last executing test programs:

1m50.459484607s ago: executing program 1 (id=2):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601"], 0x0)
r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0xe200, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2c, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r6, 0x0)
connect$unix(r5, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)

1m46.272675826s ago: executing program 3 (id=9):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81)
close(r0)
r1 = socket$caif_stream(0x25, 0x1, 0x1)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
write$binfmt_script(r0, 0x0, 0x0)

1m45.846721819s ago: executing program 1 (id=12):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8927, &(0x7f0000000040)={'vxcan1\x00'})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014})
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

1m44.837640264s ago: executing program 3 (id=14):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x50, r5, 0x1, 0xfffffffd, 0xfffffffd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x50}}, 0x0)

1m44.338720564s ago: executing program 1 (id=16):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x48080}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x7228}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x34}}, 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = dup(r5)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000000000000c410000004c0014fffffff062726f6164636173742d0e076e6b000000000000df995d1ec888273d06451a6b00000000000000000000000000760b00000091f700190000000000000000000000000000000000000000000000000000a13f73aa99d33b16bcf81c86b090c6435fd070da8cb45950adb61e2e3b682ec950496bb77c01c5d3758d631049935a18dac4c4251a95ea204f3b9c663f9d3887b632837dd013fe95fa3bebc76efeb4a72c87a9c3cd2a9e7d8b457f008bf3ea0eb34a377c"], 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x0)

1m44.240306095s ago: executing program 3 (id=17):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1080, 0x8000000000002})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0)

1m42.09517756s ago: executing program 1 (id=18):
setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = timerfd_create(0x0, 0x0)
timerfd_settime(r3, 0x3, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3})
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff7, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x7ffffffffffffffc, 0x0, 0x80000000000000, 0x802, 0x20000}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000300)=0x19ca, 0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f0000000180)=""/104, 0x68)

1m41.720889209s ago: executing program 3 (id=20):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f0000000100), 0x2041c3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000240)=r3, 0x1)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(r4, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
read$FUSE(r5, &(0x7f0000000540)={0x2020}, 0xfffffccf)

1m40.401168573s ago: executing program 1 (id=21):
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200), 0x4)
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000280))
r0 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
r4 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x20199}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, r0, 0x0)

1m33.868388779s ago: executing program 1 (id=31):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x3, 0x1, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$SG_SET_DEBUG(r6, 0x227e, 0x0)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001200)={0x0, <r8=>0x0})
ioctl$sock_ifreq(r8, 0x8994, &(0x7f0000000200)={'bond0\x00', @ifru_data=&(0x7f0000000000)="efed7ca040a1110529deda82157cb31cb400000000000000000000002300"})
read$FUSE(r7, &(0x7f0000005180)={0x2020}, 0x2020)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c8, 0x430, 0x390, 0x1f8, 0x0, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "2519"}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000100, 0x0, 0xd}]})

1m28.484712762s ago: executing program 3 (id=41):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001100050026bd7000feffffff07000000", @ANYRES32, @ANYBLOB="00000000000000000c001a800800058004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)

1m27.449822443s ago: executing program 3 (id=43):
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/vlan/config\x00')

1m18.833904432s ago: executing program 32 (id=31):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x3, 0x1, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$SG_SET_DEBUG(r6, 0x227e, 0x0)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001200)={0x0, <r8=>0x0})
ioctl$sock_ifreq(r8, 0x8994, &(0x7f0000000200)={'bond0\x00', @ifru_data=&(0x7f0000000000)="efed7ca040a1110529deda82157cb31cb400000000000000000000002300"})
read$FUSE(r7, &(0x7f0000005180)={0x2020}, 0x2020)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c8, 0x430, 0x390, 0x1f8, 0x0, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "2519"}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000100, 0x0, 0xd}]})

1m11.91742207s ago: executing program 33 (id=43):
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/vlan/config\x00')

12.556846916s ago: executing program 2 (id=181):
r0 = socket$inet(0x2, 0x5, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

11.635845203s ago: executing program 2 (id=183):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x5, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8800)

11.626459084s ago: executing program 0 (id=184):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x78, 0x200000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCFLSH(r0, 0x8925, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a1401002bbd7000fcdbdf250a00450069706f69"], 0x1c}, 0x1, 0x0, 0x0, 0x24008001}, 0x4040000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001a0001002abd70000000000002202000ff0400080002000008000300", @ANYRES32], 0x34}}, 0xea5bc50b6199d77e)
add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x18, 0xfffffffffffffffe)
r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
eventfd(0xfffffc00)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
ptrace$peekuser(0x3, r6, 0x1)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r7, r1, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

11.598041009s ago: executing program 5 (id=185):
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r1 = dup(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, 0x0, 0x4003)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000a40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000001240)={0x75c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x94, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x17b}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x75c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004)
sendmmsg$inet(r6, 0x0, 0x0, 0x4000811)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1}, 0x0)

10.483547601s ago: executing program 5 (id=188):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e"], 0x50)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x5c, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x5}}], 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10.482235784s ago: executing program 2 (id=189):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
syz_open_dev$video(0x0, 0x101, 0xab02)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
write$P9_RSTATu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x4d6)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, r1, 0xffffd000)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
userfaultfd(0x80000)

9.462082575s ago: executing program 6 (id=190):
r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040000)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
get_mempolicy(0x0, &(0x7f0000000100), 0x200200004, &(0x7f0000ffb000/0x2000)=nil, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
semget$private(0x0, 0x3, 0x410)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300), &(0x7f0000000340)=0x8)
io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x24, &(0x7f0000004700), 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x40, &(0x7f0000000840)=ANY=[])
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0)
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000480)={0x28, 0x3, r2, r2, 0x400, 0x8000, 0x9})
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f041})

9.337333268s ago: executing program 4 (id=191):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$KVM_VCPU(&(0x7f00007a6000/0x2000)=nil, 0x930, 0x4, 0x4018831, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001100050026bd7000feffffff07000000", @ANYRES32=r4, @ANYBLOB="00000000000000000c001a800800058004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
syz_io_uring_setup(0x72ae, 0x0, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0xa35, 0x6, 0xffff, 0x3}, 0x8)
sendto$inet(r5, &(0x7f0000000100)="ab", 0x34000, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)

8.754001309s ago: executing program 0 (id=192):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="9ed600001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14)

8.635081616s ago: executing program 2 (id=193):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x800, 0x2, {0xfffd, 0x1}, {0x38, 0x2}, @const={0x0, {0x0, 0x0, 0x100}}})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0)
socket(0x2, 0x80805, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000300)={0x2be, 0x81, 0xffff8e34}, 0xc)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r4 = fcntl$getown(r2, 0x9)
ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0)
tgkill(r4, 0x0, 0x1d)
pipe2$watch_queue(0x0, 0x80)
request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffc)
semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, &(0x7f00000003c0))
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.724746749s ago: executing program 4 (id=194):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x5, 0xe, 0x0, &(0x7f0000000080)="0000000000040000000002015370", 0x0, 0xff, 0x0, 0xfffffd0a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x1a)

7.687480097s ago: executing program 6 (id=195):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de135771"], 0x20}}, 0xc000)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

7.630445168s ago: executing program 5 (id=196):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x6)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x5cf80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000040))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
readv(0xffffffffffffffff, &(0x7f0000000840), 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
write(r3, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24)

7.351137448s ago: executing program 6 (id=197):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000300)={@dev, @local, @broadcast}, 0x0)

7.307425816s ago: executing program 4 (id=198):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)={0x1, 0x0, [{0x25000, 0x1000, &(0x7f0000000900)=""/4096}]})
ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000380)={0x1796, 0x28, '\x00', 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f00000003c0)=""/234, 0x0, 0xe000})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1})
close(r0)

7.304936151s ago: executing program 0 (id=199):
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r1 = dup(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, 0x0, 0x4003)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000a40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000001240)={0x75c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x94, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x17b}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x75c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004)
sendmmsg$inet(r6, 0x0, 0x0, 0x4000811)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1}, 0x0)

6.600613467s ago: executing program 5 (id=200):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0058da2808010200000000000000000a0000070600024000080000"], 0x1c}}, 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000580)='highspeed', 0x9)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)

6.364873648s ago: executing program 2 (id=201):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50)
io_uring_enter(r3, 0x2219, 0x1adf, 0x16, 0x0, 0x0)

6.316769653s ago: executing program 6 (id=202):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6})
ioctl(0xffffffffffffffff, 0x8b22, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$swradio(0x0, 0x1, 0x2)
ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000000c0)={0x4, 0x0, 0x2})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef5"], 0xf8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=',\x00'/12, @ANYRES32, @ANYBLOB="93d9f7255baba79708"], 0x20)

5.98434614s ago: executing program 4 (id=203):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r0, &(0x7f0000000240)=""/178, 0xb2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)

4.910757718s ago: executing program 0 (id=204):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546", 0xf)
io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6})
socket$kcm(0x2, 0x200000000000001, 0x106)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = socket$inet(0x2, 0xa, 0x0)
sendmmsg$sock(r3, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "653c1b4e82844461df245d602e571157637b2b264d65f76409a869d62cec2666", "2e2bb08b16c51ac62f5a95c880e2467137a74f00e71e64160700", "aed417062feee7c199b98743ad7e98588e00", "9fcc63648d5ca6f91b8d245971ee8a08460e7400", "21acd16f247aae4d9e6d207292339e96294b6d8b1491fae6922d6d21831cdac0", "81f44df52305410a0af0460a", 0x4, 0x5, 0x6, 0x7, 0x7ffffffd}})

4.74071075s ago: executing program 6 (id=205):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0xd24}], 0x4d}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000004100)=""/4102, 0x1006}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/191, 0xbf}], 0x1}}, {{&(0x7f0000002540), 0x6e, &(0x7f0000002440)=[{&(0x7f0000000100)}, {&(0x7f00000001c0)=""/210, 0xd2}, {&(0x7f00000002c0)=""/45, 0x2d}, {&(0x7f0000000300)=""/248, 0xf8}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x5, &(0x7f00000024c0)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002980)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000002600)=""/181, 0xb5}, {&(0x7f00000026c0)=""/19, 0x13}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f00000027c0)=""/204, 0xcc}], 0x5, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002a00)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f0000005140)=""/4096, 0x1000}], 0x1, &(0x7f0000002c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x6, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)

4.476197563s ago: executing program 5 (id=206):
openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="dbdf882502000000080001000000000000"], 0x1c}}, 0x840)

3.651805518s ago: executing program 0 (id=207):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001100050026bd7000feffffff07000000", @ANYRES32, @ANYBLOB="00000000000000000c001a800800058004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)

3.651412031s ago: executing program 6 (id=208):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00'})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001e00010028bd7000fbdbdf25ac1e0101000000000000000000000000000004d402003300ac1414aa000000000000000000e2b400000000000000000008000b000500"], 0x48}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000000)
unshare(0x28000600)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp, 0x1000000}, 0x20)

3.396979084s ago: executing program 4 (id=209):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/252, 0xfc}], 0x1}}], 0x3, 0x400000a0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
prctl$PR_GET_TIMERSLACK(0x1e)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60841, 0xb3836f6d7a15f29)

3.231967405s ago: executing program 0 (id=210):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x77359400})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0)

2.089025431s ago: executing program 5 (id=211):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x802)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
eventfd(0xfffffc00)
socket$packet(0x11, 0x2, 0x300)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
listen(r2, 0xd3)

913.0556ms ago: executing program 2 (id=212):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r6)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7], 0x28}}, 0x0)
sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001})
writev(r4, 0x0, 0x0)
sendto$inet(r3, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 4 (id=213):
inotify_init1(0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00\t\x00'/16], 0x28)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts.
[   83.263875][ T5824] cgroup: Unknown subsys name 'net'
[   83.402944][ T5824] cgroup: Unknown subsys name 'cpuset'
[   83.412536][ T5824] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   85.194554][ T5824] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   87.767802][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.780169][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.790477][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.801648][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.816398][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.827621][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.835197][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.844211][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.855231][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.862660][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.870942][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.872887][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.885401][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.895364][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.903289][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.911087][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.921141][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.933613][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.941229][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.948798][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.949071][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.965426][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.001042][ T5160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.010756][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.020307][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.846478][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   88.895638][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   89.053138][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   89.167502][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   89.234922][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   89.389276][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.397424][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.405452][ T5841] bridge_slave_0: entered allmulticast mode
[   89.413881][ T5841] bridge_slave_0: entered promiscuous mode
[   89.432961][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.440330][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.447803][ T5839] bridge_slave_0: entered allmulticast mode
[   89.456292][ T5839] bridge_slave_0: entered promiscuous mode
[   89.488285][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.495680][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.503345][ T5841] bridge_slave_1: entered allmulticast mode
[   89.511934][ T5841] bridge_slave_1: entered promiscuous mode
[   89.537379][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.544740][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.552242][ T5839] bridge_slave_1: entered allmulticast mode
[   89.560470][ T5839] bridge_slave_1: entered promiscuous mode
[   89.697290][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.704812][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.713076][ T5840] bridge_slave_0: entered allmulticast mode
[   89.721407][ T5840] bridge_slave_0: entered promiscuous mode
[   89.736344][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.751847][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.793612][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.801098][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.808546][ T5842] bridge_slave_0: entered allmulticast mode
[   89.816875][ T5842] bridge_slave_0: entered promiscuous mode
[   89.831782][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.845955][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.860085][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.867516][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.875093][ T5840] bridge_slave_1: entered allmulticast mode
[   89.883331][ T5840] bridge_slave_1: entered promiscuous mode
[   89.907614][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.915048][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.922726][ T5838] bridge_slave_0: entered allmulticast mode
[   89.931158][ T5838] bridge_slave_0: entered promiscuous mode
[   89.939454][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.946833][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.955319][ T5842] bridge_slave_1: entered allmulticast mode
[   89.964895][ T5842] bridge_slave_1: entered promiscuous mode
[   90.020320][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.027800][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.036180][ T5838] bridge_slave_1: entered allmulticast mode
[   90.043150][ T5847] Bluetooth: hci2: command tx timeout
[   90.048821][ T5160] Bluetooth: hci1: command tx timeout
[   90.049327][ T5852] Bluetooth: hci0: command tx timeout
[   90.063494][ T5838] bridge_slave_1: entered promiscuous mode
[   90.109055][ T5847] Bluetooth: hci4: command tx timeout
[   90.115467][ T5852] Bluetooth: hci3: command tx timeout
[   90.129122][ T5839] team0: Port device team_slave_0 added
[   90.139408][ T5839] team0: Port device team_slave_1 added
[   90.180949][ T5841] team0: Port device team_slave_0 added
[   90.196209][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.246486][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.260429][ T5841] team0: Port device team_slave_1 added
[   90.271995][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.303547][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.318872][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.333252][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.374627][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.381722][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.407861][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.481576][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.488877][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.515033][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.558040][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.565096][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.591071][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.606460][ T5840] team0: Port device team_slave_0 added
[   90.628929][ T5838] team0: Port device team_slave_0 added
[   90.639845][ T5842] team0: Port device team_slave_0 added
[   90.649001][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.656089][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.682171][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.697261][ T5840] team0: Port device team_slave_1 added
[   90.722786][ T5838] team0: Port device team_slave_1 added
[   90.747387][ T5842] team0: Port device team_slave_1 added
[   90.846264][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.853684][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.880002][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.893856][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.901197][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.927296][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.958846][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.965857][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.991953][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.022294][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.029396][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.055650][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.080830][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.087981][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.114755][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.141579][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.148998][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.175254][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.195121][ T5839] hsr_slave_0: entered promiscuous mode
[   91.202627][ T5839] hsr_slave_1: entered promiscuous mode
[   91.262171][ T5841] hsr_slave_0: entered promiscuous mode
[   91.271140][ T5841] hsr_slave_1: entered promiscuous mode
[   91.280717][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   91.286679][ T5841] Cannot create hsr debugfs directory
[   91.441943][ T5838] hsr_slave_0: entered promiscuous mode
[   91.449801][ T5838] hsr_slave_1: entered promiscuous mode
[   91.457081][ T5838] debugfs: 'hsr0' already exists in 'hsr'
[   91.463352][ T5838] Cannot create hsr debugfs directory
[   91.570372][ T5840] hsr_slave_0: entered promiscuous mode
[   91.577587][ T5840] hsr_slave_1: entered promiscuous mode
[   91.584741][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   91.590609][ T5840] Cannot create hsr debugfs directory
[   91.628631][ T5842] hsr_slave_0: entered promiscuous mode
[   91.635867][ T5842] hsr_slave_1: entered promiscuous mode
[   91.643193][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   91.649108][ T5842] Cannot create hsr debugfs directory
[   92.109536][ T5847] Bluetooth: hci0: command tx timeout
[   92.109942][ T5160] Bluetooth: hci2: command tx timeout
[   92.115498][ T5852] Bluetooth: hci1: command tx timeout
[   92.188806][ T5160] Bluetooth: hci3: command tx timeout
[   92.190277][ T5847] Bluetooth: hci4: command tx timeout
[   92.359996][  T808] cfg80211: failed to load regulatory.db
[   92.410936][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   92.435714][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   92.451708][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   92.464963][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.594632][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.610424][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.635290][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.671388][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.817749][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.835938][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   92.849119][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   92.874198][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.011549][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.048333][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.082121][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.110632][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.150933][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.232778][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   93.328961][  T184] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.336961][  T184] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.367647][  T184] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.374910][  T184] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.393379][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   93.407016][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   93.432021][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   93.457858][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   93.507859][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.615224][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   93.653531][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.713978][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.721311][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.802998][  T184] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.810243][  T184] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.864913][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   93.938214][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.945529][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.023179][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.030504][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.111337][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.190728][ T5160] Bluetooth: hci0: command tx timeout
[   94.190753][ T5852] Bluetooth: hci1: command tx timeout
[   94.202719][ T5847] Bluetooth: hci2: command tx timeout
[   94.235021][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   94.270885][ T5160] Bluetooth: hci4: command tx timeout
[   94.276419][ T5847] Bluetooth: hci3: command tx timeout
[   94.311613][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.330619][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.337881][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.408040][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.415503][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.482427][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.646215][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   94.704008][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.711294][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.765506][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.772940][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.844244][ T5841] veth0_vlan: entered promiscuous mode
[   94.915781][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.927307][ T5841] veth1_vlan: entered promiscuous mode
[   95.083394][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.356874][ T5841] veth0_macvtap: entered promiscuous mode
[   95.401584][ T5838] veth0_vlan: entered promiscuous mode
[   95.442101][ T5841] veth1_macvtap: entered promiscuous mode
[   95.542764][ T5838] veth1_vlan: entered promiscuous mode
[   95.592221][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.626141][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.671903][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.725122][   T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.735080][   T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.746115][   T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.768965][   T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.822182][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.862997][ T5838] veth0_macvtap: entered promiscuous mode
[   95.923711][ T5838] veth1_macvtap: entered promiscuous mode
[   96.100240][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.124733][  T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.133673][  T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.154865][ T5842] veth0_vlan: entered promiscuous mode
[   96.184581][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.210546][ T5840] veth0_vlan: entered promiscuous mode
[   96.268800][ T5160] Bluetooth: hci2: command tx timeout
[   96.270078][ T5852] Bluetooth: hci0: command tx timeout
[   96.274342][ T5847] Bluetooth: hci1: command tx timeout
[   96.291555][ T5842] veth1_vlan: entered promiscuous mode
[   96.306782][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.307007][  T184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.321093][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.331309][  T184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.349159][ T5160] Bluetooth: hci4: command tx timeout
[   96.355005][ T5847] Bluetooth: hci3: command tx timeout
[   96.364826][ T5840] veth1_vlan: entered promiscuous mode
[   96.376032][  T184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.385222][  T184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.465701][ T5839] veth0_vlan: entered promiscuous mode
[   96.499449][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   96.620681][ T5839] veth1_vlan: entered promiscuous mode
[   96.755809][ T5842] veth0_macvtap: entered promiscuous mode
[   96.778792][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.793466][ T5840] veth0_macvtap: entered promiscuous mode
[   96.793559][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.847694][ T5842] veth1_macvtap: entered promiscuous mode
[   96.875562][ T5840] veth1_macvtap: entered promiscuous mode
[   96.890819][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.901505][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.975457][ T5839] veth0_macvtap: entered promiscuous mode
[   96.999554][ T5905] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   97.025960][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.058056][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.099633][ T5839] veth1_macvtap: entered promiscuous mode
[   97.119938][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.150008][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.181004][   T63] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.200763][ T5905] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   97.216013][ T5905] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   97.228019][   T63] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.239438][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   97.250538][   T63] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.260015][ T5905] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   97.272423][ T5905] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   97.286299][ T5905] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   97.303891][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   97.312899][ T5905] usb 3-1: Product: syz
[   97.317153][ T5905] usb 3-1: Manufacturer: syz
[   97.324369][   T63] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.333565][   T63] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.373435][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.383050][ T5905] cdc_wdm 3-1:1.0: skipping garbage
[   97.391354][ T5905] cdc_wdm 3-1:1.0: skipping garbage
[   97.397380][   T63] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.412784][   T63] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.416314][ T5930] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   97.431766][ T5905] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   97.440191][ T5905] cdc_wdm 3-1:1.0: Unknown control protocol
[   97.464687][   T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.523819][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.604393][  T135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.626087][ T5930] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[   97.658912][  T135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.669105][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.684688][ T5930] usb 2-1: config 0 has no interface number 0
[   97.692133][  T135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.701536][ T5930] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   97.711853][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.721299][ T5930] usb 2-1: Product: syz
[   97.726399][ T5930] usb 2-1: Manufacturer: syz
[   97.731627][ T5930] usb 2-1: SerialNumber: syz
[   97.739208][  T135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.758452][ T5930] usb 2-1: config 0 descriptor??
[   97.768874][ T5930] hub 2-1:0.31: bad descriptor, ignoring hub
[   97.777120][ T5930] hub 2-1:0.31: probe with driver hub failed with error -5
[   97.801376][ T5930] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[   97.809346][ T5930] uvcvideo 2-1:0.31: No valid video chain found.
[   97.916775][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.926210][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.934590][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   97.987842][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.004947][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.116794][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.144402][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.154665][ T5966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.195182][ T5966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.250712][  T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.288441][   T24] usb 2-1: USB disconnect, device number 2
[   98.294407][  T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.460270][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.491086][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.704343][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.744770][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.159062][ T5974] fuse: Bad value for 'fd'
[  100.031569][  T808] usb 3-1: USB disconnect, device number 2
[  100.663708][ T5990] Zero length message leads to an empty skb
[  101.930184][ T5999] syz.2.11 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  101.956162][ T5999] ubi31: attaching mtd0
[  101.979817][ T5999] ubi31: scanning is finished
[  101.984631][ T5999] ubi31: empty MTD device detected
[  102.797368][ T5999] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  103.408483][ T5934] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  104.518762][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  104.708404][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  105.370805][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short
[  105.428043][ T5934] usb 3-1: not running at top speed; connect to a high speed hub
[  105.473855][ T5934] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  105.560625][ T5934] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40
[  105.572715][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.581097][ T5934] usb 3-1: Product: syz
[  105.585457][ T5934] usb 3-1: Manufacturer: syz
[  105.590764][ T5934] usb 3-1: SerialNumber: syz
[  105.663537][ T6011] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  106.755240][ T6026] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  107.260072][ T5934] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  107.348835][ T5934] usb 3-1: MIDIStreaming interface descriptor not found
[  108.811363][ T6043] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  109.553796][ T5934] usb 3-1: USB disconnect, device number 3
[  110.396369][ T6054] ubi31: attaching mtd0
[  110.417588][ T6054] ubi31: scanning is finished
[  111.139060][ T6054] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  111.252640][ T6060] udevd[6060]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  114.135408][ T6093] vivid-000: disconnect
[  115.740666][ T6090] vivid-000: reconnect
[  115.820218][ T6097] x_tables: ip_tables: icmp match: only valid for protocol 1
[  118.278605][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'.
[  118.380899][ T6119] ubi31: attaching mtd0
[  118.404466][ T6119] ubi31: scanning is finished
[  119.025623][ T6119] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  122.187172][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.195202][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.321057][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.329206][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.141238][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'.
[  124.824538][ T6175] ubi31: attaching mtd0
[  124.847906][ T6175] ubi31: scanning is finished
[  125.963489][ T6175] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  126.409265][ T5934] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  127.572918][ T5934] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  127.626997][ T5934] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.673460][ T5934] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  127.700920][ T5934] usb 5-1: config 1 has no interface number 1
[  127.716574][ T5934] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  127.740749][ T5934] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.753724][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.762323][ T5934] usb 5-1: Product: syz
[  127.767467][ T5934] usb 5-1: Manufacturer: syz
[  127.775340][ T5934] usb 5-1: SerialNumber: syz
[  127.959402][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[  128.021770][ T5934] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  128.030971][ T5934] usb 5-1: MIDIStreaming interface descriptor not found
[  128.206057][ T5934] usb 5-1: USB disconnect, device number 2
[  128.327682][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.061279][ T5160] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  129.076638][ T5160] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  129.086820][ T5160] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  129.097770][ T5160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  129.105996][ T5160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  130.139465][ T6212] chnl_net:caif_netlink_parms(): no params data found
[  130.772470][ T6223] ubi31: attaching mtd0
[  130.779025][ T6223] ubi31: scanning is finished
[  131.148278][ T5847] Bluetooth: hci5: command tx timeout
[  131.462368][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.470476][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.486748][ T6212] bridge_slave_0: entered allmulticast mode
[  131.493742][ T6223] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  131.591555][ T6212] bridge_slave_0: entered promiscuous mode
[  131.610858][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.618580][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.626271][ T6212] bridge_slave_1: entered allmulticast mode
[  131.645895][ T6212] bridge_slave_1: entered promiscuous mode
[  131.826799][ T6212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.326811][ T6212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.228343][ T5847] Bluetooth: hci5: command tx timeout
[  133.404497][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  133.432792][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  133.680235][ T6212] team0: Port device team_slave_0 added
[  133.693308][ T6212] team0: Port device team_slave_1 added
[  133.905744][ T6212] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.926112][ T6212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  134.058423][ T6212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.080444][ T6212] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.239796][ T6212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.130458][ T6212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.398370][ T5847] Bluetooth: hci5: command tx timeout
[  135.529608][    T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!!
[  137.874996][ T5847] Bluetooth: hci5: command tx timeout
[  138.738902][ T6212] hsr_slave_0: entered promiscuous mode
[  138.767527][ T6212] hsr_slave_1: entered promiscuous mode
[  138.792899][ T6212] debugfs: 'hsr0' already exists in 'hsr'
[  138.806792][ T6212] Cannot create hsr debugfs directory
[  139.287912][ T6257] vivid-004: disconnect
[  139.300393][ T6254] vivid-004: reconnect
[  139.307640][ T5160] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  139.430793][ T5160] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  139.441372][ T5160] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  139.456607][ T5160] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  139.479866][ T5160] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  139.913471][ T6264] ubi31: attaching mtd0
[  139.934277][ T6264] ubi31: scanning is finished
[  140.655616][ T6264] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  141.580830][ T5160] Bluetooth: hci6: command tx timeout
[  142.289691][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  143.630284][ T5160] Bluetooth: hci6: command tx timeout
[  144.315904][ T6256] chnl_net:caif_netlink_parms(): no params data found
[  144.416531][ T6288] IPVS: length: 528 != 8
[  144.422337][ T6288] process 'syz.0.81' launched '/dev/fd/4' with NULL argv: empty string added
[  145.718562][ T5160] Bluetooth: hci6: command tx timeout
[  145.925725][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'.
[  146.268577][ T6308] ubi31: attaching mtd0
[  146.292334][ T6308] ubi31: scanning is finished
[  147.024038][ T6212] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  147.138957][ T6212] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  147.172958][ T6308] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  147.309582][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.331811][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.347987][ T6256] bridge_slave_0: entered allmulticast mode
[  147.388566][ T6256] bridge_slave_0: entered promiscuous mode
[  147.422679][ T6212] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  147.458868][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.490297][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.504608][ T6256] bridge_slave_1: entered allmulticast mode
[  147.530912][ T6256] bridge_slave_1: entered promiscuous mode
[  147.543486][ T6212] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  148.228281][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  148.249284][ T5160] Bluetooth: hci6: command tx timeout
[  149.285011][ T6331] IPVS: length: 528 != 8
[  149.745967][ T6256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.806854][ T6256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.618884][ T6256] team0: Port device team_slave_0 added
[  152.175650][ T6256] team0: Port device team_slave_1 added
[  152.451989][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.465138][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.493206][ T6256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.510951][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.679355][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.706777][ T6256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.786918][ T6364] ubi31: attaching mtd0
[  152.807891][ T6364] ubi31: scanning is finished
[  153.429127][ T6364] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  154.426769][ T6256] hsr_slave_0: entered promiscuous mode
[  154.436002][ T6256] hsr_slave_1: entered promiscuous mode
[  154.443744][ T6256] debugfs: 'hsr0' already exists in 'hsr'
[  154.449688][ T6256] Cannot create hsr debugfs directory
[  154.580100][ T6374] vivid-004: disconnect
[  155.014834][ T6372] vivid-004: reconnect
[  155.088275][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  156.095754][ T6385] IPVS: length: 528 != 8
[  156.364268][ T6212] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.511601][ T6392] vcan0: tx drop: invalid da for name 0x0000000000000003
[  157.571174][ T6212] 8021q: adding VLAN 0 to HW filter on device team0
[  157.661523][ T6150] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.668827][ T6150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.717049][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.724483][ T6150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.123925][ T6401] ubi31: attaching mtd0
[  158.143232][ T6401] ubi31: scanning is finished
[  158.641111][ T6256] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  158.689009][ T6256] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  158.747370][ T6256] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  158.775204][ T6401] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  158.859419][ T6256] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  161.164327][ T6256] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.375792][ T6432] loop6: detected capacity change from 0 to 7
[  161.429481][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'.
[  161.522459][ T6256] 8021q: adding VLAN 0 to HW filter on device team0
[  161.581367][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.590775][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.627124][  T184] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.634526][  T184] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.743773][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.753093][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.787887][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.797205][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.824101][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.833452][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.845485][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.854777][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.873967][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.883399][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.893449][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.902720][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.910958][ T6432] ldm_validate_partition_table(): Disk read failed.
[  161.919079][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.928307][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.941357][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.950641][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.969342][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.978608][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  161.988387][ T6432] Dev loop6: unable to read RDB block 0
[  162.004916][ T6432]  loop6: unable to read partition table
[  162.012900][ T6432] loop6: partition table beyond EOD, truncated
[  162.019632][ T6432] loop_reread_partitions: partition scan of loop6 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[  162.237942][ T6212] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.379354][ T6434] netlink: 68 bytes leftover after parsing attributes in process `syz.2.113'.
[  162.401183][ T6434] netlink: 68 bytes leftover after parsing attributes in process `syz.2.113'.
[  162.489259][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.497096][ T6148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.487764][ T6448] IPVS: length: 528 != 8
[  165.960282][ T6465] ubi31: attaching mtd0
[  165.967057][ T6465] ubi31: scanning is finished
[  167.575364][ T6470] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  167.678460][ T6212] veth0_vlan: entered promiscuous mode
[  167.907497][ T6465] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  167.982098][ T6212] veth1_vlan: entered promiscuous mode
[  168.993380][ T6212] veth0_macvtap: entered promiscuous mode
[  169.041257][ T6487] loop6: detected capacity change from 0 to 7
[  169.099240][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'.
[  169.168900][ T6489] netlink: 68 bytes leftover after parsing attributes in process `syz.0.123'.
[  169.178039][ T6489] netlink: 68 bytes leftover after parsing attributes in process `syz.0.123'.
[  169.267594][ T6212] veth1_macvtap: entered promiscuous mode
[  169.767736][    C0] blk_print_req_error: 10 callbacks suppressed
[  169.767763][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.783560][    C0] buffer_io_error: 10 callbacks suppressed
[  169.783577][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  169.851423][ T6256] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.873468][ T6212] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.935190][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.944513][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  169.962760][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.972091][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  169.982206][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.991493][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.003622][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.012950][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.021568][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.030826][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.044168][ T6487] ldm_validate_partition_table(): Disk read failed.
[  170.051293][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.060568][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.083453][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.092839][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.106998][ T6212] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.116066][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.116110][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.134920][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.144199][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  170.161668][ T6487] Dev loop6: unable to read RDB block 0
[  170.194549][ T6487]  loop6: unable to read partition table
[  170.212508][ T6487] loop6: partition table beyond EOD, truncated
[  170.222376][ T6056] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.226010][ T6501] mmap: syz.4.127 (6501) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  170.247705][ T6487] loop_reread_partitions: partition scan of loop6 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[  170.297438][ T6056] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.343870][ T6056] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.385533][ T6056] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.792675][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.828462][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.965278][ T6149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.004152][ T6149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.099040][ T6256] veth0_vlan: entered promiscuous mode
[  174.209243][ T6538] vivid-008: disconnect
[  174.626399][ T6256] veth1_vlan: entered promiscuous mode
[  174.704413][ T6536] vivid-008: reconnect
[  174.913793][ T6256] veth0_macvtap: entered promiscuous mode
[  175.941763][ T6256] veth1_macvtap: entered promiscuous mode
[  177.446306][ T6256] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.261526][ T6256] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.600905][ T6566] syzkaller0: entered promiscuous mode
[  178.610113][ T6566] syzkaller0: entered allmulticast mode
[  178.710239][ T6149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.728677][ T6149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.765584][ T6149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.782674][ T6149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.098400][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  180.651185][ T6578] vivid-004: disconnect
[  181.190260][ T6575] vivid-004: reconnect
[  181.436212][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.446495][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.596791][ T6556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.653381][ T6556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.793719][ T6556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.807249][ T6556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.992919][ T6603] kernel profiling enabled (shift: 9)
[  184.931510][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.160'.
[  185.069320][ T6621] vivid-008: disconnect
[  185.680674][ T6616] vivid-008: reconnect
[  186.883852][ T6632] netlink: 92 bytes leftover after parsing attributes in process `syz.2.164'.
[  190.399438][ T6668] vivid-000: disconnect
[  190.875743][ T6666] vivid-000: reconnect
[  191.018942][   T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  193.309826][   T24] usb 1-1: Using ep0 maxpacket: 32
[  194.636507][ T6683] netlink: 92 bytes leftover after parsing attributes in process `syz.4.179'.
[  194.774895][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  194.784050][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  194.818014][   T24] usb 1-1: device descriptor read/all, error -71
[  196.267923][ T6703] IPVS: length: 528 != 8
[  197.382522][ T6707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.184'.
[  197.421555][ T6711] openvswitch: netlink: Missing key (keys=800040, expected=2000)
[  197.443755][ T6701] mkiss: ax0: crc mode is auto.
[  198.262509][ T6723] vivid-002: disconnect
[  198.756976][ T6721] vivid-002: reconnect
[  199.769278][ T6728] netlink: 92 bytes leftover after parsing attributes in process `syz.0.192'.
[  201.445765][ T6755] IPVS: length: 528 != 8
[  201.919739][ T5905] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  202.978198][ T5905] usb 3-1: Using ep0 maxpacket: 32
[  202.988045][ T5905] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  203.031319][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.117005][ T5905] usb 3-1: config 0 descriptor??
[  203.199521][ T6770] syz.0.204 uses obsolete (PF_INET,SOCK_PACKET)
[  206.625020][ T5905] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  208.387768][ T5905] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  208.396913][ T5905] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  208.467170][ T6787] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI
[  208.479227][ T6787] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]
[  208.487671][ T6787] CPU: 0 UID: 0 PID: 6787 Comm: syz.0.210 Not tainted syzkaller #0 PREEMPT(full) 
[  208.496866][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  208.506929][ T6787] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0
[  208.512406][ T6787] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be
[  208.532113][ T6787] RSP: 0018:ffffc9002067f9a0 EFLAGS: 00010006
[  208.538186][ T6787] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000
[  208.546165][ T6787] RDX: 1ffff920040cff40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200
[  208.554148][ T6787] RBP: ffffc9002067faa0 R08: 0000000000000003 R09: 0000000000000004
[  208.562118][ T6787] R10: dffffc0000000000 R11: fffff520040cff50 R12: 0000000000000000
[  208.570097][ T6787] R13: ffff88807f52e6d0 R14: 0000000000000018 R15: ffffc9002067fc20
[  208.578080][ T6787] FS:  0000555586a53500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000
[  208.587009][ T6787] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  208.593601][ T6787] CR2: 00007f1637e4eddd CR3: 00000000794b4000 CR4: 00000000003526f0
[  208.601579][ T6787] Call Trace:
[  208.604888][ T6787]  <TASK>
[  208.607826][ T6787]  ? __lock_acquire+0x6b5/0x2cf0
[  208.612791][ T6787]  ? __pfx_rwsem_mark_wake+0x10/0x10
[  208.618093][ T6787]  ? do_raw_spin_lock+0x12b/0x2f0
[  208.623223][ T6787]  rwsem_del_wake_waiter+0x25d/0x2e0
[  208.628519][ T6787]  rwsem_down_write_slowpath+0xa6f/0x1080
[  208.634254][ T6787]  ? rwsem_down_write_slowpath+0x4a3/0x1080
[  208.640171][ T6787]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  208.646341][ T6787]  ? futex_wake+0x4ac/0x580
[  208.650995][ T6787]  ? __pfx_futex_wait+0x10/0x10
[  208.655886][ T6787]  ? vm_mmap_pgoff+0x234/0x4f0
[  208.660664][ T6787]  down_write_killable+0x1eb/0x240
[  208.665798][ T6787]  ? __pfx_down_write_killable+0x10/0x10
[  208.671437][ T6787]  ? apparmor_mmap_file+0x197/0x3e0
[  208.676660][ T6787]  ? security_mmap_file+0x4df/0xa20
[  208.681870][ T6787]  vm_mmap_pgoff+0x234/0x4f0
[  208.686489][ T6787]  ? __se_sys_futex+0x3a8/0x450
[  208.691379][ T6787]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  208.696509][ T6787]  ? __pfx___se_sys_futex+0x10/0x10
[  208.701708][ T6787]  ? rcu_is_watching+0x15/0xb0
[  208.706478][ T6787]  ? ksys_mmap_pgoff+0xf3/0x760
[  208.711337][ T6787]  ? __x64_sys_mmap+0x7f/0x140
[  208.716112][ T6787]  do_syscall_64+0x14d/0xf80
[  208.720709][ T6787]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.726776][ T6787]  ? clear_bhb_loop+0x40/0x90
[  208.731457][ T6787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.737350][ T6787] RIP: 0033:0x7fa43af9c502
[  208.741784][ T6787] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64
[  208.761415][ T6787] RSP: 002b:00007ffdf3eb6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  208.769851][ T6787] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa43af9c502
[  208.777871][ T6787] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
[  208.785845][ T6787] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000
[  208.793826][ T6787] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffdf3eb62d0
[  208.801818][ T6787] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  208.809806][ T6787]  </TASK>
[  208.812834][ T6787] Modules linked in:
[  208.816750][ T6787] ---[ end trace 0000000000000000 ]---
[  208.822223][ T6787] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0
[  208.827695][ T6787] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be
[  208.847332][ T6787] RSP: 0018:ffffc9002067f9a0 EFLAGS: 00010006
[  208.853438][ T6787] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000
[  208.861447][ T6787] RDX: 1ffff920040cff40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200
[  208.869424][ T6787] RBP: ffffc9002067faa0 R08: 0000000000000003 R09: 0000000000000004
[  208.877417][ T6787] R10: dffffc0000000000 R11: fffff520040cff50 R12: 0000000000000000
[  208.885409][ T6787] R13: ffff88807f52e6d0 R14: 0000000000000018 R15: ffffc9002067fc20
[  208.893385][ T6787] FS:  0000555586a53500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000
[  208.902314][ T6787] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  208.908916][ T6787] CR2: 00007f1637e4eddd CR3: 00000000794b4000 CR4: 00000000003526f0
[  208.916907][ T6787] Kernel panic - not syncing: Fatal exception
[  210.058321][ T6787] Shutting down cpus with NMI
[  210.063775][ T6787] Kernel Offset: disabled
[  210.068123][ T6787] Rebooting in 86400 seconds..