timeout
[ 1245.464401][T11830] Bluetooth: hci9: command tx timeout
[ 1245.879148][T11830] Bluetooth: hci12: command tx timeout
[ 1245.879183][T11830] Bluetooth: hci11: command tx timeout
[ 1256.334811][ T5857] Bluetooth: hci2: command 0x0406 tx timeout
[ 1266.265384][ T5857] Bluetooth: hci0: command 0x0406 tx timeout
[ 1272.174363][T11821] Bluetooth: hci6: command 0x0406 tx timeout
[ 1277.064351][T11821] Bluetooth: hci7: command 0x0406 tx timeout
[ 1282.094356][T11821] Bluetooth: hci8: command 0x0406 tx timeout
[ 1291.054460][   T38] INFO: task kworker/u8:12:3751 blocked for more than 145 seconds.
[ 1291.054485][   T38]       Not tainted syzkaller #0
[ 1291.054495][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1291.054505][   T38] task:kworker/u8:12   state:D stack:20264 pid:3751  tgid:3751  ppid:2      task_flags:0x4208060 flags:0x00004000
[ 1291.054557][   T38] Workqueue: ipv6_addrconf addrconf_dad_work
[ 1291.054582][   T38] Call Trace:
[ 1291.054589][   T38]  <TASK>
[ 1291.054602][   T38]  __schedule+0x16f3/0x4c20
[ 1291.054635][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1291.054684][   T38]  ? __pfx___schedule+0x10/0x10
[ 1291.054727][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1291.054759][   T38]  rt_mutex_schedule+0x77/0xf0
[ 1291.054778][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[ 1291.054802][   T38]  ? task_blocks_on_rt_mutex+0xf12/0x1380
[ 1291.054842][   T38]  rt_mutex_slowlock+0x2b1/0x6e0
[ 1291.054867][   T38]  ? rt_mutex_slowlock+0x1c9/0x6e0
[ 1291.054891][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1291.054924][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1291.054955][   T38]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1291.054992][   T38]  ? addrconf_dad_work+0x119/0x15a0
[ 1291.055011][   T38]  mutex_lock_nested+0x16a/0x1d0
[ 1291.055033][   T38]  ? addrconf_dad_work+0x119/0x15a0
[ 1291.055057][   T38]  addrconf_dad_work+0x119/0x15a0
[ 1291.055079][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1291.055112][   T38]  ? __pfx_addrconf_dad_work+0x10/0x10
[ 1291.055133][   T38]  ? process_scheduled_works+0x9ef/0x17b0
[ 1291.055164][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1291.055191][   T38]  ? process_scheduled_works+0x9ef/0x17b0
[ 1291.055213][   T38]  ? process_scheduled_works+0x9ef/0x17b0
[ 1291.055247][   T38]  process_scheduled_works+0xade/0x17b0
[ 1291.342387][   T38]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1291.342440][   T38]  worker_thread+0x8a0/0xda0
[ 1291.342470][   T38]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1291.342509][   T38]  ? __kthread_parkme+0x7b/0x200
[ 1291.342544][   T38]  kthread+0x70e/0x8a0
[ 1291.342576][   T38]  ? __pfx_worker_thread+0x10/0x10
[ 1291.342600][   T38]  ? __pfx_kthread+0x10/0x10
[ 1291.342633][   T38]  ? __pfx_kthread+0x10/0x10
[ 1291.342663][   T38]  ret_from_fork+0x439/0x7d0
[ 1291.342691][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1291.342722][   T38]  ? __switch_to_asm+0x39/0x70
[ 1291.342740][   T38]  ? __switch_to_asm+0x33/0x70
[ 1291.342775][   T38]  ? __pfx_kthread+0x10/0x10
[ 1291.342811][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1291.342851][   T38]  </TASK>
[ 1291.342871][   T38] INFO: task dhcpcd:5502 blocked for more than 145 seconds.
[ 1291.342887][   T38]       Not tainted syzkaller #0
[ 1291.342899][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1291.342910][   T38] task:dhcpcd          state:D stack:21320 pid:5502  tgid:5502  ppid:5501   task_flags:0x400140 flags:0x00004002
[ 1291.342969][   T38] Call Trace:
[ 1291.342976][   T38]  <TASK>
[ 1291.342990][   T38]  __schedule+0x16f3/0x4c20
[ 1291.343052][   T38]  ? __pfx___schedule+0x10/0x10
[ 1291.343105][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1291.343141][   T38]  rt_mutex_schedule+0x77/0xf0
[ 1291.343164][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[ 1291.343191][   T38]  ? task_blocks_on_rt_mutex+0x78c/0x1380
[ 1291.343246][   T38]  rt_mutex_slowlock+0x2b1/0x6e0
[ 1291.360618][   T38]  ? rt_mutex_slowlock+0x1c9/0x6e0
[ 1291.360657][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1291.360692][   T38]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1291.360732][   T38]  ? __kmalloc_node_track_caller_noprof+0x213/0x450
[ 1291.360771][   T38]  ? rtnl_dumpit+0x92/0x200
[ 1291.360799][   T38]  mutex_lock_nested+0x16a/0x1d0
[ 1291.360824][   T38]  ? rtnl_dumpit+0x92/0x200
[ 1291.360851][   T38]  ? __pfx_rtnl_dump_ifinfo+0x10/0x10
[ 1291.360881][   T38]  rtnl_dumpit+0x92/0x200
[ 1291.360914][   T38]  netlink_dump+0x6e4/0xe90
[ 1291.360957][   T38]  ? __pfx_netlink_dump+0x10/0x10
[ 1291.361001][   T38]  ? netlink_recvmsg+0x5b2/0xa30
[ 1291.361030][   T38]  ? kmem_cache_free+0x195/0x510
[ 1291.361064][   T38]  netlink_recvmsg+0x676/0xa30
[ 1291.361103][   T38]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1291.361131][   T38]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1291.361178][   T38]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 1291.361198][   T38]  ? security_socket_recvmsg+0x7e/0x2e0
[ 1291.361222][   T38]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1291.361251][   T38]  sock_recvmsg+0x229/0x270
[ 1291.361282][   T38]  ____sys_recvmsg+0x1ce/0x470
[ 1291.361312][   T38]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1291.361347][   T38]  ? import_iovec+0x74/0xa0
[ 1291.361375][   T38]  ___sys_recvmsg+0x1b5/0x510
[ 1291.361404][   T38]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1291.361434][   T38]  ? handle_mm_fault+0x30eb/0x3400
[ 1291.361492][   T38]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1291.361531][   T38]  __x64_sys_recvmsg+0x19e/0x260
[ 1291.361557][   T38]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[ 1291.361591][   T38]  ? do_user_addr_fault+0xc8a/0x1390
[ 1291.361623][   T38]  ? do_syscall_64+0xbe/0x3b0
[ 1291.361647][   T38]  do_syscall_64+0xfa/0x3b0
[ 1291.361666][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1291.361695][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1291.361717][   T38]  ? clear_bhb_loop+0x60/0xb0
[ 1291.361744][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1291.361764][   T38] RIP: 0033:0x7eff33cbb407
[ 1291.361782][   T38] RSP: 002b:00007fffd3d522b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f
[ 1291.361805][   T38] RAX: ffffffffffffffda RBX: 00007eff33c31740 RCX: 00007eff33cbb407
[ 1291.361823][   T38] RDX: 0000000000000000 RSI: 00007fffd3d52340 RDI: 000000000000001e
[ 1291.361836][   T38] RBP: 00007fffd3d52324 R08: 0000000000000000 R09: 0000000000000000
[ 1291.361850][   T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001d98
[ 1291.361863][   T38] R13: 00007fffd3d52330 R14: 00007fffd3d52420 R15: 0000000000000000
[ 1291.361896][   T38]  </TASK>
[ 1291.361923][   T38] INFO: task kworker/u8:18:6098 blocked for more than 145 seconds.
[ 1291.361939][   T38]       Not tainted syzkaller #0
[ 1291.361950][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_sec[ 1291.361950][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1291.361959][   T38] task:kworker/u8:18   state:D stack:19384 pid:6098  tgid:6098  ppid:2      task_flags:0x4208060 flags:0x00004000
[ 1291.362015][   T38] Workqueue: events_unbound linkwatch_event
[ 1291.362036][   T38] Call Trace:
[ 1291.362044][   T38]  <TASK>
[ 1291.362057][   T38]  __schedule+0x16f3/0x4c20
[ 1291.362107][   T38]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 1291.362138][   T38]  ? __pfx___schedule+0x10/0x10
[ 1291.362187][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1291.362221][   T38]  rt_mutex_schedule+0x77/0xf0
[ 1291.362243][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[ 1291.362268][   T38]  ? task_blocks_on_rt_mutex+0xf12/0x1380
[ 1291.362308][   T38]  rt_mutex_slowlock+0x2b1/0x6e0
[ 1291.362334][   T38]  ? rt_mutex_slowlock+0x1c9/0x6e0
[ 1291.362357][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1291.362395][   T38]  ? linkwatch_event+0xe/0x60
[ 1291.362423][   T38]  ? process_scheduled_works+0x9ef/0x17b0
[ 1291.362462][   T38]  ? linkwatch_event+0xe/0x60
[ 1291.362480][   T38]  mutex_lock_nested+0x16a/0x1d0
[ 1291.362504][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1291.362535][   T38]  ? process_scheduled_works+0x9ef/0x17b0
[ 1291.362563][   T38]  linkwatch_event+0xe/0x60
[ 1291.362582][   T38]  process_scheduled_works+0xade/0x17b0
[ 1291.362639][   T38]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1291.362684][   T38]  worker_thread+0x8a0/0xda0
[ 1291.362717][   T38]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1291.362778][   T38]  ? __kthread_parkme+0x7b/0x200
[ 1291.362823][   T38]  kthread+0x70e/0x8a0
[ 1291.362864][   T38]  ? __pfx_worker_thread+0x10/0x10
[ 1291.362896][   T38]  ? __pfx_kthread+0x10/0x10
[ 1291.362940][   T38]  ? __pfx_kthread+0x10/0x10
[ 1291.362978][   T38]  ret_from_fork+0x439/0x7d0
[ 1291.363015][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1291.363056][   T38]  ? __switch_to_asm+0x39/0x70
[ 1291.363078][   T38]  ? __switch_to_asm+0x33/0x70
[ 1291.363101][   T38]  ? __pfx_kthread+0x10/0x10
[ 1291.363140][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1291.363184][   T38]  </TASK>
[ 1291.363219][   T38] INFO: task syz-executor:11329 blocked for more than 145 seconds.
[ 1291.363235][   T38]       Not tainted syzkaller #0
[ 1291.363249][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1291.363259][   T38] task:syz-executor    state:D stack:22040 pid:11329 tgid:11329 ppid:1      task_flags:0x480140 flags:0x00004006
[ 1291.363320][   T38] Call Trace:
[ 1291.363327][   T38]  <TASK>
[ 1291.363341][   T38]  __schedule+0x16f3/0x4c20
[ 1291.363381][   T38]  ? kernel_text_address+0xa5/0xe0
[ 1291.363409][   T38]  ? __kernel_text_address+0xd/0x40
[ 1291.363434][   T38]  ? unwind_get_return_address+0x4d/0x90
[ 1291.363475][   T38]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1291.363504][   T38]  ? arch_stack_walk+0xfc/0x150
[ 1291.363553][   T38]  ? __pfx___schedule+0x10/0x10
[ 1291.363612][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1291.363653][   T38]  rt_mutex_schedule+0x77/0xf0
[ 1291.363677][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[ 1291.363706][   T38]  ? task_blocks_on_rt_mutex+0xf12/0x1380
[ 1291.363758][   T38]  rt_mutex_slowlock+0x2b1/0x6e0
[ 1291.363792][   T38]  ? rt_mutex_slowlock+0x1c9/0x6e0
[ 1291.363823][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1291.363850][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1291.363897][   T38]  ? unregister_netdevice_notifier_net+0x8d/0x2a0
[ 1291.363949][   T38]  ? reacquire_held_locks+0x127/0x1d0
[ 1291.363994][   T38]  ? __pfx_migrate_enable+0x10/0x10
[ 1291.364026][   T38]  ? unregister_netdevice_notifier_net+0x8d/0x2a0
[ 1291.364054][   T38]  mutex_lock_nested+0x16a/0x1d0
[ 1291.364085][   T38]  unregister_netdevice_notifier_net+0x8d/0x2a0
[ 1291.364118][   T38]  ? mntput_no_expire+0x2eb/0x9d0
[ 1291.364143][   T38]  ? __pfx_unregister_netdevice_notifier_net+0x10/0x10
[ 1291.364296][   T38]  ? __pfx_mntput_no_expire+0x10/0x10
[ 1291.364323][   T38]  ? simple_release_fs+0x9c/0xd0
[ 1291.364350][   T38]  nsim_dev_hwstats_exit+0x83/0x2a0
[ 1291.364374][   T38]  ? kfree+0x195/0x550
[ 1291.364403][   T38]  nsim_dev_reload_destroy+0x2af/0x490
[ 1291.364428][   T38]  ? nsim_drv_remove+0x50/0x160
[ 1291.751179][   T38]  nsim_drv_remove+0x58/0x160
[ 1291.751213][   T38]  ? __pfx_nsim_bus_remove+0x10/0x10
[ 1292.027610][   T38]  device_release_driver_internal+0x46c/0x800
[ 1292.027644][   T38]  bus_remove_device+0x355/0x420
[ 1292.027668][   T38]  device_del+0x515/0x8e0
[ 1292.027683][   T38]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1292.027707][   T38]  ? __pfx_device_del+0x10/0x10
[ 1292.027727][   T38]  device_unregister+0x20/0xc0
[ 1292.027740][   T38]  del_device_store+0x2aa/0x360
[ 1292.027758][   T38]  ? __pfx_del_device_store+0x10/0x10
[ 1292.027772][   T38]  ? sysfs_file_kobj+0x1e4/0x230
[ 1292.027793][   T38]  ? sysfs_kf_write+0x166/0x260
[ 1292.027815][   T38]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1292.027834][   T38]  kernfs_fop_write_iter+0x3ad/0x540
[ 1292.027856][   T38]  vfs_write+0x5d2/0xb40
[ 1292.027877][   T38]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1292.027895][   T38]  ? __pfx_vfs_write+0x10/0x10
[ 1292.027914][   T38]  ? do_sys_openat2+0x154/0x1c0
[ 1292.027926][   T38]  ? kmem_cache_free+0x195/0x510
[ 1292.027955][   T38]  ksys_write+0x14b/0x260
[ 1292.027973][   T38]  ? __pfx_ksys_write+0x10/0x10
[ 1292.027988][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1292.028012][   T38]  ? do_syscall_64+0xbe/0x3b0
[ 1292.028027][   T38]  do_syscall_64+0xfa/0x3b0
[ 1292.028039][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1292.028059][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.028072][   T38]  ? clear_bhb_loop+0x60/0xb0
[ 1292.028088][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.028102][   T38] RIP: 0033:0x7f8fa2e1d65f
[ 1292.028113][   T38] RSP: 002b:00007ffd92845ab0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1292.028127][   T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8fa2e1d65f
[ 1292.028137][   T38] RDX: 0000000000000001 RSI: 00007ffd92845b00 RDI: 0000000000000005
[ 1292.028145][   T38] RBP: 00007f8fa2ea30c1 R08: 0000000000000000 R09: 00007ffd92845907
[ 1292.028165][   T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1292.028173][   T38] R13: 00007ffd92845b00 R14: 00007f8fa3b94620 R15: 0000000000000003
[ 1292.028193][   T38]  </TASK>
[ 1292.028202][   T38] INFO: task syz-executor:11339 blocked for more than 146 seconds.
[ 1292.028212][   T38]       Not tainted syzkaller #0
[ 1292.028218][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1292.028224][   T38] task:syz-executor    state:D stack:22104 pid:11339 tgid:11339 ppid:1      task_flags:0x400140 flags:0x00004004
[ 1292.028262][   T38] Call Trace:
[ 1292.028267][   T38]  <TASK>
[ 1292.028279][   T38]  __schedule+0x16f3/0x4c20
[ 1292.028317][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1292.028354][   T38]  ? __pfx___schedule+0x10/0x10
[ 1292.028400][   T38]  rt_mutex_schedule+0x77/0xf0
[ 1292.028415][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[ 1292.028440][   T38]  ? rt_mutex_slowlock_block+0x351/0x6d0
[ 1292.028458][   T38]  rt_mutex_slowlock+0x2b1/0x6e0
[ 1292.028477][   T38]  ? rt_mutex_slowlock+0x1c9/0x6e0
[ 1292.028493][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1292.028508][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1292.028533][   T38]  ? del_device_store+0xd1/0x360
[ 1292.028551][   T38]  ? __pfx_sscanf+0x10/0x10
[ 1292.028571][   T38]  ? del_device_store+0xd1/0x360
[ 1292.028584][   T38]  mutex_lock_nested+0x16a/0x1d0
[ 1292.028603][   T38]  del_device_store+0xd1/0x360
[ 1292.028617][   T38]  ? sysfs_file_kobj+0x1a/0x230
[ 1292.028637][   T38]  ? __pfx_del_device_store+0x10/0x10
[ 1292.028651][   T38]  ? sysfs_file_kobj+0x1e4/0x230
[ 1292.028676][   T38]  ? sysfs_kf_write+0x166/0x260
[ 1292.028697][   T38]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1292.028716][   T38]  kernfs_fop_write_iter+0x3ad/0x540
[ 1292.028738][   T38]  vfs_write+0x5d2/0xb40
[ 1292.028758][   T38]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1292.028781][   T38]  ? __pfx_vfs_write+0x10/0x10
[ 1292.028799][   T38]  ? do_sys_openat2+0x154/0x1c0
[ 1292.028811][   T38]  ? kmem_cache_free+0x195/0x510
[ 1292.028839][   T38]  ksys_write+0x14b/0x260
[ 1292.028857][   T38]  ? __pfx_ksys_write+0x10/0x10
[ 1292.028877][   T38]  ? do_syscall_64+0xbe/0x3b0
[ 1292.028892][   T38]  do_syscall_64+0xfa/0x3b0
[ 1292.028903][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1292.028923][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.028936][   T38]  ? clear_bhb_loop+0x60/0xb0
[ 1292.028952][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.028965][   T38] RIP: 0033:0x7f3a03e2d65f
[ 1292.028975][   T38] RSP: 002b:00007ffd4f3a9310 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1292.028988][   T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f3a03e2d65f
[ 1292.028997][   T38] RDX: 0000000000000001 RSI: 00007ffd4f3a9360 RDI: 0000000000000005
[ 1292.029006][   T38] RBP: 00007f3a03eb30c1 R08: 0000000000000000 R09: 00007ffd4f3a9167
[ 1292.029015][   T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1292.029022][   T38] R13: 00007ffd4f3a9360 R14: 00007f3a04ba4620 R15: 0000000000000003
[ 1292.029042][   T38]  </TASK>
[ 1292.029054][   T38] INFO: task syz-executor:11745 blocked for more than 146 seconds.
[ 1292.029063][   T38]       Not tainted syzkaller #0
[ 1292.029069][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1292.029075][   T38] task:syz-executor    state:D stack:25464 pid:11745 tgid:11745 ppid:1      task_flags:0x400140 flags:0x00004004
[ 1292.029113][   T38] Call Trace:
[ 1292.029117][   T38]  <TASK>
[ 1292.029125][   T38]  __schedule+0x16f3/0x4c20
[ 1292.029164][   T38]  ? __pfx___schedule+0x10/0x10
[ 1292.029194][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1292.029215][   T38]  rt_mutex_schedule+0x77/0xf0
[ 1292.029228][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[ 1292.029244][   T38]  ? task_blocks_on_rt_mutex+0x78c/0x1380
[ 1292.029275][   T38]  rt_mutex_slowlock+0x2b1/0x6e0
[ 1292.029302][   T38]  ? rt_mutex_slowlock+0x1c9/0x6e0
[ 1292.029326][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1292.029359][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1292.029387][   T38]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1292.029415][   T38]  ? inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.029428][   T38]  mutex_lock_nested+0x16a/0x1d0
[ 1292.029444][   T38]  ? inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.029460][   T38]  inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.029481][   T38]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[ 1292.029507][   T38]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[ 1292.029521][   T38]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1292.029540][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1292.029559][   T38]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1292.029576][   T38]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1292.029606][   T38]  netlink_rcv_skb+0x205/0x470
[ 1292.029624][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1292.029642][   T38]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1292.029661][   T38]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1292.029687][   T38]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1292.029711][   T38]  netlink_unicast+0x843/0xa10
[ 1292.029733][   T38]  ? __pfx_netlink_unicast+0x10/0x10
[ 1292.029751][   T38]  ? netlink_sendmsg+0x642/0xb30
[ 1292.029769][   T38]  ? skb_put+0x11b/0x210
[ 1292.029791][   T38]  netlink_sendmsg+0x805/0xb30
[ 1292.029816][   T38]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1292.029841][   T38]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1292.029854][   T38]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1292.029873][   T38]  __sock_sendmsg+0x219/0x270
[ 1292.029893][   T38]  __sys_sendto+0x3c7/0x520
[ 1292.029915][   T38]  ? __pfx___sys_sendto+0x10/0x10
[ 1292.029943][   T38]  ? fput_close_sync+0x119/0x200
[ 1292.029965][   T38]  ? __pfx_fput_close_sync+0x10/0x10
[ 1292.029979][   T38]  ? rt_spin_unlock+0x65/0x80
[ 1292.029999][   T38]  __x64_sys_sendto+0xde/0x100
[ 1292.030021][   T38]  do_syscall_64+0xfa/0x3b0
[ 1292.030032][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1292.030051][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.030064][   T38]  ? clear_bhb_loop+0x60/0xb0
[ 1292.030080][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.030093][   T38] RIP: 0033:0x7fa7803b0a3c
[ 1292.030104][   T38] RSP: 002b:00007ffd6597c330 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1292.030116][   T38] RAX: ffffffffffffffda RBX: 00007fa781124620 RCX: 00007fa7803b0a3c
[ 1292.030127][   T38] RDX: 0000000000000028 RSI: 00007fa781124670 RDI: 0000000000000003
[ 1292.030135][   T38] RBP: 0000000000000000 R08: 00007ffd6597c384 R09: 000000000000000c
[ 1292.030144][   T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1292.030156][   T38] R13: 0000000000000000 R14: 00007fa781124670 R15: 0000000000000000
[ 1292.030176][   T38]  </TASK>
[ 1292.030181][   T38] INFO: task syz.2.1052:11759 blocked for more than 146 seconds.
[ 1292.030190][   T38]       Not tainted syzkaller #0
[ 1292.030196][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1292.030202][   T38] task:syz.2.1052      state:D stack:26552 pid:11759 tgid:11758 ppid:5856   task_flags:0x400140 flags:0x00004004
[ 1292.030240][   T38] Call Trace:
[ 1292.030244][   T38]  <TASK>
[ 1292.030251][   T38]  __schedule+0x16f3/0x4c20
[ 1292.030287][   T38]  ? is_bpf_text_address+0x26/0x2b0
[ 1292.030324][   T38]  ? __pfx___schedule+0x10/0x10
[ 1292.030370][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1292.030392][   T38]  rt_mutex_schedule+0x77/0xf0
[ 1292.030406][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[ 1292.030422][   T38]  ? task_blocks_on_rt_mutex+0xf12/0x1380
[ 1292.030449][   T38]  rt_mutex_slowlock+0x2b1/0x6e0
[ 1292.030467][   T38]  ? rt_mutex_slowlock+0x1c9/0x6e0
[ 1292.030483][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1292.030498][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1292.030523][   T38]  ? nl802154_pre_doit+0xbc/0xa00
[ 1292.030551][   T38]  ? nl802154_pre_doit+0xbc/0xa00
[ 1292.030568][   T38]  mutex_lock_nested+0x16a/0x1d0
[ 1292.030587][   T38]  nl802154_pre_doit+0xbc/0xa00
[ 1292.030608][   T38]  ? __nla_parse+0x40/0x60
[ 1292.030622][   T38]  ? __pfx_nl802154_pre_doit+0x10/0x10
[ 1292.030641][   T38]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1292.030662][   T38]  genl_family_rcv_msg_doit+0x1be/0x300
[ 1292.030681][   T38]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1292.030704][   T38]  ? bpf_lsm_capable+0x9/0x20
[ 1292.030721][   T38]  ? security_capable+0x7e/0x2e0
[ 1292.030746][   T38]  genl_rcv_msg+0x60e/0x790
[ 1292.030764][   T38]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1292.030777][   T38]  ? __pfx_nl802154_pre_doit+0x10/0x10
[ 1292.030794][   T38]  ? __pfx_nl802154_wpan_phy_netns+0x10/0x10
[ 1292.030814][   T38]  ? __pfx_nl802154_post_doit+0x10/0x10
[ 1292.030834][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1292.030857][   T38]  netlink_rcv_skb+0x205/0x470
[ 1292.030876][   T38]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1292.030891][   T38]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1292.030919][   T38]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1292.030937][   T38]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1292.030959][   T38]  genl_rcv+0x28/0x40
[ 1292.030971][   T38]  netlink_unicast+0x843/0xa10
[ 1292.030993][   T38]  ? __pfx_netlink_unicast+0x10/0x10
[ 1292.031011][   T38]  ? netlink_sendmsg+0x642/0xb30
[ 1292.031029][   T38]  ? skb_put+0x11b/0x210
[ 1292.031051][   T38]  netlink_sendmsg+0x805/0xb30
[ 1292.031075][   T38]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1292.031099][   T38]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1292.031112][   T38]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1292.031132][   T38]  __sock_sendmsg+0x219/0x270
[ 1292.031155][   T38]  ____sys_sendmsg+0x508/0x820
[ 1292.031172][   T38]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1292.031191][   T38]  ? import_iovec+0x74/0xa0
[ 1292.031211][   T38]  ___sys_sendmsg+0x21f/0x2a0
[ 1292.031226][   T38]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1292.031262][   T38]  ? __fget_files+0x2a/0x420
[ 1292.031290][   T38]  ? __fget_files+0x3a6/0x420
[ 1292.031328][   T38]  __x64_sys_sendmsg+0x1a1/0x260
[ 1292.031350][   T38]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1292.031377][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1292.031403][   T38]  ? do_syscall_64+0xbe/0x3b0
[ 1292.031418][   T38]  do_syscall_64+0xfa/0x3b0
[ 1292.031429][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1292.031448][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.031461][   T38]  ? clear_bhb_loop+0x60/0xb0
[ 1292.031477][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.031489][   T38] RIP: 0033:0x7f2a4de0eba9
[ 1292.031499][   T38] RSP: 002b:00007f2a4c076038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1292.031512][   T38] RAX: ffffffffffffffda RBX: 00007f2a4e055fa0 RCX: 00007f2a4de0eba9
[ 1292.031522][   T38] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000004
[ 1292.031531][   T38] RBP: 00007f2a4de91e19 R08: 0000000000000000 R09: 0000000000000000
[ 1292.031540][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1292.031548][   T38] R13: 00007f2a4e056038 R14: 00007f2a4e055fa0 R15: 00007ffea5de8ea8
[ 1292.031568][   T38]  </TASK>
[ 1292.031573][   T38] INFO: task syz-executor:11797 blocked for more than 146 seconds.
[ 1292.031582][   T38]       Not tainted syzkaller #0
[ 1292.031589][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1292.031594][   T38] task:syz-executor    state:D stack:26952 pid:11797 tgid:11797 ppid:1      task_flags:0x400140 flags:0x00004004
[ 1292.031634][   T38] Call Trace:
[ 1292.031638][   T38]  <TASK>
[ 1292.031646][   T38]  __schedule+0x16f3/0x4c20
[ 1292.031681][   T38]  ? __pfx___schedule+0x10/0x10
[ 1292.031712][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1292.031733][   T38]  rt_mutex_schedule+0x77/0xf0
[ 1292.031746][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[ 1292.031761][   T38]  ? task_blocks_on_rt_mutex+0xf12/0x1380
[ 1292.031789][   T38]  rt_mutex_slowlock+0x2b1/0x6e0
[ 1292.031806][   T38]  ? rt_mutex_slowlock+0x1c9/0x6e0
[ 1292.031823][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1292.031838][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1292.031862][   T38]  ? inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.031881][   T38]  ? is_bpf_text_address+0x26/0x2b0
[ 1292.031902][   T38]  ? inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.031915][   T38]  mutex_lock_nested+0x16a/0x1d0
[ 1292.031934][   T38]  inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.031954][   T38]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[ 1292.031981][   T38]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[ 1292.031994][   T38]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1292.032012][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1292.032031][   T38]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1292.032049][   T38]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1292.032078][   T38]  netlink_rcv_skb+0x205/0x470
[ 1292.032095][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1292.032112][   T38]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1292.032132][   T38]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1292.032164][   T38]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1292.032187][   T38]  netlink_unicast+0x843/0xa10
[ 1292.032209][   T38]  ? __pfx_netlink_unicast+0x10/0x10
[ 1292.032227][   T38]  ? netlink_sendmsg+0x642/0xb30
[ 1292.032244][   T38]  ? skb_put+0x11b/0x210
[ 1292.032266][   T38]  netlink_sendmsg+0x805/0xb30
[ 1292.032304][   T38]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1292.032339][   T38]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1292.032358][   T38]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1292.032382][   T38]  __sock_sendmsg+0x219/0x270
[ 1292.032402][   T38]  __sys_sendto+0x3c7/0x520
[ 1292.032424][   T38]  ? __pfx___sys_sendto+0x10/0x10
[ 1292.032460][   T38]  ? exc_page_fault+0x76/0xf0
[ 1292.032481][   T38]  ? do_user_addr_fault+0xc8a/0x1390
[ 1292.032501][   T38]  __x64_sys_sendto+0xde/0x100
[ 1292.032523][   T38]  do_syscall_64+0xfa/0x3b0
[ 1292.032534][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1292.032553][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.032566][   T38]  ? clear_bhb_loop+0x60/0xb0
[ 1292.032582][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.032594][   T38] RIP: 0033:0x7f922e770a3c
[ 1292.032604][   T38] RSP: 002b:00007ffd4ce86e90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1292.032617][   T38] RAX: ffffffffffffffda RBX: 00007f922f4e4620 RCX: 00007f922e770a3c
[ 1292.032627][   T38] RDX: 0000000000000028 RSI: 00007f922f4e4670 RDI: 0000000000000003
[ 1292.032635][   T38] RBP: 0000000000000000 R08: 00007ffd4ce86ee4 R09: 000000000000000c
[ 1292.032643][   T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1292.032651][   T38] R13: 0000000000000000 R14: 00007f922f4e4670 R15: 0000000000000000
[ 1292.032671][   T38]  </TASK>
[ 1292.032676][   T38] INFO: task syz-executor:11803 blocked for more than 146 seconds.
[ 1292.032685][   T38]       Not tainted syzkaller #0
[ 1292.032691][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1292.032697][   T38] task:syz-executor    state:D stack:26264 pid:11803 tgid:11803 ppid:1      task_flags:0x400140 flags:0x00004004
[ 1292.032738][   T38] Call Trace:
[ 1292.032742][   T38]  <TASK>
[ 1292.032767][   T38]  __schedule+0x16f3/0x4c20
[ 1292.032808][   T38]  ? __pfx___schedule+0x10/0x10
[ 1292.032844][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1292.032869][   T38]  rt_mutex_schedule+0x77/0xf0
[ 1292.032884][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[ 1292.032903][   T38]  ? task_blocks_on_rt_mutex+0xf12/0x1380
[ 1292.032934][   T38]  rt_mutex_slowlock+0x2b1/0x6e0
[ 1292.032955][   T38]  ? rt_mutex_slowlock+0x1c9/0x6e0
[ 1292.032974][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1292.032991][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1292.033020][   T38]  ? inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.033042][   T38]  ? is_bpf_text_address+0x26/0x2b0
[ 1292.033066][   T38]  ? inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.033081][   T38]  mutex_lock_nested+0x16a/0x1d0
[ 1292.033104][   T38]  inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.033128][   T38]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[ 1292.033164][   T38]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[ 1292.033180][   T38]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1292.033201][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1292.033223][   T38]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1292.033243][   T38]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1292.033286][   T38]  netlink_rcv_skb+0x205/0x470
[ 1292.033315][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1292.033345][   T38]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1292.033377][   T38]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1292.033413][   T38]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1292.033441][   T38]  netlink_unicast+0x843/0xa10
[ 1292.033467][   T38]  ? __pfx_netlink_unicast+0x10/0x10
[ 1292.033488][   T38]  ? netlink_sendmsg+0x642/0xb30
[ 1292.033508][   T38]  ? skb_put+0x11b/0x210
[ 1292.033534][   T38]  netlink_sendmsg+0x805/0xb30
[ 1292.033563][   T38]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1292.033591][   T38]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1292.033606][   T38]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1292.033629][   T38]  __sock_sendmsg+0x219/0x270
[ 1292.033651][   T38]  __sys_sendto+0x3c7/0x520
[ 1292.033676][   T38]  ? __pfx___sys_sendto+0x10/0x10
[ 1292.033719][   T38]  ? exc_page_fault+0x76/0xf0
[ 1292.033744][   T38]  ? do_user_addr_fault+0xc8a/0x1390
[ 1292.033766][   T38]  __x64_sys_sendto+0xde/0x100
[ 1292.033792][   T38]  do_syscall_64+0xfa/0x3b0
[ 1292.033806][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1292.033828][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.033843][   T38]  ? clear_bhb_loop+0x60/0xb0
[ 1292.033862][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.033877][   T38] RIP: 0033:0x7f43d5c20a3c
[ 1292.033889][   T38] RSP: 002b:00007ffd8d306400 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1292.033904][   T38] RAX: ffffffffffffffda RBX: 00007f43d6994620 RCX: 00007f43d5c20a3c
[ 1292.033915][   T38] RDX: 0000000000000028 RSI: 00007f43d6994670 RDI: 0000000000000003
[ 1292.033925][   T38] RBP: 0000000000000000 R08: 00007ffd8d306454 R09: 000000000000000c
[ 1292.033935][   T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1292.033944][   T38] R13: 0000000000000000 R14: 00007f43d6994670 R15: 0000000000000000
[ 1292.033976][   T38]  </TASK>
[ 1292.033998][   T38] 
[ 1292.033998][   T38] Showing all locks held in the system:
[ 1292.034005][   T38] 2 locks held by ksoftirqd/0/15:
[ 1292.034012][   T38]  #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1292.034047][   T38]  #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1292.034081][   T38] 7 locks held by ktimers/0/16:
[ 1292.034088][   T38] 4 locks held by pr/legacy/17:
[ 1292.034098][   T38] 1 lock held by khungtaskd/38:
[ 1292.034105][   T38]  #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1292.034135][   T38] 6 locks held by kworker/u8:2/43:
[ 1292.034205][   T38] 5 locks held by kworker/u8:4/67:
[ 1292.034217][   T38] 3 locks held by kworker/u8:5/86:
[ 1292.034233][   T38] 4 locks held by kworker/u8:7/1010:
[ 1292.034245][   T38] 3 locks held by kworker/1:2/1231:
[ 1292.034269][   T38] 5 locks held by kworker/u8:10/3600:
[ 1292.034280][   T38] 3 locks held by kworker/u8:11/3711:
[ 1292.034291][   T38] 3 locks held by kworker/u8:12/3751:
[ 1292.034302][   T38]  #0: ffff88814d08f138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1292.034354][   T38]  #1: ffffc9000e097bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1292.034394][   T38]  #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0
[ 1292.034428][   T38] 2 locks held by klogd/5196:
[ 1292.034435][   T38] 1 lock held by udevd/5207:
[ 1292.034442][   T38] 2 locks held by dhcpcd/5502:
[ 1292.034449][   T38]  #0: ffff88805c464910 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90
[ 1292.034483][   T38]  #1: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200
[ 1292.034517][   T38] 2 locks held by getty/5599:
[ 1292.034524][   T38]  #0: ffff88823bf4a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1292.034561][   T38]  #1: ffffc90003e732e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410
[ 1292.034595][   T38] 1 lock held by syz-executor/5826:
[ 1292.034602][   T38] 6 locks held by kworker/u9:3/5849:
[ 1292.034609][   T38]  #0: ffff88803173d138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1292.034642][   T38]  #1: ffffc90004defbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1292.034675][   T38]  #2: ffff88806bfc4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[ 1292.034706][   T38]  #3: ffff88806bfc40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[ 1292.034741][   T38]  #4: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[ 1292.034776][   T38]  #5: ffff888023d21358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[ 1292.034817][   T38] 1 lock held by kworker/u8:16/6095:
[ 1292.034825][   T38] 6 locks held by kworker/u8:17/6097:
[ 1292.034832][   T38]  #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1292.034865][   T38]  #1: ffffc90008857bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1292.034901][   T38]  #2: ffffffff8ecc6700 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[ 1292.034936][   T38]  #3: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890
[ 1292.034970][   T38]  #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1292.035003][   T38]  #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1292.035035][   T38] 3 locks held by kworker/u8:18/6098:
[ 1292.035043][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1292.035075][   T38]  #1: ffffc90008c6fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1292.035108][   T38]  #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1292.035136][   T38] 7 locks held by kworker/u8:19/6166:
[ 1292.035144][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1292.035185][   T38]  #1: ffffc9000c117bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1292.035219][   T38]  #2: ffff888037b87300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[ 1292.035258][   T38]  #3: ffff88805e193520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[ 1292.035310][   T38]  #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[ 1292.035357][   T38]  #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1292.035396][   T38]  #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1292.035433][   T38] 4 locks held by kworker/u8:14/8753:
[ 1292.035440][   T38]  #0: ffff88814d991138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1292.035473][   T38]  #1: ffffc90004a6fbc0 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1292.035507][   T38]  #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1292.035539][   T38]  #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1292.035571][   T38] 7 locks held by kworker/u8:15/8927:
[ 1292.035579][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1292.035611][   T38]  #1: ffffc90004997bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1292.035645][   T38]  #2: ffff88805d410300 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[ 1292.035684][   T38]  #3: ffff88805f3ba920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[ 1292.035720][   T38]  #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[ 1292.035751][   T38]  #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1292.035783][   T38]  #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1292.035816][   T38] 5 locks held by kworker/u8:21/9034:
[ 1292.035823][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1292.035855][   T38]  #1: ffffc90004d6fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1292.035889][   T38]  #2: ffff88805d060898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470
[ 1292.035924][   T38]  #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1292.035955][   T38]  #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1292.035988][   T38] 2 locks held by kworker/u8:22/9570:
[ 1292.035999][   T38] 4 locks held by kworker/0:0/11181:
[ 1292.036006][   T38]  #0: ffff88805c33e538 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1292.036042][   T38]  #1: ffffc90005257bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1292.036088][   T38]  #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1292.036120][   T38]  #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1292.036158][   T38] 7 locks held by syz-executor/11329:
[ 1292.036165][   T38]  #0: ffff888033ee8488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40
[ 1292.036200][   T38]  #1: ffff88805e8e9078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1292.036233][   T38]  #2: ffff888027153c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1292.036274][   T38]  #3: ffffffff8e542d38 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[ 1292.036352][   T38]  #4: ffff88803636b0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800
[ 1292.036392][   T38]  #5: ffff88803636a300 (&devlink->lock_key#16){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[ 1292.036430][   T38]  #6: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_notifier_net+0x8d/0x2a0
[ 1292.036465][   T38] 4 locks held by syz-executor/11339:
[ 1292.036473][   T38]  #0: ffff888033ee8488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40
[ 1292.036506][   T38]  #1: ffff8880344fa478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1292.036538][   T38]  #2: ffff888027153c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1292.036574][   T38]  #3: ffffffff8e542d38 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[ 1292.036607][   T38] 1 lock held by syz-executor/11745:
[ 1292.036615][   T38]  #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.036645][   T38] 3 locks held by syz.2.1052/11759:
[ 1292.036652][   T38]  #0: ffffffff8ed39600 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1292.036681][   T38]  #1: ffffffff8ed393f8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[ 1292.036710][   T38]  #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_pre_doit+0xbc/0xa00
[ 1292.036745][   T38] 1 lock held by syz-executor/11797:
[ 1292.036752][   T38]  #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.036782][   T38] 1 lock held by syz.8.1064/11800:
[ 1292.036790][   T38] 1 lock held by syz-executor/11803:
[ 1292.036797][   T38]  #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.036827][   T38] 1 lock held by syz-executor/11808:
[ 1292.036834][   T38]  #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.036864][   T38] 1 lock held by syz-executor/11814:
[ 1292.036871][   T38]  #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.036901][   T38] 5 locks held by kworker/u8:1/11822:
[ 1292.036908][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1292.036941][   T38]  #1: ffffc90004cffbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1292.036975][   T38]  #2: ffff88804a580898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470
[ 1292.037009][   T38]  #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1292.037041][   T38]  #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1292.037074][   T38] 4 locks held by kworker/0:4/11824:
[ 1292.037081][   T38]  #0: ffff88803afe1d38 ((wq_completion)wg-crypt-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1292.037117][   T38]  #1: ffffc90005367bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1292.037156][   T38]  #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1292.037188][   T38]  #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1292.037221][   T38] 4 locks held by kworker/0:7/11828:
[ 1292.037228][   T38]  #0: ffff88803afe3538 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1292.037264][   T38]  #1: ffffc90003c8fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1292.037331][   T38]  #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1292.037378][   T38]  #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1292.037412][   T38] 1 lock held by syz-executor/11829:
[ 1292.037420][   T38]  #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.037449][   T38] 1 lock held by syz-executor/11834:
[ 1292.037457][   T38]  #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.037486][   T38] 4 locks held by kworker/u9:4/11835:
[ 1292.037493][   T38]  #0: ffff88804e5cc138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1292.037526][   T38]  #1: ffffc90003a4fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1292.037559][   T38]  #2: ffff88806a56ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[ 1292.037589][   T38]  #3: ffff88806a56c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[ 1292.037624][   T38] 1 lock held by syz-executor/11837:
[ 1292.037631][   T38]  #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.037661][   T38] 1 lock held by syz-executor/11840:
[ 1292.037668][   T38]  #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.037698][   T38] 1 lock held by syz-executor/11845:
[ 1292.037705][   T38]  #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[ 1292.037736][   T38] 
[ 1292.037740][   T38] =============================================
[ 1292.037740][   T38] 
[ 1292.037753][   T38] NMI backtrace for cpu 0
[ 1292.037763][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1292.037777][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1292.037785][   T38] Call Trace:
[ 1292.037790][   T38]  <TASK>
[ 1292.037796][   T38]  dump_stack_lvl+0x189/0x250
[ 1292.037818][   T38]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1292.037838][   T38]  ? __pfx__printk+0x10/0x10
[ 1292.037859][   T38]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1292.037878][   T38]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1292.037896][   T38]  ? __pfx__printk+0x10/0x10
[ 1292.037913][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1292.037931][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1292.037950][   T38]  watchdog+0xf93/0xfe0
[ 1292.037970][   T38]  ? watchdog+0x1de/0xfe0
[ 1292.037990][   T38]  kthread+0x70e/0x8a0
[ 1292.038012][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1292.038028][   T38]  ? __pfx_kthread+0x10/0x10
[ 1292.038051][   T38]  ? __pfx_kthread+0x10/0x10
[ 1292.038071][   T38]  ret_from_fork+0x439/0x7d0
[ 1292.038089][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1292.038110][   T38]  ? __switch_to_asm+0x39/0x70
[ 1292.038122][   T38]  ? __switch_to_asm+0x33/0x70
[ 1292.038133][   T38]  ? __pfx_kthread+0x10/0x10
[ 1292.038157][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1292.038179][   T38]  </TASK>
[ 1292.038184][   T38] Sending NMI from CPU 0 to CPUs 1:
[ 1292.038215][    C1] NMI backtrace for cpu 1
[ 1292.038227][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1292.038245][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1292.038254][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1292.038282][    C1] Code: 13 b3 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 46 11 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1292.038296][    C1] RSP: 0018:ffffc900001d7de0 EFLAGS: 000002c6
[ 1292.038309][    C1] RAX: b8921a55c8e3f800 RBX: ffffffff81955f48 RCX: b8921a55c8e3f800
[ 1292.038321][    C1] RDX: 0000000000000001 RSI: ffffffff8d03ac8a RDI: ffffffff8b621600
[ 1292.038332][    C1] RBP: ffffc900001d7f20 R08: ffff8880b893341b R09: 1ffff11017126683
[ 1292.038345][    C1] R10: dffffc0000000000 R11: ffffed1017126684 R12: ffffffff8f1d6030
[ 1292.038357][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038d2b28
[ 1292.038367][    C1] FS:  0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000
[ 1292.038380][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1292.038391][    C1] CR2: 000055f803eaba38 CR3: 00000000361f2000 CR4: 00000000003526f0
[ 1292.038410][    C1] Call Trace:
[ 1292.038416][    C1]  <TASK>
[ 1292.038421][    C1]  default_idle+0x13/0x20
[ 1292.038437][    C1]  default_idle_call+0x74/0xb0
[ 1292.038453][    C1]  do_idle+0x1e8/0x510
[ 1292.038471][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1292.038494][    C1]  cpu_startup_entry+0x44/0x60
[ 1292.038509][    C1]  start_secondary+0x101/0x110
[ 1292.038527][    C1]  common_startup_64+0x13e/0x147
[ 1292.038550][    C1]  </TASK>
[ 1292.039206][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 1292.039216][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1292.039230][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1292.039237][   T38] Call Trace:
[ 1292.039243][   T38]  <TASK>
[ 1292.039248][   T38]  dump_stack_lvl+0x99/0x250
[ 1292.039269][   T38]  ? __asan_memcpy+0x40/0x70
[ 1292.039292][   T38]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1292.039320][   T38]  ? __pfx__printk+0x10/0x10
[ 1292.039351][   T38]  vpanic+0x281/0x750
[ 1292.039381][   T38]  ? __pfx_vpanic+0x10/0x10
[ 1292.039399][   T38]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[ 1292.039413][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1292.039438][   T38]  panic+0xb9/0xc0
[ 1292.039457][   T38]  ? __pfx_panic+0x10/0x10
[ 1292.039477][   T38]  ? irq_work_queue+0xc3/0x140
[ 1292.039496][   T38]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[ 1292.039514][   T38]  watchdog+0xfd2/0xfe0
[ 1292.039533][   T38]  ? watchdog+0x1de/0xfe0
[ 1292.039553][   T38]  kthread+0x70e/0x8a0
[ 1292.039575][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1292.039592][   T38]  ? __pfx_kthread+0x10/0x10
[ 1292.039615][   T38]  ? __pfx_kthread+0x10/0x10
[ 1292.039635][   T38]  ret_from_fork+0x439/0x7d0
[ 1292.039654][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1292.039675][   T38]  ? __switch_to_asm+0x39/0x70
[ 1292.039686][   T38]  ? __switch_to_asm+0x33/0x70
[ 1292.039697][   T38]  ? __pfx_kthread+0x10/0x10
[ 1292.039718][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1292.039740][   T38]  </TASK>
[ 1292.040083][   T38] Kernel Offset: disabled