last executing test programs:

13m19.086553754s ago: executing program 32 (id=30):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x2a2e03, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0), 0x3, 0x42f, &(0x7f0000000940)="$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")
r1 = open(0x0, 0x14927e, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
open(0x0, 0x145142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x364, &(0x7f00000018c0)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0)
getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f00000001c0), &(0x7f0000000180)=0x4)
ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

12m2.507480145s ago: executing program 33 (id=164):
syz_open_procfs(0x0, &(0x7f0000001380))
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400400c0)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000500), 0x322, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x2a, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x25, 0x24, @void}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@gettfilter={0x34, 0x2e, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0xffff, 0x2}, {0xfff1, 0xd}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}]}, 0x34}}, 0x40000)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newtfilter={0x458, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x42c, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xb}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0x1}}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0x3}}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x800, 0x1f, 0xfffffffa, 0x0, 0x4, 0x4, 0x8, 0x4, 0xf3, 0x2, 0x2, 0xffff, 0x3, 0x3, 0x80000000, 0x6, 0x4, 0xd0, 0x0, 0x8, 0x5, 0x5, 0x200, 0x6, 0x1ff, 0x5e, 0x1a0000, 0x51bd, 0x10001, 0xb61, 0x7, 0x4, 0xf92c, 0x0, 0x8, 0x4, 0x792ab383, 0x5d7, 0x800, 0x7ff, 0x80000000, 0x43d4, 0xe, 0x200, 0x5, 0x6, 0x3, 0x6f52, 0x8, 0x6, 0xcf5, 0x5, 0x400, 0x8, 0x1, 0x8, 0xff, 0x6, 0x6, 0x10001, 0x0, 0x7, 0x0, 0x1, 0x0, 0x7fff, 0xffc, 0x7, 0x5, 0x7, 0x6, 0x20000000, 0xd0b66b7, 0xdea, 0x9, 0x4, 0x4, 0x3, 0x9, 0x7, 0x1, 0x5, 0x2c26, 0x3dd, 0x4, 0xff, 0x8, 0xa, 0xe, 0xb2b, 0xff, 0x30, 0x7, 0x4, 0x12ba, 0x0, 0x768, 0x7, 0x7, 0x7ff, 0x2, 0x3, 0x3, 0x9f, 0x100, 0x3, 0x397, 0x2, 0x8, 0xdb5, 0x1ff, 0xffffff93, 0x0, 0xb8000000, 0xe, 0x100, 0x80000001, 0x1, 0xe, 0x4, 0x8, 0x101, 0x4, 0x100, 0x3, 0xdcf9, 0x8, 0xdad7, 0x1, 0x7, 0x80000001, 0x3, 0x2, 0x1, 0x5, 0x4, 0x100, 0x6727, 0x87a, 0x4, 0x9, 0xffffffbf, 0x5, 0xff, 0xde63, 0xd4a4, 0xe4, 0x8001, 0xf15, 0x10000, 0xfffffff9, 0x7, 0xb32c, 0xfffffffd, 0x401, 0x9, 0x800, 0xc, 0x1ff, 0xfffffffd, 0x7fffffff, 0xfffffffa, 0x6, 0x6, 0x7fff, 0x0, 0x8000, 0x14, 0xffff, 0xffff, 0x6, 0x3, 0x3, 0x1e5d, 0x8, 0x5, 0x9, 0x7ff, 0xf, 0x3, 0xd, 0x7, 0x9, 0x81, 0x71, 0x9, 0x1, 0x3ff, 0x5, 0x1, 0x9, 0x1, 0x9, 0x3, 0x1000, 0xffff7fff, 0x101, 0x3, 0x7, 0xf, 0x986, 0x80, 0x7, 0x1, 0x4, 0x3b0, 0x0, 0x0, 0x34e, 0x1, 0x528, 0x9, 0x7, 0x4, 0xfffffff2, 0x8000, 0x2, 0x0, 0x28000, 0x0, 0x7, 0x9, 0x9, 0x800, 0x7ff, 0x1, 0x3, 0x5, 0x9, 0xff, 0x5, 0x6, 0x2, 0x4aae, 0x2, 0xfffffff7, 0x6, 0x2, 0x0, 0x2, 0x2, 0xb, 0x9, 0x800, 0xab10, 0x7, 0x61, 0x7, 0x4, 0x7, 0x6, 0x1000, 0xfffffd7c, 0x80, 0x1]}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x458}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags})
ioctl$sock_proto_private(r0, 0x8b22, &(0x7f0000000080))
socket$inet(0x2, 0x2, 0x1)

11m34.679600926s ago: executing program 34 (id=233):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x2a2e03, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0), 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r2 = open(0x0, 0x14927e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
open(0x0, 0x145142, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x364, &(0x7f00000018c0)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00'}, 0x10)
finit_module(0xffffffffffffffff, 0x0, 0x0)
pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xca)
ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

10m43.431243641s ago: executing program 35 (id=348):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
shutdown(r0, 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="90020000100001002abd7000fbdbdf25e00000020000000000000000000000000a0101020000000000000000000000004e24fff94e210006020000a008000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="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"], 0x290}, 0x1, 0x0, 0x0, 0x4048001}, 0x4800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x548c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x80}})
syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

6m14.166238338s ago: executing program 0 (id=866):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

6m14.042939155s ago: executing program 0 (id=867):
socket$netlink(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)

6m12.690776064s ago: executing program 0 (id=868):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2)
bind$inet6(r0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_open_dev$sg(0x0, 0x1b, 0x4000)
r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)='id\x01\x80be\x82\x9d\\\x88\xab\xee\x9fl\xbd\xafzD7\xd1\xcd\x1fH\f\xc3\x80\xb2RP\x1b`\xe4l\x99\x82\xcc\xecz\x8f\xafOF')
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200020000", 0x1c)
getsockname$unix(r2, 0x0, &(0x7f0000000300))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file0\x00', r7, &(0x7f0000000080)='./file1\x00')

6m11.882041589s ago: executing program 3 (id=870):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x0)

6m10.729738514s ago: executing program 3 (id=871):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0000000000000000000000006e2c00000000a289", @ANYRES32=0x0, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
dup(0xffffffffffffffff)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_create1(0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_script(r2, &(0x7f0000020240), 0x10010)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x100000004, 0x0)

6m9.640080658s ago: executing program 3 (id=872):
r0 = syz_open_procfs(0x0, &(0x7f0000001380))
socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400400c0)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000500), 0x322, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket(0x2a, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x25, 0x24, @void}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@gettfilter={0x34, 0x2e, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0xffff, 0x2}, {0xfff1, 0xd}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}]}, 0x34}}, 0x40000)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newtfilter={0x458, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x42c, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xb}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0x1}}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0x3}}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x800, 0x1f, 0xfffffffa, 0x0, 0x4, 0x4, 0x8, 0x4, 0xf3, 0x2, 0x2, 0xffff, 0x3, 0x3, 0x80000000, 0x6, 0x4, 0xd0, 0x0, 0x8, 0x5, 0x5, 0x200, 0x6, 0x1ff, 0x5e, 0x1a0000, 0x51bd, 0x10001, 0xb61, 0x7, 0x4, 0xf92c, 0x0, 0x8, 0x4, 0x792ab383, 0x5d7, 0x800, 0x7ff, 0x80000000, 0x43d4, 0xe, 0x200, 0x5, 0x6, 0x3, 0x6f52, 0x8, 0x6, 0xcf5, 0x5, 0x400, 0x8, 0x1, 0x8, 0xff, 0x6, 0x6, 0x10001, 0x0, 0x7, 0x0, 0x1, 0x0, 0x7fff, 0xffc, 0x7, 0x5, 0x7, 0x6, 0x20000000, 0xd0b66b7, 0xdea, 0x9, 0x4, 0x4, 0x3, 0x9, 0x7, 0x1, 0x5, 0x2c26, 0x3dd, 0x4, 0xff, 0x8, 0xa, 0xe, 0xb2b, 0xff, 0x30, 0x7, 0x4, 0x12ba, 0x0, 0x768, 0x7, 0x7, 0x7ff, 0x2, 0x3, 0x3, 0x9f, 0x100, 0x3, 0x397, 0x2, 0x8, 0xdb5, 0x1ff, 0xffffff93, 0x0, 0xb8000000, 0xe, 0x100, 0x80000001, 0x1, 0xe, 0x4, 0x8, 0x101, 0x4, 0x100, 0x3, 0xdcf9, 0x8, 0xdad7, 0x1, 0x7, 0x80000001, 0x3, 0x2, 0x1, 0x5, 0x4, 0x100, 0x6727, 0x87a, 0x4, 0x9, 0xffffffbf, 0x5, 0xff, 0xde63, 0xd4a4, 0xe4, 0x8001, 0xf15, 0x10000, 0xfffffff9, 0x7, 0xb32c, 0xfffffffd, 0x401, 0x9, 0x800, 0xc, 0x1ff, 0xfffffffd, 0x7fffffff, 0xfffffffa, 0x6, 0x6, 0x7fff, 0x0, 0x8000, 0x14, 0xffff, 0xffff, 0x6, 0x3, 0x3, 0x1e5d, 0x8, 0x5, 0x9, 0x7ff, 0xf, 0x3, 0xd, 0x7, 0x9, 0x81, 0x71, 0x9, 0x1, 0x3ff, 0x5, 0x1, 0x9, 0x1, 0x9, 0x3, 0x1000, 0xffff7fff, 0x101, 0x3, 0x7, 0xf, 0x986, 0x80, 0x7, 0x1, 0x4, 0x3b0, 0x0, 0x0, 0x34e, 0x1, 0x528, 0x9, 0x7, 0x4, 0xfffffff2, 0x8000, 0x2, 0x0, 0x28000, 0x0, 0x7, 0x9, 0x9, 0x800, 0x7ff, 0x1, 0x3, 0x5, 0x9, 0xff, 0x5, 0x6, 0x2, 0x4aae, 0x2, 0xfffffff7, 0x6, 0x2, 0x0, 0x2, 0x2, 0xb, 0x9, 0x800, 0xab10, 0x7, 0x61, 0x7, 0x4, 0x7, 0x6, 0x1000, 0xfffffd7c, 0x80, 0x1]}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x458}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
socket$netlink(0x10, 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000540)={0x2572d8929a6d88f2, 0x0, {0x100, 0x7, 0x200a, 0x5, 0x2, 0x1, 0x2, 0x2}})
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags})
socket$can_j1939(0x1d, 0x2, 0x7)
getdents(r0, &(0x7f0000001000)=""/4085, 0xff5)

6m7.349933189s ago: executing program 0 (id=875):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

6m6.208083912s ago: executing program 3 (id=877):
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000880)={0x1d, 0x0, 0xc7, {0x2, 0xff, 0x4}, 0xfd}, 0x18, 0x0, 0x2, 0x0, 0x0, 0x4004881}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f9"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f00000000c0)=ANY=[])
syz_usb_control_io(r0, 0x0, 0x0)

6m3.088007975s ago: executing program 3 (id=880):
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x3000840, &(0x7f0000000900)=ANY=[@ANYBLOB='shortname=win95,nonumtail=0,nonumtail=0,iocharset=cp737,shortname=mixed,uni_xlate=0,rodir,codepage=949,uni_xlate=1,rodir,shortname=winnt,utf8=0,\x00b'], 0x3, 0x36e, &(0x7f0000000580)="$eJzs3U2IW9UXAPCTvkwyU+h/ZvGHoiA83Qk6tBUXuppSplDMRiX4sRCDnapMxsIEg+2i6bgRl4JLXblzoQsXXYugiDsFt1aQqrjQbqRC8Ury8jlJpq10qsXfbxFOzzun997JI3nzwty8uBabpxfizNWrV2JxsRTltRNrca0UK5HFwMWYVpmRAwDuDtdSit9S4SZbSvs8JQBgn/Xe/18+NJZ58/O96pN3fwC46/V//18q/pXNrFmc13x236YFAOyjqfv/D0wcrkx+1F+ec4UAANxNnn7u+SeO1yKeyvPFiK232vV2PR4fHT9+Jl6NZmzEkVj+43pEcaHQfSj1Hk+eqq0fyfO8Ez+uRL3b0a5HbHXa9eJK4XjW66/G0ViOlX5//2ojpZSd/KS2fjTP87z3ucLFTm/82Cq16wtxsD/+dwdjI45FHv+f6o84VVs/lheivjXo70TsjO5bdOe/Gsvx9UtxNppxOrq9g8ua2vqFo3l+ItUm+tv1aq+uMPcOCAAAAAAAAAAAAAAAAAAAAAAA/C2r+dDKcP+bNNq/Z3V1xvHe/jhFf39/oJ04EstxPVVTpPTrGw/X385iYn+g3fvztOvlOPDPLh0AAAAAAAAAAAAAAAAAAAD+NVrnKtFoNje2W+fOb44Hne3WuQMR0c289uVHny3FdM0NgnJ/jLFDeT91frORskFxyoqapYn2rDv4IPPhpeGMx2uqw1XMnEZ1/qFm89D9P7w3ytyXDf7nP0c1WcxeYLZrGuPB1v+KKd3KD2oYHLtBzeWU0rz2Cy9Md0UponzrT9zeQeoGX1x55Z5HWocf7WU+TYUHH1p+5vK7H/y82Wh2R47eM1jZbl1Pm43SUpG4xUF3fk9pkClFEZSGZ0Kpf4rNa9+ZzDSyb3959t53vrq50dN45vV+UInBuja2s2I5H+9urxRBaXpiS7PGWojy3qfx7QkOv7/WuHTh+59utmvsRaK3Ucfi7X7pAQAAAAAAAAAAAAAAAAAAdhn7W/G+/rfyL+zV9diT+z8zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhzRt//PxbsTGWmg2rsymTRieni6sZ2K6IyZ/Rv7vBqAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4r/orAAD//26hZxY=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syslog(0x2, 0xfffffffffffffffc, 0x1000000)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000006c0)=<r2=>0xffffffffffffffff)
ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x728e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')

6m1.541964431s ago: executing program 3 (id=884):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)

5m59.230031177s ago: executing program 0 (id=888):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='smackfshat=^,smackfshat'])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{}, @host, 0x0, 0x0, 0x2449, 0x0, 0x0, 0x1, 0x2})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7})

5m57.589410016s ago: executing program 0 (id=889):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="1a6769641bc16985173d", @ANYRESOCT=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x150a, &(0x7f0000001b80)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200440c4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='\x00', r0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mq_unlink(&(0x7f0000000340)='eth0\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000001080))

5m46.355294397s ago: executing program 36 (id=884):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)

5m42.023789436s ago: executing program 37 (id=889):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="1a6769641bc16985173d", @ANYRESOCT=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x150a, &(0x7f0000001b80)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200440c4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='\x00', r0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mq_unlink(&(0x7f0000000340)='eth0\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000001080))

4m46.449037544s ago: executing program 2 (id=1020):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='cq_alloc_error\x00', r4, 0x0, 0x3}, 0x18)
r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')

4m44.919570374s ago: executing program 2 (id=1022):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

4m44.078254504s ago: executing program 2 (id=1023):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

4m41.654942755s ago: executing program 2 (id=1030):
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
socket$inet6(0xa, 0x3, 0x2c)
syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x101301)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$netlink(0x10, 0x3, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$tipc(0x1e, 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

4m41.65394868s ago: executing program 9 (id=1031):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$binfmt_misc(r4, 0x0, 0xfffffecc)
r5 = syz_open_procfs(r1, &(0x7f00000001c0)='children\x00')
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x9, 0x4, {r1}, {}, 0x8e, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0x0, r6, {0x0, 0x0, 0x80003ff}}, 0x20)
write$FUSE_IOCTL(r5, &(0x7f00000000c0)={0x20, 0x0, r6, {0x5, 0x0, 0x8, 0x4}}, 0x20)
r7 = socket(0x1d, 0x2, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000140)=0xc)
setregid(0x0, r8)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x2140000, 0x0, 0x1, 0x0, 0x0)
r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10)
close_range(r0, 0xffffffffffffffff, 0x0)

4m39.28424315s ago: executing program 2 (id=1033):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$binfmt_misc(r4, 0x0, 0xfffffecc)
r5 = syz_open_procfs(r1, &(0x7f00000001c0)='children\x00')
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x9, 0x4, {r1}, {}, 0x8e, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0x0, r6, {0x0, 0x0, 0x80003ff}}, 0x20)
write$FUSE_IOCTL(r5, &(0x7f00000000c0)={0x20, 0x0, r6, {0x5, 0x0, 0x8, 0x4}}, 0x20)
r7 = socket(0x1d, 0x2, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000140)=0xc)
setregid(0x0, r8)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x2140000, 0x0, 0x1, 0x0, 0x0)
r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10)
close_range(r0, 0xffffffffffffffff, 0x0)

4m39.28284038s ago: executing program 9 (id=1034):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

4m37.049583458s ago: executing program 9 (id=1037):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x360044, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0}], 0x1, 0x75, 0x0)
r5 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6)
syz_clone(0x425e000, 0x0, 0x0, 0x0, 0x0, 0x0)

4m36.821024106s ago: executing program 2 (id=1038):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20040008, 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x28)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000400)='./file1/file0\x00', 0x482, &(0x7f0000000800)=ANY=[@ANYRESOCT], 0x1, 0x258, &(0x7f0000001140)="$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")
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10)
openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

4m33.666161882s ago: executing program 9 (id=1042):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0000000000000000000000006e2c00000000a289", @ANYRES32=0x0, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
dup(0xffffffffffffffff)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_create1(0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_script(r2, &(0x7f0000020240), 0x10010)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x100000004, 0x0)

4m30.757653294s ago: executing program 9 (id=1047):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x4, 0xfffe, 0x0})

4m30.16198081s ago: executing program 9 (id=1050):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
shutdown(r0, 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x4800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', <r3=>0x0, 0x0, 0x0, 0x0, 0x548c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x80}})
syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r3, 0x1, 0x6, @broadcast}, 0xfffffffffffffe0c)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

4m21.372943823s ago: executing program 38 (id=1038):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20040008, 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x28)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000400)='./file1/file0\x00', 0x482, &(0x7f0000000800)=ANY=[@ANYRESOCT], 0x1, 0x258, &(0x7f0000001140)="$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")
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10)
openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)

4m14.79564596s ago: executing program 39 (id=1050):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
shutdown(r0, 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x4800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', <r3=>0x0, 0x0, 0x0, 0x0, 0x548c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x80}})
syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r3, 0x1, 0x6, @broadcast}, 0xfffffffffffffe0c)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

41.243759857s ago: executing program 6 (id=1526):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18)
r0 = syz_open_procfs(0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f0000000100))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

40.173458462s ago: executing program 6 (id=1530):
syz_open_dev$tty1(0xc, 0x4, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "78e114100985a79874342a70e113343972d01f"})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)

39.890196759s ago: executing program 6 (id=1531):
add_key$user(&(0x7f0000000340), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)='\n', 0x1, 0xffffffffffffffff)
add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
add_key$user(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x3}, &(0x7f000000a140)='}', 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, 0x0, &(0x7f0000002380)=""/4102, 0x1006, 0x0)

39.620976061s ago: executing program 6 (id=1533):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@assoc={0x18, 0x117, 0x4, 0xa6}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x8045}, 0x80)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0)
recvmmsg(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/162, 0xa2}], 0x1}}], 0x1, 0x0, 0x0)

38.063837342s ago: executing program 6 (id=1536):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket(0x18, 0x80803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@noprefix}, {@subsystem='cpuacct'}]})
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r3, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0x40046208, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)

35.749873127s ago: executing program 6 (id=1538):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

20.21321743s ago: executing program 40 (id=1538):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

14.784801067s ago: executing program 5 (id=1590):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe04a10a0015c00200142603600e120800080024000000a86286cf6c00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701000000400ad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

12.176027413s ago: executing program 8 (id=1592):
socket$alg(0x26, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40)
syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[], 0x0)

11.935847285s ago: executing program 5 (id=1594):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100))
syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x305, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, 0x0, 0x0, 0x0)

10.62864503s ago: executing program 5 (id=1598):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/timers\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000007c0)=""/29, 0x1d, 0x9)

10.577563845s ago: executing program 7 (id=1599):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_open_procfs$pagemap(0x0, &(0x7f0000000380))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

9.382261971s ago: executing program 4 (id=1601):
add_key$user(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5", 0x4d, 0xfffffffffffffffe)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a000000ff000009"], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200"], 0x5c}}, 0x0)

9.381887872s ago: executing program 5 (id=1602):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='cq_alloc_error\x00', r4, 0x0, 0x3}, 0x18)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r7, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9.189752389s ago: executing program 8 (id=1603):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket(0x18, 0x80803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@noprefix}, {@subsystem='cpuacct'}]})
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r3, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)

8.423932133s ago: executing program 7 (id=1604):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

8.247836257s ago: executing program 1 (id=1605):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe04a10a0015c00200142603600e120800080024000000a86286cf6c00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701000000400ad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

5.877361611s ago: executing program 4 (id=1606):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000100), 0x20000000}, 0x20)

5.778251938s ago: executing program 8 (id=1607):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r2, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x749bc})

5.722260064s ago: executing program 4 (id=1608):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f00000002c0)=""/41, 0x29)
getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000)

5.402991766s ago: executing program 1 (id=1609):
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x15, 0x0, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2e00ef13c1ebb38b396e0022962e2100"], 0x10}}, 0x21)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r2, 0x0, 0x0, 0x0)

5.362234009s ago: executing program 7 (id=1610):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100))
syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x305, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, 0x0, 0x0, 0x0)

5.265642025s ago: executing program 5 (id=1611):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_open_procfs$pagemap(0x0, &(0x7f0000000380))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

5.230424724s ago: executing program 8 (id=1612):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
preadv(r2, &(0x7f0000002240)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x4, 0xfffe, 0x0})

4.496158821s ago: executing program 4 (id=1613):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_io_uring_setup(0x320e, &(0x7f0000000800), 0x0, 0x0)
syz_io_uring_setup(0x1c4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x0, 0x0)
syz_io_uring_setup(0x24fa, &(0x7f0000000080), 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
userfaultfd(0x801)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_io_uring_setup(0x231, &(0x7f0000000080), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x1588, &(0x7f0000000400))
r3 = dup3(r1, r2, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

4.109438133s ago: executing program 1 (id=1614):
mkdir(0x0, 0x0)
open$dir(0x0, 0x6040, 0x0)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/timers\x00', 0x0, 0x0)
pread64(r4, &(0x7f00000007c0)=""/29, 0x1d, 0x9)

3.101219269s ago: executing program 7 (id=1615):
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
ftruncate(0xffffffffffffffff, 0x88801)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000b00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "2da5386186bbbc1d547792146c2485a1f56826a22f38f858c8ca9330aa4947b0", "24930204fa2203be80ed9fe445c4ba4cf9ba466e662e39d82568d2f2ff01000004000000000000006fee42c776c980fb", "234949d54afefe2b86f8a4d7e21f1ab99cf2e045a0d5a9f33ee14860", {"090f9527eb7df9c6f443ca3aeb8c9f37", "81ec811a550405bbf0d37fde3c56fcaa"}}}}}}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
socket$inet(0x2, 0x80001, 0x84)

2.992969104s ago: executing program 1 (id=1616):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe9d}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff96, @void, @value}, 0x94)

1.488510571s ago: executing program 1 (id=1617):
add_key$user(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5", 0x4d, 0xfffffffffffffffe)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a000000ff000009"], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200"], 0x5c}}, 0x0)

1.488254888s ago: executing program 4 (id=1618):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = eventfd2(0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1.486991618s ago: executing program 8 (id=1619):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000100), 0x20000000}, 0x20)

1.478364969s ago: executing program 7 (id=1620):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe04a10a0015c00200142603600e120800080024000000a86286cf6c00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701000000400ad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

1.362168789s ago: executing program 5 (id=1621):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6(0x10, 0x2, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000020c0)={'erspan0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', 0x0})
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000004380), 0x101602, 0x0)
read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00'})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@base={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$inet6_udp(0xa, 0x2, 0x0)

895.811661ms ago: executing program 8 (id=1622):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='cq_alloc_error\x00', r4, 0x0, 0x3}, 0x18)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r7, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

333.526597ms ago: executing program 7 (id=1623):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18)
r0 = syz_open_procfs(0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f0000000100))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

40.667646ms ago: executing program 4 (id=1624):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(0xffffffffffffffff, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001439)
dup(0xffffffffffffffff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18)

0s ago: executing program 1 (id=1625):
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x15, 0x0, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2e00ef13c1ebb38b396e0022962e2100"], 0x10}}, 0x21)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r2, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

esses unique to avoid problems!
[  547.040956][ T9449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.071432][ T9449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.084933][ T9449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.096037][ T9449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.105945][ T9449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.117115][ T9449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.142995][ T9449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.202913][ T9449] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.213586][ T9449] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.225093][ T9449] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.234150][ T9449] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.593009][ T7257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.600898][ T7257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.608436][ T8689] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  547.735212][ T9666] 8021q: adding VLAN 0 to HW filter on device batadv0
[  547.771579][ T8689] usb 4-1: Using ep0 maxpacket: 32
[  547.812555][ T7257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.817594][ T8689] usb 4-1: config index 0 descriptor too short (expected 249, got 27)
[  547.835095][ T8689] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  547.850339][ T7257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.962702][ T8689] usb 4-1: config 0 has no interfaces?
[  547.971048][ T8689] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  548.041946][ T8689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.132907][ T8689] usb 4-1: config 0 descriptor??
[  549.898466][ T9666] veth0_vlan: entered promiscuous mode
[  549.930710][ T9868] 9pnet_fd: Insufficient options for proto=fd
[  549.941514][ T9666] veth1_vlan: entered promiscuous mode
[  550.088330][ T8811] usb 4-1: USB disconnect, device number 14
[  550.256547][ T9666] veth0_macvtap: entered promiscuous mode
[  550.490111][ T9666] veth1_macvtap: entered promiscuous mode
[  550.506741][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  550.518962][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  550.535069][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  550.642296][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  550.945909][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.199136][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.346338][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.545188][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.648499][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.684169][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  552.202634][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_0
[  552.237194][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  552.265282][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  552.316029][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  552.360763][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  552.427954][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  552.468026][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  552.513663][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  552.513696][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  552.513719][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  552.513739][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  552.515794][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_1
[  553.299466][ T9666] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  553.299505][ T9666] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  553.299533][ T9666] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  553.299560][ T9666] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  553.569127][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.569158][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  553.666456][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.666487][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.546840][ T9905] tmpfs: Unknown parameter 'smackfshat'
[  556.920200][ T9928] 9pnet_fd: Insufficient options for proto=fd
[  557.811896][ T5908] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  558.211751][ T5908] usb 9-1: Using ep0 maxpacket: 8
[  558.259537][ T9947] 9pnet_virtio: no channels available for device syz
[  558.877723][ T5866] Bluetooth: hci1: ACL packet too small
[  558.883552][ T5908] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  558.895258][ T5908] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  559.001237][ T5908] usb 9-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  559.016290][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.082084][ T5908] usb 9-1: Product: syz
[  559.086288][ T5908] usb 9-1: Manufacturer: syz
[  559.591246][ T5908] usb 9-1: SerialNumber: syz
[  559.598144][ T5908] usb 9-1: config 0 descriptor??
[  559.614746][ T5908] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  559.636639][ T5908] imon 9-1:0.0: unable to initialize intf0, err -19
[  559.661941][ T5908] imon:imon_probe: failed to initialize context!
[  559.713477][ T5908] imon 9-1:0.0: unable to register, err -19
[  559.902396][ T5866] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  559.970550][ T5908] usb 9-1: USB disconnect, device number 2
[  561.475449][ T9982] loop9: detected capacity change from 0 to 256
[  561.978722][ T9982] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b23d5, utbl_chksum : 0xe619d30d)
[  562.535628][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  562.542051][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  563.422755][ T9995] 9pnet_fd: Insufficient options for proto=fd
[  563.945697][ T5908] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  564.037847][T10008] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  564.180729][ T5908] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  564.370596][ T5908] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  564.808932][ T5908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.820741][ T5908] usb 8-1: config 0 descriptor??
[  565.053668][ T5908] pwc: Askey VC010 type 2 USB webcam detected.
[  565.197988][ T5908] pwc: send_video_command error -71
[  565.222408][ T5908] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  565.222715][ T5908] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71
[  565.272740][ T5908] usb 8-1: USB disconnect, device number 2
[  565.741357][ T5908] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  565.893269][ T5908] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  565.893313][ T5908] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  565.893337][ T5908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.895189][ T5908] usb 8-1: config 0 descriptor??
[  565.898570][ T5908] pwc: Askey VC010 type 2 USB webcam detected.
[  566.306729][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00
[  566.308242][ T5908] pwc: recv_control_msg error -32 req 02 val 2700
[  566.308748][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00
[  566.309520][ T5908] pwc: recv_control_msg error -32 req 04 val 1000
[  566.310135][ T5908] pwc: recv_control_msg error -32 req 04 val 1300
[  566.310823][ T5908] pwc: recv_control_msg error -32 req 04 val 1400
[  566.316846][ T5908] pwc: recv_control_msg error -32 req 02 val 2000
[  566.319447][ T5908] pwc: recv_control_msg error -32 req 02 val 2100
[  566.320268][ T5908] pwc: recv_control_msg error -32 req 04 val 1500
[  566.321895][ T5908] pwc: recv_control_msg error -32 req 02 val 2500
[  566.322996][ T5908] pwc: recv_control_msg error -32 req 02 val 2400
[  566.323440][ T5908] pwc: recv_control_msg error -32 req 02 val 2600
[  566.533349][ T5908] pwc: recv_control_msg error -71 req 02 val 2800
[  566.535058][ T5908] pwc: recv_control_msg error -71 req 04 val 1100
[  566.538015][ T5908] pwc: recv_control_msg error -71 req 04 val 1200
[  566.538911][ T5908] pwc: Registered as video103.
[  566.539804][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input14
[  566.561178][ T5908] usb 8-1: USB disconnect, device number 3
[  566.901270][ T8775] usb 7-1: new low-speed USB device number 15 using dummy_hcd
[  567.039166][ T8775] usb 7-1: device descriptor read/64, error -71
[  567.291321][ T8775] usb 7-1: new low-speed USB device number 16 using dummy_hcd
[  567.678281][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  567.687672][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  567.698269][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  567.761256][ T8775] usb 7-1: device descriptor read/64, error -71
[  567.774423][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  567.784510][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  567.832837][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  567.873281][ T8775] usb usb7-port1: attempt power cycle
[  569.191563][ T8775] usb 7-1: new low-speed USB device number 17 using dummy_hcd
[  570.392286][ T5866] Bluetooth: hci3: command tx timeout
[  571.704531][ T5866] Bluetooth: Unexpected continuation frame (len 18)
[  571.923844][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  571.938238][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  571.947768][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  571.956916][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  571.964892][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  571.974814][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  572.065417][T10086] 9pnet_fd: Insufficient options for proto=fd
[  572.441156][ T5847] Bluetooth: hci3: command tx timeout
[  573.250283][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.657447][T10050] chnl_net:caif_netlink_parms(): no params data found
[  573.771525][ T5847] Bluetooth: hci1: command tx timeout
[  574.013019][ T5847] Bluetooth: hci4: command tx timeout
[  574.334429][ T8775] usb 7-1: device descriptor read/8, error -110
[  574.468500][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.491505][ T5847] Bluetooth: hci3: command tx timeout
[  574.591404][ T8775] usb 7-1: new low-speed USB device number 18 using dummy_hcd
[  574.631971][ T8775] usb 7-1: device descriptor read/8, error -32
[  574.761450][ T8775] usb usb7-port1: unable to enumerate USB device
[  575.053013][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.345685][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.492909][T10083] chnl_net:caif_netlink_parms(): no params data found
[  575.543241][T10050] bridge0: port 1(bridge_slave_0) entered blocking state
[  575.550428][T10050] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.610550][T10050] bridge_slave_0: entered allmulticast mode
[  575.662065][T10050] bridge_slave_0: entered promiscuous mode
[  575.669993][T10050] bridge0: port 2(bridge_slave_1) entered blocking state
[  575.684749][T10050] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.699259][T10050] bridge_slave_1: entered allmulticast mode
[  575.714597][T10050] bridge_slave_1: entered promiscuous mode
[  576.069997][T10050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  576.088886][T10050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  576.099056][ T5847] Bluetooth: hci4: command tx timeout
[  576.611317][ T5847] Bluetooth: hci3: command tx timeout
[  576.792690][T10083] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.799947][T10083] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.834406][T10083] bridge_slave_0: entered allmulticast mode
[  576.879612][T10083] bridge_slave_0: entered promiscuous mode
[  576.899971][T10083] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.908719][T10083] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.998763][T10083] bridge_slave_1: entered allmulticast mode
[  577.108453][T10083] bridge_slave_1: entered promiscuous mode
[  577.496894][T10050] team0: Port device team_slave_0 added
[  577.644205][T10050] team0: Port device team_slave_1 added
[  577.913444][T10083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  578.033918][   T12] bridge_slave_1: left allmulticast mode
[  578.040245][   T12] bridge_slave_1: left promiscuous mode
[  578.059569][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.070515][   T12] bridge_slave_0: left allmulticast mode
[  578.079678][ T8775] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  578.093852][   T12] bridge_slave_0: left promiscuous mode
[  578.100500][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.172624][ T5847] Bluetooth: hci4: command tx timeout
[  578.261849][ T8775] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 84, setting to 64
[  578.282577][ T8775] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  578.300381][ T8775] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.310360][ T8775] usb 7-1: config 0 descriptor??
[  578.623650][ T8775] ath6kl: Failed to submit usb control message: -71
[  578.636461][ T8775] ath6kl: unable to send the bmi data to the device: -71
[  578.665383][ T8775] ath6kl: Unable to send get target info: -71
[  578.704055][ T8775] ath6kl: Failed to init ath6kl core: -71
[  578.724410][ T8775] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71
[  578.786170][ T8775] usb 7-1: USB disconnect, device number 19
[  579.296012][T10164] 9pnet_fd: Insufficient options for proto=fd
[  579.356843][T10165] loop9: detected capacity change from 0 to 128
[  579.572571][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  579.611381][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  579.648171][   T12] bond0 (unregistering): Released all slaves
[  579.869428][T10083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  580.251276][ T5847] Bluetooth: hci4: command tx timeout
[  580.261744][T10050] batman_adv: batadv0: Adding interface: batadv_slave_0
[  580.268730][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.353152][T10050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  581.357337][T10050] batman_adv: batadv0: Adding interface: batadv_slave_1
[  581.357358][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.357384][T10050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  582.757663][    C1] vkms_vblank_simulate: vblank timer overrun
[  583.167087][T10186] 9pnet_virtio: no channels available for device syz
[  583.187894][T10083] team0: Port device team_slave_0 added
[  583.327717][T10083] team0: Port device team_slave_1 added
[  584.354884][T10050] hsr_slave_0: entered promiscuous mode
[  584.631655][T10050] hsr_slave_1: entered promiscuous mode
[  584.643090][T10050] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  584.672794][T10050] Cannot create hsr debugfs directory
[  585.442382][T10209] 9pnet_virtio: no channels available for device syz
[  586.133516][ T5847] Bluetooth: hci6: ACL packet too small
[  586.950728][T10218] 9pnet_fd: Insufficient options for proto=fd
[  586.978907][T10083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  587.002248][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  587.094657][T10083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  587.794513][T10225] loop9: detected capacity change from 0 to 512
[  587.814737][   T12] hsr_slave_0: left promiscuous mode
[  587.852711][T10225] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  587.868641][   T12] hsr_slave_1: left promiscuous mode
[  587.875998][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  587.930786][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  587.969572][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  587.977914][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  587.990713][T10225] EXT4-fs (loop9): 1 truncate cleaned up
[  587.997757][T10225] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  588.038260][   T12] veth1_macvtap: left promiscuous mode
[  588.043922][   T12] veth0_macvtap: left promiscuous mode
[  588.049484][   T12] veth1_vlan: left promiscuous mode
[  588.061682][   T12] veth0_vlan: left promiscuous mode
[  588.394111][ T8089] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.526585][ T5860] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  589.502999][ T5860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 84, setting to 64
[  589.528361][ T5860] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  589.571252][ T5860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.659578][ T5860] usb 9-1: config 0 descriptor??
[  590.091781][ T5860] ath6kl: Failed to submit usb control message: -71
[  590.468785][ T5860] ath6kl: unable to send the bmi data to the device: -71
[  590.486464][ T5860] ath6kl: Unable to send get target info: -71
[  590.575545][ T5860] ath6kl: Failed to init ath6kl core: -71
[  590.649570][ T5860] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71
[  590.721848][ T5860] usb 9-1: USB disconnect, device number 3
[  590.771757][   T12] team0 (unregistering): Port device team_slave_1 removed
[  590.934062][   T12] team0 (unregistering): Port device team_slave_0 removed
[  594.749710][T10083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  594.792816][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  594.854149][T10083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  595.560592][T10083] hsr_slave_0: entered promiscuous mode
[  595.621283][T10083] hsr_slave_1: entered promiscuous mode
[  595.661646][T10083] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  595.735503][T10083] Cannot create hsr debugfs directory
[  596.199611][ T8810] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  596.581934][ T8810] usb 10-1: Using ep0 maxpacket: 8
[  596.662219][ T8810] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  596.721230][ T8810] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  597.191146][ T8810] usb 10-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  597.205868][ T8810] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.217352][ T8810] usb 10-1: Product: syz
[  597.222827][ T8810] usb 10-1: Manufacturer: syz
[  597.227860][ T8810] usb 10-1: SerialNumber: syz
[  597.278979][ T8810] usb 10-1: config 0 descriptor??
[  597.339162][ T8810] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  597.361248][ T8810] imon 10-1:0.0: unable to initialize intf0, err -19
[  597.407854][ T8810] imon:imon_probe: failed to initialize context!
[  597.426630][ T8810] imon 10-1:0.0: unable to register, err -19
[  597.549844][ T5847] Bluetooth: hci5: SCO packet for unknown connection handle 0
[  597.551776][ T5906] usb 10-1: USB disconnect, device number 3
[  598.783114][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.181670][T10348] loop9: detected capacity change from 0 to 128
[  599.328302][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.773236][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.573770][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  602.645136][T10050] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  602.701705][T10050] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  602.747002][T10050] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  602.935380][T10050] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  603.415792][T10050] 8021q: adding VLAN 0 to HW filter on device bond0
[  603.555627][T10050] 8021q: adding VLAN 0 to HW filter on device team0
[  603.587957][T10050] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  603.599310][T10050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  603.648028][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.655189][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  603.699862][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.707033][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  604.141512][   T12] bridge_slave_1: left allmulticast mode
[  604.147264][   T12] bridge_slave_1: left promiscuous mode
[  604.153652][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.201183][   T12] bridge_slave_0: left allmulticast mode
[  604.206848][   T12] bridge_slave_0: left promiscuous mode
[  604.245707][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.889486][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  604.929917][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  604.984660][   T12] bond0 (unregistering): Released all slaves
[  608.868459][T10050] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.666936][   T12] hsr_slave_0: left promiscuous mode
[  611.688443][   T12] hsr_slave_1: left promiscuous mode
[  611.731508][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  611.825921][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  611.850482][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  611.875587][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  611.955276][   T12] veth1_macvtap: left promiscuous mode
[  611.986876][   T12] veth0_macvtap: left promiscuous mode
[  612.068568][   T12] veth1_vlan: left promiscuous mode
[  612.083330][   T12] veth0_vlan: left promiscuous mode
[  614.595462][   T12] team0 (unregistering): Port device team_slave_1 removed
[  614.881733][   T12] team0 (unregistering): Port device team_slave_0 removed
[  620.187385][T10512] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR
[  620.347976][T10050] veth0_vlan: entered promiscuous mode
[  620.629662][T10050] veth1_vlan: entered promiscuous mode
[  620.818266][ T5866] Bluetooth: hci1: command 0x0406 tx timeout
[  621.227117][T10083] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  621.332714][T10532] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  622.463830][T10050] veth0_macvtap: entered promiscuous mode
[  622.483767][T10083] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  622.565023][T10083] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  622.615560][T10050] veth1_macvtap: entered promiscuous mode
[  622.657300][T10083] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  622.748737][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  622.821122][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.859454][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  622.874364][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.921237][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  622.976177][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.992617][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  623.005143][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  623.047852][T10050] batman_adv: batadv0: Interface activated: batadv_slave_0
[  623.130996][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  623.191419][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  623.226980][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  623.270730][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  623.311639][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  623.391262][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  623.871793][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  623.882303][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  624.142134][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  624.191233][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.223110][T10050] batman_adv: batadv0: Interface activated: batadv_slave_1
[  624.277881][T10050] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  624.318457][T10050] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  624.395255][T10050] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  624.404441][T10050] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  625.318449][ T8525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.423889][ T8525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.661485][T10083] 8021q: adding VLAN 0 to HW filter on device bond0
[  625.764556][T10083] 8021q: adding VLAN 0 to HW filter on device team0
[  625.775727][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.810338][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.856433][ T8806] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.863691][ T8806] bridge0: port 1(bridge_slave_0) entered forwarding state
[  625.890343][ T8806] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.897514][ T8806] bridge0: port 2(bridge_slave_1) entered forwarding state
[  626.084441][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'.
[  626.629427][T10083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  626.672753][T10083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  628.766847][T10083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  628.888828][T10083] veth0_vlan: entered promiscuous mode
[  628.942375][T10083] veth1_vlan: entered promiscuous mode
[  629.224172][T10083] veth0_macvtap: entered promiscuous mode
[  629.508821][T10083] veth1_macvtap: entered promiscuous mode
[  629.888739][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  629.970925][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.492715][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  631.231119][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.286427][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  631.348620][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.358627][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  631.369290][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.379754][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  631.391305][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.429422][T10083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  631.452154][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  631.541411][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.571299][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  631.601496][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.630688][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  631.966910][ T5847] Bluetooth: hci6: unexpected event for opcode 0x0804
[  632.305744][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.821881][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  632.884197][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.031207][T10083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.108968][T10083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.165771][T10083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  635.057716][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  635.067960][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  635.078502][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  635.087670][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  635.096284][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  635.254622][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  636.608294][T10621] chnl_net:caif_netlink_parms(): no params data found
[  637.145495][ T5969] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  637.508534][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1040'.
[  637.518026][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1040'.
[  638.196165][ T5847] Bluetooth: hci0: command tx timeout
[  640.105064][T10621] bridge0: port 1(bridge_slave_0) entered blocking state
[  640.126030][T10621] bridge0: port 1(bridge_slave_0) entered disabled state
[  640.134060][T10621] bridge_slave_0: entered allmulticast mode
[  640.141801][T10621] bridge_slave_0: entered promiscuous mode
[  640.222521][ T5969] usb 8-1: device descriptor read/all, error -71
[  640.252682][T10621] bridge0: port 2(bridge_slave_1) entered blocking state
[  640.290425][ T5847] Bluetooth: hci0: command tx timeout
[  640.361976][T10621] bridge0: port 2(bridge_slave_1) entered disabled state
[  640.372783][T10621] bridge_slave_1: entered allmulticast mode
[  640.389716][T10621] bridge_slave_1: entered promiscuous mode
[  640.898031][ T5847] Bluetooth: hci1: unexpected event for opcode 0x0804
[  641.112812][T10621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  641.163408][T10621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  641.702564][T10684] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  642.418391][ T5847] Bluetooth: hci0: command tx timeout
[  643.139300][T10621] team0: Port device team_slave_0 added
[  643.175778][T10621] team0: Port device team_slave_1 added
[  643.191533][ T5969] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  643.270303][ T5847] Bluetooth: Unexpected continuation frame (len 18)
[  643.363369][ T5969] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  643.381165][ T5969] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  643.443316][ T5969] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  643.468241][ T5969] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.545560][T10691] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  643.718303][ T5969] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  644.261844][T10621] batman_adv: batadv0: Adding interface: batadv_slave_0
[  644.277805][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  644.329197][ T5969] usb 8-1: USB disconnect, device number 6
[  644.357111][T10621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  644.373272][T10621] batman_adv: batadv0: Adding interface: batadv_slave_1
[  644.380333][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  644.407301][T10621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  644.550153][ T5847] Bluetooth: hci0: command tx timeout
[  644.616868][T10621] hsr_slave_0: entered promiscuous mode
[  644.772819][T10621] hsr_slave_1: entered promiscuous mode
[  644.822145][T10621] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  644.844847][T10621] Cannot create hsr debugfs directory
[  644.864932][T10708] udevd[10708]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  649.433351][ T8522] bridge_slave_1: left allmulticast mode
[  649.439032][ T8522] bridge_slave_1: left promiscuous mode
[  649.525622][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.610326][ T8522] bridge_slave_0: left allmulticast mode
[  649.630021][ T8522] bridge_slave_0: left promiscuous mode
[  649.637144][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.638412][ T5866] Bluetooth: hci2: command 0x0406 tx timeout
[  652.147118][ T5969] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  652.291545][ T5969] usb 7-1: Using ep0 maxpacket: 8
[  652.293100][ T5969] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  652.293134][ T5969] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  652.293163][ T5969] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  652.295462][ T5969] usb 7-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  652.295488][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.295509][ T5969] usb 7-1: Product: syz
[  652.295524][ T5969] usb 7-1: Manufacturer: syz
[  652.295539][ T5969] usb 7-1: SerialNumber: syz
[  652.297530][ T5969] usb 7-1: config 0 descriptor??
[  652.305822][ T5969] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  652.305890][ T5969] imon 7-1:0.0: unable to initialize intf0, err -19
[  652.305907][ T5969] imon:imon_probe: failed to initialize context!
[  652.305920][ T5969] imon 7-1:0.0: unable to register, err -19
[  652.523427][ T5847] Bluetooth: hci6: SCO packet for unknown connection handle 0
[  652.524304][ T5969] usb 7-1: USB disconnect, device number 20
[  652.763296][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  652.764472][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  652.765300][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  652.794383][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  652.803102][ T5862] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  652.803772][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  652.900301][ T8522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  652.903581][ T8522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  652.905500][ T8522] bond0 (unregistering): Released all slaves
[  653.125356][ T8522] hsr_slave_0: left promiscuous mode
[  653.125958][ T8522] hsr_slave_1: left promiscuous mode
[  653.131417][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  653.131459][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  653.133294][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  653.133329][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  653.186308][ T8522] veth1_macvtap: left promiscuous mode
[  653.186406][ T8522] veth0_macvtap: left promiscuous mode
[  653.197225][ T8522] veth1_vlan: left promiscuous mode
[  653.197313][ T8522] veth0_vlan: left promiscuous mode
[  654.892752][ T5847] Bluetooth: hci4: command tx timeout
[  656.984008][ T5847] Bluetooth: hci4: command tx timeout
[  657.387481][ T8522] team0 (unregistering): Port device team_slave_1 removed
[  657.564238][ T8522] team0 (unregistering): Port device team_slave_0 removed
[  659.071326][ T5847] Bluetooth: hci4: command tx timeout
[  660.234667][ T5862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  660.246540][ T5862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  660.256224][ T5862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  660.268650][ T5862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  660.276699][ T5862] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  660.286267][ T5862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  661.131662][ T5862] Bluetooth: hci4: command tx timeout
[  662.334871][ T5862] Bluetooth: hci7: command tx timeout
[  662.773128][T10814] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  664.411168][ T5862] Bluetooth: hci7: command tx timeout
[  666.153549][T10749] chnl_net:caif_netlink_parms(): no params data found
[  666.491528][ T5862] Bluetooth: hci7: command tx timeout
[  667.308963][T10787] chnl_net:caif_netlink_parms(): no params data found
[  667.461280][T10749] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.478667][T10749] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.511394][T10749] bridge_slave_0: entered allmulticast mode
[  667.541233][T10749] bridge_slave_0: entered promiscuous mode
[  667.567948][T10621] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  667.591452][ T5860] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[  667.761606][ T5860] usb 8-1: device descriptor read/64, error -71
[  668.440561][T10749] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.450237][ T5860] usb 8-1: new low-speed USB device number 8 using dummy_hcd
[  668.472573][T10749] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.520593][T10749] bridge_slave_1: entered allmulticast mode
[  668.542150][T10749] bridge_slave_1: entered promiscuous mode
[  668.572204][ T5862] Bluetooth: hci7: command tx timeout
[  668.722873][T10621] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  668.870784][ T8522] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.028921][T10749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  670.072120][T10621] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  670.100133][T10621] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  670.178477][ T8522] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.252044][ T5906] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  670.535934][T10749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  670.690626][ T8522] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.718883][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 84, setting to 64
[  670.750952][ T5906] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  670.822607][T10787] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.829477][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.846347][T10787] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.859164][ T5906] usb 7-1: config 0 descriptor??
[  670.868522][T10787] bridge_slave_0: entered allmulticast mode
[  670.912530][T10787] bridge_slave_0: entered promiscuous mode
[  670.976551][T10749] team0: Port device team_slave_0 added
[  671.117139][ T8522] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.151138][ T5906] ath6kl: Failed to submit usb control message: -71
[  671.163746][ T5906] ath6kl: unable to send the bmi data to the device: -71
[  671.170810][ T5906] ath6kl: Unable to send get target info: -71
[  671.177473][T10787] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.211322][T10787] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.218651][T10787] bridge_slave_1: entered allmulticast mode
[  671.231813][ T5906] ath6kl: Failed to init ath6kl core: -71
[  671.238280][ T5906] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71
[  671.267958][T10787] bridge_slave_1: entered promiscuous mode
[  671.279748][ T5906] usb 7-1: USB disconnect, device number 21
[  671.356742][T10749] team0: Port device team_slave_1 added
[  671.510194][T10749] batman_adv: batadv0: Adding interface: batadv_slave_0
[  671.510219][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  671.510253][T10749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  671.513380][T10749] batman_adv: batadv0: Adding interface: batadv_slave_1
[  671.513396][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  671.513421][T10749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  671.567510][T10787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  671.591002][    C0] vkms_vblank_simulate: vblank timer overrun
[  671.746246][T10749] hsr_slave_0: entered promiscuous mode
[  672.228797][T10749] hsr_slave_1: entered promiscuous mode
[  672.281365][T10749] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  672.281393][T10749] Cannot create hsr debugfs directory
[  672.366116][T10787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  673.541423][T10924] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  674.446921][ T8522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.252384][T10787] team0: Port device team_slave_0 added
[  675.333496][ T8522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.375498][T10787] team0: Port device team_slave_1 added
[  676.479042][ T8522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.180757][ T8522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.221614][T10787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  677.231302][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  677.292529][T10787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  677.357965][T10621] 8021q: adding VLAN 0 to HW filter on device bond0
[  677.690777][T10787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  677.741381][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  677.836126][T10787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  678.679598][T10621] 8021q: adding VLAN 0 to HW filter on device team0
[  678.823615][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.830759][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  678.962262][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state
[  678.969431][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  679.363532][T10787] hsr_slave_0: entered promiscuous mode
[  679.401856][ T5860] usb 7-1: new low-speed USB device number 22 using dummy_hcd
[  679.409917][T10787] hsr_slave_1: entered promiscuous mode
[  679.456332][T10787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  679.470470][T10787] Cannot create hsr debugfs directory
[  679.751228][ T5860] usb 7-1: device descriptor read/64, error -71
[  680.789157][ T5860] usb 7-1: new low-speed USB device number 23 using dummy_hcd
[  680.943840][ T8522] bridge_slave_1: left allmulticast mode
[  681.014763][ T8522] bridge_slave_1: left promiscuous mode
[  681.104747][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.653057][ T8522] bridge_slave_0: left allmulticast mode
[  681.760887][ T8522] bridge_slave_0: left promiscuous mode
[  681.788980][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.956741][ T8522] bridge_slave_1: left allmulticast mode
[  681.963510][ T8522] bridge_slave_1: left promiscuous mode
[  681.971402][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state
[  682.067910][ T8522] bridge_slave_0: left allmulticast mode
[  682.331574][ T8522] bridge_slave_0: left promiscuous mode
[  682.337400][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state
[  684.728638][   T29] kauditd_printk_skb: 47 callbacks suppressed
[  684.728662][   T29] audit: type=1326 audit(1732344254.751:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz.7.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8317e819 code=0x7ffc0000
[  684.803887][   T29] audit: type=1326 audit(1732344254.781:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz.7.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f6b8317e819 code=0x7ffc0000
[  684.834945][   T29] audit: type=1326 audit(1732344254.781:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz.7.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8317e819 code=0x7ffc0000
[  684.892054][ T5860] usb usb7-port1: attempt power cycle
[  685.231366][ T5860] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  685.274576][ T5860] usb 7-1: config 0 has an invalid descriptor of length 59, skipping remainder of the config
[  685.293913][ T5860] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  685.318617][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  685.325380][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  685.368305][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.428874][ T5860] usb 7-1: config 0 descriptor??
[  685.446605][ T5860] usb 7-1: bad CDC descriptors
[  685.839967][ T5908] usb 7-1: USB disconnect, device number 24
[  688.146904][ T8522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  688.209782][ T8522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  688.259120][ T8522] bond0 (unregistering): Released all slaves
[  689.402079][ T8522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  689.432140][ T8522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  689.455655][ T8522] bond0 (unregistering): Released all slaves
[  689.622707][T10621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  690.232654][T11096] veth0_vlan: entered allmulticast mode
[  690.569271][   T29] audit: type=1326 audit(1732344260.591:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.7.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8317e819 code=0x7ffc0000
[  690.659038][   T29] audit: type=1326 audit(1732344260.621:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.7.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8317e819 code=0x7ffc0000
[  690.728849][   T29] audit: type=1326 audit(1732344260.621:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.7.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f6b8317e819 code=0x7ffc0000
[  690.831304][   T29] audit: type=1326 audit(1732344260.621:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.7.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8317e819 code=0x7ffc0000
[  690.937329][T10749] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  690.943059][   T29] audit: type=1326 audit(1732344260.621:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.7.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8317e819 code=0x7ffc0000
[  691.008002][   T29] audit: type=1326 audit(1732344260.631:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.7.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f6b8317e819 code=0x7ffc0000
[  691.077423][   T29] audit: type=1326 audit(1732344260.631:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.7.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8317e819 code=0x7ffc0000
[  691.109778][   T29] audit: type=1326 audit(1732344260.631:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.7.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8317e819 code=0x7ffc0000
[  691.459071][T10749] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  692.433936][T10749] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  693.415426][ T8811] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  694.275804][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  694.284552][ T8811] usb 9-1: Using ep0 maxpacket: 32
[  694.299200][ T8811] usb 9-1: device descriptor read/all, error -71
[  694.300451][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  694.358563][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  694.425306][T10749] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  694.457096][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  694.464879][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  694.474440][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  696.142703][ T5847] block nbd8: Receive control failed (result -32)
[  696.180938][T11181] block nbd8: shutting down sockets
[  696.583877][ T5847] Bluetooth: hci3: command tx timeout
[  698.675140][ T5847] Bluetooth: hci3: command tx timeout
[  700.761506][ T5847] Bluetooth: hci3: command tx timeout
[  701.067537][T11259] hub 6-0:1.0: USB hub found
[  701.081717][T11259] hub 6-0:1.0: 1 port detected
[  702.811287][ T5847] Bluetooth: hci3: command tx timeout
[  703.509178][ T8522] hsr_slave_0: left promiscuous mode
[  703.516404][ T8522] hsr_slave_1: left promiscuous mode
[  703.524563][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  703.532728][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  703.550930][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  703.575488][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  703.618356][ T8522] hsr_slave_0: left promiscuous mode
[  703.626706][ T8522] hsr_slave_1: left promiscuous mode
[  703.634114][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  703.642884][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  703.651701][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  703.659551][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  703.726720][ T8522] veth1_macvtap: left promiscuous mode
[  703.738483][ T8522] veth0_macvtap: left promiscuous mode
[  703.747614][ T8522] veth1_vlan: left promiscuous mode
[  703.756888][ T8522] veth0_vlan: left promiscuous mode
[  703.770806][ T8522] veth1_macvtap: left promiscuous mode
[  703.779678][ T8522] veth0_macvtap: left promiscuous mode
[  703.789784][ T8522] veth1_vlan: left promiscuous mode
[  703.801484][ T8522] veth0_vlan: left promiscuous mode
[  704.005461][T11278] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002
[  705.566396][T11277] dccp_close: ABORT with 124 bytes unread
[  705.680819][ T5949] IPVS: starting estimator thread 0...
[  705.689951][T11287] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002
[  705.777623][T11288] IPVS: using max 19 ests per chain, 45600 per kthread
[  705.785956][ T8522] team0 (unregistering): Port device team_slave_1 removed
[  705.998288][ T8522] team0 (unregistering): Port device team_slave_0 removed
[  706.002447][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  706.633754][ T5949] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  706.819531][ T5949] usb 9-1: Using ep0 maxpacket: 16
[  706.826443][ T5949] usb 9-1: config 0 has no interfaces?
[  706.836562][ T5949] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  706.846154][ T5949] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.854232][ T5949] usb 9-1: Product: syz
[  706.858449][ T5949] usb 9-1: Manufacturer: syz
[  706.863407][ T5949] usb 9-1: SerialNumber: syz
[  706.896827][ T5949] usb 9-1: config 0 descriptor??
[  707.141387][ T5949] usb 9-1: USB disconnect, device number 6
[  708.914174][ T8775] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  709.068874][ T8775] usb 9-1: Using ep0 maxpacket: 32
[  709.089764][ T8775] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  709.110879][ T8775] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  709.158736][ T8775] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  709.177442][ T8775] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  709.190831][ T8775] usb 9-1: Product: syz
[  709.207687][ T8775] usb 9-1: Manufacturer: syz
[  709.999671][ T8775] hub 9-1:4.0: USB hub found
[  710.008127][ T8522] team0 (unregistering): Port device team_slave_1 removed
[  710.071549][ T8522] team0 (unregistering): Port device team_slave_0 removed
[  711.124577][ T8775] hub 9-1:4.0: 2 ports detected
[  711.401471][ T8775] hub 9-1:4.0: hub_hub_status failed (err = -71)
[  711.432971][ T8775] hub 9-1:4.0: config failed, can't get hub status (err -71)
[  711.494881][ T8775] usb 9-1: USB disconnect, device number 7
[  711.986017][T11323] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR
[  712.233604][T10787] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  713.892794][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  713.912540][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  713.923619][T10787] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  713.931453][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  713.943191][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  713.960829][ T5862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  713.969679][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  714.052712][T10787] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  714.132877][T10787] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  714.400844][T11360] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1189' sets config #0
[  715.036565][T11149] chnl_net:caif_netlink_parms(): no params data found
[  716.089512][ T5862] Bluetooth: hci0: command tx timeout
[  717.852893][T10787] 8021q: adding VLAN 0 to HW filter on device bond0
[  718.023659][T11149] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.034141][T11149] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.048367][T11149] bridge_slave_0: entered allmulticast mode
[  718.072169][T11149] bridge_slave_0: entered promiscuous mode
[  718.151706][ T5862] Bluetooth: hci0: command tx timeout
[  718.194432][T11149] bridge0: port 2(bridge_slave_1) entered blocking state
[  718.205436][T11149] bridge0: port 2(bridge_slave_1) entered disabled state
[  718.225909][T11149] bridge_slave_1: entered allmulticast mode
[  718.265484][T11149] bridge_slave_1: entered promiscuous mode
[  718.384794][T11395] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1195'.
[  719.004057][T10787] 8021q: adding VLAN 0 to HW filter on device team0
[  719.426417][T11149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  719.438382][T11149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  719.767298][T11339] chnl_net:caif_netlink_parms(): no params data found
[  719.824627][T11149] team0: Port device team_slave_0 added
[  719.832918][T11149] team0: Port device team_slave_1 added
[  720.007926][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  720.020994][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  720.030708][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  720.040920][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  720.048738][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  720.056788][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  720.218804][ T5847] Bluetooth: hci0: command tx timeout
[  720.226762][T11149] batman_adv: batadv0: Adding interface: batadv_slave_0
[  720.234613][T11149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  720.263952][T11149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  721.154076][T11149] batman_adv: batadv0: Adding interface: batadv_slave_1
[  721.161192][T11149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  721.222595][T11149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  722.281296][ T5847] Bluetooth: hci4: command tx timeout
[  722.288203][ T5847] Bluetooth: hci0: command tx timeout
[  723.013938][T11149] hsr_slave_0: entered promiscuous mode
[  723.041172][T11149] hsr_slave_1: entered promiscuous mode
[  723.101316][T11149] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  723.140090][T11149] Cannot create hsr debugfs directory
[  723.318163][T11339] bridge0: port 1(bridge_slave_0) entered blocking state
[  723.339930][T11339] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.360012][T11339] bridge_slave_0: entered allmulticast mode
[  723.396098][T11339] bridge_slave_0: entered promiscuous mode
[  723.422094][T11339] bridge0: port 2(bridge_slave_1) entered blocking state
[  723.449402][T11339] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.477848][T11339] bridge_slave_1: entered allmulticast mode
[  723.492957][T11339] bridge_slave_1: entered promiscuous mode
[  724.364120][ T5862] Bluetooth: hci4: command tx timeout
[  724.938466][T11499] nbd8: detected capacity change from 0 to 20
[  724.961327][T11498] block nbd8: Send control failed (result -89)
[  724.968306][T11498] block nbd8: Request send failed, requeueing
[  725.002390][ T5862] block nbd8: Receive control failed (result -32)
[  725.004326][   T40] block nbd8: Dead connection, failed to find a fallback
[  725.019745][   T40] block nbd8: shutting down sockets
[  725.025860][   T40] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  725.036111][   T40] Buffer I/O error on dev nbd8, logical block 0, async page read
[  725.044596][T11498] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  725.055888][T11498] Buffer I/O error on dev nbd8, logical block 0, async page read
[  725.064637][T11498] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  725.074130][T11498] Buffer I/O error on dev nbd8, logical block 0, async page read
[  725.082419][T11498] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  725.091904][T11498] Buffer I/O error on dev nbd8, logical block 0, async page read
[  725.101824][T11498] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  725.111630][T11498] Buffer I/O error on dev nbd8, logical block 0, async page read
[  725.119562][T11498] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  725.129232][T11498] Buffer I/O error on dev nbd8, logical block 0, async page read
[  725.137671][T11498] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  725.147858][T11498] Buffer I/O error on dev nbd8, logical block 0, async page read
[  725.156202][T11498] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  725.165644][T11498] Buffer I/O error on dev nbd8, logical block 0, async page read
[  725.173886][T11498] ldm_validate_partition_table(): Disk read failed.
[  725.199400][T11498] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  725.211990][T11498] Buffer I/O error on dev nbd8, logical block 0, async page read
[  725.221231][T11498] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  725.235343][T11498] Buffer I/O error on dev nbd8, logical block 0, async page read
[  725.249320][T11498] Dev nbd8: unable to read RDB block 0
[  725.255365][T11498]  nbd8: unable to read partition table
[  725.261746][T11498] nbd8: partition table beyond EOD, truncated
[  725.293952][T11498] ldm_validate_partition_table(): Disk read failed.
[  725.307876][T11498] Dev nbd8: unable to read RDB block 0
[  725.329081][T11498]  nbd8: unable to read partition table
[  725.334898][T11498] nbd8: partition table beyond EOD, truncated
[  726.440691][ T5862] Bluetooth: hci4: command tx timeout
[  728.039565][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1227'.
[  728.521118][ T5862] Bluetooth: hci4: command tx timeout
[  729.897787][T11339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  730.593360][T11339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  731.941433][T11420] chnl_net:caif_netlink_parms(): no params data found
[  732.117529][T11339] team0: Port device team_slave_0 added
[  733.234919][T11339] team0: Port device team_slave_1 added
[  734.015761][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  735.659709][T11339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  735.694814][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  735.758048][T11339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  736.112996][T11611] overlayfs: failed to resolve './file0': -2
[  736.843107][T11339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  736.879528][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  737.014702][T11339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  737.107513][T11625] mmap: syz.8.1245 (11625) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  737.458408][T11420] bridge0: port 1(bridge_slave_0) entered blocking state
[  737.506635][T11420] bridge0: port 1(bridge_slave_0) entered disabled state
[  737.523885][T11420] bridge_slave_0: entered allmulticast mode
[  737.542079][T11420] bridge_slave_0: entered promiscuous mode
[  738.318531][T11420] bridge0: port 2(bridge_slave_1) entered blocking state
[  738.651311][T11420] bridge0: port 2(bridge_slave_1) entered disabled state
[  738.658813][T11420] bridge_slave_1: entered allmulticast mode
[  738.690532][T11420] bridge_slave_1: entered promiscuous mode
[  739.205696][T11339] hsr_slave_0: entered promiscuous mode
[  739.224007][T11339] hsr_slave_1: entered promiscuous mode
[  739.242511][T11339] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  739.271947][T11339] Cannot create hsr debugfs directory
[  739.570728][T11420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  742.313554][T11420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  742.769000][T11420] team0: Port device team_slave_0 added
[  742.945367][T11420] team0: Port device team_slave_1 added
[  743.699782][ T8522] bridge_slave_1: left allmulticast mode
[  743.728815][ T8522] bridge_slave_1: left promiscuous mode
[  743.755015][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state
[  743.792985][ T8522] bridge_slave_0: left allmulticast mode
[  743.827478][ T8522] bridge_slave_0: left promiscuous mode
[  743.842012][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.950879][ T8522] bridge_slave_1: left allmulticast mode
[  743.956597][ T8522] bridge_slave_1: left promiscuous mode
[  744.021704][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state
[  744.102377][ T8522] bridge_slave_0: left allmulticast mode
[  744.108286][ T8522] bridge_slave_0: left promiscuous mode
[  744.114143][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state
[  744.411055][T11708] syz.8.1259[11708] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  744.411694][T11708] syz.8.1259[11708] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  744.424473][T11708] syz.8.1259[11708] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  745.269261][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1262'.
[  745.925774][   T29] audit: type=1400 audit(1732344316.182:577): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11720 comm="syz.7.1265"
[  746.618516][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  746.625045][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  747.141211][ T8522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  747.180810][ T8522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  747.256982][ T8522] bond0 (unregistering): Released all slaves
[  747.958715][ T8522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  748.005318][ T8522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  748.042013][ T8522] bond0 (unregistering): Released all slaves
[  748.260480][T11420] batman_adv: batadv0: Adding interface: batadv_slave_0
[  748.297710][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  748.344913][T11420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  749.060751][T11713] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139)
[  749.117761][T11420] batman_adv: batadv0: Adding interface: batadv_slave_1
[  749.124756][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  749.212425][T11420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  749.695075][ T8522] hsr_slave_0: left promiscuous mode
[  751.589600][ T8522] hsr_slave_1: left promiscuous mode
[  752.943485][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  753.372291][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  753.486467][ T8522] hsr_slave_0: left promiscuous mode
[  753.567684][ T8522] hsr_slave_1: left promiscuous mode
[  753.594909][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  753.681347][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  755.192884][T11835] overlayfs: missing 'lowerdir'
[  755.324070][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  755.374758][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  755.390331][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  755.405714][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  755.415552][ T5847] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  755.425069][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  755.655832][ T8522] team0 (unregistering): Port device team_slave_1 removed
[  755.752233][ T8522] team0 (unregistering): Port device team_slave_0 removed
[  757.487577][ T5847] Bluetooth: hci5: command tx timeout
[  758.672055][ T8522] team0 (unregistering): Port device team_slave_1 removed
[  758.840201][ T8522] team0 (unregistering): Port device team_slave_0 removed
[  760.071656][ T5847] Bluetooth: hci5: command tx timeout
[  761.456659][ T5847] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3
[  762.122276][ T5862] Bluetooth: hci5: command tx timeout
[  763.468558][ T5862] Bluetooth: hci2: command 0x0406 tx timeout
[  764.194089][ T5847] Bluetooth: hci5: command tx timeout
[  764.618196][T11420] hsr_slave_0: entered promiscuous mode
[  764.636779][T11420] hsr_slave_1: entered promiscuous mode
[  764.664732][T11420] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  764.672463][T11420] Cannot create hsr debugfs directory
[  764.808523][T11899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  765.621612][ T5862] Bluetooth: hci2: command 0x0406 tx timeout
[  767.705872][T11339] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  767.889306][T11936] ubi0: attaching mtd0
[  767.934622][T11936] ubi0: scanning is finished
[  767.939978][T11936] ubi0: empty MTD device detected
[  768.773637][T11339] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  769.106107][T11936] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  769.814340][T11339] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  770.231558][T11339] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  770.274632][T11838] chnl_net:caif_netlink_parms(): no params data found
[  772.843176][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  774.357266][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  774.406947][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  774.425639][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  774.434763][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  774.442537][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  776.447320][T11838] bridge0: port 1(bridge_slave_0) entered blocking state
[  776.468217][T11838] bridge0: port 1(bridge_slave_0) entered disabled state
[  776.477030][ T5862] Bluetooth: hci3: command tx timeout
[  776.505198][T11838] bridge_slave_0: entered allmulticast mode
[  776.530131][T11838] bridge_slave_0: entered promiscuous mode
[  776.568850][T11838] bridge0: port 2(bridge_slave_1) entered blocking state
[  776.611539][T11838] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.645307][T11838] bridge_slave_1: entered allmulticast mode
[  776.654600][T11838] bridge_slave_1: entered promiscuous mode
[  776.685848][ T8522] bridge_slave_1: left allmulticast mode
[  776.691762][ T8522] bridge_slave_1: left promiscuous mode
[  776.702049][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.719066][ T8522] bridge_slave_0: left allmulticast mode
[  776.796514][T12007] xt_CT: You must specify a L4 protocol and not use inversions on it
[  777.683702][ T8522] bridge_slave_0: left promiscuous mode
[  777.690254][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state
[  777.760074][ T8522] bridge_slave_1: left allmulticast mode
[  777.765850][ T8522] bridge_slave_1: left promiscuous mode
[  777.779832][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state
[  777.791537][ T8522] bridge_slave_0: left allmulticast mode
[  777.797224][ T8522] bridge_slave_0: left promiscuous mode
[  777.825448][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state
[  778.548188][ T5862] Bluetooth: hci3: command tx timeout
[  780.798329][ T5862] Bluetooth: hci3: command tx timeout
[  780.965829][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  780.997114][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  781.080825][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  781.316112][ T8522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  781.325532][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  781.339642][ T8522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  781.353489][ T5866] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  781.361477][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  782.402617][ T5866] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  782.432314][ T8522] bond0 (unregistering): Released all slaves
[  782.856894][ T5866] Bluetooth: hci3: command tx timeout
[  783.504088][ T5866] Bluetooth: hci0: command tx timeout
[  783.864634][ T8522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  783.951204][ T8522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  783.988249][ T8522] bond0 (unregistering): Released all slaves
[  784.120941][T11838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  784.294284][ T8522] hsr_slave_0: left promiscuous mode
[  784.314807][ T8522] hsr_slave_1: left promiscuous mode
[  784.494590][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  784.528280][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  784.599506][ T8522] hsr_slave_0: left promiscuous mode
[  784.610414][ T8522] hsr_slave_1: left promiscuous mode
[  785.600459][ T5866] Bluetooth: hci0: command tx timeout
[  785.841859][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  785.860403][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  787.853648][ T5866] Bluetooth: hci0: command tx timeout
[  788.042073][T12101] overlayfs: failed to resolve './file1': -2
[  788.895691][ T8522] team0 (unregistering): Port device team_slave_1 removed
[  788.958061][ T8522] team0 (unregistering): Port device team_slave_0 removed
[  789.956222][ T5866] Bluetooth: hci0: command tx timeout
[  790.393848][ T8522] team0 (unregistering): Port device team_slave_1 removed
[  790.435540][ T8522] team0 (unregistering): Port device team_slave_0 removed
[  790.872072][T11838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  791.104903][T11838] team0: Port device team_slave_0 added
[  791.193443][T11838] team0: Port device team_slave_1 added
[  792.746973][T11838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  792.754087][T11838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  792.879691][T11838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  793.104417][T11838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  793.152023][T11838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  793.286667][T11838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  793.837615][T11968] chnl_net:caif_netlink_parms(): no params data found
[  794.115771][T11838] hsr_slave_0: entered promiscuous mode
[  794.151866][T11838] hsr_slave_1: entered promiscuous mode
[  794.179723][T11838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  794.188889][T11838] Cannot create hsr debugfs directory
[  794.217234][T12033] chnl_net:caif_netlink_parms(): no params data found
[  794.498523][T11968] bridge0: port 1(bridge_slave_0) entered blocking state
[  794.510806][T11968] bridge0: port 1(bridge_slave_0) entered disabled state
[  794.525362][T11968] bridge_slave_0: entered allmulticast mode
[  794.533916][T11968] bridge_slave_0: entered promiscuous mode
[  795.404310][T11968] bridge0: port 2(bridge_slave_1) entered blocking state
[  795.420506][T11968] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.429983][T11968] bridge_slave_1: entered allmulticast mode
[  795.439960][T11968] bridge_slave_1: entered promiscuous mode
[  795.729321][T12033] bridge0: port 1(bridge_slave_0) entered blocking state
[  795.739616][T12033] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.761922][T12033] bridge_slave_0: entered allmulticast mode
[  795.771337][T12033] bridge_slave_0: entered promiscuous mode
[  795.780331][T12033] bridge0: port 2(bridge_slave_1) entered blocking state
[  795.787649][T12033] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.795237][T12033] bridge_slave_1: entered allmulticast mode
[  795.802940][T12033] bridge_slave_1: entered promiscuous mode
[  795.833157][T11968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  795.854758][T11968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  795.940507][T12033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  795.966520][T11968] team0: Port device team_slave_0 added
[  795.993906][T12033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  796.176226][T11968] team0: Port device team_slave_1 added
[  797.107384][T12033] team0: Port device team_slave_0 added
[  797.155412][T11838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  797.277405][T11968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  797.284443][T11968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  797.310397][    C1] vkms_vblank_simulate: vblank timer overrun
[  797.322403][T11968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  797.335857][T11968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  797.343131][T11968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  797.369388][T11968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  797.513695][T12033] team0: Port device team_slave_1 added
[  797.520225][T11838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  799.478260][T11838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  799.563728][T11968] hsr_slave_0: entered promiscuous mode
[  799.583877][T11968] hsr_slave_1: entered promiscuous mode
[  799.611167][T11968] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  799.622105][T11968] Cannot create hsr debugfs directory
[  799.712350][T12033] batman_adv: batadv0: Adding interface: batadv_slave_0
[  799.720548][T12033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  799.746742][    C1] vkms_vblank_simulate: vblank timer overrun
[  799.768555][T12033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  799.799127][T12033] batman_adv: batadv0: Adding interface: batadv_slave_1
[  799.815704][T12033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  799.854400][T12033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  799.893145][T11838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  801.224486][T11838] 8021q: adding VLAN 0 to HW filter on device bond0
[  801.242538][T11838] 8021q: adding VLAN 0 to HW filter on device team0
[  801.284442][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  801.284539][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  801.286300][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  801.286387][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  801.364052][T12255] tty tty35: ldisc open failed (-12), clearing slot 34
[  801.401367][T12033] hsr_slave_0: entered promiscuous mode
[  801.419063][T12033] hsr_slave_1: entered promiscuous mode
[  801.536611][T12033] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  801.576435][T12033] Cannot create hsr debugfs directory
[  801.930560][T12277] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1384'.
[  805.175529][T11838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  805.397987][ T8522] bridge_slave_1: left allmulticast mode
[  805.424265][ T8522] bridge_slave_1: left promiscuous mode
[  805.433490][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state
[  805.494558][ T8522] bridge_slave_0: left allmulticast mode
[  805.507056][ T8522] bridge_slave_0: left promiscuous mode
[  805.542415][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state
[  805.599802][ T8522] bridge_slave_1: left allmulticast mode
[  805.613810][ T8522] bridge_slave_1: left promiscuous mode
[  805.651564][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state
[  805.694393][ T8522] bridge_slave_0: left allmulticast mode
[  805.700129][ T8522] bridge_slave_0: left promiscuous mode
[  805.723564][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.056164][ T8522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  807.084030][ T8522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  807.114564][ T8522] bond0 (unregistering): Released all slaves
[  807.163570][ T8522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  807.239036][ T8522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  807.257692][ T8522] bond0 (unregistering): Released all slaves
[  807.353270][T12346] capability: warning: `syz.7.1399' uses deprecated v2 capabilities in a way that may be insecure
[  808.159905][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  808.166388][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  808.515691][T11838] veth0_vlan: entered promiscuous mode
[  809.384707][T11838] veth1_vlan: entered promiscuous mode
[  809.573115][ T8522] hsr_slave_0: left promiscuous mode
[  809.609501][ T8522] hsr_slave_1: left promiscuous mode
[  809.656560][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  809.687780][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  809.726488][ T8522] hsr_slave_0: left promiscuous mode
[  809.746594][ T8522] hsr_slave_1: left promiscuous mode
[  809.757313][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  809.775767][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  810.205399][ T8522] team0 (unregistering): Port device team_slave_1 removed
[  810.285793][ T8522] team0 (unregistering): Port device team_slave_0 removed
[  813.255146][ T8522] team0 (unregistering): Port device team_slave_1 removed
[  813.405693][ T8522] team0 (unregistering): Port device team_slave_0 removed
[  813.617150][T12399] netlink: 'syz.6.1411': attribute type 10 has an invalid length.
[  813.625303][T12399] netlink: 55 bytes leftover after parsing attributes in process `syz.6.1411'.
[  815.272453][T12033] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  815.355299][T12033] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  815.421752][T12033] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  815.493837][T12033] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  816.007667][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  816.021896][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  816.114772][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  816.136888][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  816.151213][ T5862] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  816.161522][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  816.749954][T11968] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  816.880007][T11968] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  816.951153][T11968] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  817.064371][T11968] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  819.275948][ T5862] Bluetooth: hci4: command tx timeout
[  821.026235][T11968] 8021q: adding VLAN 0 to HW filter on device bond0
[  821.063291][T11968] 8021q: adding VLAN 0 to HW filter on device team0
[  821.102933][T12033] 8021q: adding VLAN 0 to HW filter on device bond0
[  821.252076][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.259343][ T7257] bridge0: port 1(bridge_slave_0) entered forwarding state
[  821.371935][ T5866] Bluetooth: hci4: command tx timeout
[  821.489892][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.497500][ T7257] bridge0: port 2(bridge_slave_1) entered forwarding state
[  821.591856][T12033] 8021q: adding VLAN 0 to HW filter on device team0
[  821.792783][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.799978][ T7257] bridge0: port 1(bridge_slave_0) entered forwarding state
[  821.824596][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.831869][ T7257] bridge0: port 2(bridge_slave_1) entered forwarding state
[  822.058737][T12443] chnl_net:caif_netlink_parms(): no params data found
[  822.900685][T12443] bridge0: port 1(bridge_slave_0) entered blocking state
[  822.919066][T12443] bridge0: port 1(bridge_slave_0) entered disabled state
[  822.939642][T12443] bridge_slave_0: entered allmulticast mode
[  822.962798][T12443] bridge_slave_0: entered promiscuous mode
[  822.980765][T12443] bridge0: port 2(bridge_slave_1) entered blocking state
[  822.988217][T12443] bridge0: port 2(bridge_slave_1) entered disabled state
[  823.019327][T12443] bridge_slave_1: entered allmulticast mode
[  823.039688][T12443] bridge_slave_1: entered promiscuous mode
[  823.845392][ T5866] Bluetooth: hci4: command tx timeout
[  823.981467][T12523] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1429'.
[  824.405634][T11968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  824.435984][T12443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  824.505421][T12443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  824.953793][   T29] audit: type=1326 audit(1732344395.385:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.6.1433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb7057e819 code=0x0
[  824.983755][T12443] team0: Port device team_slave_0 added
[  824.995190][T12443] team0: Port device team_slave_1 added
[  825.241012][ T8522] bridge_slave_1: left allmulticast mode
[  825.252187][ T8522] bridge_slave_1: left promiscuous mode
[  825.262402][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.284735][ T8522] bridge_slave_0: left allmulticast mode
[  825.291694][ T8522] bridge_slave_0: left promiscuous mode
[  825.300869][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.909980][ T5862] Bluetooth: hci4: command tx timeout
[  827.074141][ T8522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  827.117460][ T8522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  827.163870][ T8522] bond0 (unregistering): Released all slaves
[  827.236843][T12033] 8021q: adding VLAN 0 to HW filter on device batadv0
[  827.252971][T12443] batman_adv: batadv0: Adding interface: batadv_slave_0
[  827.267269][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  827.322214][T12443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  827.335287][T12443] batman_adv: batadv0: Adding interface: batadv_slave_1
[  827.342297][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  827.369017][T12443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  827.400979][ T8522] hsr_slave_0: left promiscuous mode
[  827.418506][ T8522] hsr_slave_1: left promiscuous mode
[  827.537053][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  827.595639][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  827.680845][ T8522] veth1_vlan: left promiscuous mode
[  827.706052][ T8522] veth0_vlan: left promiscuous mode
[  828.472356][   T11] tipc: Subscription rejected, illegal request
[  828.945020][ T8522] team0 (unregistering): Port device team_slave_1 removed
[  829.045635][ T8522] team0 (unregistering): Port device team_slave_0 removed
[  831.274467][T12443] hsr_slave_0: entered promiscuous mode
[  831.369243][T12443] hsr_slave_1: entered promiscuous mode
[  831.508287][T12443] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  831.634751][T12443] Cannot create hsr debugfs directory
[  833.432354][T11968] veth0_vlan: entered promiscuous mode
[  834.603083][T12677] veth1_macvtap: left promiscuous mode
[  834.608772][T12677] macsec0: entered promiscuous mode
[  834.614055][T12677] macsec0: entered allmulticast mode
[  835.100233][T12033] veth0_vlan: entered promiscuous mode
[  835.163978][T12033] veth1_vlan: entered promiscuous mode
[  836.583304][ T5866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  836.628576][ T5866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  836.700570][ T5866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  836.952055][ T5866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  836.962068][ T5866] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  836.970074][ T5866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  839.469787][ T5866] Bluetooth: hci5: command tx timeout
[  841.281414][T12730] 9pnet_fd: Insufficient options for proto=fd
[  841.500337][ T5866] Bluetooth: hci5: command tx timeout
[  841.855001][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  841.879794][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  841.889359][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  841.900167][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  841.908103][ T5862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  841.915993][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  843.653097][ T5866] Bluetooth: hci5: command tx timeout
[  843.797549][T12443] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  843.855719][T12443] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  844.112109][T12693] chnl_net:caif_netlink_parms(): no params data found
[  844.126244][T12443] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  844.129654][ T5866] Bluetooth: hci0: command tx timeout
[  844.960397][T12443] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  845.728320][ T5862] Bluetooth: hci5: command tx timeout
[  846.205946][ T5862] Bluetooth: hci0: command tx timeout
[  847.037793][ T3547] bridge_slave_1: left allmulticast mode
[  847.055326][ T3547] bridge_slave_1: left promiscuous mode
[  847.061451][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.310295][ T3547] bridge_slave_0: left allmulticast mode
[  847.332999][ T3547] bridge_slave_0: left promiscuous mode
[  847.371519][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.284146][ T5862] Bluetooth: hci0: command tx timeout
[  848.647175][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  848.661240][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  848.677769][ T3547] bond0 (unregistering): Released all slaves
[  848.724075][ T8688] usb 8-1: new low-speed USB device number 9 using dummy_hcd
[  848.820840][T12693] bridge0: port 1(bridge_slave_0) entered blocking state
[  848.836500][T12693] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.845906][T12693] bridge_slave_0: entered allmulticast mode
[  848.854213][ T8688] usb 8-1: device descriptor read/64, error -71
[  848.876255][T12693] bridge_slave_0: entered promiscuous mode
[  848.889970][T12738] chnl_net:caif_netlink_parms(): no params data found
[  848.930983][ T3547] hsr_slave_0: left promiscuous mode
[  848.948025][ T3547] hsr_slave_1: left promiscuous mode
[  848.962451][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_0
[  848.987561][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_1
[  849.046789][ T3547] veth0_vlan: left promiscuous mode
[  849.094775][ T8688] usb 8-1: new low-speed USB device number 10 using dummy_hcd
[  849.233496][ T8688] usb 8-1: device descriptor read/64, error -71
[  849.354736][ T8688] usb usb8-port1: attempt power cycle
[  849.891059][ T3547] team0 (unregistering): Port device team_slave_1 removed
[  850.022062][ T3547] team0 (unregistering): Port device team_slave_0 removed
[  850.472442][ T5862] Bluetooth: hci0: command tx timeout
[  853.903798][T12693] bridge0: port 2(bridge_slave_1) entered blocking state
[  853.920067][T12693] bridge0: port 2(bridge_slave_1) entered disabled state
[  853.935879][T12693] bridge_slave_1: entered allmulticast mode
[  853.966009][T12693] bridge_slave_1: entered promiscuous mode
[  854.469671][ T5860] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  854.496952][T12693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  854.641287][ T5860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  854.652496][ T5860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  854.832439][T12693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  854.853778][ T5860] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  854.867600][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  854.916716][ T5860] usb 7-1: config 0 descriptor??
[  854.940720][T12824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  854.947305][T12443] 8021q: adding VLAN 0 to HW filter on device bond0
[  855.037775][T12693] team0: Port device team_slave_0 added
[  855.066468][T12738] bridge0: port 1(bridge_slave_0) entered blocking state
[  855.077457][T12738] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.086615][T12738] bridge_slave_0: entered allmulticast mode
[  855.104884][T12738] bridge_slave_0: entered promiscuous mode
[  855.118583][T12738] bridge0: port 2(bridge_slave_1) entered blocking state
[  855.134463][T12738] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.162523][T12738] bridge_slave_1: entered allmulticast mode
[  855.176112][T12738] bridge_slave_1: entered promiscuous mode
[  855.204913][T12693] team0: Port device team_slave_1 added
[  855.300197][T12693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  855.315113][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  855.350201][T12693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  855.375564][T12443] 8021q: adding VLAN 0 to HW filter on device team0
[  855.449547][T12738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  855.637121][T12693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  855.645130][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  855.664536][T12840] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1490'.
[  855.672603][T12693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  855.697010][T12738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  855.795275][T12738] team0: Port device team_slave_0 added
[  855.807234][T12738] team0: Port device team_slave_1 added
[  855.826734][ T5860] hid-led 0003:27B8:01ED.0001: probe with driver hid-led failed with error -71
[  855.876286][ T5860] usb 7-1: USB disconnect, device number 25
[  855.956524][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state
[  855.963828][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  856.044946][T12693] hsr_slave_0: entered promiscuous mode
[  856.073844][T12693] hsr_slave_1: entered promiscuous mode
[  856.107702][T12693] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  856.135542][T12693] Cannot create hsr debugfs directory
[  856.180642][T12738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  856.210127][T12738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  856.511787][T12738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  857.043997][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  857.051262][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  857.067237][   T29] audit: type=1326 audit(1732344427.545:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12849 comm="syz.6.1492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb7057e819 code=0x0
[  857.105139][T12738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  857.134734][T12738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  857.207611][T12738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  857.467718][ T5949] usb 9-1: new low-speed USB device number 8 using dummy_hcd
[  857.648690][ T5949] usb 9-1: device descriptor read/64, error -71
[  857.887320][ T5949] usb 9-1: new low-speed USB device number 9 using dummy_hcd
[  858.101059][T12738] hsr_slave_0: entered promiscuous mode
[  858.118745][T12738] hsr_slave_1: entered promiscuous mode
[  858.125408][T12738] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  858.138311][T12738] Cannot create hsr debugfs directory
[  858.196949][ T5949] usb 9-1: device descriptor read/64, error -71
[  858.322189][ T5949] usb usb9-port1: attempt power cycle
[  858.751550][ T5949] usb 9-1: new low-speed USB device number 10 using dummy_hcd
[  859.025115][T12443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  859.521217][ T3547] bridge_slave_1: left allmulticast mode
[  859.527918][ T3547] bridge_slave_1: left promiscuous mode
[  859.565220][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.575243][ T3547] bridge_slave_0: left allmulticast mode
[  859.591908][ T3547] bridge_slave_0: left promiscuous mode
[  859.623503][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state
[  859.879500][ T5949] usb 9-1: device descriptor read/8, error -71
[  862.407054][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  862.420279][   T29] audit: type=1326 audit(1732344432.898:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.7.1504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b8317e819 code=0x0
[  862.443610][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  862.455667][ T3547] bond0 (unregistering): Released all slaves
[  862.651551][ T3547] hsr_slave_0: left promiscuous mode
[  862.660028][ T3547] hsr_slave_1: left promiscuous mode
[  862.681857][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_0
[  862.707511][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_1
[  862.762235][ T3547] veth1_vlan: left promiscuous mode
[  862.771570][ T3547] veth0_vlan: left promiscuous mode
[  865.501219][ T3547] team0 (unregistering): Port device team_slave_1 removed
[  866.103532][ T3547] team0 (unregistering): Port device team_slave_0 removed
[  866.170087][   T29] audit: type=1326 audit(1732344436.651:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7057e819 code=0x7ffc0000
[  866.248054][   T29] audit: type=1326 audit(1732344436.681:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7057e819 code=0x7ffc0000
[  866.285524][   T29] audit: type=1326 audit(1732344436.691:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb7057e819 code=0x7ffc0000
[  866.337785][   T29] audit: type=1326 audit(1732344436.691:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7057e819 code=0x7ffc0000
[  866.374434][   T29] audit: type=1326 audit(1732344436.691:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7057e819 code=0x7ffc0000
[  866.405462][   T29] audit: type=1326 audit(1732344436.691:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb7057e819 code=0x7ffc0000
[  866.435404][T12922] 9pnet_fd: Insufficient options for proto=fd
[  866.476375][   T29] audit: type=1326 audit(1732344436.691:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7057e819 code=0x7ffc0000
[  866.508183][   T29] audit: type=1326 audit(1732344436.711:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7feb7057e819 code=0x7ffc0000
[  866.544068][   T29] audit: type=1326 audit(1732344436.711:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12916 comm="syz.6.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7057e819 code=0x7ffc0000
[  866.689493][ T5860] usb 8-1: new low-speed USB device number 12 using dummy_hcd
[  866.830675][ T5860] usb 8-1: device descriptor read/64, error -71
[  867.081331][ T5860] usb 8-1: new low-speed USB device number 13 using dummy_hcd
[  867.222574][ T5860] usb 8-1: device descriptor read/64, error -71
[  867.297984][T12443] 8021q: adding VLAN 0 to HW filter on device batadv0
[  867.351188][ T5860] usb usb8-port1: attempt power cycle
[  867.445743][T12443] veth0_vlan: entered promiscuous mode
[  867.513131][T12443] veth1_vlan: entered promiscuous mode
[  867.571569][T12443] veth0_macvtap: entered promiscuous mode
[  867.598312][T12443] veth1_macvtap: entered promiscuous mode
[  867.849998][   T29] kauditd_printk_skb: 44 callbacks suppressed
[  867.850023][   T29] audit: type=1326 audit(1732344438.332:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.6.1518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb7057e819 code=0x0
[  867.891601][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  867.923611][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  867.955495][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  867.977377][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  867.998974][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.016133][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.029099][T12443] batman_adv: batadv0: Interface activated: batadv_slave_0
[  868.052214][T12738] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  868.111676][ T5860] usb usb8-port1: Cannot enable. Maybe the USB cable is bad?
[  868.131084][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.150484][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.170349][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.182187][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.200375][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.216760][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.228124][T12443] batman_adv: batadv0: Interface activated: batadv_slave_1
[  868.240339][ T5860] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  868.288411][ T5860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  868.311979][ T5860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  868.331755][T12738] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  868.338818][ T5860] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  868.363065][T12443] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  868.372671][ T5860] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  868.381840][T12443] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  868.396963][T12443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  868.404674][ T5860] usb 8-1: config 0 descriptor??
[  868.407430][T12443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  868.427065][T12738] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  868.438946][T12738] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  868.768649][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  868.790152][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  868.956002][T12738] 8021q: adding VLAN 0 to HW filter on device bond0
[  869.040437][ T6182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  869.071184][T12693] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  869.078017][ T6182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  869.099114][T12693] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  869.121428][T12693] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  869.139286][T12693] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  869.174704][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  869.181623][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  869.239574][T12738] 8021q: adding VLAN 0 to HW filter on device team0
[  869.298857][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state
[  869.306118][ T6182] bridge0: port 1(bridge_slave_0) entered forwarding state
[  869.358449][ T5860] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71
[  869.373013][ T5860] usb 8-1: USB disconnect, device number 15
[  869.542172][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state
[  869.549536][ T6182] bridge0: port 2(bridge_slave_1) entered forwarding state
[  869.626542][T12738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  869.637619][T12738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  869.848377][T12693] 8021q: adding VLAN 0 to HW filter on device bond0
[  869.867694][T12693] 8021q: adding VLAN 0 to HW filter on device team0
[  870.684241][ T6293] bridge0: port 1(bridge_slave_0) entered blocking state
[  870.691456][ T6293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  870.720914][ T6293] bridge0: port 2(bridge_slave_1) entered blocking state
[  870.728182][ T6293] bridge0: port 2(bridge_slave_1) entered forwarding state
[  870.992369][ T5860] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  871.855896][ T5860] usb 2-1: Using ep0 maxpacket: 8
[  872.009155][ T5860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  872.036792][ T5860] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  872.075079][ T5860] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  872.084791][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.103320][ T5860] usb 2-1: Product: syz
[  872.107551][ T5860] usb 2-1: Manufacturer: syz
[  872.128615][ T5860] usb 2-1: SerialNumber: syz
[  872.152360][ T5860] usb 2-1: config 0 descriptor??
[  872.186389][ T5860] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  872.194229][ T5860] imon 2-1:0.0: unable to initialize intf0, err -19
[  872.201285][ T5860] imon:imon_probe: failed to initialize context!
[  872.207764][ T5860] imon 2-1:0.0: unable to register, err -19
[  872.571759][T12973] fuse: Bad value for 'fd'
[  872.845152][T12693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  872.933674][T12738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  872.975628][ T8811] usb 2-1: USB disconnect, device number 2
[  873.104511][   T29] audit: type=1326 audit(1732344443.555:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12976 comm="syz.1.1529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe01af7e819 code=0x0
[  873.819043][T12738] veth0_vlan: entered promiscuous mode
[  873.865881][T12693] veth0_vlan: entered promiscuous mode
[  874.202654][T12738] veth1_vlan: entered promiscuous mode
[  874.960334][T12693] veth1_vlan: entered promiscuous mode
[  875.127931][T12738] veth0_macvtap: entered promiscuous mode
[  875.199507][T12693] veth0_macvtap: entered promiscuous mode
[  875.257960][T12738] veth1_macvtap: entered promiscuous mode
[  875.275330][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  875.286497][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.296455][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  875.307023][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.316957][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  875.327511][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.337419][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  875.347981][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.360011][T12738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  875.370071][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  875.380749][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.390716][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  875.401276][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.411294][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  875.436442][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.466423][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  875.478217][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.489501][T12738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  875.502514][T12693] veth1_macvtap: entered promiscuous mode
[  875.803042][T12738] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  875.957375][T12738] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  876.059365][T12738] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  876.382007][T12738] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  877.338067][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  877.485294][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.507550][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  877.549850][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.582048][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  877.635169][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.722283][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  877.788180][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.825286][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  877.844217][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.900334][T12693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  878.000041][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  878.011577][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  878.054149][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  878.075065][ T5969] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  878.128436][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  878.147595][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  878.161275][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  878.172368][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  878.182957][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  878.192978][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  878.203506][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  878.214669][T12693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  878.225937][T12693] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  878.234653][T12693] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  878.245678][T12693] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  878.255453][T12693] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  878.257667][ T5969] usb 8-1: Using ep0 maxpacket: 8
[  878.369098][ T5969] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  878.424745][ T5969] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[  878.464756][ T5969] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  878.503066][ T5969] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  878.533879][ T5969] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  878.566117][ T8525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  878.573953][ T8525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  878.577772][ T5969] usb 8-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  878.594778][ T5969] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.651827][ T5969] usb 8-1: Product: syz
[  878.662683][ T5969] usb 8-1: Manufacturer: syz
[  878.691478][ T5969] usb 8-1: SerialNumber: syz
[  878.732531][ T5969] usb 8-1: config 0 descriptor??
[  878.746447][ T8806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  878.754428][ T8525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  878.772869][ T5969] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90)
[  878.780416][ T8525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  878.791597][ T8806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  878.815884][ T5969] imon 8-1:0.0: unable to initialize intf0, err -90
[  878.836000][ T5969] imon:imon_probe: failed to initialize context!
[  878.860687][ T5969] imon 8-1:0.0: unable to register, err -19
[  878.920370][ T8525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.016454][ T8525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.073928][ T5969] usb 8-1: USB disconnect, device number 16
[  881.315632][T13074] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR
[  886.811399][T13147] overlayfs: overlapping lowerdir path
[  893.522134][T13210] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1575'.
[  895.468304][T13220] overlayfs: overlapping lowerdir path
[  896.928936][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  896.940660][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  896.951655][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  896.964691][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  896.995087][ T5866] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  897.005762][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  899.636867][ T5866] Bluetooth: hci3: command tx timeout
[  900.575701][ T5860] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  901.078593][T13268] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1590'.
[  901.130352][ T5860] usb 8-1: Using ep0 maxpacket: 16
[  901.164616][ T5860] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  901.184959][ T5860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  901.325617][ T5860] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  901.334863][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  901.368119][ T5860] usb 8-1: Product: syz
[  901.385627][ T5860] usb 8-1: Manufacturer: syz
[  901.395898][ T5860] usb 8-1: SerialNumber: syz
[  901.585381][ T5860] usb 8-1: config 0 descriptor??
[  901.638190][ T5860] usb 8-1: can't set config #0, error -71
[  901.704501][ T5862] Bluetooth: hci3: command tx timeout
[  901.731468][ T5860] usb 8-1: USB disconnect, device number 17
[  902.873614][T13225] chnl_net:caif_netlink_parms(): no params data found
[  903.774797][ T5862] Bluetooth: hci3: command tx timeout
[  904.920332][T13225] bridge0: port 1(bridge_slave_0) entered blocking state
[  904.944171][T13225] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.951615][T13225] bridge_slave_0: entered allmulticast mode
[  905.519436][T13225] bridge_slave_0: entered promiscuous mode
[  906.524742][ T5862] Bluetooth: hci3: command tx timeout
[  906.960780][T13225] bridge0: port 2(bridge_slave_1) entered blocking state
[  906.960859][T13225] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.961002][T13225] bridge_slave_1: entered allmulticast mode
[  906.962243][T13225] bridge_slave_1: entered promiscuous mode
[  907.175286][T13328] tty tty37: ldisc open failed (-12), clearing slot 36
[  907.500389][T13341] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1605'.
[  907.550157][T13344] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  908.723654][T13225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  908.811962][T13225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  911.672261][T13225] team0: Port device team_slave_0 added
[  911.698290][T13225] team0: Port device team_slave_1 added
[  912.043354][T13225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  912.098245][T13225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  912.185044][T13410] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1620'.
[  912.256628][T13225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  912.362916][T13225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  912.401724][T13225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  912.832567][T13225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  913.317724][T13420] ------------[ cut here ]------------
[  913.323215][T13420] DEBUG_LOCKS_WARN_ON(1)
[  913.323357][T13420] WARNING: CPU: 0 PID: 13420 at kernel/locking/lockdep.c:232 __lock_acquire+0x564/0x2100
[  913.337390][T13420] Modules linked in:
[  913.341279][T13420] CPU: 0 UID: 0 PID: 13420 Comm: syz.7.1623 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0
[  913.351771][T13420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  913.361817][T13420] RIP: 0010:__lock_acquire+0x564/0x2100
[  913.367368][T13420] Code: 00 00 83 3d 11 c9 ac 0e 00 75 23 90 48 c7 c7 80 d1 0a 8c 48 c7 c6 80 d4 0a 8c e8 77 64 e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f
[  913.386971][T13420] RSP: 0018:ffffc90003d7f2d0 EFLAGS: 00010046
[  913.393216][T13420] RAX: 4215103f8b5df600 RBX: 00000000000010d8 RCX: 0000000000080000
[  913.401187][T13420] RDX: dffffc0000000000 RSI: 000000000000957f RDI: 0000000000009580
[  913.409149][T13420] RBP: 00000000000c10d8 R08: ffffffff8155fe42 R09: 1ffff110170c519a
[  913.417111][T13420] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff8880359028c4
[  913.425079][T13420] R13: 000000000000000f R14: 1ffff11006b2052f R15: ffff888035902978
[  913.433045][T13420] FS:  00007f6b83fff6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  913.441966][T13420] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  913.448547][T13420] CR2: 00007f45936a0d58 CR3: 000000005dcb4000 CR4: 0000000000350ef0
[  913.456515][T13420] Call Trace:
[  913.459784][T13420]  <TASK>
[  913.462706][T13420]  ? __warn+0x168/0x4e0
[  913.466859][T13420]  ? __lock_acquire+0x564/0x2100
[  913.471800][T13420]  ? report_bug+0x2b3/0x500
[  913.476298][T13420]  ? __lock_acquire+0x564/0x2100
[  913.481234][T13420]  ? handle_bug+0x60/0x90
[  913.485589][T13420]  ? exc_invalid_op+0x1a/0x50
[  913.490276][T13420]  ? asm_exc_invalid_op+0x1a/0x20
[  913.495302][T13420]  ? __warn_printk+0x292/0x360
[  913.500066][T13420]  ? __lock_acquire+0x564/0x2100
[  913.505006][T13420]  lock_acquire+0x1ed/0x550
[  913.509502][T13420]  ? sched_core_lock+0x162/0x240
[  913.514437][T13420]  ? __pfx_lock_acquire+0x10/0x10
[  913.519452][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.525089][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.530723][T13420]  ? do_raw_spin_lock+0x272/0x370
[  913.535749][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.541385][T13420]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  913.546758][T13420]  _raw_spin_lock_nested+0x31/0x40
[  913.551868][T13420]  ? sched_core_lock+0x162/0x240
[  913.556798][T13420]  sched_core_lock+0x162/0x240
[  913.561638][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.567269][T13420]  ? __pfx_sched_core_lock+0x10/0x10
[  913.572553][T13420]  __sched_core_flip+0x176/0x440
[  913.577704][T13420]  ? __pfx___sched_core_flip+0x10/0x10
[  913.583160][T13420]  sched_core_get+0xbd/0x180
[  913.587751][T13420]  sched_core_alloc_cookie+0x71/0xa0
[  913.593037][T13420]  sched_core_share_pid+0x298/0x7d0
[  913.598250][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.603888][T13420]  ? sched_core_share_pid+0xe5/0x7d0
[  913.609165][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.614809][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.620437][T13420]  ? yama_task_prctl+0x8c/0x500
[  913.625285][T13420]  ? __pfx_sched_core_share_pid+0x10/0x10
[  913.631002][T13420]  ? static_key_count+0x41/0x70
[  913.635845][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.641472][T13420]  ? security_task_prctl+0x13c/0x160
[  913.646762][T13420]  __se_sys_prctl+0x956/0x3b50
[  913.651535][T13420]  ? __pfx___schedule+0x10/0x10
[  913.656378][T13420]  ? __pfx_lock_release+0x10/0x10
[  913.661394][T13420]  ? __pfx___se_sys_prctl+0x10/0x10
[  913.666586][T13420]  ? futex_wait_queue+0x27/0x1d0
[  913.671514][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.677142][T13420]  ? schedule+0x90/0x320
[  913.681373][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.687007][T13420]  ? schedule+0x155/0x320
[  913.691336][T13420]  ? futex_wait_queue+0x27/0x1d0
[  913.696278][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.701937][T13420]  ? futex_wait_queue+0x14e/0x1d0
[  913.706959][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.712602][T13420]  ? futex_unqueue+0xcb/0xf0
[  913.717190][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.722833][T13420]  ? __futex_wait+0x287/0x320
[  913.727512][T13420]  ? __pfx___futex_wait+0x10/0x10
[  913.732531][T13420]  ? __pfx_futex_wake_mark+0x10/0x10
[  913.737812][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.743456][T13420]  ? futex_hash+0x1e/0x1f0
[  913.747896][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.753539][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.759178][T13420]  ? futex_wait+0x285/0x360
[  913.763678][T13420]  ? __pfx_futex_wait+0x10/0x10
[  913.768521][T13420]  ? snd_timer_user_ioctl+0x74/0x90
[  913.773722][T13420]  ? __pfx_lock_release+0x10/0x10
[  913.778733][T13420]  ? rcu_is_watching+0x15/0xb0
[  913.783498][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.789219][T13420]  ? do_futex+0x33b/0x560
[  913.793556][T13420]  ? __pfx_do_futex+0x10/0x10
[  913.798229][T13420]  ? __mutex_unlock_slowpath+0x21e/0x790
[  913.803874][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.809508][T13420]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  913.815487][T13420]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  913.821807][T13420]  ? do_syscall_64+0x100/0x230
[  913.826575][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.832210][T13420]  ? __x64_sys_prctl+0x20/0xc0
[  913.836983][T13420]  do_syscall_64+0xf3/0x230
[  913.841489][T13420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.847388][T13420] RIP: 0033:0x7f6b8317e819
[  913.851797][T13420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  913.871395][T13420] RSP: 002b:00007f6b83fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  913.879801][T13420] RAX: ffffffffffffffda RBX: 00007f6b83335fa0 RCX: 00007f6b8317e819
[  913.887762][T13420] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e
[  913.895721][T13420] RBP: 00007f6b831f175e R08: 0000000000000000 R09: 0000000000000000
[  913.903681][T13420] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  913.911645][T13420] R13: 0000000000000000 R14: 00007f6b83335fa0 R15: 00007fffd307ecc8
[  913.919615][T13420]  </TASK>
[  913.922621][T13420] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  913.929883][T13420] CPU: 0 UID: 0 PID: 13420 Comm: syz.7.1623 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0
[  913.940276][T13420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  913.950319][T13420] Call Trace:
[  913.953598][T13420]  <TASK>
[  913.956518][T13420]  dump_stack_lvl+0x241/0x360
[  913.961193][T13420]  ? __pfx_dump_stack_lvl+0x10/0x10
[  913.966385][T13420]  ? __pfx__printk+0x10/0x10
[  913.970969][T13420]  ? _printk+0xd5/0x120
[  913.975118][T13420]  ? __init_begin+0x41000/0x41000
[  913.980143][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.985772][T13420]  ? vscnprintf+0x5d/0x90
[  913.990100][T13420]  panic+0x349/0x880
[  913.994002][T13420]  ? __warn+0x177/0x4e0
[  913.998151][T13420]  ? __pfx_panic+0x10/0x10
[  914.002555][T13420]  ? show_trace_log_lvl+0x3b2/0x410
[  914.007750][T13420]  __warn+0x34b/0x4e0
[  914.011724][T13420]  ? __lock_acquire+0x564/0x2100
[  914.016739][T13420]  report_bug+0x2b3/0x500
[  914.021148][T13420]  ? __lock_acquire+0x564/0x2100
[  914.026078][T13420]  handle_bug+0x60/0x90
[  914.030232][T13420]  exc_invalid_op+0x1a/0x50
[  914.034738][T13420]  asm_exc_invalid_op+0x1a/0x20
[  914.039592][T13420] RIP: 0010:__lock_acquire+0x564/0x2100
[  914.045129][T13420] Code: 00 00 83 3d 11 c9 ac 0e 00 75 23 90 48 c7 c7 80 d1 0a 8c 48 c7 c6 80 d4 0a 8c e8 77 64 e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f
[  914.064807][T13420] RSP: 0018:ffffc90003d7f2d0 EFLAGS: 00010046
[  914.070867][T13420] RAX: 4215103f8b5df600 RBX: 00000000000010d8 RCX: 0000000000080000
[  914.078824][T13420] RDX: dffffc0000000000 RSI: 000000000000957f RDI: 0000000000009580
[  914.086785][T13420] RBP: 00000000000c10d8 R08: ffffffff8155fe42 R09: 1ffff110170c519a
[  914.094742][T13420] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff8880359028c4
[  914.102702][T13420] R13: 000000000000000f R14: 1ffff11006b2052f R15: ffff888035902978
[  914.110667][T13420]  ? __warn_printk+0x292/0x360
[  914.115437][T13420]  lock_acquire+0x1ed/0x550
[  914.119928][T13420]  ? sched_core_lock+0x162/0x240
[  914.124885][T13420]  ? __pfx_lock_acquire+0x10/0x10
[  914.129900][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.135534][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.141164][T13420]  ? do_raw_spin_lock+0x272/0x370
[  914.146183][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.151818][T13420]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  914.157194][T13420]  _raw_spin_lock_nested+0x31/0x40
[  914.162298][T13420]  ? sched_core_lock+0x162/0x240
[  914.167225][T13420]  sched_core_lock+0x162/0x240
[  914.171980][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.177627][T13420]  ? __pfx_sched_core_lock+0x10/0x10
[  914.182909][T13420]  __sched_core_flip+0x176/0x440
[  914.187839][T13420]  ? __pfx___sched_core_flip+0x10/0x10
[  914.193294][T13420]  sched_core_get+0xbd/0x180
[  914.197880][T13420]  sched_core_alloc_cookie+0x71/0xa0
[  914.203161][T13420]  sched_core_share_pid+0x298/0x7d0
[  914.208380][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.214053][T13420]  ? sched_core_share_pid+0xe5/0x7d0
[  914.219343][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.224972][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.230602][T13420]  ? yama_task_prctl+0x8c/0x500
[  914.235455][T13420]  ? __pfx_sched_core_share_pid+0x10/0x10
[  914.241170][T13420]  ? static_key_count+0x41/0x70
[  914.246017][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.251649][T13420]  ? security_task_prctl+0x13c/0x160
[  914.256959][T13420]  __se_sys_prctl+0x956/0x3b50
[  914.261736][T13420]  ? __pfx___schedule+0x10/0x10
[  914.266688][T13420]  ? __pfx_lock_release+0x10/0x10
[  914.271709][T13420]  ? __pfx___se_sys_prctl+0x10/0x10
[  914.276900][T13420]  ? futex_wait_queue+0x27/0x1d0
[  914.281826][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.287457][T13420]  ? schedule+0x90/0x320
[  914.291688][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.297316][T13420]  ? schedule+0x155/0x320
[  914.301647][T13420]  ? futex_wait_queue+0x27/0x1d0
[  914.306574][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.312205][T13420]  ? futex_wait_queue+0x14e/0x1d0
[  914.317219][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.322849][T13420]  ? futex_unqueue+0xcb/0xf0
[  914.327437][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.333068][T13420]  ? __futex_wait+0x287/0x320
[  914.337740][T13420]  ? __pfx___futex_wait+0x10/0x10
[  914.342755][T13420]  ? __pfx_futex_wake_mark+0x10/0x10
[  914.348033][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.353668][T13420]  ? futex_hash+0x1e/0x1f0
[  914.358079][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.363711][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.369342][T13420]  ? futex_wait+0x285/0x360
[  914.373836][T13420]  ? __pfx_futex_wait+0x10/0x10
[  914.378823][T13420]  ? snd_timer_user_ioctl+0x74/0x90
[  914.384022][T13420]  ? __pfx_lock_release+0x10/0x10
[  914.389208][T13420]  ? rcu_is_watching+0x15/0xb0
[  914.393973][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.399608][T13420]  ? do_futex+0x33b/0x560
[  914.403942][T13420]  ? __pfx_do_futex+0x10/0x10
[  914.408620][T13420]  ? __mutex_unlock_slowpath+0x21e/0x790
[  914.414267][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.419901][T13420]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  914.425872][T13420]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  914.432189][T13420]  ? do_syscall_64+0x100/0x230
[  914.436949][T13420]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.442579][T13420]  ? __x64_sys_prctl+0x20/0xc0
[  914.447342][T13420]  do_syscall_64+0xf3/0x230
[  914.451863][T13420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  914.457757][T13420] RIP: 0033:0x7f6b8317e819
[  914.462160][T13420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  914.481772][T13420] RSP: 002b:00007f6b83fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  914.490179][T13420] RAX: ffffffffffffffda RBX: 00007f6b83335fa0 RCX: 00007f6b8317e819
[  914.498140][T13420] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e
[  914.506104][T13420] RBP: 00007f6b831f175e R08: 0000000000000000 R09: 0000000000000000
[  914.514062][T13420] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  914.522017][T13420] R13: 0000000000000000 R14: 00007f6b83335fa0 R15: 00007fffd307ecc8
[  914.529983][T13420]  </TASK>
[  915.654031][T13420] Shutting down cpus with NMI
[  915.658910][T13420] Kernel Offset: disabled
[  915.663225][T13420] Rebooting in 86400 seconds..