last executing test programs:

23.935882145s ago: executing program 4 (id=93):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}, @in6={0xa, 0x4e23, 0x7, @remote, 0x7}], 0x38)
sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c)

23.53536009s ago: executing program 4 (id=97):
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r6, 0x1, 0xf0bd2a, 0x25dfcbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40208c0}, 0xc180)
write$vhost_msg_v2(r4, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000140)=""/214, 0xd6, &(0x7f0000001640)=""/4096, 0x3, 0x3}}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r8 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', <r9=>0x0})
r10 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x8, 0xfffc, 0x0, 0xa, 0x0, 0x0, 0x0, r9}, {0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0xfffffffffffff7ff}, {0x0, 0x4, 0x3, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0xa, @in=@empty, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r10, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000500)=0x2)
sendmsg$rds(r7, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0xe0ff, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000440)=""/109, 0x6d}], 0x63, 0xe0ff}}], 0x48}, 0x0)

21.019231045s ago: executing program 4 (id=105):
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x11, 0x0, 0x0, 0x0, {0x4001}}}, 0x4c}}, 0x0)
pipe2(&(0x7f0000002580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000080)=0x8000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x60000016})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002540), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000025c0)={{0x1, 0x1, 0x18, r3, {0x6, 0x10001}}, './file0\x00'})
fcntl$setpipe(r1, 0x407, 0x10005)
sendmsg$kcm(r1, &(0x7f0000002500)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000080)="af88421da948d96e69f08de6ff79c35ffff33f9b414e44cdeb069d05ac0f3bf7e401bea2f8707ffbd812d0610855d6c2d8168421de87bb866577fc866e68254486333b5a4bacd5c4f3d9aedeadb3ad2e6574993a46ea9058f5a547646deea972bc43b926ac7dd1515fc3c8139db63ce2e5ef562f0523df", 0x77}, {&(0x7f0000000100)="a0f6df2aa3422bb83905d03212756f4d6a6cd9f3839302e1717073d16b38932cb3b6679094d99a3aff568c24719ae4456230c3f8a0b8d3d7b4f9706939062eaa07a734ee68b8883a83ea766ce97e0db5696c0068d0bbddf597714a2cd270772cf17fd0d3f1c9983b25cb64f91e02f0", 0x6f}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="35731a36aa7c496982f72bdc0eb1ac058200297261991e96a81e2d8109e23b8a62690b75c856acf1edad3062024b4452d04f721ededbf24f0f71fabbf4ba82f90c24938e3ab70e307bc7e56d678e414d921c5456f6679e7477", 0x59}, {&(0x7f0000002300)="ffac0a8f686b06758870d1cefa71e0000079c139eb9257898a681def86875a78b02a98e2b805e79924cc424fea5c1701403d6858e9ff16afc464b0c97e3787e8027657fc9271a174583b0c198420cb5bc39dcfea0b33d61659e65420d53945acfe3be78b4e9de8f1ebf6ac22efb6fc1dd8bf17e376762b855a83edb78ef005942b350211", 0x84}, {&(0x7f00000023c0)="d427e99f75839f408b704be40fb8aa3ed78172ef2dbdcae82a1dd9f614b6f8c61d602bd172f7b1abcb6bdacd7721e086f8b55af02c630b343f771ea2974033afab4bef9da8386866660a4028277195ba37e88e82435b9141d582e01c86d16750dc2102df8c887737c28335c8ccada79ddf3dd4a693fbed497ad9859fe8e68b279c41c26b4d9ab50099a1564f3bed7e020732da7cb82337e229544e002ac1", 0x9e}], 0x7}, 0x10)

20.714930206s ago: executing program 4 (id=108):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
syz_emit_ethernet(0x9c, &(0x7f0000000440)=ANY=[@ANYBLOB="856b934629fabbbbbbbbbbbb86dd60000000000000000000003be113216e38882009cdc10000000000ff0200000000000000000000000000010420"], 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)

20.587631087s ago: executing program 4 (id=109):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000400)={0x18, 0x2, {0x2, @rand_addr=0x64010100}}, 0x1e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4008891, 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_stall_count', 0x0, 0x60)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f00000001c0))
r5 = socket$inet(0x2, 0x1, 0x100)
setsockopt$sock_int(r5, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5}, 0xe)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r7}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e80300001000"})
unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00')
syz_open_dev$tty1(0xc, 0x4, 0x1)

17.39145752s ago: executing program 4 (id=111):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x43, 0x92, 0xd5, 0x20, 0x54c, 0x6c3, 0xeb7a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x87, 0x70, 0x7, [{{0x9, 0x4, 0xcb, 0x1, 0x2, 0x4f, 0x3e, 0xaf, 0xb5, [], [{{0x9, 0x5, 0xe81eb71784d4b393, 0x2, 0x400, 0x9, 0x5, 0x2e}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x7, 0x9, 0x5}}]}}]}}]}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback, r3, 0x20, 0x0, 0xffffffffffffffff, @void, @value=r3}, 0x20)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000150003030000000000", @ANYRESDEC=0x0, @ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0xf801, 0x8201}, 0x10)
sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r5, 0x137c34ab10f3c183, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x2000c054)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1d}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x86, r8}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r8, &(0x7f0000000240)='_H', &(0x7f0000000540)=""/96}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x2c, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8100}, 0x4000000)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)

8.40871893s ago: executing program 2 (id=139):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab82)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48)
mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='ext2\x00', 0x8080, &(0x7f00000001c0)='discard')
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240), 0x5a)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, 0x0, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56551, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x10)

5.719052112s ago: executing program 1 (id=140):
r0 = socket(0x28, 0x5, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = geteuid()
setresuid(0xee01, 0x0, r1)
faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001600)=""/102392, 0x18ff8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x6)
syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffb, 0x10100, 0x2, 0x4000004}, &(0x7f00000002c0)=<r5=>0x0, &(0x7f00000015c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
r7 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f0000000100)=0x9)
r8 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x10000000000000, 0x100000000004, 0x0, 0x2, 0x1b, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c754061ac00", "90be8b1c55f96400", [0x8a2]}})
ioctl$LOOP_CHANGE_FD(r8, 0x4c03, 0xffffffffffffffff)
syz_open_dev$MSR(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r9 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7})
mq_timedreceive(r9, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e0b06c90009000a00"], 0xe)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'wlan1\x00', &(0x7f0000000500)=@ethtool_drvinfo={0x3, "d59db50bd23f89e4f6b901c557ad35ab303118d27e61f3d701e7d7fb646293b6", "afd43af0b171d16b3fc7a248eec1801719a3f9e8e29e5323df8a203a6e41b2ec", "d2d52d680ec7786d6bdc9501b545e25b464a41a31e310de18aed4c7240d34235", "f41006a98bbaf1e5adb7075fc45fe2c391ea955c0b4927990da996e7e95ac3dc", "cb72bffa37a5e5fa0c9668a63fdb3fc289d9423c8cf460663a432dad0238767f", "ed16be76e2fd7cca740d9a09", 0x7, 0x400000, 0x48, 0x0, 0x6}})

4.548112917s ago: executing program 3 (id=141):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x4, 0xdddd0000, 0x2000, &(0x7f0000bd3000/0x2000)=nil})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000000)={0x46e, 0x1})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r5, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x7ffffff}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="cf20", 0x2}], 0x1}}], 0x2, 0x400c800)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @private0}}}, 0x84)
r6 = socket(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
syslog(0x4, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000700)
r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}})

4.397444808s ago: executing program 2 (id=143):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040), 0x0) (async)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f00000001c0)={0x0, "9800003de8f644ad6c8a55930700", 0x3})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000823292e4b74cb6c5c7d4a4a45805287ce528089f3a77156e46af5278919f5198e8969faa638d68ce85dff162e75d44f989c4af1895c8b91cae4abd2e41d9724daa46f2a37e916b5e6b58458153e531c1b809c1db2eee0f16fb3711bb18f6d9d781e79a1aa6dc3c42ee3680504125e5cf8d7a18bfda19c46c86fbb637ba7ef8d67900000000076c562df17f5bb5c128a38e1bcfb929f127a69c1653464e3ff37bb445d66e04ad3f8748117bbf0f4c3e99be9a4a83ea1f"], &(0x7f00000003c0)='GPL\x00'}, 0x90) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) (async)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) (async)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[0x0]}, 0x0) (async)
r6 = memfd_create(&(0x7f0000000300)='\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xfe\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3@\xd3\xae\xd2\a\x11\xa9\xa5^\xa8ddj\x03\xbd\x16\x93\xb9r\x04h\xaa\x1aT\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xa3[\x00\xa9C%}C\xf4c\xba\xf9H\x98}<\x98m#\xf5\x9e\xd3\xea\x00\x00\x00\x00', 0x3)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4ea2, 0x1, @mcast2, 0x4}, 0x1c) (async, rerun: 32)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='=\x00'}]}, 0x1c}}, 0x20000080)

3.310318354s ago: executing program 3 (id=144):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x72}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f000000b500), r0)

2.899834025s ago: executing program 3 (id=145):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
r0 = inotify_init1(0x0)
syz_emit_ethernet(0x74, &(0x7f0000002240)=ANY=[], 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000002200)=0x3) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0)
ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
setpgid(0x0, r3) (async, rerun: 64)
bind$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
dup(r2)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000002c0)="7799", 0x2) (async)
inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x0) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(r4, &(0x7f00000000c0)='./file1\x00', 0x3) (async)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r5, 0x852ac000) (async)
sendto$inet6(r5, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) (async)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) (async)
setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000080)=0x9, 0x4) (async)
recvmmsg(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7fffff7e}], 0x1, 0x40002000, 0x0) (async)
timer_create(0x3, &(0x7f000000e780)={0x0, 0xc, 0x1, @thr={0x0, 0x0}}, &(0x7f000000e7c0))

2.58297315s ago: executing program 0 (id=146):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x58}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x38}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x24}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x2004c000) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x3e}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2b0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x14000000)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000540)={0xcbe6}) (async)
r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r4, 0x0, 0x1000, 0xab, &(0x7f0000000580)="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", &(0x7f0000001580)=""/171, 0x7fff, 0x0, 0x5e, 0x57, &(0x7f0000001640)="752d6d0fca29e03c8acccbc239e41577efae3aeb68b9775cf8448d0bb60120f8b20c894a82c2c131f8d600732289dda8e3e59dafeec5d17fb512ecab4cb2f237db4c99012666dbe964c14359593d2ab20fc8aab0abe3c4dce604cf6369e9", &(0x7f00000016c0)="a509f80226b59578aa4a1c9154b3e957ebf610c8482d76b643be53444d0eb0e16eba06c498b06b1286782834e693a0f09268ced52013d5d9453b65929686c6f09080390ec58b9811d953e420284b6fd66df3c99868e302", 0x0, 0x0, 0x8}, 0x50)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000017c0)=<r5=>0x0)
connect$nfc_raw(0xffffffffffffffff, &(0x7f0000001800)={0x27, r5, 0x0, 0x6}, 0x10) (async)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0) (async)
syz_create_resource$binfmt(&(0x7f0000001880)='./file0\x00')
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000018c0)={'\x00', 0xc8, 0x4, 0x9, 0x6, 0x2, <r7=>0xffffffffffffffff})
sched_setscheduler(r7, 0x6, &(0x7f0000001940)=0x200)
r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001980), 0x2, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r8, 0xeb91e000) (async)
r9 = syz_genetlink_get_family_id$smc(&(0x7f0000001a00), r4)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000)
prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x2, &(0x7f0000001b00)) (async)
ioctl$KVM_CAP_VM_TYPES(r4, 0x4068aea3, &(0x7f0000001b40)={0xeb, 0x0, 0x2}) (async)
prctl$PR_SCHED_CORE(0x3e, 0x2, r7, 0x2, &(0x7f0000001bc0)) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001e40)={'syztnl1\x00', &(0x7f0000001dc0)={'syztnl1\x00', <r10=>0x0, 0x4, 0x5, 0x4, 0x2ca, 0x55, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x80, 0x39, 0xfffffffa}})
r11 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001f00)={0xd, <r12=>0x0}, 0x8) (async)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001f40)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x5, '\x00', 0x0, r4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x10, 0x10, &(0x7f0000001c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@generic={0x4, 0xc, 0x4, 0x8, 0xb801}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001c80)='GPL\x00', 0xffffff02, 0xd8, &(0x7f0000001cc0)=""/216, 0x41100, 0x2, '\x00', r10, @fallback=0xf, r11, 0x8, &(0x7f0000001e80)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001ec0)={0x0, 0x2, 0x7fff, 0x7}, 0x10, r12, r4, 0x0, &(0x7f0000002080)=[r4, r13, 0xffffffffffffffff, r4, r4, r4, r4, 0xffffffffffffffff], 0x0, 0x10, 0x800}, 0x94)

2.326688722s ago: executing program 2 (id=147):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x6}}, 0x401, 0xd21, 0x5, 0x2, 0xd}, &(0x7f0000000380)=0x98)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac14"], 0x88}}, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="64010000010201080000000000000000020000060600074000000000340003800c00028005000100880000000c000280050001002f0000000c00028005000100210000000c000280050001003a000000080008400000000108000540000100015800018014000180080001"], 0x164}, 0x1, 0x0, 0x0, 0x4040000}, 0x880)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

2.256909017s ago: executing program 32 (id=111):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x43, 0x92, 0xd5, 0x20, 0x54c, 0x6c3, 0xeb7a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x87, 0x70, 0x7, [{{0x9, 0x4, 0xcb, 0x1, 0x2, 0x4f, 0x3e, 0xaf, 0xb5, [], [{{0x9, 0x5, 0xe81eb71784d4b393, 0x2, 0x400, 0x9, 0x5, 0x2e}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x7, 0x9, 0x5}}]}}]}}]}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback, r3, 0x20, 0x0, 0xffffffffffffffff, @void, @value=r3}, 0x20)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000150003030000000000", @ANYRESDEC=0x0, @ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0xf801, 0x8201}, 0x10)
sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r5, 0x137c34ab10f3c183, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x2000c054)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1d}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x86, r8}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r8, &(0x7f0000000240)='_H', &(0x7f0000000540)=""/96}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x2c, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8100}, 0x4000000)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)

2.094350442s ago: executing program 1 (id=149):
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, <r0=>0x0})
ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r0})
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$P9_RSTAT(r1, &(0x7f00000000c0)={0x46, 0x7d, 0x2, {0x0, 0x3f, 0x5, 0xba, {0x2, 0x0, 0x6}, 0x8080000, 0x8, 0xa, 0x7, 0x0, '', 0x4, '${-d', 0x3, '{!$', 0x5, '+#,@}'}}, 0x46)
write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0xe0, 0x1, 0x1}}, 0x14)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x400000)
r2 = openat2(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x4}, 0x18)
r3 = openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
ioctl$FITHAW(r3, 0xc0045878)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x400040, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3a)
r5 = syz_open_dev$I2C(&(0x7f00000002c0), 0x2, 0x1)
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000001340)={&(0x7f0000000340)="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", 0x1000, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f0000001380)={r7})
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000013c0)={0xc, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000001400)={0x18, r8})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001440), 0x10000, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r9, 0x3b82, &(0x7f0000001500)={0x18, 0x0, 0x6, 0x0, &(0x7f0000001480)=[{0x8, 0x9}, {0x5, 0x29f}, {0x0, 0x5}, {0xfffffffffffffff7, 0x4}, {0x40000000000, 0x4}, {0xe, 0xddc}]})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000001540)={0x9})
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001580)={r2}, 0x8)
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000015c0)={0x28, 0x1, r8, r8, 0xffffffffffffff81, 0x7fffffff, 0xfffffffff896c0e0})
r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r12 = dup3(r11, r5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001600))
read$FUSE(r2, &(0x7f0000001640)={0x2020, 0x0, <r13=>0x0}, 0x2020)
ioctl$NS_GET_OWNER_UID(r12, 0xb704, &(0x7f0000003680)=<r14=>0x0)
read$FUSE(r10, &(0x7f00000036c0)={0x2020, 0x0, 0x0, 0x0, <r15=>0x0}, 0x2020)
lstat(&(0x7f0000005700)='./file0\x00', &(0x7f0000005740)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
write$FUSE_DIRENTPLUS(r10, &(0x7f00000057c0)={0x160, 0xfffffffffffffff5, r13, [{{0x4, 0x2, 0x9, 0x3, 0xbb, 0x2, {0x0, 0x7, 0x6, 0x8, 0xdc, 0x5, 0x5, 0xd, 0x6, 0x4000, 0x0, r14, r15, 0x0, 0x400}}, {0x4, 0x8fc4, 0x3, 0x2abf9977, '{!$'}}, {{0x1, 0x0, 0x7, 0xb, 0x0, 0x1ff, {0x4, 0x6, 0x8000000000000000, 0x100, 0x4, 0x3e73, 0x4, 0x7, 0x40, 0xc000, 0x4ca, r16, 0x0, 0x4, 0x6}}, {0x1, 0x5, 0x14, 0x6, '/dev/dri/renderD128\x00'}}]}, 0x160)

1.91687017s ago: executing program 0 (id=150):
r0 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0, 0x0)
r1 = socket(0x1c, 0x1, 0x0)
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
mkdir(&(0x7f0000000240)='./file2/file0\x00', 0xed)
rename(&(0x7f00000000c0)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00')
ioctl$KDGETMODE(r1, 0x40046676, 0xfffffffffffffffd)

1.478746946s ago: executing program 0 (id=151):
io_uring_setup(0x5de1, &(0x7f0000000000)={0x0, 0x6cae, 0x1000, 0x1, 0x1e0})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x20a00, 0x0)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1.431789515s ago: executing program 1 (id=152):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x4e21, 0x4b, 0x2}, {0x0, 0x0, 0x4, 0x34a, 0x0, 0x0, 0x9c0, 0x6}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)

968.490297ms ago: executing program 3 (id=153):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x7}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d})

844.822696ms ago: executing program 1 (id=154):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x40)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x1, 0x8, 0x3, 0x0, 0x6})

639.82636ms ago: executing program 0 (id=155):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000140)=0x29343, 0x3a)

639.67739ms ago: executing program 1 (id=156):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000001a80)=ANY=[], 0x14}}, 0x44000)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000a00))

617.322941ms ago: executing program 3 (id=157):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x138b, 0x3, 0x13, 0xffff, 0x0, 0x1ed, 0x2, 0x3, 0xbf, 0x7371, 0x200006c, 0x84, 0xfffffff7, 0x7, 0x10], 0x0, 0x4})

436.660402ms ago: executing program 1 (id=158):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101201, 0x0)

415.503429ms ago: executing program 2 (id=159):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r1=>0x0})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$can_raw(r2, &(0x7f0000000100)={0x1d, r1}, 0x10)
bind$can_raw(r2, &(0x7f0000000000), 0x10)

372.976819ms ago: executing program 3 (id=160):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x40002, 0x0)
write$dsp(r0, 0x0, 0x0)

372.705421ms ago: executing program 0 (id=161):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7)

123.88283ms ago: executing program 2 (id=162):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001"], 0x30}}, 0x0)

5.32126ms ago: executing program 2 (id=163):
r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)=""/36, 0x24}], 0x2, 0xc00, 0x7fffffff)

0s ago: executing program 0 (id=164):
r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x6, 0x2)
ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xa0000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts.
[   85.160381][ T5821] cgroup: Unknown subsys name 'net'
[   85.352708][ T5821] cgroup: Unknown subsys name 'cpuset'
[   85.362742][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   87.212912][ T5821] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   89.980273][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.993896][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.014212][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   90.022048][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.029680][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   90.037746][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.045393][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.054235][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   90.063195][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   90.071501][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.078657][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   90.085764][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   90.094985][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.121677][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.131095][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.139527][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.148037][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.156045][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.163823][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.164917][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   90.172679][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.187885][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.195763][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.203141][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.215014][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.812218][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   90.976071][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   91.082497][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   91.100835][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   91.177735][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   91.247711][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.255419][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.265412][ T5833] bridge_slave_0: entered allmulticast mode
[   91.273017][ T5833] bridge_slave_0: entered promiscuous mode
[   91.340743][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.348107][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.355322][ T5833] bridge_slave_1: entered allmulticast mode
[   91.364031][ T5833] bridge_slave_1: entered promiscuous mode
[   91.390279][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.397946][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.405116][ T5839] bridge_slave_0: entered allmulticast mode
[   91.412836][ T5839] bridge_slave_0: entered promiscuous mode
[   91.452460][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.459757][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.466918][ T5839] bridge_slave_1: entered allmulticast mode
[   91.475668][ T5839] bridge_slave_1: entered promiscuous mode
[   91.580416][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.593644][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.644610][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.652860][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.661209][ T5840] bridge_slave_0: entered allmulticast mode
[   91.669295][ T5840] bridge_slave_0: entered promiscuous mode
[   91.679379][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.686831][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.694355][ T5840] bridge_slave_1: entered allmulticast mode
[   91.701794][ T5840] bridge_slave_1: entered promiscuous mode
[   91.722317][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.732566][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.739912][ T5846] bridge_slave_0: entered allmulticast mode
[   91.747404][ T5846] bridge_slave_0: entered promiscuous mode
[   91.754791][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.762288][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.770085][ T5832] bridge_slave_0: entered allmulticast mode
[   91.777692][ T5832] bridge_slave_0: entered promiscuous mode
[   91.788811][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.826480][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.833956][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.841584][ T5846] bridge_slave_1: entered allmulticast mode
[   91.849174][ T5846] bridge_slave_1: entered promiscuous mode
[   91.856570][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.866665][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.873974][ T5832] bridge_slave_1: entered allmulticast mode
[   91.882272][ T5832] bridge_slave_1: entered promiscuous mode
[   91.891599][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.931853][ T5833] team0: Port device team_slave_0 added
[   91.941684][ T5833] team0: Port device team_slave_1 added
[   91.995688][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.051893][ T5839] team0: Port device team_slave_0 added
[   92.061377][ T5839] team0: Port device team_slave_1 added
[   92.069716][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.111543][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.125599][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.139634][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.167906][   T51] Bluetooth: hci1: command tx timeout
[   92.181750][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.189142][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.215286][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.228885][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.235896][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.262123][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.262804][   T51] Bluetooth: hci2: command tx timeout
[   92.277214][ T5835] Bluetooth: hci3: command tx timeout
[   92.278841][   T51] Bluetooth: hci0: command tx timeout
[   92.283996][ T5835] Bluetooth: hci4: command tx timeout
[   92.327684][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.353627][ T5840] team0: Port device team_slave_0 added
[   92.372296][ T5846] team0: Port device team_slave_0 added
[   92.392868][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.400464][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.426631][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.439762][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.446767][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.472863][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.487622][ T5840] team0: Port device team_slave_1 added
[   92.496347][ T5846] team0: Port device team_slave_1 added
[   92.542100][ T5832] team0: Port device team_slave_0 added
[   92.595731][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.602883][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.629684][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.643059][ T5832] team0: Port device team_slave_1 added
[   92.694112][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.701252][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.727431][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.740388][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.747836][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.774480][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.806335][ T5833] hsr_slave_0: entered promiscuous mode
[   92.813158][ T5833] hsr_slave_1: entered promiscuous mode
[   92.834407][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.841689][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.868007][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.889432][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.896430][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.922777][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.965013][ T5839] hsr_slave_0: entered promiscuous mode
[   92.971646][ T5839] hsr_slave_1: entered promiscuous mode
[   92.978704][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.986599][ T5839] Cannot create hsr debugfs directory
[   93.003309][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.010425][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.036763][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.213190][ T5846] hsr_slave_0: entered promiscuous mode
[   93.221846][ T5846] hsr_slave_1: entered promiscuous mode
[   93.228593][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.236168][ T5846] Cannot create hsr debugfs directory
[   93.278345][ T5832] hsr_slave_0: entered promiscuous mode
[   93.284797][ T5832] hsr_slave_1: entered promiscuous mode
[   93.292073][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.300393][ T5832] Cannot create hsr debugfs directory
[   93.325727][ T5840] hsr_slave_0: entered promiscuous mode
[   93.332928][ T5840] hsr_slave_1: entered promiscuous mode
[   93.339218][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.346805][ T5840] Cannot create hsr debugfs directory
[   93.875337][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   93.911795][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   93.944811][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.970875][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.033000][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.043801][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   94.070101][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   94.083568][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.179929][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   94.193568][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   94.231815][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   94.249630][ T5835] Bluetooth: hci1: command tx timeout
[   94.282517][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   94.327379][ T5843] Bluetooth: hci0: command tx timeout
[   94.327452][   T51] Bluetooth: hci3: command tx timeout
[   94.332867][ T5843] Bluetooth: hci2: command tx timeout
[   94.343894][ T5835] Bluetooth: hci4: command tx timeout
[   94.358974][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   94.404180][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.430413][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.464504][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   94.491897][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.556798][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   94.573983][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   94.586899][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   94.606311][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   94.622535][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   94.642748][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.650048][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.688950][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.696083][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.870185][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.962249][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.985417][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   95.042524][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.049825][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.090698][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.098034][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.126247][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.142627][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   95.160631][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.185690][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.192913][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.230894][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.238154][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.270216][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   95.307308][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.314466][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.330237][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   95.380127][  T993] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.387386][  T993] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.421067][  T993] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.428640][  T993] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.441645][  T993] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.448824][  T993] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.493123][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.735657][ T5833] veth0_vlan: entered promiscuous mode
[   95.813003][ T5833] veth1_vlan: entered promiscuous mode
[   95.972219][ T5833] veth0_macvtap: entered promiscuous mode
[   96.041936][ T5833] veth1_macvtap: entered promiscuous mode
[   96.149963][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.172562][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.186681][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.212922][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.259904][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.274062][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.284495][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.300816][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.328522][ T5835] Bluetooth: hci1: command tx timeout
[   96.396042][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.407453][ T5843] Bluetooth: hci0: command tx timeout
[   96.410568][   T51] Bluetooth: hci4: command tx timeout
[   96.412936][ T5843] Bluetooth: hci2: command tx timeout
[   96.424287][ T5835] Bluetooth: hci3: command tx timeout
[   96.468851][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.494843][ T5839] veth0_vlan: entered promiscuous mode
[   96.566730][ T5839] veth1_vlan: entered promiscuous mode
[   96.642089][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.668191][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.754784][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.765584][ T5832] veth0_vlan: entered promiscuous mode
[   96.779025][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.815429][ T5832] veth1_vlan: entered promiscuous mode
[   96.867533][ T5846] veth0_vlan: entered promiscuous mode
[   96.885997][ T5839] veth0_macvtap: entered promiscuous mode
[   96.890628][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   96.924287][ T5839] veth1_macvtap: entered promiscuous mode
[   96.939818][ T5846] veth1_vlan: entered promiscuous mode
[   97.011226][ T5832] veth0_macvtap: entered promiscuous mode
[   97.043291][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.061261][ T5840] veth0_vlan: entered promiscuous mode
[   97.073504][ T5832] veth1_macvtap: entered promiscuous mode
[   97.080806][  T980] cfg80211: failed to load regulatory.db
[   97.094624][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.100788][ T5957] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   97.114878][ T5840] veth1_vlan: entered promiscuous mode
[   97.155697][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.166255][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.176090][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.185687][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.266746][ T5846] veth0_macvtap: entered promiscuous mode
[   97.280764][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.328625][ T5846] veth1_macvtap: entered promiscuous mode
[   97.375235][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.403759][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.413803][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.423102][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.432262][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.449529][ T5840] veth0_macvtap: entered promiscuous mode
[   97.464972][ T5840] veth1_macvtap: entered promiscuous mode
[   97.534855][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.588128][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.631089][ T5961] syzkaller1: entered promiscuous mode
[   97.636752][ T5961] syzkaller1: entered allmulticast mode
[   97.653554][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.684814][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.696807][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.704577][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.717395][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.726695][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.735636][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.736356][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.770464][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.782764][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.792221][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.801329][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.889907][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.899182][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.091486][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.120642][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.144911][ T5970] overlay: ./file0 is not a directory
[   98.250710][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.268102][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.340630][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.371204][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.407884][ T5835] Bluetooth: hci1: command tx timeout
[   98.491016][ T5843] Bluetooth: hci0: command tx timeout
[   98.491032][   T51] Bluetooth: hci3: command tx timeout
[   98.491073][   T51] Bluetooth: hci2: command tx timeout
[   98.496509][ T5835] Bluetooth: hci4: command tx timeout
[   98.510316][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.532885][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.615906][  T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.632374][  T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.684603][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.695222][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.976730][ T5992] netlink: 'syz.2.10': attribute type 15 has an invalid length.
[   99.238117][  T980] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   99.745576][  T980] usb 1-1: Using ep0 maxpacket: 32
[   99.779552][  T980] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[   99.847566][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   99.855935][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   99.870151][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   99.977695][  T980] usb 1-1: config 0 has no interface number 0
[   99.990850][  T980] usb 1-1: config 0 interface 12 has no altsetting 0
[  100.015797][  T980] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  100.067033][  T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.117091][  T980] usb 1-1: Product: syz
[  100.129889][  T980] usb 1-1: Manufacturer: syz
[  100.144911][  T980] usb 1-1: SerialNumber: syz
[  100.260722][  T980] usb 1-1: config 0 descriptor??
[  100.344321][ T6014] Illegal XDP return value 4294967274 on prog  (id 4) dev N/A, expect packet loss!
[  100.430880][ T6015] mmap: syz.1.13 (6015) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  100.877206][ T5933] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  100.927434][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  100.937027][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  100.987161][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  100.996274][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  101.067020][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  101.137003][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  101.200799][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  101.516437][ T5933] usb 2-1: config 0 has an invalid interface number: 120 but max is 0
[  101.575901][ T5933] usb 2-1: config 0 has no interface number 0
[  101.612717][ T5933] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  101.625650][ T5933] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  101.637267][ T5933] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  101.647049][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.679553][ T5933] usb 2-1: config 0 descriptor??
[  101.689519][ T6019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14'.
[  101.740561][ T5933] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input5
[  101.998162][ T6013] usb 2-1: USB disconnect, device number 2
[  102.515617][  T980] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  102.721972][  T980] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  102.779116][  T980] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  102.827458][  T980] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  102.851776][  T980] usb 1-1: USB disconnect, device number 2
[  102.898436][ T6024] loop8: detected capacity change from 0 to 7
[  102.907679][ T6024] Dev loop8: unable to read RDB block 7
[  102.913480][ T6024]  loop8: unable to read partition table
[  102.919342][ T6024] loop8: partition table beyond EOD, truncated
[  102.925510][ T6024] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  102.951510][ T6034] xt_CT: You must specify a L4 protocol and not use inversions on it
[  103.369550][ T6043] netlink: 172 bytes leftover after parsing attributes in process `syz.1.18'.
[  103.422432][ T6043] netlink: 64 bytes leftover after parsing attributes in process `syz.1.18'.
[  103.456745][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'.
[  103.477450][ T5933] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[  103.647750][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  103.655347][ T5933] usb 1-1: Invalid ep0 maxpacket: 16
[  103.756613][ T6053] netlink: 52 bytes leftover after parsing attributes in process `syz.2.23'.
[  103.795004][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23'.
[  103.828322][  T980] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  103.836590][ T5933] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[  103.861470][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  103.880077][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  103.896806][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  103.910921][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  103.926788][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  103.939095][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.966105][   T10] usb 4-1: config 0 descriptor??
[  103.981532][ T6044] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  104.002790][ T5933] usb 1-1: Invalid ep0 maxpacket: 16
[  104.020054][  T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.037963][ T5933] usb usb1-port1: attempt power cycle
[  104.048264][  T980] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  104.059652][  T980] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  104.069957][  T980] usb 5-1: Product: syz
[  104.078023][  T980] usb 5-1: Manufacturer: syz
[  104.082810][  T980] usb 5-1: SerialNumber: syz
[  104.114351][  T980] usb 5-1: config 0 descriptor??
[  104.252769][  T980] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  104.284594][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  104.369182][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.397237][ T5933] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  104.427793][   T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  104.436232][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.452437][   T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  104.461265][ T5933] usb 1-1: Invalid ep0 maxpacket: 16
[  104.480226][   T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  104.500632][ T5826] usb 5-1: USB disconnect, device number 2
[  104.532218][   T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  104.556414][   T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  104.607692][ T5933] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[  104.650643][   T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  104.672431][ T5933] usb 1-1: Invalid ep0 maxpacket: 16
[  104.691817][ T5933] usb usb1-port1: unable to enumerate USB device
[  104.976917][ T6064] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  105.927408][ T6013] usb 4-1: reset high-speed USB device number 2 using dummy_hcd
[  107.026305][ T6077] 9pnet: Could not find request transport: Fd
[  107.057229][ T5826] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  107.237303][ T5826] usb 1-1: Using ep0 maxpacket: 32
[  108.019761][ T5903] usb 4-1: USB disconnect, device number 2
[  108.063129][ T5826] usb 1-1: config 0 interface 0 has no altsetting 0
[  108.099610][ T5826] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  108.215473][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.256194][ T5826] usb 1-1: Product: syz
[  108.276466][ T5826] usb 1-1: Manufacturer: syz
[  108.306732][ T5826] usb 1-1: SerialNumber: syz
[  108.356152][ T5826] usb 1-1: config 0 descriptor??
[  109.269876][ T5826] gs_usb 1-1:0.0: Configuring for 16 interfaces
[  109.377425][ T5826] gs_usb 1-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  109.427828][ T5826] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22
[  109.496515][ T6073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.533532][ T6073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.598288][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  109.620766][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'.
[  109.631350][ T6013] usb 1-1: USB disconnect, device number 7
[  109.774311][   T10] usb 4-1: config index 0 descriptor too short (expected 4114, got 18)
[  109.880228][   T10] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09
[  109.941402][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.347034][   T10] usb 4-1: Product: syz
[  110.367008][   T10] usb 4-1: Manufacturer: syz
[  110.389592][   T10] usb 4-1: SerialNumber: syz
[  110.451501][   T10] usb 4-1: config 0 descriptor??
[  111.877405][ T6120] netlink: 172 bytes leftover after parsing attributes in process `syz.4.39'.
[  111.886535][ T6120] netlink: 64 bytes leftover after parsing attributes in process `syz.4.39'.
[  111.897578][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'.
[  112.240481][ T6128] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  112.264868][ T6128] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  112.397181][ T6128] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  112.517303][ T6128] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  112.598357][ T6128] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  112.611096][ T6128] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  112.625392][ T6128] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  112.636453][ T6128] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  112.679823][ T6128] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  112.688563][ T6128] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  112.806240][ T5903] usb 4-1: USB disconnect, device number 3
[  113.361663][ T5903] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  113.527275][ T5903] usb 4-1: device descriptor read/64, error -71
[  114.047214][ T5903] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  114.197736][ T5903] usb 4-1: device descriptor read/64, error -71
[  114.236228][ T6151] netlink: 32 bytes leftover after parsing attributes in process `syz.1.48'.
[  114.319284][ T5903] usb usb4-port1: attempt power cycle
[  114.687590][ T5903] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  114.947782][ T5903] usb 4-1: device descriptor read/8, error -71
[  115.200529][ T5205] udevd[5205]: worker [6030] terminated by signal 33 (Unknown signal 33)
[  115.230486][ T5205] udevd[5205]: worker [6030] failed while handling '/devices/virtual/block/loop4'
[  115.293323][ T6171] futex_wake_op: syz.1.53 tries to shift op by 144; fix this program
[  115.307080][ T5903] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  115.377742][ T5903] usb 4-1: device descriptor read/8, error -71
[  115.553551][ T6182] syz.1.55 uses obsolete (PF_INET,SOCK_PACKET)
[  115.717849][ T5903] usb usb4-port1: unable to enumerate USB device
[  115.791261][ T6182] IPVS: Scheduler module ip_vs_sip not found
[  116.073049][ T6198] netlink: 'syz.4.60': attribute type 21 has an invalid length.
[  116.092302][ T6199] netlink: 'syz.4.60': attribute type 21 has an invalid length.
[  116.233685][ T6204] netlink: 172 bytes leftover after parsing attributes in process `syz.3.61'.
[  116.242957][ T6204] netlink: 64 bytes leftover after parsing attributes in process `syz.3.61'.
[  116.254664][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'.
[  116.722715][ T6215] capability: warning: `syz.1.64' uses 32-bit capabilities (legacy support in use)
[  116.805926][ T6209] ceph: No mds server is up or the cluster is laggy
[  116.814558][  T980] libceph: connect (1)[c::]:6789 error -101
[  116.834166][  T980] libceph: mon0 (1)[c::]:6789 connect error
[  117.197547][  T980] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  117.367443][  T980] usb 2-1: Using ep0 maxpacket: 32
[  117.392556][  T980] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.433679][  T980] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.445731][  T980] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  117.460546][  T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.485936][  T980] hub 2-1:4.0: USB hub found
[  117.495695][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'.
[  117.801333][  T980] hub 2-1:4.0: 2 ports detected
[  118.026990][    C0] vkms_vblank_simulate: vblank timer overrun
[  118.300926][    C0] vkms_vblank_simulate: vblank timer overrun
[  118.384137][    C0] vkms_vblank_simulate: vblank timer overrun
[  118.426860][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.449013][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.517710][  T980] hub 2-1:4.0: hub_hub_status failed (err = -71)
[  118.543914][  T980] hub 2-1:4.0: config failed, can't get hub status (err -71)
[  118.604821][  T980] usb 2-1: USB disconnect, device number 3
[  118.636201][ T6243] netlink: 'syz.1.70': attribute type 29 has an invalid length.
[  119.899199][ T6264] binder: 6258:6264 ioctl c0306201 2000000003c0 returned -22
[  119.920287][ T6264] Zero length message leads to an empty skb
[  121.674347][ T6303] netlink: 'syz.1.85': attribute type 2 has an invalid length.
[  121.797389][ T5918] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  121.867254][ T6013] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  121.960642][ T5918] usb 4-1: device descriptor read/64, error -71
[  122.047160][ T6013] usb 1-1: Using ep0 maxpacket: 32
[  122.056856][ T6013] usb 1-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.063506][ T6314] capability: warning: `syz.2.89' uses deprecated v2 capabilities in a way that may be insecure
[  122.075961][ T6013] usb 1-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.105236][ T6013] usb 1-1: config 0 interface 0 has no altsetting 0
[  122.115298][ T6013] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  122.136122][ T6013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.139393][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.155347][ T6013] usb 1-1: config 0 descriptor??
[  122.197444][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.237487][ T5918] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  122.377049][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  122.489065][ T5918] usb 4-1: device descriptor read/64, error -71
[  122.634683][ T5918] usb usb4-port1: attempt power cycle
[  122.815683][   T10] usb 3-1: no configurations
[  122.872464][   T10] usb 3-1: can't read configurations, error -22
[  123.030497][ T6013] usbhid 1-1:0.0: can't add hid device: -71
[  123.042752][ T6013] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  123.054959][ T6013] usb 1-1: USB disconnect, device number 8
[  123.087429][ T5918] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  123.137446][ T5918] usb 4-1: device descriptor read/8, error -71
[  123.167660][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  123.327847][   T10] usb 3-1: no configurations
[  123.332619][   T10] usb 3-1: can't read configurations, error -22
[  123.350619][   T10] usb usb3-port1: attempt power cycle
[  123.417113][ T5918] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  123.505790][ T5918] usb 4-1: device descriptor read/8, error -71
[  123.651190][ T5918] usb usb4-port1: unable to enumerate USB device
[  123.726601][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  123.807252][   T10] usb 3-1: no configurations
[  123.849463][   T10] usb 3-1: can't read configurations, error -22
[  124.259741][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  124.395073][   T10] usb 3-1: no configurations
[  124.431630][   T10] usb 3-1: can't read configurations, error -22
[  124.572760][   T10] usb usb3-port1: unable to enumerate USB device
[  124.796114][ T6331] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  126.047621][ T6347] netlink: 'syz.2.96': attribute type 1 has an invalid length.
[  126.428450][ T6347] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.491474][ T5918] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  126.529559][ T6352] 8021q: adding VLAN 0 to HW filter on device batadv1
[  126.542750][ T6352] bond1: (slave batadv1): making interface the new active one
[  126.569131][ T6352] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  126.708240][ T5918] usb 1-1: Using ep0 maxpacket: 32
[  126.739898][ T5918] usb 1-1: config 1 has an invalid interface number: 236 but max is 0
[  126.777900][ T5918] usb 1-1: config 1 has no interface number 0
[  126.809924][ T5918] usb 1-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  126.930861][ T5918] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0
[  127.097304][ T5918] usb 1-1: config 1 interface 236 has no altsetting 0
[  127.371318][ T5918] usb 1-1: config 1 has an invalid interface number: 236 but max is 0
[  127.467203][ T5903] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  127.622943][ T5918] usb 1-1: config 1 has no interface number 0
[  127.647093][ T5918] usb 1-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  127.676415][ T5918] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0
[  127.741966][ T5918] usb 1-1: config 1 interface 236 has no altsetting 0
[  127.794621][ T5918] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[  127.807105][ T5903] usb 3-1: Using ep0 maxpacket: 8
[  127.817553][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  127.838595][ T5903] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  127.855213][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.864828][ T5918] usb 1-1: Product: syz
[  127.875068][ T5918] usb 1-1: Manufacturer: syz
[  127.881608][ T5918] usb 1-1: SerialNumber: syz
[  127.891593][ T5903] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  127.903069][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.925588][ T5918] ti_usb_3410_5052 1-1:1.236: TI USB 5052 2 port adapter converter detected
[  127.941646][ T5903] usb 3-1: Product: syz
[  127.945890][ T5903] usb 3-1: Manufacturer: syz
[  127.959434][ T5903] usb 3-1: SerialNumber: syz
[  127.974647][ T5903] usb 3-1: config 0 descriptor??
[  128.047423][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  128.133410][ T6359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.98'.
[  128.146084][ T6013] usb 1-1: USB disconnect, device number 9
[  128.317730][ T5918] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  128.429240][ T6372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.471378][ T6372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.504866][ T5918] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  128.537310][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.604541][ T5918] usb 4-1: config 0 descriptor??
[  128.611785][ T5903] usb 3-1: USB disconnect, device number 6
[  128.701209][ T5918] cp210x 4-1:0.0: cp210x converter detected
[  128.756407][   T10] usb 2-1: Using ep0 maxpacket: 32
[  131.962013][   T10] usb 2-1: unable to read config index 0 descriptor/start: -71
[  131.989196][   T10] usb 2-1: can't read configurations, error -71
[  132.187223][ T5918] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  132.194796][ T5918] cp210x 4-1:0.0: querying part number failed
[  132.244210][ T5918] usb 4-1: cp210x converter now attached to ttyUSB0
[  132.279919][ T5918] usb 4-1: USB disconnect, device number 12
[  132.322341][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  132.347944][ T5918] cp210x 4-1:0.0: device disconnected
[  132.708080][   T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  132.737203][ T5826] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  132.879886][   T10] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  132.894578][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.907323][ T5826] usb 1-1: Using ep0 maxpacket: 32
[  132.915978][   T10] usb 2-1: config 0 descriptor??
[  132.926461][ T5826] usb 1-1: config 0 has an invalid interface number: 42 but max is 0
[  132.941279][ T5826] usb 1-1: config 0 has no interface number 0
[  132.955385][ T5826] usb 1-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=42.27
[  132.965353][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.974003][ T5826] usb 1-1: Product: syz
[  132.978985][ T5826] usb 1-1: Manufacturer: syz
[  132.983762][ T5826] usb 1-1: SerialNumber: syz
[  132.998570][ T5826] usb 1-1: config 0 descriptor??
[  133.527329][ T5903] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  133.536284][ T6432] /dev/nullb0: Can't open blockdev
[  133.958274][ T5903] usb 3-1: Using ep0 maxpacket: 32
[  134.007814][ T5903] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d
[  134.016922][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.025093][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  134.040306][ T5826] usb 1-1: Found UVC 0.00 device syz (1bcf:0b40)
[  134.046734][ T5826] usb 1-1: Forcing UVC version to 1.0a
[  134.058210][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  134.068830][ T5903] usb 3-1: config 0 descriptor??
[  134.076775][   T10] usb 2-1: USB disconnect, device number 5
[  134.084168][ T5826] usb 1-1: No valid video chain found.
[  134.095679][ T5826] usb 1-1: USB disconnect, device number 10
[  134.099313][ T5903] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22
[  134.162203][ T5903] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  134.255759][ T6437] netlink: 172 bytes leftover after parsing attributes in process `syz.0.120'.
[  134.288558][ T6437] netlink: 64 bytes leftover after parsing attributes in process `syz.0.120'.
[  134.338761][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'.
[  134.372073][   T10] usb 3-1: USB disconnect, device number 7
[  135.257085][ T6013] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  135.417146][ T6013] usb 1-1: Using ep0 maxpacket: 8
[  135.437852][ T6013] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  135.451794][ T6013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.537163][ T6013] usb 1-1: Product: syz
[  135.541532][ T6013] usb 1-1: Manufacturer: syz
[  135.546180][ T6013] usb 1-1: SerialNumber: syz
[  135.623767][ T6013] usb 1-1: config 0 descriptor??
[  135.670366][ T6013] gspca_main: se401-2.14.0 probing 047d:5003
[  136.088086][ T6013] gspca_se401: Bayer format not supported!
[  136.330206][ T6013] usb 1-1: USB disconnect, device number 11
[  136.375329][ T6452] process 'syz.2.124' launched './file0' with NULL argv: empty string added
[  137.021821][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'.
[  137.043373][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'.
[  137.409813][ T6457] netlink: 'syz.2.126': attribute type 3 has an invalid length.
[  137.830656][ T6462] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.127'.
[  138.040154][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  138.055032][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  138.130765][ T6466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.128'.
[  138.229872][ T6470] warning: `syz.2.130' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  138.507052][  T980] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  138.518148][ T6480] overlayfs: failed to resolve './file0': -2
[  138.706872][  T980] usb 4-1: Using ep0 maxpacket: 8
[  138.753622][  T980] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  138.774905][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.785992][  T980] usb 4-1: Product: syz
[  138.796119][  T980] usb 4-1: Manufacturer: syz
[  138.800858][  T980] usb 4-1: SerialNumber: syz
[  138.813247][  T980] usb 4-1: config 0 descriptor??
[  138.848925][ T6483] xt_hashlimit: size too large, truncated to 1048576
[  138.906233][ T6486] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  138.954217][ T6487] netlink: 172 bytes leftover after parsing attributes in process `syz.1.133'.
[  138.993244][ T6487] netlink: 64 bytes leftover after parsing attributes in process `syz.1.133'.
[  139.037762][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'.
[  139.038760][  T980] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  139.298834][   T30] audit: type=1326 audit(1755941188.876:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6477 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982f78ebe9 code=0x7fc00000
[  139.372126][   T30] audit: type=1326 audit(1755941188.876:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6477 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f982f78ebe9 code=0x7fc00000
[  140.179783][  T980] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  140.193068][  T980] usb 4-1: USB disconnect, device number 13
[  141.269994][ T6510] syz.0.138: attempt to access beyond end of device
[  141.269994][ T6510] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0
[  141.283258][ T6510] EXT4-fs (nbd0): unable to read superblock
[  142.199033][ T6512] syz.2.139: attempt to access beyond end of device
[  142.199033][ T6512] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0
[  142.212433][ T6512] EXT4-fs (nbd2): unable to read superblock
[  144.785358][ T6524] netlink: 'syz.3.141': attribute type 4 has an invalid length.
[  144.793191][ T6524] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.141'.
[  146.711802][ T6544] netlink: 172 bytes leftover after parsing attributes in process `syz.2.147'.
[  146.721157][ T6544] netlink: 64 bytes leftover after parsing attributes in process `syz.2.147'.
[  146.761951][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'.
[  147.550505][ T6553] netlink: 'syz.1.152': attribute type 10 has an invalid length.
[  147.616490][ T6553] team0: Port device netdevsim0 added
[  147.632271][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  147.646884][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  147.655099][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  147.665226][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  147.674873][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  147.707765][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  147.722940][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  147.737160][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  147.745338][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  147.754547][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  147.797450][ T6401] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.056469][ T6401] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.353915][ T6401] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.666620][ T6579] netlink: 'syz.2.162': attribute type 1 has an invalid length.
[  148.688163][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'.
[  148.706767][ T6401] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.804580][ T6576] nvme_fabrics: missing parameter 'transport=%s'
[  148.814087][ T6576] nvme_fabrics: missing parameter 'nqn=%s'
[  148.822663][   T36] 
[  148.825034][   T36] ======================================================
[  148.832082][   T36] WARNING: possible circular locking dependency detected
[  148.839146][   T36] 6.16.0-syzkaller #0 Not tainted
[  148.844189][   T36] ------------------------------------------------------
[  148.851212][   T36] kworker/u8:2/36 is trying to acquire lock:
[  148.857221][   T36] ffff88805a4d4e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_device_event+0x544/0xa20
[  148.867195][   T36] 
[  148.867195][   T36] but task is already holding lock:
[  148.874565][   T36] ffff888079f88d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x4a0/0x7e0
[  148.885220][   T36] 
[  148.885220][   T36] which lock already depends on the new lock.
[  148.885220][   T36] 
[  148.895626][   T36] 
[  148.895626][   T36] the existing dependency chain (in reverse order) is:
[  148.904641][   T36] 
[  148.904641][   T36] -> #1 (&dev_instance_lock_key#20){+.+.}-{4:4}:
[  148.913177][   T36]        lock_acquire+0x120/0x360
[  148.918220][   T36]        __mutex_lock+0x182/0xe80
[  148.923296][   T36]        dev_set_mtu+0x10e/0x260
[  148.928256][   T36]        team_add_slave+0x8b8/0x2840
[  148.933571][   T36]        do_set_master+0x530/0x6d0
[  148.938705][   T36]        do_setlink+0xcf0/0x41c0
[  148.943681][   T36]        rtnl_newlink+0x160b/0x1c70
[  148.948898][   T36]        rtnetlink_rcv_msg+0x7cc/0xb70
[  148.954371][   T36]        netlink_rcv_skb+0x205/0x470
[  148.959672][   T36]        netlink_unicast+0x75c/0x8e0
[  148.965055][   T36]        netlink_sendmsg+0x805/0xb30
[  148.970356][   T36]        __sock_sendmsg+0x21c/0x270
[  148.975656][   T36]        ____sys_sendmsg+0x505/0x830
[  148.980962][   T36]        ___sys_sendmsg+0x21f/0x2a0
[  148.986182][   T36]        __x64_sys_sendmsg+0x19b/0x260
[  148.991681][   T36]        do_syscall_64+0xfa/0x3b0
[  148.996718][   T36]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.003161][   T36] 
[  149.003161][   T36] -> #0 (team->team_lock_key#2){+.+.}-{4:4}:
[  149.011370][   T36]        validate_chain+0xb9b/0x2140
[  149.016668][   T36]        __lock_acquire+0xab9/0xd20
[  149.021873][   T36]        lock_acquire+0x120/0x360
[  149.026903][   T36]        __mutex_lock+0x182/0xe80
[  149.031941][   T36]        team_device_event+0x544/0xa20
[  149.037417][   T36]        notifier_call_chain+0x1b3/0x3e0
[  149.043083][   T36]        netif_state_change+0x284/0x3a0
[  149.048652][   T36]        linkwatch_do_dev+0x117/0x170
[  149.054053][   T36]        __linkwatch_run_queue+0x56d/0x7e0
[  149.059963][   T36]        linkwatch_event+0x4c/0x60
[  149.065087][   T36]        process_scheduled_works+0xade/0x17b0
[  149.071168][   T36]        worker_thread+0x8a0/0xda0
[  149.076293][   T36]        kthread+0x70e/0x8a0
[  149.080904][   T36]        ret_from_fork+0x3fc/0x770
[  149.086045][   T36]        ret_from_fork_asm+0x1a/0x30
[  149.091344][   T36] 
[  149.091344][   T36] other info that might help us debug this:
[  149.091344][   T36] 
[  149.101584][   T36]  Possible unsafe locking scenario:
[  149.101584][   T36] 
[  149.109057][   T36]        CPU0                    CPU1
[  149.114511][   T36]        ----                    ----
[  149.119878][   T36]   lock(&dev_instance_lock_key#20);
[  149.125187][   T36]                                lock(team->team_lock_key#2);
[  149.132669][   T36]                                lock(&dev_instance_lock_key#20);
[  149.140516][   T36]   lock(team->team_lock_key#2);
[  149.145474][   T36] 
[  149.145474][   T36]  *** DEADLOCK ***
[  149.145474][   T36] 
[  149.153623][   T36] 4 locks held by kworker/u8:2/36:
[  149.158756][   T36]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  149.170440][   T36]  #1: ffffc90000ac7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  149.181516][   T36]  #2: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  149.190499][   T36]  #3: ffff888079f88d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x4a0/0x7e0
[  149.201581][   T36] 
[  149.201581][   T36] stack backtrace:
[  149.207513][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  149.207533][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  149.207545][   T36] Workqueue: events_unbound linkwatch_event
[  149.207572][   T36] Call Trace:
[  149.207584][   T36]  <TASK>
[  149.207593][   T36]  dump_stack_lvl+0x189/0x250
[  149.207615][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.207633][   T36]  ? __pfx__printk+0x10/0x10
[  149.207655][   T36]  ? print_lock_name+0xde/0x100
[  149.207677][   T36]  print_circular_bug+0x2ee/0x310
[  149.207699][   T36]  check_noncircular+0x134/0x160
[  149.207721][   T36]  validate_chain+0xb9b/0x2140
[  149.207750][   T36]  __lock_acquire+0xab9/0xd20
[  149.207768][   T36]  ? team_device_event+0x544/0xa20
[  149.207783][   T36]  lock_acquire+0x120/0x360
[  149.207797][   T36]  ? team_device_event+0x544/0xa20
[  149.207815][   T36]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  149.207845][   T36]  __mutex_lock+0x182/0xe80
[  149.207863][   T36]  ? team_device_event+0x544/0xa20
[  149.207881][   T36]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  149.207904][   T36]  ? team_device_event+0x544/0xa20
[  149.207920][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  149.207940][   T36]  ? fib_sync_down_dev+0x66/0x7b0
[  149.207968][   T36]  team_device_event+0x544/0xa20
[  149.207986][   T36]  notifier_call_chain+0x1b3/0x3e0
[  149.208007][   T36]  netif_state_change+0x284/0x3a0
[  149.208030][   T36]  ? __pfx_netif_state_change+0x10/0x10
[  149.208050][   T36]  ? dev_deactivate+0x129/0x1b0
[  149.208074][   T36]  ? nsim_get_iflink+0x20/0x280
[  149.208099][   T36]  ? rfc2863_policy+0x1c6/0x3e0
[  149.208115][   T36]  linkwatch_do_dev+0x117/0x170
[  149.208131][   T36]  __linkwatch_run_queue+0x56d/0x7e0
[  149.208150][   T36]  ? __pfx___linkwatch_run_queue+0x10/0x10
[  149.208168][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  149.208184][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  149.208202][   T36]  linkwatch_event+0x4c/0x60
[  149.208216][   T36]  process_scheduled_works+0xade/0x17b0
[  149.208245][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  149.208269][   T36]  worker_thread+0x8a0/0xda0
[  149.208298][   T36]  kthread+0x70e/0x8a0
[  149.208329][   T36]  ? __pfx_worker_thread+0x10/0x10
[  149.208347][   T36]  ? __pfx_kthread+0x10/0x10
[  149.208368][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  149.208383][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.208398][   T36]  ? __pfx_kthread+0x10/0x10
[  149.208420][   T36]  ret_from_fork+0x3fc/0x770
[  149.208437][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  149.208454][   T36]  ? __switch_to_asm+0x39/0x70
[  149.208474][   T36]  ? __switch_to_asm+0x33/0x70
[  149.208493][   T36]  ? __pfx_kthread+0x10/0x10
[  149.208515][   T36]  ret_from_fork_asm+0x1a/0x30
[  149.208542][   T36]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  149.847087][ T5835] Bluetooth: hci3: command tx timeout
[  150.056286][ T6401] bridge_slave_1: left allmulticast mode
[  150.064541][ T6401] bridge_slave_1: left promiscuous mode
[  150.079201][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.095905][ T6401] bridge_slave_0: left allmulticast mode
[  150.103748][ T6401] bridge_slave_0: left promiscuous mode
[  150.127191][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.262231][ T6401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.275175][ T6401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.285131][ T6401] bond0 (unregistering): Released all slaves
[  150.484300][ T6401] hsr_slave_0: left promiscuous mode
[  150.490864][ T6401] hsr_slave_1: left promiscuous mode
[  150.496624][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.504202][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.512856][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.520624][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.530980][ T6401] veth1_macvtap: left promiscuous mode
[  150.536518][ T6401] veth0_macvtap: left promiscuous mode
[  150.544411][ T6401] veth1_vlan: left promiscuous mode
[  150.549923][ T6401] veth0_vlan: left promiscuous mode
[  150.703995][ T6401] team0 (unregistering): Port device team_slave_1 removed
[  150.725597][ T6401] team0 (unregistering): Port device team_slave_0 removed
[  151.147056][ T6401] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.193822][ T6401] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.252281][ T6401] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.315618][ T6401] team0: Port device netdevsim0 removed
[  151.322775][ T6401] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.371699][ T6401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.442293][ T6401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.502224][ T6401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.551676][ T6401] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.620866][ T6401] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.662062][ T6401] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.703052][ T6401] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.752195][ T6401] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.830649][ T6401] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.892197][ T6401] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.951161][ T6401] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.041250][ T6401] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.100764][ T6401] bridge_slave_1: left allmulticast mode
[  152.106446][ T6401] bridge_slave_1: left promiscuous mode
[  152.112527][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.121462][ T6401] bridge_slave_0: left allmulticast mode
[  152.127296][ T6401] bridge_slave_0: left promiscuous mode
[  152.133000][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.142735][ T6401] bridge_slave_1: left allmulticast mode
[  152.148509][ T6401] bridge_slave_1: left promiscuous mode
[  152.154189][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.163124][ T6401] bridge_slave_0: left allmulticast mode
[  152.168959][ T6401] bridge_slave_0: left promiscuous mode
[  152.174649][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.184246][ T6401] bridge_slave_1: left allmulticast mode
[  152.190098][ T6401] bridge_slave_1: left promiscuous mode
[  152.196864][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.205836][ T6401] bridge_slave_0: left allmulticast mode
[  152.212139][ T6401] bridge_slave_0: left promiscuous mode
[  152.217984][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.227466][ T6401] bridge_slave_1: left allmulticast mode
[  152.233138][ T6401] bridge_slave_1: left promiscuous mode
[  152.238889][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.248111][ T6401] bridge_slave_0: left allmulticast mode
[  152.253786][ T6401] bridge_slave_0: left promiscuous mode
[  152.259794][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.422769][ T6401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.434196][ T6401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.444042][ T6401] bond0 (unregistering): Released all slaves
[  152.542490][ T6401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.552868][ T6401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.562810][ T6401] bond0 (unregistering): Released all slaves
[  152.576064][ T6401] bond1 (unregistering): (slave batadv1): Releasing active interface
[  152.585361][ T6401] bond1 (unregistering): Released all slaves
[  152.660128][ T6401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.670163][ T6401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.680272][ T6401] bond0 (unregistering): Released all slaves
[  152.776097][ T6401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.786292][ T6401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.796002][ T6401] bond0 (unregistering): Released all slaves
[  153.375936][ T6401] hsr_slave_0: left promiscuous mode
[  153.381901][ T6401] hsr_slave_1: left promiscuous mode
[  153.387806][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.395223][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.403081][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.410673][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.421358][ T6401] hsr_slave_0: left promiscuous mode
[  153.427394][ T6401] hsr_slave_1: left promiscuous mode
[  153.433080][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.440564][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.448770][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.456195][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.466448][ T6401] hsr_slave_0: left promiscuous mode
[  153.473232][ T6401] hsr_slave_1: left promiscuous mode
[  153.479064][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.486463][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.494246][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.501741][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.513078][ T6401] hsr_slave_0: left promiscuous mode
[  153.518921][ T6401] hsr_slave_1: left promiscuous mode
[  153.524623][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.532219][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.539930][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.547418][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.565656][ T6401] veth1_macvtap: left promiscuous mode
[  153.571267][ T6401] veth0_macvtap: left promiscuous mode
[  153.576844][ T6401] veth1_vlan: left promiscuous mode
[  153.582242][ T6401] veth0_vlan: left promiscuous mode
[  153.589127][ T6401] veth1_macvtap: left promiscuous mode
[  153.594631][ T6401] veth0_macvtap: left promiscuous mode
[  153.600302][ T6401] veth1_vlan: left promiscuous mode
[  153.605591][ T6401] veth0_vlan: left promiscuous mode
[  153.612287][ T6401] veth1_macvtap: left promiscuous mode
[  153.617914][ T6401] veth0_macvtap: left promiscuous mode
[  153.623573][ T6401] veth1_vlan: left promiscuous mode
[  153.629047][ T6401] veth0_vlan: left promiscuous mode
[  153.635148][ T6401] veth1_macvtap: left promiscuous mode
[  153.640744][ T6401] veth0_macvtap: left promiscuous mode
[  153.646315][ T6401] veth1_vlan: left promiscuous mode
[  153.651661][ T6401] veth0_vlan: left promiscuous mode
[  153.925489][ T6401] team0 (unregistering): Port device team_slave_1 removed
[  153.949735][ T6401] team0 (unregistering): Port device team_slave_0 removed
[  154.112158][ T6401] team0 (unregistering): Port device team_slave_1 removed
[  154.124491][ T6401] team0 (unregistering): Port device team_slave_0 removed
[  154.283156][ T6401] team0 (unregistering): Port device team_slave_1 removed
[  154.310295][ T6401] team0 (unregistering): Port device team_slave_0 removed
[  154.480469][ T6401] team0 (unregistering): Port device team_slave_1 removed
[  154.501245][ T6401] team0 (unregistering): Port device team_slave_0 removed