last executing test programs:

11.266359957s ago: executing program 1 (id=881):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4004004)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc0bc5310, &(0x7f00000000c0)={0x2})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180))
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x0, r3}, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000001680)=[{0x0}], 0x1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
shmget$private(0x0, 0x3000, 0x80, &(0x7f0000b6f000/0x3000)=nil)
shmat(0x0, &(0x7f0000800000/0x800000)=nil, 0x4000)
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000300)={0x10, 0x2a, 0xb0f0fe8ca3504621}, 0x10}], 0x1}, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)

10.797882036s ago: executing program 0 (id=883):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5cdcc09c, 0x7, 0x3, 0x814, 0xffffffffffffffff, 0x3000000, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x2, 0x2, 0xd}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0xfd12}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x3, 0x0, &(0x7f0000000280))
write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [{0x20, '/dev/ptp0\x00'}, {}, {0x20, 'blkio.bfq.avg_queue_size\x00'}]}, 0x31)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x40048f1}, 0x4040084)
sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="201000000003fd42facbc57d070103000000000000000000000000090001"], 0x20}}, 0x0)
r5 = eventfd(0x7)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/153, 0x0})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r5})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x3000, 0xe, &(0x7f0000000480)=""/14}, {0xf004, 0x91, &(0x7f00000006c0)=""/145}]})
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000180)={0x0, r5})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
socket(0x1a, 0x80000, 0x1)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x632f, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'vxcan0\x00', <r6=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r6, 0x3}, 0x10, &(0x7f00000003c0)={&(0x7f00000004c0)=@canfd={{0x2}, 0x22, 0x0, 0x0, 0x0, "2cf710d6e7e72e2e0858b52fe49ff6bdf05dee56692677237351b90b7d0211cc205bcbba9cad89249d499771383a47cfcebad05cd18ea4cee166a7e0e508c048"}, 0x48}, 0x1, 0x0, 0x0, 0x4000054}, 0x0)
socket(0x1e, 0x800000003, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100))

10.537209137s ago: executing program 1 (id=885):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000006c0)='percpu_free_percpu\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x1, 0x4, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x23, &(0x7f0000000840)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @generic={0x1f, 0x3, 0x1, 0x5, 0x40}, @tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
dup(0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

10.366893074s ago: executing program 0 (id=887):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000001680)=ANY=[@ANYBLOB="e20005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)
io_setup(0x6, &(0x7f0000000080)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r3=>0x0, <r4=>0x0})
syz_usb_connect$cdc_ecm(0x0, 0x7f, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x7, 0x20, 0xa, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "ac70"}, {0x5, 0x24, 0x0, 0x5f7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfff9, 0xa62c, 0xb7}, [@acm={0x4}, @country_functional={0xa, 0x24, 0x7, 0xc4, 0x3, [0x81, 0x10]}, @mdlm={0x15, 0x24, 0x12, 0x2}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x6, 0x5c}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4d, 0x5, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x9, 0x2}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x1, 0x2d, 0x10, 0x7f}, 0x21, &(0x7f0000000440)={0x5, 0xf, 0x21, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x7, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x1, 0x13}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa8, 0x1, 0x6, 0x8, 0x7}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3805}}]})
r5 = syz_usbip_server_init(0x2)
ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x8)
io_pgetevents(r2, 0x5, 0x0, &(0x7f0000000100), &(0x7f0000000180)={r3, r4+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x100000000]}, 0x8})
r6 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r6})
write$eventfd(r6, &(0x7f00000000c0), 0x8)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x7, 0x151b41)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_usb_connect(0x3, 0x100, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r7, 0x89e8)
socket$netlink(0x10, 0x3, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)={0x20, 0x12, 0x68, "a0d7ab65b06bfdda5ac967d961c727af04b0216b96793458cccafca2c8076eeb76a73d779ee89c3c8a893ca0fd6ea167a32e8251bb6cbd0b94eda778585d808427725d69d5dbaf5b8da379c37ba49c0f71e9a3be9f363a736c1e8633a9934a80a62a145983f24359"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x140, 0x1, [0xf0]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x9, 0x1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "3390"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000840)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "63e8"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x2}})

10.145935122s ago: executing program 1 (id=888):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000001680)=ANY=[@ANYBLOB="e20005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)
io_setup(0x6, &(0x7f0000000080)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r3=>0x0, <r4=>0x0})
syz_usb_connect$cdc_ecm(0x0, 0x7b, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x7, 0x20, 0xa, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "ac70"}, {0x5, 0x24, 0x0, 0x5f7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfff9, 0xa62c, 0xb7}, [@acm={0x4}, @country_functional={0xa, 0x24, 0x7, 0xc4, 0x3, [0x81, 0x10]}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x6, 0x5c}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4d, 0x5, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x9, 0x2}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x1, 0x2d, 0x10, 0x7f}, 0x21, &(0x7f0000000440)={0x5, 0xf, 0x21, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x7, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x1, 0x13}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa8, 0x1, 0x6, 0x8, 0x7}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3805}}]})
r5 = syz_usbip_server_init(0x2)
ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x8)
io_pgetevents(r2, 0x5, 0x0, &(0x7f0000000100), &(0x7f0000000180)={r3, r4+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x100000000]}, 0x8})
r6 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r6})
write$eventfd(r6, &(0x7f00000000c0), 0x8)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x7, 0x151b41)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_usb_connect(0x3, 0x100, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r7, 0x89e8)
socket$netlink(0x10, 0x3, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)={0x20, 0x12, 0x68, "a0d7ab65b06bfdda5ac967d961c727af04b0216b96793458cccafca2c8076eeb76a73d779ee89c3c8a893ca0fd6ea167a32e8251bb6cbd0b94eda778585d808427725d69d5dbaf5b8da379c37ba49c0f71e9a3be9f363a736c1e8633a9934a80a62a145983f24359"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x140, 0x1, [0xf0]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x9, 0x1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "3390"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000840)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "63e8"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x2}})
syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0003040200d472"], 0x0, 0x0, 0x0}, 0x0)

9.104857016s ago: executing program 3 (id=895):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4004004)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc0bc5310, &(0x7f00000000c0)={0x2})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180))
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x0, r3}, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000001680)=[{0x0}], 0x1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
shmget$private(0x0, 0x3000, 0x80, &(0x7f0000b6f000/0x3000)=nil)
shmat(0x0, &(0x7f0000800000/0x800000)=nil, 0x4000)
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000300)={0x10, 0x2a, 0xb0f0fe8ca3504621}, 0x10}], 0x1}, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)

6.672981226s ago: executing program 0 (id=896):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}]}, 0x78}}, 0x0)
iopl(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f}, 0x90)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e)
connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e)
connect$pppoe(r7, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r8 = eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r8)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r8})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001c80)={0x3, 0x0, [{0x0, 0x47, &(0x7f0000000940)=""/71}, {0x86956090991702cc, 0x91, &(0x7f0000001e80)=""/145}, {0xf000, 0x9a, &(0x7f0000000bc0)=""/154}]})
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x1, r8})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="cc000000120009000000000000000000b9000000c516f2c41efcb7b1f20b32c5c7a3c7540a3c9e4f1b425f168d7e1d2f6e6dc8a277604a68132bb9828f9ff58fb1174c8b936c329335057ca096357122444ab7d59f9d48ed0eaccff228483fb01e9e3c9888208b6437a830215c918b3723a7701507a0c9b3bc05362422bb11daa9a0f3b71b2dd46db1df58"], 0xcc}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16}, 0x48)

6.608522128s ago: executing program 1 (id=897):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5cdcc09c, 0x7, 0x3, 0x814, 0xffffffffffffffff, 0x3000000, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x2, 0x2, 0xd}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0xfd12}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x3, 0x0, &(0x7f0000000280))
write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [{0x20, '/dev/ptp0\x00'}, {}, {0x20, 'blkio.bfq.avg_queue_size\x00'}]}, 0x31)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x40048f1}, 0x4040084)
sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="201000000003fd42facbc57d07010300000000000000000000000009000100fde5c122"], 0x20}}, 0x0)
r5 = eventfd(0x7)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/153, 0x0})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r5})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x3000, 0xe, &(0x7f0000000480)=""/14}, {0xf004, 0x91, &(0x7f00000006c0)=""/145}]})
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000180)={0x0, r5})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
socket(0x1a, 0x80000, 0x1)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x632f, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'vxcan0\x00', <r6=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r6, 0x3}, 0x10, &(0x7f00000003c0)={&(0x7f00000004c0)=@canfd={{0x2}, 0x22, 0x0, 0x0, 0x0, "2cf710d6e7e72e2e0858b52fe49ff6bdf05dee56692677237351b90b7d0211cc205bcbba9cad89249d499771383a47cfcebad05cd18ea4cee166a7e0e508c048"}, 0x48}, 0x1, 0x0, 0x0, 0x4000054}, 0x0)
socket(0x1e, 0x800000003, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100))

5.989356633s ago: executing program 0 (id=900):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
pwritev(r2, 0x0, 0x0, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r1, 0x0, 0x24002de8)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x800)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x8000, 0x0, 0xc, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2b63f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec", [0x403, 0x10000005]})
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000080))
socket$vsock_stream(0x28, 0x1, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$can_raw(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@canfd={{}, 0xff, 0x0, 0x0, 0x0, "9d122114364ad4aa2056dd37bdddc89b0a33b77b1de93ecdd50d034d562822d4f2f4a57dce3cb31166f662c0c5797734840fd0012a65d3e21ebdb7d18658b76d"}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="4c000000130010002cbd7000fbdbdf2509077f054e214e210800000026e47e300a0000000400000004000000ff7f00003f00000000000080", @ANYRES32=r5, @ANYBLOB="800000005cffff0e08000000f8fffffff83db212a70385f43145ac63c92f30e8b810f4a1ea003f23e70d122b39f757b4776ef078ae97273c500243fba0a2b4703617bf48443b66f50833058789ecab20d6eb2d586b079888b36fc1fa4127b77f4e3970bb0f462dcafd8db022b66eb9ce094f617703975092837c27ab5e00655654a12642e41efb99bf3305ccb98fa2ffaa38f942b69e9daf60c8c7351f83c03acffb7f04e05d59993136213572cd00f0564f"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x0)

5.867986118s ago: executing program 3 (id=902):
r0 = syz_open_dev$radio(0x0, 0x2, 0x2)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x9, 0x5f2, 0x400, 0x2, 0x18})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
fcntl$setflags(r1, 0x2, 0x0)
r2 = syz_clone(0x4a00e100, &(0x7f0000000100)="677d4e2320eabbc9259f66ae60c0986a6d0ed035a6dd6afad0ca5fc1cf6f74de39b0a5ac1ea7e348ec8eb45e0d0d910ce322d38ac113f318c3ff7f65b93f557405223e8c56e4564a54e560283a6ce63a5b35d5e525848d3e7e750649e3e5fe1824ae5e8c2bc042dfe21d2576228845206e3b9f137e1a391bf883d662d9d0788b22acb71b715efd9c42cc319611c801563548d772b1899414ccb4ee9d", 0x9c, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="db15f0d491e4c279e567cea2c54d22fc39c92a820b48d856e63ae84fedbbf5885f96e6c1bf9c2b9221f7f73e9f8bca2aed0e830a23d7f2e672e39de4a24d87b9a3e1ab9eec2f8afdc9a2c059f7edbc0d0caacf8fcf9b")
sched_setscheduler(r2, 0x6, &(0x7f00000002c0)=0xfffff89a)
ptrace$cont(0x1f, r2, 0x8, 0x0)
syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x9, 0xc9, 0xc8, 0x1}}}, 0x8)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@any, 0xfb, 0x3, 0x9, "f89410", 0x4, 0x33}, {@any, 0x6, 0x0, 0xb, "982856", 0x2, 0x8}, {@any, 0x10, 0xae, 0x6, "8e231b", 0x0, 0xa}, {@none, 0x9, 0x1, 0x9, "b3dcc7", 0x3, 0x1}, {@any, 0xff, 0x4, 0x3, "7beeb8", 0xfc8, 0xf8}]}}}, 0x4f)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/stat\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x6}}]}}, 0xf)
r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$setperm(0x5, r4, 0x20000000)
keyctl$clear(0x7, r4)
ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000004c0)={0x0, {0x7, 0x8001}})
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f0000000500), 0x4003)
r5 = accept4$unix(r3, &(0x7f0000000540)=@abs, &(0x7f00000005c0)=0x6e, 0x80800)
r6 = getegid()
r7 = geteuid()
r8 = getgid()
getgroups(0x5, &(0x7f0000001000)=[0xee01, 0xee00, 0xffffffffffffffff, <r9=>0xee01, 0x0])
r10 = socket$pppoe(0x18, 0x1, 0x0)
r11 = memfd_create(&(0x7f00000011c0)='/dev/radio#\x00', 0x0)
sendmmsg$unix(r5, &(0x7f0000001c80)=[{{&(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000680)="49dce0a50baad21fd1cbf7fc18e8cde5089d47cc7448a000c7d0ed9c5429b341b09c36aaa75ddd1dd4bc099a221e7dda458f3e1bc65be22cffccab57e27877c2a06d97029974296e6c5c0b55731a892f87aa52a5ee9f4115b9fde9e2e10ad8d90ffd268a330ef2d08774a7a6a3", 0x6d}, {&(0x7f0000000700)="0e05b83a5accdba0e1958128702d073706f7aa2a94ac7a24b94812bce870240058a546ab809a6f7c0854188bbddf9ede55ed47fa1d8debdc498501c1be503de7ce079d0d794d9809980b6abdd2201b6afb1c2800175b04522c2f14c4cd170684c02f06de087e664bf9a01edc2c7914916bd11eddbe8f8ad7f1b3795a62a4b4fcaf05aa667a00a6025755c561292c8a6ca1a8ea0f85f1515bb7eb0e3a610e7c8d49de5e4ae50cdc2a4546301248117cdd87393eaf3f33b5a0b7dbe54342a19090d58818d18b11e2b071f46de5c9e03118726de5bdfb2be89e9b3109efa6fa4d4e8006edebf062fba0", 0xe8}, {&(0x7f0000000800)="b9b571e7cc407e3875c16127938d4f092eb024a250615a1858a70e04ccbcfd20a49b3805f9eb89b894014eb0afc7631520cfb94253225275aef6067c9463dd241b7e15a2980b262134630140", 0x4c}, {&(0x7f0000000880)="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", 0xfb}, {&(0x7f0000000980)="f06f32973508442a435dcb0fd3a416f99f9bde7a95e594e9a856d86fa265d834068ad07fa07555a41fd438745e6cd3d5dabdfb30cf44e29824ff92a956633ed79d3807742be3e1b8ce07f35849d78eab72986dcc555f4641448274ddafb7ac80d5807d425ec82398f3a8fa5dfa87dec12b30536a2af882566ee072315e8878e351fed9e9c1f9a67ec7f981cb813c5bc377c6e74ebca1e60d4d7a15faa547694ecfea93b0611d5511dc508080413116b60635b6f1a95872d1f9813defb8504b3b782c4443b96bc2b0748aac900672ecc8139b894e761e60df29a7378ae0730219ca49be2effe8f33bda", 0xe9}, {&(0x7f0000000a80)="d199359ccdf5ac6123f43185b86ee7a0aad78215e1856261f2e595fce8aea545711fc0f4f23d28e8091dd485a87bd38d71fb38a449a8ca8e9e3835f543c0af7f7da6319532262e6bb8a56e402ed86939c30e1b9b39f0ddcaea119705ea9aad88afd2f7a2b4c153868ace7becdef03b575a897940a70b237a872f0a758f8015e8e55c498faab1401baef4e13f950d39", 0x8f}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0x20, 0x20d2}}, {{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000c80)="51dd4c9d3f920903aa2a431384c2156e72355094d637667803b552378d81a1cf4994d336df16a3189bbc1765bdf41b3d9074511805288661be9955e046f4a3304aa5f196727b675345c8b32235e6912d659f1fc3305096597cc15d93a73c07f4ec2b6cf7a3ca6b610d3d", 0x6a}, {&(0x7f0000000d00)="91eed3eb9c1f350722f1038a228d487f6504a87fba5cca69f085caf0f76ad357581d3dbf970ef3e8", 0x28}, {&(0x7f0000000d40)="f358bf3ea9d0a823bbe811e759898fcff8be49aaff0ffc708318db8585b95f1c18b2cc68f0b84dbd9150197a31e19004980014cd8298f864c4a7d78f1da2d4f85349d64f2bdfbe8a547ad83652e47baadaf16fbaf8f2c06dd1cc7312539108fceb3da3faea4b", 0x66}, {&(0x7f0000000dc0)}, {&(0x7f0000000e40)="68decc6306e9bb5809f04c0a24adaff4bc00c7f5461ae9cc4037e5457d0805f1ecb5e5dd64060ae53f6527f6d851ff39454caf082b8de5b750a865527401309f53a01c7055db5ca762dc0665841af06818ad263ad062a66355a13a1c37700b3414cdc1a51423f295125c727be76e5e7f53c37647e6e986fe44c6d87d0745a614fffd97b45a07b46cfd3de483d7dbb2b62c083c2bbcddb3f796b9e1ab11527c39ad79d8978cdbc112727bbdb9e2d0a8e307061eaaa3444ac850580b4186aee6c34dc069e0301e25af63169b93129060282d80a2ebc247ba5474be6a58", 0xdc}, {&(0x7f0000000f40)="17d7374897643b45b1abacf6d30f2b3ed36e96b35703b591503b725be746b5f3779734ee1b39911e7e046853cfb2275baa11b973a3", 0x35}], 0x6, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, r6}}}, @cred={{0x1c, 0x1, 0x2, {r2, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, r9}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x28, 0x1, 0x1, [r1, r3, r3, r0, r3, r10]}}, @rights={{0x20, 0x1, 0x1, [r11, r0, r1, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x100, 0x800}}, {{&(0x7f0000001440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000014c0)="c42397524dc6db63696ba6f71035699abadd6a3d576e046acaf3dc8871e197750cd66a367d453ec9b5cb955b5180cbdc5b7aece3ef0804eb87a7116cb31730acb51167cfd1eb67e1df957c44e0255c2ae9b7b96d1e22041f5b010e3107c5d706c97f475b8613d184cb2200a844e8171bc479c0f85caf014df0fd9b52c642d8cd132e138143820a3537b9cb1cd0b0e1feaa68673912338daaa1e22ed3809313a902d9ab8e377214b7debd3ea2258646bee03173d38334884e278f8ab5c7b7fb7fbce3d678ea7faaacab098ab1c88caaa05f82c28ef9b215ac5985f227c60035e05d850514ab74818f32a330281426e32e1230a537f6", 0xf5}], 0x1, &(0x7f0000001b40)=[@rights={{0x24, 0x1, 0x1, [r3, r3, r3, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r3, r3, r1, r1, r3, r3, r1, r0]}}], 0x130, 0x1}}], 0x3, 0x44000)

5.779056852s ago: executing program 1 (id=903):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4004004)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc0bc5310, &(0x7f00000000c0))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180)={'team0\x00', <r5=>0x0})
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, r5, 0x0, r3}, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
shmget$private(0x0, 0x3000, 0x80, &(0x7f0000b6f000/0x3000)=nil)
shmat(0x0, &(0x7f0000800000/0x800000)=nil, 0x4000)
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000300)={0x10, 0x2a, 0xb0f0fe8ca3504621}, 0x10}], 0x1}, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)

5.480089425s ago: executing program 0 (id=906):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000001680)=ANY=[@ANYBLOB="e20005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)
io_setup(0x6, &(0x7f0000000080)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r3=>0x0, <r4=>0x0})
syz_usb_connect$cdc_ecm(0x0, 0x7f, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x7, 0x20, 0xa, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "ac70"}, {0x5, 0x24, 0x0, 0x5f7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfff9, 0xa62c, 0xb7}, [@acm={0x4}, @country_functional={0xa, 0x24, 0x7, 0xc4, 0x3, [0x81, 0x10]}, @mdlm={0x15, 0x24, 0x12, 0x2}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x6, 0x5c}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4d, 0x5, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x9, 0x2}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x1, 0x2d, 0x10, 0x7f}, 0x21, &(0x7f0000000440)={0x5, 0xf, 0x21, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x7, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x1, 0x13}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa8, 0x1, 0x6, 0x8, 0x7}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3805}}]})
r5 = syz_usbip_server_init(0x2)
ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x8)
io_pgetevents(r2, 0x5, 0x0, &(0x7f0000000100), &(0x7f0000000180)={r3, r4+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x100000000]}, 0x8})
r6 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r6})
write$eventfd(r6, &(0x7f00000000c0), 0x8)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x7, 0x151b41)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_usb_connect(0x3, 0x100, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r7, 0x89e8)
socket$netlink(0x10, 0x3, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)={0x20, 0x12, 0x68, "a0d7ab65b06bfdda5ac967d961c727af04b0216b96793458cccafca2c8076eeb76a73d779ee89c3c8a893ca0fd6ea167a32e8251bb6cbd0b94eda778585d808427725d69d5dbaf5b8da379c37ba49c0f71e9a3be9f363a736c1e8633a9934a80a62a145983f24359"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x140, 0x1, [0xf0]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x9, 0x1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "3390"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000840)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "63e8"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x2}})

5.34526096s ago: executing program 1 (id=907):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xe, 0x4, 0x8, 0xb}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

5.270300573s ago: executing program 2 (id=908):
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x28}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000000000", @ANYBLOB], 0x38}, 0x0)

5.186243297s ago: executing program 4 (id=909):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
write$nci(0xffffffffffffffff, 0x0, 0x4)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id={0x1e, 0x3, 0x2}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100))
rmdir(0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x4}}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @empty}}}, 0x48)

2.907619071s ago: executing program 4 (id=910):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000700)=@req={0x10000, 0x5, 0x80, 0xa00}, 0x10)
sendmmsg(r0, &(0x7f0000004ac0), 0x0, 0x0)

2.907026211s ago: executing program 3 (id=911):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}]}, 0x78}}, 0x0)
iopl(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f}, 0x90)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e)
connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e)
connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x0, @remote, 'gretap0\x00'}}, 0x1e)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r8 = eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r8)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r8})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001c80)={0x3, 0x0, [{0x0, 0x47, &(0x7f0000000940)=""/71}, {0x86956090991702cc, 0x91, &(0x7f0000001e80)=""/145}, {0xf000, 0x9a, &(0x7f0000000bc0)=""/154}]})
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x1, r8})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="cc000000120009000000000000000000b9000000c516f2c41efcb7b1f20b32c5c7a3c7540a3c9e4f1b425f168d7e1d2f6e6dc8a277604a68132bb9828f9ff58fb1174c8b936c329335057ca096357122444ab7d59f9d48ed0eaccff228483fb01e9e3c9888208b6437a830215c918b3723a7701507a0c9b3bc05362422bb11daa9a0f3b71b2dd46db1df58"], 0xcc}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16}, 0x48)

2.769126316s ago: executing program 2 (id=912):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4004004)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc0bc5310, &(0x7f00000000c0)={0x2})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180))
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x0, r3}, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000001680)=[{0x0}], 0x1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
shmget$private(0x0, 0x3000, 0x80, &(0x7f0000b6f000/0x3000)=nil)
shmat(0x0, &(0x7f0000800000/0x800000)=nil, 0x4000)
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000300)={0x10, 0x2a, 0xb0f0fe8ca3504621}, 0x10}], 0x1}, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)

2.326302064s ago: executing program 4 (id=913):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5cdcc09c, 0x7, 0x3, 0x814, 0xffffffffffffffff, 0x3000000, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x2, 0x2, 0xd}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0xfd12}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x3, 0x0, &(0x7f0000000280))
write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [{0x20, '/dev/ptp0\x00'}, {}, {0x20, 'blkio.bfq.avg_queue_size\x00'}]}, 0x31)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x40048f1}, 0x4040084)
sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="201000000003fd42facbc57d07010300000000000000000000000009000100fde5c122"], 0x20}}, 0x0)
r5 = eventfd(0x7)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/153, 0x0})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r5})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x3000, 0xe, &(0x7f0000000480)=""/14}, {0xf004, 0x91, &(0x7f00000006c0)=""/145}]})
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000180)={0x0, r5})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
socket(0x1a, 0x80000, 0x1)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x632f, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'vxcan0\x00', <r6=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r6, 0x3}, 0x10, &(0x7f00000003c0)={&(0x7f00000004c0)=@canfd={{0x2}, 0x22, 0x0, 0x0, 0x0, "2cf710d6e7e72e2e0858b52fe49ff6bdf05dee56692677237351b90b7d0211cc205bcbba9cad89249d499771383a47cfcebad05cd18ea4cee166a7e0e508c048"}, 0x48}, 0x1, 0x0, 0x0, 0x4000054}, 0x0)
socket(0x1e, 0x800000003, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100))

2.078887564s ago: executing program 2 (id=914):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f}, 0x90)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c80)={0x3, 0x0, [{0x0, 0x47, &(0x7f0000000940)=""/71}, {0x86956090991702cc, 0x91, &(0x7f0000001e80)=""/145}, {0xf000, 0x9a, &(0x7f0000000bc0)=""/154}]})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="cc000000120009000000000000000000b9000000c516f2c41efcb7b1f20b32c5c7a3c7540a3c9e4f1b425f168d7e1d2f6e6dc8a277604a68132bb9828f9ff58fb1174c8b936c329335057ca096357122444ab7d59f9d48ed0eaccff228483fb01e9e3c9888208b6437a830215c918b3723a7701507a0c9b3bc05362422bb11daa9a0f3b71b2dd46db1df58"], 0xcc}], 0x1}, 0x0)

2.067210455s ago: executing program 3 (id=915):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.883912832s ago: executing program 4 (id=916):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
pwritev(r1, 0x0, 0x0, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002de8)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x8000, 0x0, 0xc, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2b63f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec", [0x403, 0x10000005]})
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080))
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$can_raw(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@canfd={{}, 0xff, 0x0, 0x0, 0x0, "9d122114364ad4aa2056dd37bdddc89b0a33b77b1de93ecdd50d034d562822d4f2f4a57dce3cb31166f662c0c5797734840fd0012a65d3e21ebdb7d18658b76d"}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="4c000000130010002cbd7000fbdbdf2509077f054e214e210800000026e47e300a0000000400000004000000ff7f00003f00000000000080", @ANYRES32=r4, @ANYBLOB="800000005cffff0e08000000f8fffffff83db212a70385f43145ac63c92f30e8b810f4a1ea003f23e70d122b39f757b4776ef078ae97273c500243fba0a2b4703617bf48443b66f50833058789ecab20d6eb2d586b079888b36fc1fa4127b77f4e3970bb0f462dcafd8db022b66eb9ce094f617703975092837c27ab5e00655654a12642e41efb99bf3305ccb98fa2ffaa38f942b69e9daf60c8c7351f83c03acffb7f04e05d59993136213572cd00f0564f"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)

1.69186936s ago: executing program 2 (id=917):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4004004)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc0bc5310, &(0x7f00000000c0))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180)={'team0\x00', <r5=>0x0})
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, r5, 0x0, r3}, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
shmget$private(0x0, 0x3000, 0x80, &(0x7f0000b6f000/0x3000)=nil)
shmat(0x0, &(0x7f0000800000/0x800000)=nil, 0x4000)
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000300)={0x10, 0x2a, 0xb0f0fe8ca3504621}, 0x10}], 0x1}, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)

1.482503319s ago: executing program 3 (id=918):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000003a80)=0x2, 0x4)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0)

1.292785407s ago: executing program 2 (id=919):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000c95"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
socket$nl_audit(0x10, 0x3, 0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_MSRS(r4, 0x4048aecb, &(0x7f0000000200)=ANY=[@ANYRES32])

1.285431487s ago: executing program 4 (id=920):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
getpid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$unix(0x1, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, 0x0, 0x18}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x810, r1, 0x0)
ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x7beee3e7})
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x400)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
sendmsg$inet_sctp(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0cc4c53e52cd4f1e2787e1cd1e55684e749d3b21ae068680fadc5cc648c79186f3d98ccd3a5b1732936dcf74538ffc97a9f82112023f2567972515712c7ec4e0ed2220f5425ba6ed76928e28b07ec50b135954b94c32030210aa0e2f4645f46be81d746c6b", 0x65}, {&(0x7f0000000340)="9c89ca312f027074ae7d79f183f678fc695c50a34d0e4133881f084b6d440ab6868186a9eabf0b8e5760adbc5a349da9d1620af787745bee2d6d2e6a84ee1fe7132e692fed0e0fe948d775263f5b67a91c4bd74ceeb68e733b2389262377b79861ddf5d86ca1a6388ab7257d5f1271a35a8c79a96e3e28f094fdfa96736ef41516bd3fbec3fd955247007a18dd527d224592b6fc09a05d5628e73b", 0x7fffef9b}], 0x2}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

1.082351805s ago: executing program 3 (id=921):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
write$nci(0xffffffffffffffff, 0x0, 0x4)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id={0x1e, 0x3, 0x2}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100))
rmdir(0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x4}}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @empty}}}, 0x48)

159.944893ms ago: executing program 4 (id=922):
r0 = syz_open_dev$radio(0x0, 0x2, 0x2)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x9, 0x5f2, 0x400, 0x2, 0x18})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
fcntl$setflags(r1, 0x2, 0x0)
r2 = syz_clone(0x4a00e100, &(0x7f0000000100)="677d4e2320eabbc9259f66ae60c0986a6d0ed035a6dd6afad0ca5fc1cf6f74de39b0a5ac1ea7e348ec8eb45e0d0d910ce322d38ac113f318c3ff7f65b93f557405223e8c56e4564a54e560283a6ce63a5b35d5e525848d3e7e750649e3e5fe1824ae5e8c2bc042dfe21d2576228845206e3b9f137e1a391bf883d662d9d0788b22acb71b715efd9c42cc319611c801563548d772b1899414ccb4ee9d", 0x9c, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="db15f0d491e4c279e567cea2c54d22fc39c92a820b48d856e63ae84fedbbf5885f96e6c1bf9c2b9221f7f73e9f8bca2aed0e830a23d7f2e672e39de4a24d87b9a3e1ab9eec2f8afdc9a2c059f7edbc0d0caacf8fcf9b")
sched_setscheduler(r2, 0x6, &(0x7f00000002c0)=0xfffff89a)
ptrace$cont(0x1f, r2, 0x8, 0x0)
syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x9, 0xc9, 0xc8, 0x1}}}, 0x8)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@any, 0xfb, 0x3, 0x9, "f89410", 0x4, 0x33}, {@any, 0x6, 0x0, 0xb, "982856", 0x2, 0x8}, {@any, 0x10, 0xae, 0x6, "8e231b", 0x0, 0xa}, {@none, 0x9, 0x1, 0x9, "b3dcc7", 0x3, 0x1}, {@any, 0xff, 0x4, 0x3, "7beeb8", 0xfc8, 0xf8}]}}}, 0x4f)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/stat\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x6}}]}}, 0xf)
r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$setperm(0x5, r4, 0x20000000)
keyctl$clear(0x7, r4)
ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000004c0)={0x0, {0x7, 0x8001}})
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f0000000500), 0x4003)
r5 = accept4$unix(r3, &(0x7f0000000540)=@abs, &(0x7f00000005c0)=0x6e, 0x80800)
r6 = getegid()
r7 = geteuid()
r8 = getgid()
getgroups(0x5, &(0x7f0000001000)=[0xee01, 0xee00, 0xffffffffffffffff, <r9=>0xee01, 0x0])
r10 = socket$pppoe(0x18, 0x1, 0x0)
r11 = memfd_create(&(0x7f00000011c0)='/dev/radio#\x00', 0x0)
sendmmsg$unix(r5, &(0x7f0000001c80)=[{{&(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000680)="49dce0a50baad21fd1cbf7fc18e8cde5089d47cc7448a000c7d0ed9c5429b341b09c36aaa75ddd1dd4bc099a221e7dda458f3e1bc65be22cffccab57e27877c2a06d97029974296e6c5c0b55731a892f87aa52a5ee9f4115b9fde9e2e10ad8d90ffd268a330ef2d08774a7a6a3", 0x6d}, {&(0x7f0000000700)="0e05b83a5accdba0e1958128702d073706f7aa2a94ac7a24b94812bce870240058a546ab809a6f7c0854188bbddf9ede55ed47fa1d8debdc498501c1be503de7ce079d0d794d9809980b6abdd2201b6afb1c2800175b04522c2f14c4cd170684c02f06de087e664bf9a01edc2c7914916bd11eddbe8f8ad7f1b3795a62a4b4fcaf05aa667a00a6025755c561292c8a6ca1a8ea0f85f1515bb7eb0e3a610e7c8d49de5e4ae50cdc2a4546301248117cdd87393eaf3f33b5a0b7dbe54342a19090d58818d18b11e2b071f46de5c9e03118726de5bdfb2be89e9b3109efa6fa4d4e8006edebf062fba0", 0xe8}, {&(0x7f0000000800)="b9b571e7cc407e3875c16127938d4f092eb024a250615a1858a70e04ccbcfd20a49b3805f9eb89b894014eb0afc7631520cfb94253225275aef6067c9463dd241b7e15a2980b262134630140", 0x4c}, {&(0x7f0000000880)="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", 0xfb}, {&(0x7f0000000980)="f06f32973508442a435dcb0fd3a416f99f9bde7a95e594e9a856d86fa265d834068ad07fa07555a41fd438745e6cd3d5dabdfb30cf44e29824ff92a956633ed79d3807742be3e1b8ce07f35849d78eab72986dcc555f4641448274ddafb7ac80d5807d425ec82398f3a8fa5dfa87dec12b30536a2af882566ee072315e8878e351fed9e9c1f9a67ec7f981cb813c5bc377c6e74ebca1e60d4d7a15faa547694ecfea93b0611d5511dc508080413116b60635b6f1a95872d1f9813defb8504b3b782c4443b96bc2b0748aac900672ecc8139b894e761e60df29a7378ae0730219ca49be2effe8f33bda", 0xe9}, {&(0x7f0000000a80)="d199359ccdf5ac6123f43185b86ee7a0aad78215e1856261f2e595fce8aea545711fc0f4f23d28e8091dd485a87bd38d71fb38a449a8ca8e9e3835f543c0af7f7da6319532262e6bb8a56e402ed86939c30e1b9b39f0ddcaea119705ea9aad88afd2f7a2b4c153868ace7becdef03b575a897940a70b237a872f0a758f8015e8e55c498faab1401baef4e13f950d39", 0x8f}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0x20, 0x20d2}}, {{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000c80)="51dd4c9d3f920903aa2a431384c2156e72355094d637667803b552378d81a1cf4994d336df16a3189bbc1765bdf41b3d9074511805288661be9955e046f4a3304aa5f196727b675345c8b32235e6912d659f1fc3305096597cc15d93a73c07f4ec2b6cf7a3ca6b610d3d", 0x6a}, {&(0x7f0000000d00)="91eed3eb9c1f350722f1038a228d487f6504a87fba5cca69f085caf0f76ad357581d3dbf970ef3e8", 0x28}, {&(0x7f0000000d40)="f358bf3ea9d0a823bbe811e759898fcff8be49aaff0ffc708318db8585b95f1c18b2cc68f0b84dbd9150197a31e19004980014cd8298f864c4a7d78f1da2d4f85349d64f2bdfbe8a547ad83652e47baadaf16fbaf8f2c06dd1cc7312539108fceb3da3faea4b", 0x66}, {&(0x7f0000000dc0)="6d69889556e610c2fd08f91df7f6332c7d0da0086a8a8c59180ab644e34a8e52c4332a7d98310cf6caafd4020fbd", 0x2e}, {&(0x7f0000000e40)="68decc6306e9bb5809f04c0a24adaff4bc00c7f5461ae9cc4037e5457d0805f1ecb5e5dd64060ae53f6527f6d851ff39454caf082b8de5b750a865527401309f53a01c7055db5ca762dc0665841af06818ad263ad062a66355a13a1c37700b3414cdc1a51423f295125c727be76e5e7f53c37647e6e986fe44c6d87d0745a614fffd97b45a07b46cfd3de483d7dbb2b62c083c2bbcddb3f796b9e1ab11527c39ad79d8978cdbc112727bbdb9e2d0a8e307061eaaa3444ac850580b4186aee6c34dc069e0301e25af63169b93129060282d80a2ebc247ba5474be6a58", 0xdc}, {&(0x7f0000000f40)="17d7374897643b45b1abacf6d30f2b3ed36e96b35703b591503b725be746b5f3779734ee1b39911e7e046853cfb2275baa11b973a3", 0x35}], 0x6, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, r6}}}, @cred={{0x1c, 0x1, 0x2, {r2, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, r9}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x28, 0x1, 0x1, [r1, r3, r3, r0, r3, r10]}}, @rights={{0x20, 0x1, 0x1, [r11, r0, r1, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x100, 0x800}}, {{&(0x7f0000001440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000014c0)="c42397524dc6db63696ba6f71035699abadd6a3d576e046acaf3dc8871e197750cd66a367d453ec9b5cb955b5180cbdc5b7aece3ef0804eb87a7116cb31730acb51167cfd1eb67e1df957c44e0255c2ae9b7b96d1e22041f5b010e3107c5d706c97f475b8613d184cb2200a844e8171bc479c0f85caf014df0fd9b52c642d8cd132e138143820a3537b9cb1cd0b0e1feaa68673912338daaa1e22ed3809313a902d9ab8e377214b7debd3ea2258646bee03173d38334884e278f8ab5c7b7fb7fbce3d678ea7faaacab098ab1c88caaa05f82c28ef9b215ac5985f227c60035e05d850514ab74818f32a330281426e32e1230a537f6", 0xf5}], 0x1, &(0x7f0000001b40)=[@rights={{0x24, 0x1, 0x1, [r3, r3, r3, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r3, r3, r1, r1, r3, r3, r1, r0]}}], 0x130, 0x1}}], 0x3, 0x44000)

43.795408ms ago: executing program 2 (id=923):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
pwritev(r1, 0x0, 0x0, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002de8)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x8000, 0x0, 0xc, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2b63f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec", [0x403, 0x10000005]})
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080))
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$can_raw(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@canfd={{}, 0xff, 0x0, 0x0, 0x0, "9d122114364ad4aa2056dd37bdddc89b0a33b77b1de93ecdd50d034d562822d4f2f4a57dce3cb31166f662c0c5797734840fd0012a65d3e21ebdb7d18658b76d"}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="4c000000130010002cbd7000fbdbdf2509077f054e214e210800000026e47e300a0000000400000004000000ff7f00003f00000000000080", @ANYRES32=r4, @ANYBLOB="800000005cffff0e08000000f8fffffff83db212a70385f43145ac63c92f30e8b810f4a1ea003f23e70d122b39f757b4776ef078ae97273c500243fba0a2b4703617bf48443b66f50833058789ecab20d6eb2d586b079888b36fc1fa4127b77f4e3970bb0f462dcafd8db022b66eb9ce094f617703975092837c27ab5e00655654a12642e41efb99bf3305ccb98fa2ffaa38f942b69e9daf60c8c7351f83c03acffb7f04e05d59993136213572cd00f0564f"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)

0s ago: executing program 0 (id=924):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4004004)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc0bc5310, &(0x7f00000000c0)={0x2})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180))
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x0, r3}, 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
shmget$private(0x0, 0x3000, 0x80, &(0x7f0000b6f000/0x3000)=nil)
shmat(0x0, &(0x7f0000800000/0x800000)=nil, 0x4000)
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000300)={0x10, 0x2a, 0xb0f0fe8ca3504621}, 0x10}], 0x1}, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)

kernel console output (not intermixed with test programs):

mand tx timeout
[   51.804110][ T3555] Bluetooth: hci3: command tx timeout
[   51.804388][ T3562] Bluetooth: hci2: command tx timeout
[   51.809675][ T3555] Bluetooth: hci1: command tx timeout
[   51.834440][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   51.842983][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   51.858306][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.869738][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   51.882604][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   51.907658][ T3547] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.928136][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.937084][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   51.946595][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.956222][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   51.965321][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.973602][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   51.982206][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.993344][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   52.005390][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   52.016537][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.031924][ T3546] 8021q: adding VLAN 0 to HW filter on device team0
[   52.046679][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   52.055497][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   52.063160][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.071514][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.103143][ T3548] device veth0_vlan entered promiscuous mode
[   52.119037][ T3559] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.127773][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   52.137072][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   52.154531][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   52.163380][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   52.183171][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.204763][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.213890][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.221123][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.242874][ T3548] device veth1_vlan entered promiscuous mode
[   52.273369][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   52.281948][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   52.291453][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.300846][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.309692][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.316875][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.325124][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.334619][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.371708][ T3547] device veth0_vlan entered promiscuous mode
[   52.394200][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   52.402162][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   52.417096][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.428379][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.437303][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   52.445888][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   52.454478][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.463247][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.476474][ T3545] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.497414][ T3547] device veth1_vlan entered promiscuous mode
[   52.517615][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.526886][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   52.535646][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   52.544707][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   52.553377][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   52.607798][ T3548] device veth0_macvtap entered promiscuous mode
[   52.617114][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.626250][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.635863][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   52.644840][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   52.653259][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   52.662257][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   52.671149][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   52.679913][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   52.690382][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   52.709345][ T3547] device veth0_macvtap entered promiscuous mode
[   52.722410][ T3548] device veth1_macvtap entered promiscuous mode
[   52.750967][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   52.759793][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   52.768588][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.777897][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.787892][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   52.796668][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   52.805717][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   52.814013][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   52.823082][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.838124][ T3548] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.853248][ T3548] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.862454][ T3545] device veth0_vlan entered promiscuous mode
[   52.869642][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   52.877521][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   52.885713][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   52.894622][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   52.903193][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   52.912098][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   52.940127][ T3548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.951477][ T3548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.969619][ T3548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.979915][ T3548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.999114][ T3547] device veth1_macvtap entered promiscuous mode
[   53.014751][ T3545] device veth1_vlan entered promiscuous mode
[   53.053187][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.068434][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.080474][ T3547] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.090141][ T3559] device veth0_vlan entered promiscuous mode
[   53.097808][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.106693][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   53.115237][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.124220][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.132632][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.141357][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.151767][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.162316][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.175150][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.185743][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.201060][ T3547] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.211909][ T3547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.221304][ T3547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.230539][ T3547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.239697][ T3547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.272313][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   53.283119][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.292502][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.306621][ T3559] device veth1_vlan entered promiscuous mode
[   53.347001][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   53.355160][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   53.381478][ T3546] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.416835][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.431933][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.433099][ T3545] device veth0_macvtap entered promiscuous mode
[   53.449829][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.459126][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.467904][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   53.476439][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   53.507921][ T3545] device veth1_macvtap entered promiscuous mode
[   53.551121][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.562684][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.574659][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.585262][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.597079][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.613377][ T3559] device veth0_macvtap entered promiscuous mode
[   53.622563][ T2439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.632398][ T2439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.646368][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.654710][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   53.662763][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.671725][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.680522][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.689452][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.698323][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.707266][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.717475][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.728080][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.741089][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.751821][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.766854][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.786762][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   53.794915][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.803421][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.814343][ T3559] device veth1_macvtap entered promiscuous mode
[   53.824902][ T3545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.833627][ T3545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.842588][ T3545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.851543][ T3545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.864413][ T3555] Bluetooth: hci4: command tx timeout
[   53.864587][ T3561] Bluetooth: hci2: command tx timeout
[   53.869826][ T3555] Bluetooth: hci3: command tx timeout
[   53.876977][ T3562] Bluetooth: hci0: command tx timeout
[   53.880599][ T3555] Bluetooth: hci1: command tx timeout
[   53.913638][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.918091][ T3546] device veth0_vlan entered promiscuous mode
[   53.953572][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.984181][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.992296][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   54.001772][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   54.012253][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   54.023190][ T3546] device veth1_vlan entered promiscuous mode
[   54.038996][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.068528][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.078461][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.089113][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.099316][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.111111][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.122367][ T3559] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.137288][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.146849][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.160816][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   54.168904][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   54.176992][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   54.186188][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.195417][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.204621][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   54.236930][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.247954][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.262686][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.274654][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.284706][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.295446][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.306818][ T3559] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.341777][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   54.351556][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.360361][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.369150][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   54.378828][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.390163][ T3559] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.399821][ T3559] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.409325][ T3559] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.419036][ T3559] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.437641][ T3546] device veth0_macvtap entered promiscuous mode
[   54.449200][ T3546] device veth1_macvtap entered promiscuous mode
[   54.492352][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.523616][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.527498][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.545009][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.555801][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.566763][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.577139][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.588583][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.598876][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.610845][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.636251][ T3546] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.660533][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   54.671366][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   54.680125][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.688991][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.703530][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.715927][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.726334][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.737357][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.748598][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.759389][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.769742][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.780647][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.791906][ T3546] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.822813][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.832081][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.843434][ T3546] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.854682][ T3546] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.863422][ T3546] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.872693][ T3546] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.895013][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.907056][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.921756][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   54.970818][  T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.995306][  T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.020492][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   55.087995][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.102385][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.113424][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   55.203132][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.238842][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.279687][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   55.301884][ T2439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.327338][ T2439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.347607][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   55.944797][ T3555] Bluetooth: hci1: command tx timeout
[   55.954103][ T3558] Bluetooth: hci0: command tx timeout
[   55.956146][ T3562] Bluetooth: hci3: command tx timeout
[   55.959507][ T3558] Bluetooth: hci4: command tx timeout
[   55.959554][ T3555] Bluetooth: hci2: command tx timeout
[   61.346423][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   61.416794][ T3816] Zero length message leads to an empty skb
[   62.687379][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[   62.950295][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   63.175628][ T3868] loop3: detected capacity change from 0 to 512
[   63.243127][ T3537] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   63.448313][ T3876] loop3: detected capacity change from 0 to 256
[   63.633368][ T3876] syz.3.82: attempt to access beyond end of device
[   63.633368][ T3876] loop3: rw=2049, sector=256, nr_sectors = 100 limit=256
[   64.242791][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   64.310761][ T3899] MPTCP: kernel_bind error, err=-98
[   64.774827][ T3885] loop4: detected capacity change from 0 to 40427
[   64.841214][ T3885] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   64.871828][ T3885] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   64.911629][ T3885] F2FS-fs (loop4): invalid crc value
[   64.971168][ T3885] F2FS-fs (loop4): Found nat_bits in checkpoint
[   65.095022][ T3885] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   65.102393][ T3885] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   65.203578][ T3885] =======================================================
[   65.203578][ T3885] WARNING: The mand mount option has been deprecated and
[   65.203578][ T3885]          and is ignored by this kernel. Remove the mand
[   65.203578][ T3885]          option from the mount to silence this warning.
[   65.203578][ T3885] =======================================================
[   65.364531][   T46] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   65.405433][   T46] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   66.274174][   T26] audit: type=1326 audit(1719780352.791:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3959 comm="syz.1.112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56d8975b99 code=0x0
[   67.110514][ T3988] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   68.273415][ T3991] loop1: detected capacity change from 0 to 40427
[   68.328317][ T3991] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[   68.357518][ T3991] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   68.388843][ T3991] F2FS-fs (loop1): invalid crc value
[   68.446771][ T3991] F2FS-fs (loop1): Found nat_bits in checkpoint
[   68.456016][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   68.505718][ T4027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.603964][ T3991] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   68.611044][ T3991] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   68.625542][ T3562] Bluetooth: hci1: unexpected event 0x3e length: 537 > 260
[   68.625575][ T3562] Bluetooth: hci1: unexpected subevent 0x0d length: 536 > 260
[   68.644062][ T3562] Bluetooth: hci1: adv larger than maximum supported
[   68.775904][ T3991] syz.1.121: attempt to access beyond end of device
[   68.775904][ T3991] loop1: rw=2051, sector=40960, nr_sectors = 4096 limit=40427
[   68.832653][  T120] block nbd0: Attempted send on invalid socket
[   68.839765][  T120] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.844204][ T3991] syz.1.121: attempt to access beyond end of device
[   68.844204][ T3991] loop1: rw=2051, sector=49152, nr_sectors = 81920 limit=40427
[   68.864083][ T4040] hpfs: hpfs_map_sector(): read error
[   68.870589][ T3991] F2FS-fs (loop1): Issue discard(5120, 5120, 512) failed, ret: -5
[   68.870628][ T3991] F2FS-fs (loop1): Issue discard(6144, 6144, 10240) failed, ret: -5
[   68.922183][ T4050] loop2: detected capacity change from 0 to 64
[   68.939263][ T4050] hfs: unable to parse mount options
[   69.497076][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   69.543983][  T120] block nbd1: Attempted send on invalid socket
[   69.550343][  T120] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   69.617943][ T4073] netlink: 56 bytes leftover after parsing attributes in process `syz.1.153'.
[   70.055766][ T4050] loop2: detected capacity change from 0 to 32768
[   70.101416][ T4050] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.143 (4050)
[   70.187934][ T4050] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   70.221340][ T4050] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   70.257406][ T4050] BTRFS info (device loop2): using free space tree
[   70.636977][ T4050] BTRFS info (device loop2): enabling ssd optimizations
[   70.872570][ T4082] loop1: detected capacity change from 0 to 40427
[   70.928560][ T4082] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[   70.946574][ T4082] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   70.955411][ T3546] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   70.975365][ T4082] F2FS-fs (loop1): invalid crc value
[   71.062500][ T4082] F2FS-fs (loop1): Found nat_bits in checkpoint
[   71.278021][ T4082] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   71.290536][ T4140] netlink: 56 bytes leftover after parsing attributes in process `syz.3.165'.
[   71.307139][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[   71.314186][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[   71.323820][ T4082] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   71.503652][ T4082] syz.1.156: attempt to access beyond end of device
[   71.503652][ T4082] loop1: rw=2051, sector=40960, nr_sectors = 4096 limit=40427
[   71.606409][ T4082] syz.1.156: attempt to access beyond end of device
[   71.606409][ T4082] loop1: rw=2051, sector=49152, nr_sectors = 81920 limit=40427
[   71.693991][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   71.748092][ T4082] F2FS-fs (loop1): Issue discard(5120, 5120, 512) failed, ret: -5
[   71.748135][ T4082] F2FS-fs (loop1): Issue discard(6144, 6144, 10240) failed, ret: -5
[   72.424820][ T4172] netlink: 56 bytes leftover after parsing attributes in process `syz.3.177'.
[   72.592798][ T4175] kvm: emulating exchange as write
[   73.458686][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   73.474334][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   73.560839][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   73.663233][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   73.966841][ T4188] loop1: detected capacity change from 0 to 40427
[   73.978919][ T4212] loop0: detected capacity change from 0 to 512
[   73.989533][ T4218] netlink: 56 bytes leftover after parsing attributes in process `syz.3.193'.
[   74.011997][ T4188] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[   74.014556][ T4212] EXT4-fs: Ignoring removed i_version option
[   74.045895][ T4188] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   74.090320][ T4188] F2FS-fs (loop1): invalid crc value
[   74.133809][ T4188] F2FS-fs (loop1): Found nat_bits in checkpoint
[   74.140418][ T4212] EXT4-fs (sda1): re-mounted. Quota mode: none.
[   74.250443][ T4188] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   74.263990][ T4188] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   74.375575][ T4188] syz.1.182: attempt to access beyond end of device
[   74.375575][ T4188] loop1: rw=2051, sector=40960, nr_sectors = 4096 limit=40427
[   74.395746][ T4188] syz.1.182: attempt to access beyond end of device
[   74.395746][ T4188] loop1: rw=2051, sector=49152, nr_sectors = 81920 limit=40427
[   74.415984][ T4188] F2FS-fs (loop1): Issue discard(5120, 5120, 512) failed, ret: -5
[   74.416032][ T4188] F2FS-fs (loop1): Issue discard(6144, 6144, 10240) failed, ret: -5
[   75.779336][ T4258] netlink: 56 bytes leftover after parsing attributes in process `syz.4.207'.
[   76.428714][   T14] cfg80211: failed to load regulatory.db
[   76.632985][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   76.789323][ T4279] loop2: detected capacity change from 0 to 16
[   76.875213][ T4279] erofs: (device loop2): mounted with root inode @ nid 36.
[   77.310425][ T3555] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.321272][ T3555] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.341311][ T3555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.344134][ T4289] netlink: 56 bytes leftover after parsing attributes in process `syz.3.220'.
[   77.361161][ T3555] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.369654][ T3555] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   77.377259][ T3555] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.899348][ T4284] chnl_net:caif_netlink_parms(): no params data found
[   78.109803][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.122085][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.150264][ T4284] device bridge_slave_0 entered promiscuous mode
[   78.183292][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.192696][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.211916][ T4284] device bridge_slave_1 entered promiscuous mode
[   78.327426][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.365885][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.461452][ T4284] team0: Port device team_slave_0 added
[   78.488214][ T4284] team0: Port device team_slave_1 added
[   78.604189][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.614865][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.750925][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.761640][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   78.815165][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.830885][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.873958][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   78.944978][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.005252][ T4327] netlink: 32 bytes leftover after parsing attributes in process `syz.3.232'.
[   79.118041][ T4284] device hsr_slave_0 entered promiscuous mode
[   79.165488][ T4284] device hsr_slave_1 entered promiscuous mode
[   79.187109][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.219746][ T4284] Cannot create hsr debugfs directory
[   79.474347][ T3562] Bluetooth: hci2: command tx timeout
[   79.710083][ T4284] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.739218][ T4312] loop0: detected capacity change from 0 to 40427
[   79.800764][ T4312] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288)
[   79.838592][ T4312] F2FS-fs (loop0): invalid crc value
[   79.852593][ T4284] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.852680][ T4312] F2FS-fs (loop0): Found nat_bits in checkpoint
[   80.005671][ T4312] F2FS-fs (loop0): recover fsync data on readonly fs
[   80.040741][ T4312] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[   80.059431][ T4284] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.068885][ T4312] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   80.204908][ T4284] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.215890][ T4312] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0
[   80.227461][ T4312] F2FS-fs (loop0): switch extent_cache option is not allowed
[   80.236233][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   80.244462][    T0] NOHZ tick-stop error: local softirq work is pending, handler #212!!!
[   80.253739][    T0] NOHZ tick-stop error: local softirq work is pending, handler #292!!!
[   81.254619][ T4343] netlink: 48 bytes leftover after parsing attributes in process `syz.3.238'.
[   81.519823][ T4284] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.547265][ T3562] Bluetooth: hci2: command tx timeout
[   81.592957][ T4284] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.682141][ T4284] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.730955][ T4284] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.976437][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.999952][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.030312][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.063514][ T4358] loop0: detected capacity change from 0 to 512
[   82.080003][ T4284] 8021q: adding VLAN 0 to HW filter on device team0
[   82.130127][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.143077][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.164053][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.171286][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.196691][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.206921][ T4358] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.240: casefold flag without casefold feature
[   82.217977][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.227738][ T4358] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.240: casefold flag without casefold feature
[   82.240492][ T4358] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.240: ea_inode with extended attributes
[   82.242467][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.261944][ T4358] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.240: error while reading EA inode 12 err=-117
[   82.274238][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.275072][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.294428][ T4358] EXT4-fs (loop0): 1 orphan inode deleted
[   82.300211][ T4358] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   82.352196][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.380563][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.390442][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.399812][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.431951][ T4284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   82.442999][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.481337][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   82.489878][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.499021][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   82.507960][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   82.517045][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   82.525758][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   82.534576][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   82.546009][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   82.550381][ T3545] EXT4-fs (loop0): unmounting filesystem.
[   82.617136][ T4368] loop3: detected capacity change from 0 to 128
[   82.670142][ T4368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   82.724405][ T4368] ext4 filesystem being mounted at /root/syzkaller.U7ghwr/76/mnt supports timestamps until 2038 (0x7fffffff)
[   82.924787][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.933564][ T4381] kAFS: No cell specified
[   82.938868][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.962827][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.993250][ T4381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'.
[   83.059725][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.075081][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.161235][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.174907][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.211496][ T4284] device veth0_vlan entered promiscuous mode
[   83.219021][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   83.240595][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.251744][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.319632][ T4284] device veth1_vlan entered promiscuous mode
[   83.437332][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.447542][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.498615][ T4284] device veth0_macvtap entered promiscuous mode
[   83.570202][ T4284] device veth1_macvtap entered promiscuous mode
[   83.624296][ T3562] Bluetooth: hci2: command tx timeout
[   83.642000][ T3548] EXT4-fs (loop3): unmounting filesystem.
[   83.646008][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.660163][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.670916][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.682146][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.693185][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.705596][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.716476][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.727818][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.759356][ T4396] netlink: 19 bytes leftover after parsing attributes in process `syz.2.256'.
[   83.807638][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.826986][ T4397] netlink: 'syz.2.256': attribute type 2 has an invalid length.
[   83.828479][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.849644][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.863243][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.874045][ T4397] netlink: 244 bytes leftover after parsing attributes in process `syz.2.256'.
[   83.882722][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.886674][ T4377] loop0: detected capacity change from 0 to 40427
[   83.900540][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.916375][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.930656][ T4377] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288)
[   83.999151][ T4377] F2FS-fs (loop0): invalid crc value
[   84.001814][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.030434][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.048761][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.062180][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.078497][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.089391][ T4377] F2FS-fs (loop0): Found nat_bits in checkpoint
[   84.092629][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.095981][ T4399] loop4: detected capacity change from 0 to 1024
[   84.120708][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.136245][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.146503][ T3562] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[   84.162289][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.173548][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.239052][ T4377] F2FS-fs (loop0): recover fsync data on readonly fs
[   84.259964][ T4377] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[   84.277015][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.280146][ T4402] loop3: detected capacity change from 0 to 256
[   84.305434][ T4377] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   84.374159][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.405735][ T4377] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0
[   84.414758][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.429876][ T4377] F2FS-fs (loop0): switch extent_cache option is not allowed
[   84.452878][ T4284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.485262][ T4284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.533890][ T4284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.593325][ T4284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.625815][ T4403] Driver unsupported XDP return value 0 on prog  (id 25) dev N/A, expect packet loss!
[   85.075483][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.104396][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.116779][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.125768][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.156373][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.176903][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.708028][ T3562] Bluetooth: hci2: command tx timeout
[   85.932724][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   87.237840][ T3555] Bluetooth: hci4: Malformed MSFT vendor event: 0x02
[   87.272927][ T4446] loop2: detected capacity change from 0 to 1024
[   88.034055][ T3555] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   88.042711][ T3555] Bluetooth: hci1: Injecting HCI hardware error event
[   88.051556][ T3555] Bluetooth: hci1: hardware error 0x00
[   88.265409][ T4453] loop4: detected capacity change from 0 to 256
[   88.793559][ T4462] process 'syz.0.276' launched './file1' with NULL argv: empty string added
[   89.441046][ T4451] loop3: detected capacity change from 0 to 32768
[   89.595990][ T4471] Device name cannot be null; rc = [-22]
[   90.264054][ T3555] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   90.883967][ T4492] netlink: 48 bytes leftover after parsing attributes in process `syz.1.283'.
[   91.957470][ T4522] loop2: detected capacity change from 0 to 256
[   93.643999][ T3591] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   94.002214][ T4528] loop4: detected capacity change from 0 to 40427
[   94.010659][ T3591] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.024190][ T3591] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   94.066252][ T4528] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   94.084418][ T4528] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   94.104926][ T4528] F2FS-fs (loop4): invalid crc value
[   94.113580][ T4528] F2FS-fs (loop4): Found nat_bits in checkpoint
[   94.123855][ T3591] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   94.132928][ T3591] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   94.161800][ T3591] usb 2-1: SerialNumber: syz
[   94.258751][ T4528] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   94.275858][ T4528] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   94.580467][ T3591] usb 2-1: 0:2 : does not exist
[   94.803611][ T3627] usb 2-1: USB disconnect, device number 2
[   94.855555][ T3537] udevd[3537]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   95.170166][ T4567] loop2: detected capacity change from 0 to 736
[   99.062213][ T4646] mmap: syz.0.329 (4646) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   99.074780][ T3562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   99.084457][ T3562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   99.094071][ T3562] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   99.102620][ T3562] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   99.110665][ T3562] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   99.119611][ T3562] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   99.420122][ T4635] loop2: detected capacity change from 0 to 40427
[   99.510016][ T4635] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   99.556667][ T4635] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   99.594666][ T4635] F2FS-fs (loop2): invalid crc value
[   99.698805][ T4635] F2FS-fs (loop2): Found nat_bits in checkpoint
[   99.809659][ T4660] chnl_net:caif_netlink_parms(): no params data found
[   99.855654][ T4635] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   99.874038][ T4635] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  100.006083][ T4676] ALSA: seq fatal error: cannot create timer (-22)
[  100.281301][ T4660] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.309035][ T4660] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.111144][ T4660] device bridge_slave_0 entered promiscuous mode
[  101.163349][ T3562] Bluetooth: hci5: command tx timeout
[  101.272296][ T4660] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.294898][ T4660] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.317716][ T4660] device bridge_slave_1 entered promiscuous mode
[  101.358810][ T4660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.376593][ T4660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.439760][ T4660] team0: Port device team_slave_0 added
[  101.488827][ T4660] team0: Port device team_slave_1 added
[  101.634854][ T4660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.641834][ T4660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.728146][ T4660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.790170][ T4660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.823938][ T4660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.907675][ T4660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.710292][ T4660] device hsr_slave_0 entered promiscuous mode
[  102.735930][ T4660] device hsr_slave_1 entered promiscuous mode
[  102.749131][ T4660] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.767679][ T4660] Cannot create hsr debugfs directory
[  103.223847][ T3562] Bluetooth: hci5: command tx timeout
[  103.309024][ T4660] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.451674][ T4660] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.606366][ T4660] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.959548][ T4725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.341'.
[  104.060956][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'.
[  104.142278][ T4660] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.481480][ T4660] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  104.515660][ T4660] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  104.536466][ T4660] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  104.563354][ T4660] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  104.814108][ T4660] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.852525][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  104.873589][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.916629][ T4660] 8021q: adding VLAN 0 to HW filter on device team0
[  104.949357][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  104.963087][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.983380][ T4136] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.990572][ T4136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.074881][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  105.109677][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  105.121479][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  105.138146][ T4136] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.145327][ T4136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.162612][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  105.215171][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  105.283104][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  105.296492][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  105.305093][ T3562] Bluetooth: hci5: command tx timeout
[  105.322851][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  105.336590][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  105.352339][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  105.367299][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  105.379586][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.398882][ T4747] program syz.1.350 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  105.492990][ T4660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.821675][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  105.865011][ T3624] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  105.930498][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.939833][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.984062][ T3590] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  106.128088][ T3624] usb 3-1: Using ep0 maxpacket: 8
[  106.246379][ T3624] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.294364][ T3624] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  106.329057][ T3624] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  106.342120][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  106.352455][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  106.360973][ T3624] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  106.368220][ T4660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.392840][ T3624] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  106.410881][ T3624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.455487][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.467948][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.477437][ T3624] hub 3-1:1.0: bad descriptor, ignoring hub
[  106.492063][ T4660] device veth0_vlan entered promiscuous mode
[  106.493148][ T3624] hub: probe of 3-1:1.0 failed with error -5
[  106.501764][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.514047][ T3590] usb 2-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=36.e7
[  106.517711][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.523090][ T3590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.523136][ T3590] usb 2-1: Product: syz
[  106.523152][ T3590] usb 2-1: Manufacturer: syz
[  106.546685][ T4660] device veth1_vlan entered promiscuous mode
[  106.554245][ T3624] cdc_wdm 3-1:1.0: skipping garbage
[  106.563582][ T3624] cdc_wdm 3-1:1.0: skipping garbage
[  106.564914][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.577968][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.587015][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  106.610776][ T3624] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  106.634243][ T3624] cdc_wdm 3-1:1.0: Unknown control protocol
[  106.644412][ T3590] usb 2-1: SerialNumber: syz
[  106.705619][ T3624] usb 3-1: USB disconnect, device number 2
[  106.724738][ T3590] usb 2-1: config 0 descriptor??
[  106.779850][ T3590] hub 2-1:0.0: bad descriptor, ignoring hub
[  106.812370][ T3590] hub: probe of 2-1:0.0 failed with error -5
[  106.815039][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  106.837388][ T3590] mct_u232 2-1:0.0: MCT U232 converter detected
[  106.924811][ T3590] mct_u232 ttyUSB0: expected endpoint missing
[  107.383936][ T3562] Bluetooth: hci5: command tx timeout
[  107.414773][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  107.434117][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  107.449639][ T4660] device veth0_macvtap entered promiscuous mode
[  107.471420][ T4660] device veth1_macvtap entered promiscuous mode
[  107.494474][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.507232][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.517933][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.540200][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.567311][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.589205][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.602005][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.623323][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.641665][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.652942][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.664212][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.674966][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.688905][ T4660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.698888][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  107.714157][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  107.730880][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  107.742299][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  107.765925][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.776778][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.789479][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.800899][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.811593][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.822479][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.833588][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.846702][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.900272][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.923487][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.946189][ T4660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.983349][ T4660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.015100][ T4660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.141897][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  108.160979][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  108.183573][ T4660] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.201012][ T4660] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.233964][ T3624] usb 2-1: USB disconnect, device number 3
[  108.252347][ T4660] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.253869][ T3624] mct_u232 2-1:0.0: device disconnected
[  108.272705][ T4660] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.421492][ T4690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.449602][ T4690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.511435][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  108.542912][ T4690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.573338][ T4690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.589894][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  109.270846][ T3627] kernel read not supported for file /usbmon2 (pid: 3627 comm: kworker/1:7)
[  109.794330][   T26] audit: type=1326 audit(1719780399.322:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.3.366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd187975b99 code=0x0
[  109.908893][ T4801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'.
[  112.319709][ T4831] syz.1.378 (pid 4831) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  112.404033][   T26] audit: type=1326 audit(1719780401.932:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.3.377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd187975b99 code=0x0
[  113.017781][ T4833] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[  113.049043][   T26] audit: type=1800 audit(1719780402.572:5): pid=4833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.378" name="bus" dev="sda1" ino=1958 res=0 errno=0
[  113.130121][   T26] audit: type=1326 audit(1719780402.642:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4849 comm="syz.4.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff281d75b99 code=0x0
[  115.990164][ T4893] program syz.2.391 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  116.283919][ T3590] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  116.854037][ T3590] usb 3-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=36.e7
[  116.871213][ T3590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.881020][ T3590] usb 3-1: Product: syz
[  116.897924][ T3590] usb 3-1: Manufacturer: syz
[  116.903244][ T3590] usb 3-1: SerialNumber: syz
[  116.955191][ T3590] usb 3-1: config 0 descriptor??
[  117.007048][ T3590] hub 3-1:0.0: bad descriptor, ignoring hub
[  117.021984][ T4902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'.
[  117.034539][ T3590] hub: probe of 3-1:0.0 failed with error -5
[  117.082727][ T3590] mct_u232 3-1:0.0: MCT U232 converter detected
[  117.124512][ T3590] mct_u232 ttyUSB0: expected endpoint missing
[  117.716030][   T26] audit: type=1326 audit(1719780407.232:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.0.397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bf4d75b99 code=0x0
[  118.855771][ T3550] usb 3-1: USB disconnect, device number 3
[  118.862548][ T3550] mct_u232 3-1:0.0: device disconnected
[  119.236437][ T4935] overlayfs: failed to resolve './file0': -2
[  119.754952][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'.
[  120.707638][   T26] audit: type=1326 audit(1719780411.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4963 comm="syz.3.413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd187975b99 code=0x0
[  120.863325][ T4969] loop1: detected capacity change from 0 to 64
[  120.900886][ T4969] hfs: unable to parse mount options
[  121.295443][ T4978] syz.2.417 uses obsolete (PF_INET,SOCK_PACKET)
[  122.221051][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'.
[  122.576596][ T3555] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  122.628988][ T4969] loop1: detected capacity change from 0 to 32768
[  122.650450][ T3555] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  122.660601][ T3555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  122.679813][ T3555] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  122.689577][ T3555] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  122.698522][ T3555] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  122.846043][ T4969] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.415 (4969)
[  123.231443][ T4969] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.281138][ T4969] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  123.293894][ T4969] BTRFS info (device loop1): using free space tree
[  123.460077][ T4989] chnl_net:caif_netlink_parms(): no params data found
[  123.532374][ T4969] BTRFS info (device loop1): enabling ssd optimizations
[  123.816415][ T4989] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.841409][ T4989] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.865398][ T4989] device bridge_slave_0 entered promiscuous mode
[  123.907655][ T4989] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.942271][ T4989] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.960819][ T4989] device bridge_slave_1 entered promiscuous mode
[  123.987102][ T4284] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  124.074054][ T4989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.110984][ T4989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.306515][ T4989] team0: Port device team_slave_0 added
[  124.324926][ T4989] team0: Port device team_slave_1 added
[  124.412323][ T4989] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.430693][ T4989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.530690][ T4989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.590032][ T4989] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.613922][ T4989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.658998][ T4989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.984109][ T3562] Bluetooth: hci4: command tx timeout
[  125.029093][ T4989] device hsr_slave_0 entered promiscuous mode
[  125.104414][ T4989] device hsr_slave_1 entered promiscuous mode
[  125.143933][ T4989] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.151532][ T4989] Cannot create hsr debugfs directory
[  125.499991][ T5057] random: crng reseeded on system resumption
[  125.517669][ T5058] loop1: detected capacity change from 0 to 1024
[  125.550265][ T5058] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.658482][ T4989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.674567][ T5058] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  125.747641][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  125.836029][ T4989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.964066][ T4989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.075232][ T4989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.073823][ T3555] Bluetooth: hci4: command tx timeout
[  127.139756][ T4989] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  127.150261][ T4989] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  127.162206][ T4989] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  127.185304][ T4989] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  127.412202][ T4989] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.461403][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  127.470477][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  127.491427][ T4989] 8021q: adding VLAN 0 to HW filter on device team0
[  127.519984][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  127.551074][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  127.578769][  T153] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.585945][  T153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.648296][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  127.673214][ T5091] loop2: detected capacity change from 0 to 2048
[  127.679834][ T3590] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  127.698901][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  127.751798][ T5091] EXT4-fs (loop2): cluster size (2048) smaller than block size (4096)
[  127.795813][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  127.815753][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.822983][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.007472][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  128.074711][ T3590] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.175169][ T3590] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  128.386556][ T3590] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  128.514932][ T4989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.571137][ T4989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.624054][ T3590] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  128.635440][ T3590] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  128.644471][ T3590] usb 4-1: Manufacturer: syz
[  128.652098][ T3590] usb 4-1: config 0 descriptor??
[  128.696575][ T3590] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  128.782158][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  128.792085][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  128.804270][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  128.813381][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  128.821750][ T4134] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  129.153835][ T3555] Bluetooth: hci4: command tx timeout
[  129.373284][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  129.382303][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  129.392360][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  129.401272][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  129.410065][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  129.420676][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  129.454700][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  129.624587][ T4134] usb 2-1: Using ep0 maxpacket: 8
[  129.748859][ T4134] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  129.803810][ T4134] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  129.830411][ T4134] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  129.856449][ T4134] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  129.881093][ T4134] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  129.899931][ T4134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.000140][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  130.015990][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  130.039129][ T4989] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.193941][ T4134] usb 2-1: usb_control_msg returned -32
[  130.204247][ T4134] usbtmc 2-1:16.0: can't read capabilities
[  130.553829][    C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  130.579809][ T5133] usbtmc 2-1:16.0: Unable to send data, error -71
[  130.767610][ T5137] 9pnet_virtio: no channels available for device syz
[  130.952110][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  130.967649][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  131.005199][ T4134] usb 4-1: USB disconnect, device number 2
[  131.019504][ T4989] device veth0_vlan entered promiscuous mode
[  131.050771][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  131.061548][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  131.089269][ T4989] device veth1_vlan entered promiscuous mode
[  131.115393][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  131.133292][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  131.197750][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  131.209542][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  131.223941][ T3555] Bluetooth: hci4: command tx timeout
[  131.229733][ T4989] device veth0_macvtap entered promiscuous mode
[  131.267493][ T4989] device veth1_macvtap entered promiscuous mode
[  131.294791][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.306847][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.318762][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.330191][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.341336][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.352762][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.367970][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.380272][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.595926][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.610624][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.858857][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.083959][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.316125][ T5037] usb 2-1: USB disconnect, device number 4
[  132.322654][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.425527][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.485367][ T4989] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.501984][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  132.512590][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  132.523330][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  132.532341][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  132.561600][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.585286][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.595905][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.606711][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.618370][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.632284][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.668252][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.680557][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.720423][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.731897][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.745400][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  132.751875][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  132.788599][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.809474][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.850144][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.923895][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.972822][ T4989] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.993976][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  133.004612][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  133.046480][ T4989] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.064093][ T4989] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.073180][ T4989] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.131384][ T4989] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.223952][ T4134] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  133.338704][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.384505][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.446795][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  133.469823][ T4615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.525843][ T4615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.594194][ T4134] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  133.617801][ T4134] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  133.644900][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  133.660763][ T4134] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  133.694193][ T4134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.847594][ T5165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  135.289693][ T5185] sched: RT throttling activated
[  136.181055][ T5037] usb 4-1: USB disconnect, device number 3
[  137.084179][ T4134] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  137.464294][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.720775][ T5038] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  138.260031][ T4134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.271322][ T4134] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  138.281042][ T4134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.299310][ T4134] usb 2-1: config 0 descriptor??
[  138.347621][ T5038] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  138.377852][ T5038] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  138.434183][ T5038] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  138.456082][ T5038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.494127][ T5224] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  142.006041][ T5038] usb 4-1: USB disconnect, device number 4
[  142.083936][ T4134] usb 2-1: string descriptor 0 read error: -71
[  142.105898][ T4134] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71
[  142.121081][ T4134] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71
[  142.153813][ T4134] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71
[  142.203820][ T4134] uclogic 0003:256C:006D.0001: failed probing parameters: -71
[  142.211348][ T4134] uclogic: probe of 0003:256C:006D.0001 failed with error -71
[  142.244359][ T4134] usb 2-1: USB disconnect, device number 5
[  143.007051][ T5260] Bluetooth: MGMT ver 1.22
[  143.245538][ T5247] overlayfs: failed to resolve './file1': -2
[  143.293827][ T3594] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  143.509300][ T3594] usb 4-1: device descriptor read/64, error -71
[  143.744102][ T5038] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  144.506860][ T3594] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  144.955011][ T3594] usb 4-1: device descriptor read/64, error -71
[  145.082378][ T3594] usb usb4-port1: attempt power cycle
[  145.553998][ T3594] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  145.747104][ T3594] usb 4-1: device descriptor read/8, error -71
[  146.310256][ T3594] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  147.103827][ T3594] usb 4-1: device descriptor read/8, error -71
[  147.121107][ T5038] usb 2-1: unable to read config index 0 descriptor/all
[  147.128436][ T5038] usb 2-1: can't read configurations, error -71
[  147.224066][ T3594] usb usb4-port1: unable to enumerate USB device
[  147.577873][ T5297] loop4: detected capacity change from 0 to 1024
[  148.118404][ T5292] loop2: detected capacity change from 0 to 32768
[  148.186354][ T5292] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.508 (5292)
[  148.244472][ T5292] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.275930][ T5292] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  148.309780][ T5292] BTRFS info (device loop2): using free space tree
[  148.471140][ T5292] BTRFS info (device loop2): enabling ssd optimizations
[  148.749412][ T3546] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.774297][ T3594] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  149.077701][ T5304] overlayfs: failed to resolve './file1': -2
[  149.134295][ T3594] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  149.145669][ T3594] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  149.170062][ T3594] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  149.184356][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.192547][ T3627] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  149.226815][ T5334] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  149.403796][ T3627] usb 5-1: device descriptor read/64, error -71
[  149.694028][ T3627] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  149.943790][ T3627] usb 5-1: device descriptor read/64, error -71
[  150.064310][ T3627] usb usb5-port1: attempt power cycle
[  150.145142][ T5365] loop1: detected capacity change from 0 to 1024
[  150.484022][ T3627] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  150.614025][ T3627] usb 5-1: device descriptor read/8, error -71
[  150.729421][ T5378] loop2: detected capacity change from 0 to 64
[  150.774062][ T5378] hfs: unable to parse mount options
[  150.883873][ T3627] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  150.974343][ T3627] usb 5-1: device descriptor read/8, error -71
[  151.093971][ T3627] usb usb5-port1: unable to enumerate USB device
[  151.516062][ T5378] loop2: detected capacity change from 0 to 32768
[  151.556301][ T5378] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.532 (5378)
[  151.609149][ T5378] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  151.609503][ T3594] usb 4-1: USB disconnect, device number 9
[  151.642945][ T5378] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  151.672867][ T5378] BTRFS info (device loop2): using free space tree
[  151.943593][ T5378] BTRFS info (device loop2): enabling ssd optimizations
[  152.149454][ T5378] overlayfs: failed to resolve './file0': -2
[  152.416199][ T3546] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.533071][ T5443] loop4: detected capacity change from 0 to 64
[  153.589669][ T5443] hfs: unable to parse mount options
[  155.162150][ T5443] loop4: detected capacity change from 0 to 32768
[  155.207346][ T5443] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.550 (5443)
[  155.239542][ T5443] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.250530][ T5443] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  155.271244][ T5443] BTRFS info (device loop4): using free space tree
[  155.416057][ T2534] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  155.529383][ T5443] BTRFS info (device loop4): enabling ssd optimizations
[  155.661884][ T5443] overlayfs: failed to resolve './file0': -2
[  155.813840][ T2534] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.832513][ T2534] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  155.860603][ T2534] usb 4-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00
[  155.899147][ T2534] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.944289][ T4989] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.964144][ T2534] usb 4-1: config 0 descriptor??
[  156.029826][ T2534] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  156.314007][ T3591] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  156.504059][ T3591] usb 2-1: device descriptor read/64, error -71
[  156.773930][ T3591] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  156.909834][   T14] usb 4-1: USB disconnect, device number 10
[  156.973912][ T3591] usb 2-1: device descriptor read/64, error -71
[  157.094442][ T3591] usb usb2-port1: attempt power cycle
[  157.504359][ T3591] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  160.993806][ T3591] usb 2-1: device descriptor read/8, error -71
[  163.033803][  T153] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  163.123773][ T5341] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  163.323930][ T3591] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  163.413921][  T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.438247][  T153] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  163.484333][ T5341] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  163.498398][  T153] usb 4-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00
[  163.512601][ T5341] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  163.523096][ T3591] usb 2-1: device descriptor read/64, error -71
[  163.549965][  T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.563179][ T5341] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  163.591924][  T153] usb 4-1: config 0 descriptor??
[  163.600817][ T5341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.695111][  T153] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  164.484098][ T5572] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  164.513825][ T3591] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  164.585673][ T5575] overlayfs: failed to resolve './file1': -2
[  164.737377][ T3591] usb 2-1: device descriptor read/64, error -71
[  164.819934][ T5588] netlink: 56 bytes leftover after parsing attributes in process `syz.2.595'.
[  164.863984][ T3591] usb usb2-port1: attempt power cycle
[  165.283973][ T3591] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  165.375222][ T5341] usb 4-1: USB disconnect, device number 11
[  165.384239][ T3591] usb 2-1: device descriptor read/8, error -71
[  165.740758][ T3596] usb 5-1: USB disconnect, device number 6
[  165.835279][ T3591] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  166.183822][ T3591] usb 2-1: device descriptor read/8, error -71
[  166.304094][ T3591] usb usb2-port1: unable to enumerate USB device
[  166.554492][ T5608] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.602'.
[  166.979511][ T5621] netlink: 56 bytes leftover after parsing attributes in process `syz.2.607'.
[  167.083754][ T3596] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  167.333767][ T3596] usb 2-1: Using ep0 maxpacket: 8
[  167.624150][ T3596] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[  167.642992][ T3596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.662372][ T3596] usb 2-1: Product: syz
[  167.690582][ T3596] usb 2-1: Manufacturer: syz
[  167.720506][ T3596] usb 2-1: SerialNumber: syz
[  167.752950][ T3596] usb 2-1: config 0 descriptor??
[  168.064890][ T3596] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  168.072633][ T2534] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  168.089903][ T3596] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22
[  168.143989][ T3596] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  168.151497][ T3596] dvb_usb_af9035: probe of 2-1:0.0 failed with error -22
[  168.191466][ T3596] usb 2-1: USB disconnect, device number 16
[  168.230841][ T5619] overlayfs: failed to resolve './file1': -2
[  168.443975][ T5341] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  168.483852][ T2534] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.501918][ T2534] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  168.531609][ T2534] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  168.545319][ T2534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.562412][ T2534] usb 5-1: config 0 descriptor??
[  168.762403][ T5646] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.616'.
[  168.813991][ T5341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.843918][ T5341] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  168.866836][ T5341] usb 3-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00
[  168.876864][ T5341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.910515][ T5341] usb 3-1: config 0 descriptor??
[  168.950276][ T5651] netlink: 56 bytes leftover after parsing attributes in process `syz.0.618'.
[  168.958155][ T5341] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  169.764194][ T3590] usb 3-1: USB disconnect, device number 4
[  170.592435][ T5664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.605382][ T5664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.663928][ T3562] Bluetooth: hci3: command 0x0406 tx timeout
[  170.741833][ T5664] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  170.748769][ T5664] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  170.760169][ T5669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.784253][ T5669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.826200][ T5664] vhci_hcd vhci_hcd.0: Device attached
[  171.023803][ T5341] vhci_hcd: vhci_device speed not set
[  171.093887][ T5341] usb 17-1: new full-speed USB device number 2 using vhci_hcd
[  171.336846][ T5689] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.630'.
[  171.485831][ T5692] netlink: 56 bytes leftover after parsing attributes in process `syz.1.631'.
[  172.180032][ T5676] vhci_hcd: connection reset by peer
[  172.216811][ T4613] vhci_hcd: stop threads
[  172.232255][ T4613] vhci_hcd: release socket
[  172.241861][ T4613] vhci_hcd: disconnect device
[  172.289131][ T3590] usb 5-1: USB disconnect, device number 7
[  172.630424][ T2534] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  173.054133][ T2534] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.081070][ T2534] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  173.144330][ T2534] usb 4-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00
[  173.188692][ T2534] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.277899][ T2534] usb 4-1: config 0 descriptor??
[  173.362287][ T2534] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  173.764215][ T5729] netlink: 56 bytes leftover after parsing attributes in process `syz.2.645'.
[  173.781725][ T5728] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.644'.
[  173.833935][ T3624] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  174.073884][ T3624] usb 2-1: Using ep0 maxpacket: 8
[  174.248086][ T3590] usb 4-1: USB disconnect, device number 12
[  174.353826][ T3624] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[  174.362913][ T3624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.390155][ T3624] usb 2-1: Product: syz
[  174.403876][ T3624] usb 2-1: Manufacturer: syz
[  174.408508][ T3624] usb 2-1: SerialNumber: syz
[  174.435217][ T3624] usb 2-1: config 0 descriptor??
[  175.325247][ T3624] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  175.334911][ T3624] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22
[  175.394927][ T3624] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  175.401358][ T3624] dvb_usb_af9035: probe of 2-1:0.0 failed with error -22
[  175.421599][ T3624] usb 2-1: USB disconnect, device number 17
[  176.288313][ T5341] vhci_hcd: vhci_device speed not set
[  176.719782][ T5761] netlink: 56 bytes leftover after parsing attributes in process `syz.2.657'.
[  178.803916][ T5341] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  179.344429][ T5341] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  179.364199][ T5341] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  179.375723][ T3624] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  179.419805][ T5341] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  179.455420][ T5341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.514246][ T5787] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  179.643469][ T5806] netlink: 56 bytes leftover after parsing attributes in process `syz.0.672'.
[  179.733953][ T3624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.763772][ T3591] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  179.773038][ T3624] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  179.804187][ T3624] usb 2-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00
[  179.838693][ T3624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.875723][ T3624] usb 2-1: config 0 descriptor??
[  179.917923][ T3624] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  180.003948][ T3591] usb 5-1: Using ep0 maxpacket: 8
[  181.037256][ T3591] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[  181.069172][ T3591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.103173][ T3591] usb 5-1: Product: syz
[  181.125865][ T3591] usb 5-1: Manufacturer: syz
[  181.140742][ T3591] usb 5-1: SerialNumber: syz
[  181.157835][ T3591] usb 5-1: config 0 descriptor??
[  181.214831][ T3624] usb 2-1: USB disconnect, device number 18
[  181.444203][ T3591] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  181.461383][ T3591] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22
[  181.513872][ T3591] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  181.520316][ T3591] dvb_usb_af9035: probe of 5-1:0.0 failed with error -22
[  181.556095][ T3591] usb 5-1: USB disconnect, device number 8
[  181.763236][ T5835] netlink: 56 bytes leftover after parsing attributes in process `syz.1.684'.
[  183.102368][   T14] usb 3-1: USB disconnect, device number 5
[  183.763862][ T2534] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  183.800380][ T5871] netlink: 56 bytes leftover after parsing attributes in process `syz.4.696'.
[  184.173952][ T2534] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.314868][ T2534] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  184.618155][ T2534] usb 2-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00
[  184.812694][ T2534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.938239][ T2534] usb 2-1: config 0 descriptor??
[  184.991252][ T2534] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  185.214024][ T3596] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  185.237009][ T5856] kvm [5854]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18
[  185.271190][ T5856] kvm [5854]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18
[  185.309656][ T5856] kvm [5854]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18
[  185.429826][ T5856] kvm [5854]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18
[  185.458772][ T5856] kvm [5854]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18
[  185.474309][ T3596] usb 4-1: Using ep0 maxpacket: 8
[  185.515410][ T5856] kvm [5854]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18
[  185.785154][ T3596] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[  185.802263][ T3596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.823929][ T3596] usb 4-1: Product: syz
[  185.833928][ T3596] usb 4-1: Manufacturer: syz
[  185.845087][ T3596] usb 4-1: SerialNumber: syz
[  185.857114][ T3596] usb 4-1: config 0 descriptor??
[  185.864312][ T5038] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  186.163547][ T5037] usb 2-1: USB disconnect, device number 19
[  186.170936][ T3596] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  186.185403][ T3596] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22
[  186.254217][ T3596] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  186.264212][ T3596] dvb_usb_af9035: probe of 4-1:0.0 failed with error -22
[  186.274179][ T5038] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  186.292505][ T5038] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  186.312937][ T3596] usb 4-1: USB disconnect, device number 13
[  186.322217][ T5038] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  186.347849][ T5038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.384100][ T5893] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  186.505431][ T5903] netlink: 56 bytes leftover after parsing attributes in process `syz.0.708'.
[  188.124290][ T3596] usb 3-1: USB disconnect, device number 6
[  189.059721][ T5939] netlink: 56 bytes leftover after parsing attributes in process `syz.0.719'.
[  189.523837][ T3596] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  189.553921][ T5038] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  189.803848][ T5038] usb 3-1: Using ep0 maxpacket: 8
[  189.904131][ T3596] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.925449][ T3596] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  189.949047][ T3596] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  189.971973][ T3596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.992796][ T3596] usb 2-1: config 0 descriptor??
[  190.036538][ T3596] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  190.094181][ T5038] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[  190.106412][ T5038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.120292][ T5038] usb 3-1: Product: syz
[  190.128336][ T5038] usb 3-1: Manufacturer: syz
[  190.133416][ T5038] usb 3-1: SerialNumber: syz
[  190.144869][ T5038] usb 3-1: config 0 descriptor??
[  191.154246][ T5038] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  191.161166][ T5038] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22
[  191.176846][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.203969][ T5038] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  191.213888][ T5038] dvb_usb_af9035: probe of 3-1:0.0 failed with error -22
[  191.233149][ T5038] usb 3-1: USB disconnect, device number 7
[  191.235885][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.291463][ T5974] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  191.298030][ T5974] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  191.327440][ T5974] vhci_hcd vhci_hcd.0: Device attached
[  191.424709][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.465491][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.523920][ T3624] vhci_hcd: vhci_device speed not set
[  191.633420][ T3624] usb 11-1: new full-speed USB device number 2 using vhci_hcd
[  192.652852][ T5976] vhci_hcd: connection reset by peer
[  192.658742][  T102] vhci_hcd: stop threads
[  192.663267][  T102] vhci_hcd: release socket
[  192.705004][  T102] vhci_hcd: disconnect device
[  192.782263][ T5038] usb 2-1: USB disconnect, device number 20
[  193.341012][ T3591] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  193.623920][ T3591] usb 3-1: Using ep0 maxpacket: 8
[  194.084259][ T3591] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[  194.126434][ T3591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.138497][ T3591] usb 3-1: Product: syz
[  194.142742][ T3591] usb 3-1: Manufacturer: syz
[  194.153262][ T3591] usb 3-1: SerialNumber: syz
[  194.169484][ T3591] usb 3-1: config 0 descriptor??
[  194.193974][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  194.200278][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  195.104411][ T3591] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  195.111541][ T3591] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22
[  195.163912][ T3591] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  195.187338][ T3591] dvb_usb_af9035: probe of 3-1:0.0 failed with error -22
[  195.220426][ T3591] usb 3-1: USB disconnect, device number 8
[  196.080213][ T3561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  196.090091][ T3561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  196.099315][ T3561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  196.109555][ T3561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  196.117652][ T3561] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  196.126102][ T3561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  196.489247][ T6048] Bluetooth: MGMT ver 1.22
[  196.695815][ T6037] chnl_net:caif_netlink_parms(): no params data found
[  196.745330][ T3624] vhci_hcd: vhci_device speed not set
[  196.843780][ T5341] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  196.886847][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.923291][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.973046][ T6037] device bridge_slave_0 entered promiscuous mode
[  196.999892][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.036062][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.085105][ T6037] device bridge_slave_1 entered promiscuous mode
[  197.158325][ T6037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.196577][ T6037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.203926][ T5341] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  197.233762][ T5341] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  197.299178][ T5341] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  197.325268][ T5341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.367430][ T6037] team0: Port device team_slave_0 added
[  197.384711][ T6052] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  197.393414][ T6037] team0: Port device team_slave_1 added
[  197.421516][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.429365][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.558520][ T6037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.590656][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.605362][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.636288][ T6037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.759578][ T6037] device hsr_slave_0 entered promiscuous mode
[  197.775812][ T6037] device hsr_slave_1 entered promiscuous mode
[  197.798065][ T6037] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.803791][ T5341] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  197.819211][ T6037] Cannot create hsr debugfs directory
[  198.063930][ T5341] usb 4-1: Using ep0 maxpacket: 8
[  198.183952][ T3555] Bluetooth: hci0: command tx timeout
[  198.192408][ T6037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.253865][ T5038] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  198.317020][ T6037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.344474][ T5341] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[  198.369986][ T5341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.419180][ T5341] usb 4-1: Product: syz
[  198.435163][ T5341] usb 4-1: Manufacturer: syz
[  198.453430][ T5341] usb 4-1: SerialNumber: syz
[  198.595915][ T5341] usb 4-1: config 0 descriptor??
[  198.698946][ T3596] usb 3-1: USB disconnect, device number 9
[  198.779881][ T6037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.874234][ T5341] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  198.888195][ T5341] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22
[  198.918838][ T6037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.930738][ T5038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.946858][ T5038] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  198.963932][ T5341] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  198.970349][ T5341] dvb_usb_af9035: probe of 4-1:0.0 failed with error -22
[  198.978529][ T5038] usb 2-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00
[  198.996490][ T5038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.005220][ T5341] usb 4-1: USB disconnect, device number 14
[  199.025576][ T5038] usb 2-1: config 0 descriptor??
[  199.076015][ T5038] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  199.258326][ T6037] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  199.295473][ T6037] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  199.330597][ T6074] kvm [6073]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18
[  199.343505][ T6037] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  199.364374][ T6037] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  199.406330][ T6074] kvm [6073]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18
[  199.469027][ T6074] kvm [6073]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18
[  199.517568][ T6074] kvm [6073]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18
[  199.797086][ T6037] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.265126][ T3561] Bluetooth: hci0: command tx timeout
[  200.277277][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  200.314807][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  200.327263][ T6074] kvm [6073]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18
[  200.348489][ T6037] 8021q: adding VLAN 0 to HW filter on device team0
[  200.390958][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  200.414948][ T6074] kvm [6073]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc2 data 0xfffffc18
[  200.415075][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  200.447818][ T5037] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.455047][ T5037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.491901][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  200.502128][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  200.512422][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  200.523338][ T5037] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.530542][ T5037] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.539504][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  200.595596][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  200.605836][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  200.619768][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  200.629281][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  200.640201][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  200.649405][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  200.658468][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  200.674202][ T6037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  200.708808][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  200.720529][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  200.738988][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  200.762059][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  200.970950][ T5341] usb 2-1: USB disconnect, device number 21
[  201.185725][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  201.204481][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  201.228841][ T6037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.278820][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  201.305026][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  201.371485][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  201.381479][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  201.393781][ T3561] Bluetooth: hci2: command 0x0406 tx timeout
[  201.413928][ T6037] device veth0_vlan entered promiscuous mode
[  201.427104][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  201.435583][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  201.456898][ T6037] device veth1_vlan entered promiscuous mode
[  202.775495][ T3561] Bluetooth: hci0: command tx timeout
[  202.783523][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  202.831709][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  202.891446][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  202.945104][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  202.970507][ T6037] device veth0_macvtap entered promiscuous mode
[  203.002307][ T6037] device veth1_macvtap entered promiscuous mode
[  203.065580][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.139099][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.163123][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.177778][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.188134][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.201119][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.228480][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.272673][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.293553][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.350947][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.374348][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.398516][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.410987][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.422355][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.433103][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.464889][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.501906][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.531157][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  203.541677][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  203.562729][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  203.579948][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  203.608520][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.619665][   T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  203.641049][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.653800][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.673796][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.684229][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.713505][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.735751][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.748325][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.773765][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.796543][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.808567][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.820177][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.831326][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.842954][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.864591][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.880741][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.906680][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.918016][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  203.929198][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  203.947331][ T6037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.971754][ T6037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.983951][   T14] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  204.001811][ T6037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.011319][   T14] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  204.027924][ T6037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.038194][   T14] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  204.051670][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.084930][ T6121] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  204.254139][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.267852][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.301051][ T5238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.305616][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  204.311787][ T5238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.345945][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  205.177743][ T3555] Bluetooth: hci0: command tx timeout
[  206.589049][ T3624] usb 5-1: USB disconnect, device number 9
[  207.813834][ T5341] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  208.186815][ T5341] usb 2-1: Using ep0 maxpacket: 8
[  208.794101][ T5341] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[  208.803212][ T5341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.822417][ T5341] usb 2-1: Product: syz
[  208.829035][ T5341] usb 2-1: Manufacturer: syz
[  208.842888][ T5341] usb 2-1: SerialNumber: syz
[  208.868883][ T5341] usb 2-1: config 0 descriptor??
[  209.325454][   T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  209.375461][ T5341] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  209.394495][ T5341] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22
[  209.449699][ T5341] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  209.460859][ T5341] dvb_usb_af9035: probe of 2-1:0.0 failed with error -22
[  209.665113][ T5341] usb 2-1: USB disconnect, device number 22
[  209.785233][   T14] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  209.840563][   T14] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  209.861089][   T14] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  209.873838][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.924075][ T6198] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  211.369603][ T2534] usb 1-1: USB disconnect, device number 2
[  216.533949][ T6248] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  216.934125][ T6248] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.986004][ T6248] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  217.149969][ T6248] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  217.183750][ T6248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.223093][ T6248] usb 5-1: config 0 descriptor??
[  217.285928][ T6248] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  219.110100][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.134083][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.178397][ T6278] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  219.184959][ T6278] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  219.224334][ T6278] vhci_hcd vhci_hcd.0: Device attached
[  219.291744][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.355257][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.425389][ T5340] vhci_hcd: vhci_device speed not set
[  219.439857][ T6293] syz_tun: mtu less than device minimum
[  219.503772][ T5340] usb 17-1: new full-speed USB device number 3 using vhci_hcd
[  219.570534][ T6296] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.833'.
[  220.756871][ T6286] vhci_hcd: connection reset by peer
[  221.114151][    T9] vhci_hcd: stop threads
[  221.118445][    T9] vhci_hcd: release socket
[  221.148745][    T9] vhci_hcd: disconnect device
[  221.249704][ T3624] usb 5-1: USB disconnect, device number 10
[  223.780574][ T3561] Bluetooth: hci5: command 0x0406 tx timeout
[  224.678768][ T5340] vhci_hcd: vhci_device speed not set
[  225.876892][ T6341] syz_tun: mtu less than device minimum
[  225.877944][ T6343] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.846'.
[  235.472130][ T6386] syz_tun: mtu less than device minimum
[  240.643916][ T3550] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  240.963841][ T2534] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  241.034496][ T3550] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  241.050580][ T3550] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  241.062143][ T3550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.097299][ T3550] usb 1-1: config 0 descriptor??
[  241.156143][ T3550] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  241.355902][ T2534] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.378316][ T2534] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.394858][ T2534] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  241.405159][ T2534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.420711][ T2534] usb 2-1: config 0 descriptor??
[  243.850980][  T153] usb 1-1: USB disconnect, device number 3
[  244.022325][ T2534] usbhid 2-1:0.0: can't add hid device: -71
[  244.214843][ T2534] usbhid: probe of 2-1:0.0 failed with error -71
[  244.233596][ T2534] usb 2-1: USB disconnect, device number 23
[  245.700134][  T153] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  247.545996][  T153] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  247.589664][  T153] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  247.623800][  T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.633677][ T3555] Bluetooth: hci4: command 0x0406 tx timeout
[  247.668096][  T153] usb 1-1: config 0 descriptor??
[  247.782815][  T153] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  248.771975][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.801191][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.832773][ T6560] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  248.839333][ T6560] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  248.894269][ T6560] vhci_hcd vhci_hcd.0: Device attached
[  248.966693][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.033548][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.094310][  T153] vhci_hcd: vhci_device speed not set
[  249.170952][  T153] usb 9-1: new full-speed USB device number 2 using vhci_hcd
[  250.338721][ T6565] vhci_hcd: connection reset by peer
[  250.382109][ T4208] vhci_hcd: stop threads
[  250.387211][ T4208] vhci_hcd: release socket
[  250.412707][ T4208] vhci_hcd: disconnect device
[  250.483273][ T5038] usb 1-1: USB disconnect, device number 4
[  250.504969][   T27] INFO: task kworker/u4:2:33 blocked for more than 143 seconds.
[  250.513530][   T27]       Not tainted 6.1.96-syzkaller #0
[  250.541803][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  250.558845][   T27] task:kworker/u4:2    state:D stack:23992 pid:33    ppid:2      flags:0x00004000
[  250.583328][   T27] Workqueue: writeback wb_workfn (flush-7:3)
[  250.600863][   T27] Call Trace:
[  250.613662][   T27]  <TASK>
[  250.620187][   T27]  __schedule+0x142d/0x4550
[  250.637008][   T27]  ? __sched_text_start+0x8/0x8
[  250.650129][   T27]  ? __mutex_trylock_common+0x8d/0x2e0
[  250.664479][   T27]  ? blk_check_plugged+0x250/0x250
[  250.669923][   T27]  ? wq_worker_sleeping+0x5f/0x270
[  250.677840][   T27]  schedule+0xbf/0x180
[  250.682310][   T27]  schedule_preempt_disabled+0xf/0x20
[  250.689236][   T27]  __mutex_lock+0x6b9/0xd80
[  250.703695][   T27]  ? __mutex_lock+0x53c/0xd80
[  250.710200][   T27]  ? jfs_commit_inode+0x242/0x580
[  250.716664][   T27]  ? mutex_lock_nested+0x10/0x10
[  250.721750][   T27]  jfs_commit_inode+0x242/0x580
[  250.759347][   T27]  ? jfs_iget+0x3b0/0x3b0
[  251.041036][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[  251.239518][   T27]  jfs_write_inode+0x13f/0x210
[  251.392218][   T27]  __writeback_single_inode+0x67d/0x11e0
[  251.565750][   T27]  writeback_sb_inodes+0xc2b/0x1b20
[  251.571063][   T27]  ? queue_io+0x630/0x630
[  251.575616][   T27]  ? __writeback_inodes_wb+0x400/0x400
[  251.582019][   T27]  __writeback_inodes_wb+0x114/0x400
[  251.601036][   T27]  wb_writeback+0x4b1/0xe10
[  251.640159][   T27]  ? mark_lock+0x9a/0x340
[  251.661633][   T27]  ? percpu_ref_tryget+0x260/0x260
[  251.669217][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  251.678160][   T27]  ? _find_next_bit+0x11b/0x120
[  251.689973][   T27]  wb_workfn+0xc9e/0x1020
[  251.704019][   T27]  ? inode_wait_for_writeback+0x280/0x280
[  251.725733][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  251.745925][   T27]  ? print_irqtrace_events+0x210/0x210
[  251.760404][   T27]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  251.770644][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[  251.780695][   T27]  ? process_one_work+0x7a9/0x11d0
[  251.790753][   T27]  process_one_work+0x8a9/0x11d0
[  251.800147][   T27]  ? worker_detach_from_pool+0x260/0x260
[  251.812815][   T27]  ? _raw_spin_lock_irqsave+0x120/0x120
[  251.850247][   T27]  ? kthread_data+0x4e/0xc0
[  251.873314][   T27]  ? wq_worker_running+0x97/0x190
[  251.890529][   T27]  worker_thread+0xa47/0x1200
[  251.906466][   T27]  ? __sched_text_start+0x8/0x8
[  251.924678][   T27]  kthread+0x28d/0x320
[  251.941978][   T27]  ? worker_clr_flags+0x190/0x190
[  251.960080][   T27]  ? kthread_blkcg+0xd0/0xd0
[  251.974536][   T27]  ret_from_fork+0x1f/0x30
[  251.987415][   T27]  </TASK>
[  251.993526][   T27] 
[  251.993526][   T27] Showing all locks held in the system:
[  252.019089][   T27] 6 locks held by kworker/u4:0/9:
[  252.034393][   T27]  #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  252.067591][   T27]  #1: ffffc900000e7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  252.091608][   T27]  #2: ffffffff8e28da10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60
[  252.111683][   T27]  #3: ffffffff8d1302b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  252.134576][   T27]  #4: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  252.145680][   T27]  #5: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770
[  252.160440][   T27] 2 locks held by kworker/u4:1/11:
[  252.167013][   T27]  #0: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  252.188928][   T27]  #1: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770
[  252.207048][   T27] 1 lock held by rcu_tasks_kthre/12:
[  252.213308][   T27]  #0: ffffffff8d12ae90 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  252.225043][   T27] 1 lock held by rcu_tasks_trace/13:
[  252.230536][   T27]  #0: ffffffff8d12b690 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  252.243978][   T27] 1 lock held by khungtaskd/27:
[  252.250043][   T27]  #0: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  252.272397][   T27] 4 locks held by kworker/u4:2/33:
[  252.280053][   T27]  #0: ffff888145259138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  252.292133][   T27]  #1: ffffc90000aa7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  252.304541][   T27]  #2: ffff88805d29c0e0 (&type->s_umount_key#74){.+.+}-{3:3}, at: trylock_super+0x1b/0xf0
[  252.321657][   T27]  #3: ffff88805c6ab008 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x242/0x580
[  252.334914][   T27] 5 locks held by kworker/0:2/153:
[  252.341234][   T27]  #0: ffff888143ac2d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  252.363529][   T27]  #1: ffffc90002d5fd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  252.388252][   T27]  #2: ffff888022f37190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730
[  252.409166][   T27]  #3: ffff888022f434f8 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2471/0x5730
[  252.432006][   T27]  #4: ffff8880217e1a68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x249e/0x5730
[  252.443900][   T27] 2 locks held by getty/3302:
[  252.449487][   T27]  #0: ffff88814baba098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  252.460008][   T27]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  252.490028][   T27] 2 locks held by kworker/1:3/3550:
[  252.513431][   T27]  #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  252.526552][   T27]  #1: ffffc9000404fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  252.540151][   T27] 2 locks held by kworker/1:6/3596:
[  252.546212][   T27]  #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  252.558382][   T27]  #1: ffffc900042cfd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  252.571215][   T27] 2 locks held by kworker/u4:8/4208:
[  252.577581][   T27] 4 locks held by syz.3.273/4451:
[  252.582764][   T27] 2 locks held by kworker/1:14/5038:
[  252.605572][   T27]  #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  252.616785][   T27]  #1: ffffc9000332fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  252.630438][   T27] 1 lock held by syz.1.444/5090:
[  252.639606][   T27]  #0: ffff88814c610460 (sb_writers#4){.+.+}-{0:0}, at: do_coredump+0x1892/0x2700
[  252.649233][   T27] 4 locks held by kworker/u4:12/5238:
[  252.655052][   T27] 3 locks held by kworker/0:14/5340:
[  252.661128][   T27]  #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  252.672050][   T27]  #1: ffffc900051d7d20 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  252.681655][   T27]  #2: ffffffff8d1302b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930
[  252.721730][   T27] 1 lock held by syz.2.793/6178:
[  252.728757][   T27] 1 lock held by syz.4.811/6229:
[  252.735562][   T27]  #0: ffff88814c610460 (sb_writers#4){.+.+}-{0:0}, at: do_coredump+0x1892/0x2700
[  252.745709][   T27] 1 lock held by syz.4.844/6346:
[  252.751057][   T27]  #0: ffff88814c610460 (sb_writers#4){.+.+}-{0:0}, at: do_coredump+0x1892/0x2700
[  252.763469][   T27] 4 locks held by syz.4.864/6401:
[  252.770049][   T27]  #0: ffff88814c610460 (sb_writers#4){.+.+}-{0:0}, at: do_coredump+0x1892/0x2700
[  252.783573][   T27]  #1: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  252.802604][   T27]  #2: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770
[  252.826848][   T27]  #3: ffff888142b0d088 (&virtscsi_vq->vq_lock){-.-.}-{2:2}, at: virtscsi_add_cmd+0xb1/0x6d0
[  252.841110][   T27] 1 lock held by syz.3.884/6473:
[  252.846391][   T27]  #0: ffff88814c610460 (sb_writers#4){.+.+}-{0:0}, at: do_coredump+0x1892/0x2700
[  252.856646][   T27] 1 lock held by syz.3.902/6533:
[  252.865856][   T27]  #0: ffff88814c610460 (sb_writers#4){.+.+}-{0:0}, at: do_coredump+0x1892/0x2700
[  252.875474][   T27] 1 lock held by syz.2.923/6596:
[  252.880465][   T27]  #0: ffff88801fb33b60 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_status+0x2a/0x910
[  252.894930][   T27] 
[  252.897392][   T27] =============================================
[  252.897392][   T27] 
[  252.920624][   T27] NMI backtrace for cpu 1
[  252.924993][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0
[  252.932899][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  252.943053][   T27] Call Trace:
[  252.946341][   T27]  <TASK>
[  252.949316][   T27]  dump_stack_lvl+0x1e3/0x2cb
[  252.954115][   T27]  ? nf_tcp_handle_invalid+0x642/0x642
[  252.959609][   T27]  ? panic+0x764/0x764
[  252.963694][   T27]  ? vprintk_emit+0x622/0x740
[  252.968393][   T27]  ? printk_sprint+0x490/0x490
[  252.973175][   T27]  ? nmi_cpu_backtrace+0x252/0x560
[  252.978312][   T27]  nmi_cpu_backtrace+0x4e1/0x560
[  252.983276][   T27]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  252.989446][   T27]  ? _printk+0xd1/0x111
[  252.993614][   T27]  ? panic+0x764/0x764
[  252.997692][   T27]  ? __wake_up_klogd+0xcc/0x100
[  253.002729][   T27]  ? panic+0x764/0x764
[  253.006951][   T27]  ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0
[  253.013063][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  253.019159][   T27]  nmi_trigger_cpumask_backtrace+0x1b0/0x3f0
[  253.025160][   T27]  watchdog+0xf88/0xfd0
[  253.029325][   T27]  ? watchdog+0x1f8/0xfd0
[  253.033658][   T27]  kthread+0x28d/0x320
[  253.037725][   T27]  ? hungtask_pm_notify+0x50/0x50
[  253.042743][   T27]  ? kthread_blkcg+0xd0/0xd0
[  253.047323][   T27]  ret_from_fork+0x1f/0x30
[  253.051746][   T27]  </TASK>
[  253.055998][   T27] Sending NMI from CPU 1 to CPUs 0:
[  253.061219][    C0] NMI backtrace for cpu 0
[  253.061229][    C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.96-syzkaller #0
[  253.061245][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  253.061254][    C0] Workqueue: bat_events batadv_nc_worker
[  253.061276][    C0] RIP: 0010:__local_bh_enable_ip+0x11f/0x1f0
[  253.061299][    C0] Code: fa a9 00 02 00 00 74 05 e8 2e 3a 3d 00 65 8b 05 df 4f ae 7e 25 00 ff 00 00 3d 00 02 00 00 75 0a 48 8b 7c 24 18 e8 01 16 16 00 <b8> 01 00 00 00 44 29 f8 65 01 05 ba 4f ae 7e 65 8b 05 b3 4f ae 7e
[  253.061311][    C0] RSP: 0018:ffffc90000107aa0 EFLAGS: 00000046
[  253.061323][    C0] RAX: 2300443bb9ec7700 RBX: 1ffff92000020f58 RCX: ffffffff91c94103
[  253.061335][    C0] RDX: dffffc0000000000 RSI: ffffffff8aec13c0 RDI: ffffffff8b3d4760
[  253.061345][    C0] RBP: ffffc90000107b50 R08: dffffc0000000000 R09: ffffed100c3b5049
[  253.061356][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  253.061374][    C0] R13: 1ffff92000020f5c R14: ffffc90000107ae0 R15: 0000000000000201
[  253.061384][    C0] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  253.061397][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  253.061408][    C0] CR2: 00007fd187ad0ab8 CR3: 000000000ce8e000 CR4: 00000000003506f0
[  253.061420][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  253.061429][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  253.061438][    C0] Call Trace:
[  253.061446][    C0]  <NMI>
[  253.061452][    C0]  ? nmi_cpu_backtrace+0x3de/0x560
[  253.061472][    C0]  ? read_lock_is_recursive+0x10/0x10
[  253.061492][    C0]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  253.061512][    C0]  ? nmi_handle+0x25/0x440
[  253.061539][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  253.061557][    C0]  ? nmi_handle+0x12e/0x440
[  253.061575][    C0]  ? nmi_handle+0x25/0x440
[  253.061593][    C0]  ? __local_bh_enable_ip+0x11f/0x1f0
[  253.061611][    C0]  ? default_do_nmi+0x62/0x150
[  253.061625][    C0]  ? exc_nmi+0xa8/0x100
[  253.061638][    C0]  ? end_repeat_nmi+0x16/0x31
[  253.061661][    C0]  ? __local_bh_enable_ip+0x11f/0x1f0
[  253.061680][    C0]  ? __local_bh_enable_ip+0x11f/0x1f0
[  253.061700][    C0]  ? __local_bh_enable_ip+0x11f/0x1f0
[  253.061718][    C0]  </NMI>
[  253.061722][    C0]  <TASK>
[  253.061728][    C0]  ? batadv_nc_purge_paths+0x30e/0x3b0
[  253.061746][    C0]  ? _local_bh_enable+0xa0/0xa0
[  253.061765][    C0]  ? batadv_nc_purge_paths+0xe8/0x3b0
[  253.061782][    C0]  ? batadv_nc_to_purge_nc_path_coding+0x120/0x120
[  253.061801][    C0]  batadv_nc_purge_paths+0x30e/0x3b0
[  253.061825][    C0]  batadv_nc_worker+0x361/0x610
[  253.061845][    C0]  ? process_one_work+0x7a9/0x11d0
[  253.061860][    C0]  process_one_work+0x8a9/0x11d0
[  253.061882][    C0]  ? worker_detach_from_pool+0x260/0x260
[  253.061899][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  253.061914][    C0]  ? kthread_data+0x4e/0xc0
[  253.061930][    C0]  ? wq_worker_running+0x97/0x190
[  253.061949][    C0]  worker_thread+0xa47/0x1200
[  253.061974][    C0]  kthread+0x28d/0x320
[  253.061984][    C0]  ? worker_clr_flags+0x190/0x190
[  253.061997][    C0]  ? kthread_blkcg+0xd0/0xd0
[  253.062010][    C0]  ret_from_fork+0x1f/0x30
[  253.062035][    C0]  </TASK>
[  253.119483][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  253.119499][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0
[  253.119516][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  253.119527][   T27] Call Trace:
[  253.119534][   T27]  <TASK>
[  253.119541][   T27]  dump_stack_lvl+0x1e3/0x2cb
[  253.119571][   T27]  ? nf_tcp_handle_invalid+0x642/0x642
[  253.119593][   T27]  ? panic+0x764/0x764
[  253.119610][   T27]  ? llist_add_batch+0x160/0x1d0
[  253.119635][   T27]  ? vscnprintf+0x59/0x80
[  253.119655][   T27]  panic+0x318/0x764
[  253.119673][   T27]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  253.119697][   T27]  ? memcpy_page_flushcache+0xfc/0xfc
[  253.119719][   T27]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  253.119740][   T27]  ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0
[  253.119765][   T27]  ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0
[  253.119790][   T27]  watchdog+0xfc7/0xfd0
[  253.119814][   T27]  ? watchdog+0x1f8/0xfd0
[  253.119837][   T27]  kthread+0x28d/0x320
[  253.119851][   T27]  ? hungtask_pm_notify+0x50/0x50
[  253.119869][   T27]  ? kthread_blkcg+0xd0/0xd0
[  253.119885][   T27]  ret_from_fork+0x1f/0x30
[  253.119917][   T27]  </TASK>
[  253.124046][   T27] Kernel Offset: disabled
[  253.495258][   T27] Rebooting in 86400 seconds..