last executing test programs:

11.75201471s ago: executing program 1 (id=20):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x204000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_pidfd_open(0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil)
r2 = openat$incfs(r1, &(0x7f0000000340)='.log\x00', 0x10000, 0x42)
fcntl$setsig(r2, 0xa, 0x18)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x15)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0899ff3ad8a06809639600292751bdc09046298a9fbeee3a0b310e6c4f4101265d51e43dc5284aaabcdb1c60b61b593f92246ffc1085aa05d996a6205a93ddfc11889fa01cbbe9c08800e1c1d65075d4ab617194ef344cbf5890abad97a0e9b8b98f6d004d0000000000"], 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
bind$can_raw(r5, &(0x7f0000000140)={0x1d, r6}, 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x1, 0x1, 0x1}, {0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x10)
close(r5)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r7 = getpgrp(0x0)
syz_pidfd_open(r7, 0x0)
r8 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1})
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)

10.045044497s ago: executing program 1 (id=25):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$packet(0x11, 0xa, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d)
sendfile(r3, r4, 0x0, 0x8000002b)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, 0x0, 0x78)
syz_emit_ethernet(0x74, &(0x7f00000037c0)=ANY=[@ANYBLOB="0180c2000000000000000095070000000000000000080073907800000000e0000001000000b62ed46b05438d486cda277b603cb23d1a9e00fe9a9078020000000000718d"], 0x0)

9.928851212s ago: executing program 0 (id=27):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r3, &(0x7f0000000040)='`', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000005580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)='n', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000480)='I', 0x1}], 0x1}}], 0x2, 0x40000c0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000005c0)={0x4b8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x3, "f2862f3fb1ff99"})
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000004140)={r4, 0x709})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}, 0x2}, 0x0)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x37, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=ANY=[@ANYBLOB="100100001000810500"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x110}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1700000072008106fdffffffffffffff07"], 0x18}}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b03010067726574617000001000fe800e000e000300000004001200"], 0x40}}, 0x0)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x0, @empty}, r10}}, 0x48)
write$RDMA_USER_CM_CMD_QUERY(r9, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r10, 0x2}}, 0x18)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x80000000000, &(0x7f00000002c0)={<r12=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r12}}, 0x48)
write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, r12}}, 0x30)

8.865643685s ago: executing program 0 (id=28):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
close(r9)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000004800f9ffff7f0000fbdbdf250a"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc)
splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000007fffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f80080001"], 0xb8}}, 0x0)

8.581330391s ago: executing program 1 (id=29):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f00000002c0))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
io_uring_setup(0x17ad, &(0x7f0000000580)={0x0, 0x3d83, 0x1, 0x3, 0x1b3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d4c18a080204025676350102030109021200"], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[], 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10)
syz_usb_connect$uac1(0x4, 0xb5, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x54, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x25}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x40, 0x4, 0x80, 0x5, "045a5b98ba78"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x4c}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x8, 0x2, "", "22ff"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x6, 0x3, "8c4f9ab544aa14"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0xfd, 0xff, {0x7, 0x25, 0x1, 0x1, 0x3, 0x3a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0xf5, 0x7, 0x3}, @as_header={0x7, 0x24, 0x1, 0x3, 0xb4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x5fd5211f8fc7dfa4, 0xfd, 0x6, 0xad, {0x7, 0x25, 0x1, 0x0, 0x81, 0x8}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x9, 0x61, 0xf1, 0x40, 0x3}, 0x1f, &(0x7f0000000240)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x9, 0x7, 0x4, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3ff, 0xf, 0x77a4}]}, 0x2, [{0x82, &(0x7f00000004c0)=@string={0x82, 0x3, "77657da15454fbec68152c7ebe4ba5bea41147f11b233ec4f2389634dbdd88782ba25af306b895248bef9d5788453218492947b682df6e7a176fdfd2f6ee5d3af84c3e0d0b79d15b4fc41a9b09f651bd96f9a29d164b915b87a1ddc9f102c8ec451ab690de291a801503deecd7237f9c808336d5203c28bd2bc6277267095325"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x407}}]})
sendto$inet(r6, &(0x7f00000003c0)="9e83", 0x2, 0x0, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/120, 0x78, 0x0, 0x0}, &(0x7f0000000080)=0x40)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x35e})
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000003e40)=ANY=[@ANYBLOB="250000000c06030000000000000000000300f11105000100070000000900020073797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

8.005042275s ago: executing program 4 (id=32):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000"], 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x4)

7.562725282s ago: executing program 2 (id=34):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000"], 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x4)

6.847983435s ago: executing program 0 (id=35):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000"], 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
close(r9)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000004800f9ffff7f0000fbdbdf250a"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc)
splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000007fffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f80080001"], 0xb8}}, 0x0)

6.080123077s ago: executing program 4 (id=37):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "dc"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$vmci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)=0x80000)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000300))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x44004050}, 0x40084)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r7=>0x0})
r8 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r8, &(0x7f0000000400)="5dbe282aa7407ccdc67fcf31b1243fd91ef5da49a853c78ea7e8f5383bf9b8ef7f5b1c3675cc44534372fb0d64de586be768561b26f4c4d5109dceb37d0daaad3771bcd5a4a43ea99d853dd656872596999937829e8ec01ae9b2a06ee08f6c840f9cec5ccd2ece480417814ab45341204d24d405a0b10af89584cbea3f71af2611cfa989eb80bc6486021bfd460a1f75b591027473a56f955d29c61b8e67aa6923d9a9cda11f22ec7a3e", 0xaa)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x70, r6, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x54, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

5.632984711s ago: executing program 4 (id=38):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff020000000000000000000000000001000400000000"], 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
close(r9)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000004800f9ffff7f0000fbdbdf250a"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc)
splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000007fffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f80080001"], 0xb8}}, 0x0)

5.387310413s ago: executing program 2 (id=39):
syz_emit_ethernet(0xb6, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x22, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x6}, @lsrr={0x83, 0x13, 0x0, [@multicast2, @loopback, @empty, @multicast2]}, @cipso={0x86, 0x54, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x6, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x7, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xe, "ccf0294e2a3bdb4aa40b249e"}]}, @timestamp={0x44, 0x4}]}}, "a815a23d"}}}}}, 0x0)

5.262983838s ago: executing program 2 (id=40):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff020000000000000000000000000001000400000000"], 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
close(r9)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000004800f9ffff7f0000fbdbdf250a"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc)
splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000007fffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f80080001"], 0xb8}}, 0x0)

5.028718843s ago: executing program 3 (id=41):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xac}}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @private=0xa010102}, 0xc)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f00000000c0)={0x98f907, 0x80, @name="2e86d490dde5431ab43a7574258d69b5fdc300"})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffff]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffe, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5.018670856s ago: executing program 1 (id=42):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
close(r9)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000004800f9ffff7f0000fbdbdf250a"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc)
splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000007fffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f80080001"], 0xb8}}, 0x0)

4.684574801s ago: executing program 0 (id=43):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x855b, 0x3fe, 0x5, 0xfffffffd}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="68001a80280002"], 0xac}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="28717bfbea000000120001000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.\x00\x00\x00\x00\x00'], 0x28}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc60100005000b000900053582c137153e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010500d78c4ec80000000a00020008000300", @ANYRES32=r8, @ANYBLOB="10005080040006000500020005"], 0x2c}}, 0x20004010)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x0, 0x200, 0x3fff8}}}}]}, 0x78}}, 0x0)
r9 = signalfd4(r0, &(0x7f0000000100)={[0x3, 0x8]}, 0x8, 0x80800)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004)
openat$hwrng(0xffffff9c, &(0x7f0000000380), 0x100000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000000000000030000000700000000000000000000000600000006000000ffffffff000000000000000000000000000000000000000007000000040000000100000000000000ffffff7f000000000600000000000000080000000000000006000000070000009c0000000400000000000000000000007829000006000000850000000100000000000000000000000000000000000000ff0000000200000001000000000000000100000002000000000000000000000000000000000000000000000000000000260d000002000000010000000000000006000000908b000006000000040000000000000000000000000000000000000012040000030000000000000000000000010400000400000002000000020000000000000000000000000000000000000002000000020000000100000000000000ffff000000000000060000000000000000000080000000000000010006000000040000000200000000000000000000007b00000005000000000000000000000000000000000000000000000000000000000000000500000001000000000000000000003002000000000000000000000000000000000000000000000000000000080000000300000000000000000000000200000000000000080000000000000005000000000000000900000000000038"])

4.402415549s ago: executing program 3 (id=44):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d)
sendfile(r4, r5, 0x0, 0x8000002b)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, 0x0, 0x78)
syz_emit_ethernet(0x74, &(0x7f00000037c0)=ANY=[@ANYBLOB="0180c2000000000000000095070000000000000000080073907800000000e0000001000000b62ed46b05438d486cda277b603cb23d1a9e00fe9a9078020000000000718d"], 0x0)

3.850532809s ago: executing program 4 (id=45):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r3, &(0x7f0000000040)='`', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000005580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)='n', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000480)='I', 0x1}], 0x1}}], 0x2, 0x40000c0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000005c0)={0x4b8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x3, "f2862f3fb1ff99"})
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000004140)={r4, 0x709})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}, 0x2}, 0x0)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x37, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=ANY=[@ANYBLOB="100100001000810500"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x110}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1700000072008106fdffffffffffffff07"], 0x18}}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b03010067726574617000001000fe800e000e000300000004001200"], 0x40}}, 0x0)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x0, @empty}, r10}}, 0x48)
write$RDMA_USER_CM_CMD_QUERY(r9, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r10, 0x2}}, 0x18)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x80000000000, &(0x7f00000002c0)={<r12=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r12}}, 0x48)
write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, r12}}, 0x30)

3.849237066s ago: executing program 0 (id=55):
r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x1)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r2)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5d, 0x95, 0x8d, 0x8, 0xbaf, 0xf5, 0xdfc2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x46, 0x4b, 0xcf}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000780)=ANY=[@ANYBLOB="120100000200000025052f8438a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000901000300000000000904010000020d00000904010102020d0000090582020000000000090503020000"], 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000080)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x9f, 0x4}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x61, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20044041)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
listen(r4, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc2c45512, &(0x7f0000000a00)={{0x9}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

3.357695737s ago: executing program 1 (id=46):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000"], 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x4c}}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000004800f9ffff7f0000fbdbdf250a"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000007fffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f80080001"], 0xb8}}, 0x0)

3.301394133s ago: executing program 3 (id=47):
socket$packet(0x11, 0xa, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
syz_open_dev$video4linux(0x0, 0x401, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d)
sendfile(r3, r4, 0x0, 0x8000002b)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, 0x0, 0x78)
syz_emit_ethernet(0x74, 0x0, 0x0)

2.878582335s ago: executing program 4 (id=48):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
close(r9)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000004800f9ffff7f0000fbdbdf250a"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc)
splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000007fffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f80080001"], 0xb8}}, 0x0)

2.769465727s ago: executing program 2 (id=49):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "dc"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$vmci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)=0x80000)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000300))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x44004050}, 0x40084)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r8=>0x0})
r9 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r9, &(0x7f0000000400)="5dbe282aa7407ccdc67fcf31b1243fd91ef5da49a853c78ea7e8f5383bf9b8ef7f5b1c3675cc44534372fb0d64de586be768561b26f4c4d5109dceb37d0daaad3771bcd5a4a43ea99d853dd656872596999937829e8ec01ae9b2a06ee08f6c840f9cec5ccd2ece480417814ab45341204d24d405a0b10af89584cbea3f71af2611cfa989eb80bc6486021bfd460a1f75b591027473a56f955d29c61b8e67aa6923d9a9cda11f22ec7a3e", 0xaa)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x70, r7, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x54, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

2.191983249s ago: executing program 2 (id=50):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
dup(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$packet(0x11, 0xa, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d)
sendfile(r3, r4, 0x0, 0x8000002b)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, 0x0, 0x78)
syz_emit_ethernet(0x74, &(0x7f00000037c0)=ANY=[@ANYBLOB="0180c2000000000000000095070000000000000000080073907800000000e0000001000000b62ed46b05438d486cda277b603cb23d1a9e00fe9a9078020000000000718d"], 0x0)

2.109162349s ago: executing program 3 (id=51):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r2}, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000002d80)=ANY=[@ANYBLOB="02c8301f001b0001000d050800000388004800060000b31fcf52dc52a2a597d4702a558e5c4c4b75411bb9b1c0d0c0a2e7605dd0b9672934d4f2a3d8d709dce8259abb10bdc1f6fc5ccd311bf57799d9f6638b62c9977dd3ccb7373db1c5901a360115d34f7393615d9ced161e49ec2eec088f94bb59414aefbf668d566f7618f78ba98b709f9a3323e1b819ad483903fc05a2dc05e9c935522de39fe494bbea92"], 0x24)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x4, &(0x7f0000002b00)=ANY=[@ANYBLOB="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", @ANYRES64=r1], &(0x7f00000002c0)='GPL\x00', 0x6, 0xca, &(0x7f0000002c80)=""/202, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801)
fchdir(r4)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000003acb4a023d3618dd8b05176ff0c4d99c380d916215b11ea1f4aaa4a3e47b487da6abb87a5e75010ead8bc6c1b2b2f03bad4eaefa048c8fe872d0eff3606ab35e22962dbd027f2be2fd740c1b42bc15216d0000000000000007b35573460c79999d6a1193a2bcd2b8ae477999deeaa310900385189692d2f9688938c58d4a0e0656d3b8582e49b67fcfd2ad0dd4148583dfacd9fe9fd26a2f76a6946ad88b9c4c5740f2065649e5d627ce3f3517bf35042955edf0e9408471e330b42a7009899fb330d52256acbef4214c7b39ed7a27d50c68ac860e2b73ec13cc255fa9aa6a3d6f7ff73b922a6f46c5210655d4b145f63973bdde1896d4a5fef0aba7a4b2", @ANYBLOB="0006f634b4db756405c1f46745809a15c422efe78f4660f64be5bf99613ac6cfa03299c46d87fa864230baa12013f338029dd2e1ef1a118f07028544bb52a40ae6cf03dfb98bb449f18e41", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES8=r1, @ANYRES32=r3], 0x48)
sendto$inet6(r1, &(0x7f00000000c0)="de", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="9c8b0000045d00010000ddff06eab94b", 0xfffffffffffffe2e)
listen(r5, 0x0)
shutdown(r5, 0x1)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0xfffffffffffffc8e)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x800, 0x0, 0x5}, 0x10)
readahead(r1, 0x6, 0x3)
r6 = syz_usb_connect(0x50f7e2251c6fb0ed, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100ac749f62df8c106901c8bf000000010902120001000000000904aa0000d0bcd200"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000008ac05740240000102f50109022400010110100009040017010301020309210e00090122220709058103ff0304002d"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0})
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000700)=0x4, 0x4)
syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="20240100000093"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_POLL(r7, &(0x7f00000006c0)={0x18, 0x0, r8, {0x9}}, 0x18)
write$FUSE_NOTIFY_POLL(r7, &(0x7f0000002940)={0x18, 0x3}, 0x18)

1.75170629s ago: executing program 1 (id=52):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x10b841, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10)
bind$tipc(r4, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000340)={0x43}, 0x10)
write$ppp(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x86}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
recvmsg$kcm(r7, &(0x7f0000000540)={0x0, 0xfffffffffffffd69, &(0x7f0000000180), 0x1}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @random="8e742f592bf6"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x5}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x74}}, 0xc094)

930.225093ms ago: executing program 4 (id=53):
r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x1)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r2)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5d, 0x95, 0x8d, 0x8, 0xbaf, 0xf5, 0xdfc2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x46, 0x4b, 0xcf}}]}}]}}, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000780)=ANY=[@ANYBLOB="120100000200000025052f8438a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000901000300000000000904010000020d00000904010102020d0000090582020000000000"], 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000080)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x9f, 0x4}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x61, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20044041)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
listen(r4, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc2c45512, &(0x7f0000000a00)={{0x9}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

929.356973ms ago: executing program 0 (id=54):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff020000000000000000"], 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
close(r9)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000004800f9ffff7f0000fbdbdf250a"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc)
splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000007fffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f80080001"], 0xb8}}, 0x0)

696.365869ms ago: executing program 2 (id=56):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff020000000000000000"], 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
close(r9)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000004800f9ffff7f0000fbdbdf250a"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc)
splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000007fffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f80080001"], 0xb8}}, 0x0)

161.033293ms ago: executing program 3 (id=57):
syz_emit_ethernet(0xd6, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@multicast2, @loopback, @empty, @multicast2]}, @cipso={0x86, 0x54, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x6, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x7, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xe, "ccf0294e2a3bdb4aa40b249e"}]}, @timestamp={0x44, 0x4}]}}, "a815a23d"}}}}}, 0x0)

0s ago: executing program 3 (id=58):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
close(r9)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000004800f9ffff7f0000fbdbdf250a"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc)
splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000007fffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f80080001"], 0xb8}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts.
[   50.409514][ T5217] cgroup: Unknown subsys name 'net'
[   50.515270][ T5217] cgroup: Unknown subsys name 'cpuset'
[   50.523031][ T5217] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.807259][ T5217] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.099134][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.107459][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.118594][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.127037][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.129328][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.134722][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   55.143107][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.149643][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.157308][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.163913][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.169751][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.177729][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.193476][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.212632][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   55.220200][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.227444][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.235460][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   55.243072][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.264152][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   55.274889][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   55.285794][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   55.301249][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   55.312260][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   55.319704][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   55.362510][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   55.373605][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   55.381661][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   55.392519][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   55.403904][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   55.411220][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   55.578847][ T5246] chnl_net:caif_netlink_parms(): no params data found
[   55.728208][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.736135][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.744210][ T5246] bridge_slave_0: entered allmulticast mode
[   55.750892][ T5246] bridge_slave_0: entered promiscuous mode
[   55.817292][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.824844][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.832241][ T5246] bridge_slave_1: entered allmulticast mode
[   55.838827][ T5246] bridge_slave_1: entered promiscuous mode
[   55.865530][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.887924][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.935017][ T5242] chnl_net:caif_netlink_parms(): no params data found
[   55.961885][ T5246] team0: Port device team_slave_0 added
[   55.968724][ T5243] chnl_net:caif_netlink_parms(): no params data found
[   56.005060][ T5246] team0: Port device team_slave_1 added
[   56.056347][ T5244] chnl_net:caif_netlink_parms(): no params data found
[   56.107435][ T5247] chnl_net:caif_netlink_parms(): no params data found
[   56.121007][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.128061][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.154235][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.172223][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.179200][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.205417][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.304704][ T5246] hsr_slave_0: entered promiscuous mode
[   56.310917][ T5246] hsr_slave_1: entered promiscuous mode
[   56.320780][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.328405][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.336098][ T5243] bridge_slave_0: entered allmulticast mode
[   56.343324][ T5243] bridge_slave_0: entered promiscuous mode
[   56.366450][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.376612][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.384062][ T5243] bridge_slave_1: entered allmulticast mode
[   56.390640][ T5243] bridge_slave_1: entered promiscuous mode
[   56.405189][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.412468][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.419683][ T5242] bridge_slave_0: entered allmulticast mode
[   56.430029][ T5242] bridge_slave_0: entered promiscuous mode
[   56.452889][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.460089][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.467678][ T5242] bridge_slave_1: entered allmulticast mode
[   56.474413][ T5242] bridge_slave_1: entered promiscuous mode
[   56.518475][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.555602][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.563701][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.570880][ T5247] bridge_slave_0: entered allmulticast mode
[   56.578248][ T5247] bridge_slave_0: entered promiscuous mode
[   56.588033][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.605796][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.613097][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.620225][ T5244] bridge_slave_0: entered allmulticast mode
[   56.627306][ T5244] bridge_slave_0: entered promiscuous mode
[   56.658941][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.672432][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.679666][ T5247] bridge_slave_1: entered allmulticast mode
[   56.686534][ T5247] bridge_slave_1: entered promiscuous mode
[   56.702740][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.720765][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.728075][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.735717][ T5244] bridge_slave_1: entered allmulticast mode
[   56.742871][ T5244] bridge_slave_1: entered promiscuous mode
[   56.761113][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.781353][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.809684][ T5243] team0: Port device team_slave_0 added
[   56.820301][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.840904][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.857528][ T5243] team0: Port device team_slave_1 added
[   56.879935][ T5242] team0: Port device team_slave_0 added
[   56.887568][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.925871][ T5247] team0: Port device team_slave_0 added
[   56.933741][ T5242] team0: Port device team_slave_1 added
[   56.958470][ T5244] team0: Port device team_slave_0 added
[   56.964753][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.971722][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.997755][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.010498][ T5247] team0: Port device team_slave_1 added
[   57.041080][ T5244] team0: Port device team_slave_1 added
[   57.056387][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.063804][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.090281][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.116747][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.123797][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.149868][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.176066][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.183200][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.209635][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.222764][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.229737][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.238596][ T5230] Bluetooth: hci0: command tx timeout
[   57.257234][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.275733][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.283120][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.309537][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.312083][ T5230] Bluetooth: hci2: command tx timeout
[   57.320164][ T4623] Bluetooth: hci1: command tx timeout
[   57.331792][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.339020][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.364981][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.382074][ T4623] Bluetooth: hci3: command tx timeout
[   57.398002][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.405284][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.431271][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.462454][ T4623] Bluetooth: hci4: command tx timeout
[   57.481540][ T5243] hsr_slave_0: entered promiscuous mode
[   57.487851][ T5243] hsr_slave_1: entered promiscuous mode
[   57.495691][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.503572][ T5243] Cannot create hsr debugfs directory
[   57.523256][ T5244] hsr_slave_0: entered promiscuous mode
[   57.529391][ T5244] hsr_slave_1: entered promiscuous mode
[   57.536122][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.543842][ T5244] Cannot create hsr debugfs directory
[   57.593688][ T5242] hsr_slave_0: entered promiscuous mode
[   57.599948][ T5242] hsr_slave_1: entered promiscuous mode
[   57.606385][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.614140][ T5242] Cannot create hsr debugfs directory
[   57.634487][ T5247] hsr_slave_0: entered promiscuous mode
[   57.640695][ T5247] hsr_slave_1: entered promiscuous mode
[   57.647182][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.654820][ T5247] Cannot create hsr debugfs directory
[   57.769120][ T5246] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.796361][ T5246] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.805054][ T5246] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.845463][ T5246] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.018534][ T5244] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.033915][ T5244] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.054116][ T5244] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.077904][ T5244] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.119640][ T5243] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   58.130816][ T5243] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   58.149710][ T5243] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   58.177801][ T5243] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   58.226881][ T5247] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   58.241238][ T5247] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   58.268539][ T5247] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   58.290597][ T5247] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   58.307710][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.336172][ T5242] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.357445][ T5242] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.369548][ T5242] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.394478][ T5242] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.411919][ T5246] 8021q: adding VLAN 0 to HW filter on device team0
[   58.455478][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.462826][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.495217][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.502707][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.556095][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.611365][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.639339][ T5243] 8021q: adding VLAN 0 to HW filter on device team0
[   58.674835][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.690559][ T5244] 8021q: adding VLAN 0 to HW filter on device team0
[   58.700250][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.707434][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.734252][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.765804][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.772935][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.783385][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.790572][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.804092][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.811206][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.851642][ T5247] 8021q: adding VLAN 0 to HW filter on device team0
[   58.873302][ T5242] 8021q: adding VLAN 0 to HW filter on device team0
[   58.900724][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.928307][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.935479][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.947339][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.954469][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.970293][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.977458][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.026356][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.033493][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.093902][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.134502][ T5246] veth0_vlan: entered promiscuous mode
[   59.168239][ T5246] veth1_vlan: entered promiscuous mode
[   59.184597][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.221370][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.246382][ T5246] veth0_macvtap: entered promiscuous mode
[   59.276192][ T5246] veth1_macvtap: entered promiscuous mode
[   59.289432][ T5243] veth0_vlan: entered promiscuous mode
[   59.302294][ T4623] Bluetooth: hci0: command tx timeout
[   59.332874][ T5243] veth1_vlan: entered promiscuous mode
[   59.353963][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.375807][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.386068][ T4623] Bluetooth: hci2: command tx timeout
[   59.386086][ T5230] Bluetooth: hci1: command tx timeout
[   59.419654][ T5243] veth0_macvtap: entered promiscuous mode
[   59.432900][ T5247] veth0_vlan: entered promiscuous mode
[   59.444088][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.458450][ T5244] veth0_vlan: entered promiscuous mode
[   59.467584][ T5243] veth1_macvtap: entered promiscuous mode
[   59.473622][ T5230] Bluetooth: hci3: command tx timeout
[   59.493086][ T5246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.506300][ T5246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.516155][ T5246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.525224][ T5246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.538715][ T5244] veth1_vlan: entered promiscuous mode
[   59.552407][ T5230] Bluetooth: hci4: command tx timeout
[   59.564926][ T5247] veth1_vlan: entered promiscuous mode
[   59.630570][ T5242] veth0_vlan: entered promiscuous mode
[   59.637281][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.649815][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.661266][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.696856][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.707998][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.719753][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.730613][ T5243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.740718][ T5243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.751546][ T5243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.760662][ T5243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.792812][ T5242] veth1_vlan: entered promiscuous mode
[   59.821092][ T5244] veth0_macvtap: entered promiscuous mode
[   59.837016][ T5247] veth0_macvtap: entered promiscuous mode
[   59.861632][ T5244] veth1_macvtap: entered promiscuous mode
[   59.878893][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.879694][ T5247] veth1_macvtap: entered promiscuous mode
[   59.901247][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.938007][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.953144][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.963309][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.974409][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.985643][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.007158][ T5242] veth0_macvtap: entered promiscuous mode
[   60.031172][   T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.041034][   T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.048184][ T5242] veth1_macvtap: entered promiscuous mode
[   60.071025][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.083449][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.093938][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.106890][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.118117][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.137879][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.148891][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.160547][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.171160][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.181430][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.193058][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.205537][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.231831][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.246539][ T5246] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.269983][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.281538][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.292956][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.304362][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.315118][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.325042][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.335680][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.348420][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.357067][ T5244] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.366011][ T5244] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.375096][ T5244] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.384615][ T5244] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.415483][ T5247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.424906][ T5247] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.435123][ T5247] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.444634][ T5247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.485283][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.497191][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.510391][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.528132][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.538352][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.549501][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.559751][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.570442][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.581567][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.594809][   T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.603175][   T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.621270][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.633190][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.643977][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.655120][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.667802][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.679713][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.689963][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.701879][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.713812][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.789388][ T5286] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3'.
[   60.847790][ T5242] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.865417][ T5242] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.874974][ T5242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.883985][ T5242] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.894388][ T5287] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3'.
[   60.921510][ T5287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'.
[   60.980411][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.013282][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.066502][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.076005][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.184781][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.205923][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.249559][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.258375][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.390899][ T5230] Bluetooth: hci0: command tx timeout
[   61.456962][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.466493][ T5230] Bluetooth: hci1: command tx timeout
[   61.472915][ T5230] Bluetooth: hci2: command tx timeout
[   61.504006][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.542721][ T5230] Bluetooth: hci3: command tx timeout
[   61.580146][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.597486][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.627151][ T5230] Bluetooth: hci4: command tx timeout
[   61.922448][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   62.028643][ T5305] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   62.102674][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   62.230776][ T5307] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6'.
[   62.320241][ T5308] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4'.
[   62.350626][ T5304] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6'.
[   62.465889][ T5305] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.517510][ T5312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'.
[   62.578940][ T5308] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4'.
[   62.654349][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   62.671175][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   62.699416][ T5317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'.
[   62.734388][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   63.022772][   T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   63.163884][ T5281] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   63.202661][   T25] usb 1-1: Using ep0 maxpacket: 8
[   63.211059][   T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   63.225342][   T25] usb 1-1: config 0 has no interfaces?
[   63.251039][   T25] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76
[   63.260804][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.274102][   T25] usb 1-1: Product: syz
[   63.278284][   T25] usb 1-1: Manufacturer: syz
[   63.286649][   T25] usb 1-1: SerialNumber: syz
[   63.312806][   T25] usb 1-1: config 0 descriptor??
[   63.372172][ T5281] usb 3-1: Using ep0 maxpacket: 8
[   63.422486][ T5281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   63.462983][ T5281] usb 3-1: config 0 has no interfaces?
[   63.468768][ T5230] Bluetooth: hci0: command tx timeout
[   63.495635][ T5281] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76
[   63.512054][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.554223][ T5230] Bluetooth: hci2: command tx timeout
[   63.560317][ T5230] Bluetooth: hci1: command tx timeout
[   63.578117][ T5281] usb 3-1: Product: syz
[   63.606967][ T5281] usb 3-1: Manufacturer: syz
[   63.622057][ T5230] Bluetooth: hci3: command tx timeout
[   63.655976][ T5281] usb 3-1: SerialNumber: syz
[   63.705474][ T5230] Bluetooth: hci4: command tx timeout
[   63.711473][ T5305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.722579][ T5281] usb 3-1: config 0 descriptor??
[   63.826403][ T5305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.842233][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   63.991096][ T5316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.069889][ T5316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.164606][ T5227] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   64.325585][ T5227] usb 2-1: Using ep0 maxpacket: 32
[   64.337010][ T5227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.364544][ T5227] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   64.410635][ T5227] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   64.419901][ T5281] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   64.439207][ T5227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.462995][ T5227] usb 2-1: config 0 descriptor??
[   64.485505][ T5227] hub 2-1:0.0: bad descriptor, ignoring hub
[   64.502286][ T5227] hub 2-1:0.0: probe with driver hub failed with error -5
[   64.524929][ T5227] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   64.592142][ T5281] usb 4-1: Using ep0 maxpacket: 8
[   64.613994][ T5281] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.642112][ T5281] usb 4-1: config 0 has no interfaces?
[   64.655088][ T5281] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76
[   64.668286][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.693252][ T5281] usb 4-1: Product: syz
[   64.707776][ T5281] usb 4-1: Manufacturer: syz
[   64.722085][ T5281] usb 4-1: SerialNumber: syz
[   64.741866][ T5281] usb 4-1: config 0 descriptor??
[   65.002778][ T5305] Zero length message leads to an empty skb
[   65.013458][ T5329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.029307][ T5279] usb 1-1: USB disconnect, device number 2
[   65.035850][ T5329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.115291][ T5293] usb 2-1: USB disconnect, device number 2
[   65.195902][   T25] usb 3-1: USB disconnect, device number 2
[   65.253766][ T5333] syz.4.11 (5333) used greatest stack depth: 18528 bytes left
[   65.678195][   T51] usb 4-1: USB disconnect, device number 2
[   65.866576][ T5353] netlink: 116 bytes leftover after parsing attributes in process `syz.4.14'.
[   65.891885][ T5354] netlink: 116 bytes leftover after parsing attributes in process `syz.1.15'.
[   65.932275][ T5356] process 'syz.0.16' launched '/dev/fd/3' with NULL argv: empty string added
[   66.000745][ T5357] netlink: 116 bytes leftover after parsing attributes in process `syz.1.15'.
[   66.010711][ T5351] netlink: 116 bytes leftover after parsing attributes in process `syz.4.14'.
[   66.088037][ T5359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14'.
[   66.152765][ T5352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'.
[   66.202161][   T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   66.390153][   T25] usb 1-1: Using ep0 maxpacket: 8
[   66.411066][   T25] usb 1-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2
[   66.423495][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.511599][   T25] usb 1-1: Product: syz
[   66.533294][   T25] usb 1-1: Manufacturer: syz
[   66.549578][   T25] usb 1-1: SerialNumber: syz
[   66.564684][   T25] usb 1-1: config 0 descriptor??
[   66.583009][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   66.596440][   T25] usb 1-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I
[   66.702182][ T5293] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   66.710416][    T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!!
[   66.719286][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   66.792393][   T25] usb 1-1: reset high-speed USB device number 3 using dummy_hcd
[   66.833074][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   66.881726][ T5293] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   66.911386][ T5293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.948488][ T5293] usb 4-1: Product: syz
[   66.982808][ T5293] usb 4-1: Manufacturer: syz
[   66.996674][ T5293] usb 4-1: SerialNumber: syz
[   67.030379][ T5293] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   67.102111][ T5227] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   67.446612][ T5293] usb 4-1: USB disconnect, device number 3
[   67.608198][ T5370] netlink: 116 bytes leftover after parsing attributes in process `syz.2.19'.
[   67.817291][ T5377] netlink: 116 bytes leftover after parsing attributes in process `syz.2.19'.
[   67.834229][   T25] usb 1-1: device descriptor read/64, error -71
[   67.844218][ T5377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19'.
[   68.104911][   T25] usb 1-1: reset high-speed USB device number 3 using dummy_hcd
[   68.212693][ T5227] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[   68.257747][ T5227] ath9k_htc: Failed to initialize the device
[   68.284670][ T5293] usb 4-1: ath9k_htc: USB layer deinitialized
[   68.543443][   T25] usb 1-1: [UEAGLE-ATM] interface 1 not found
[   68.559481][   T25] ueagle-atm 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[   68.592378][   T25] usb 1-1: USB disconnect, device number 3
[   69.065679][ T5389] netlink: 116 bytes leftover after parsing attributes in process `syz.3.23'.
[   69.332080][ T5293] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   69.492177][ T5293] usb 5-1: Using ep0 maxpacket: 32
[   69.504996][ T5293] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   69.529969][ T5293] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   69.550185][ T5293] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   69.566381][ T5293] usb 5-1: Product: syz
[   69.575264][ T5293] usb 5-1: Manufacturer: syz
[   69.583142][ T5293] usb 5-1: SerialNumber: syz
[   69.641869][ T5293] usb 5-1: config 0 descriptor??
[   69.650141][ T5388] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   70.028066][ T5293] usb 5-1: USB disconnect, device number 2
[   70.931226][ T5416] netlink: 'syz.4.31': attribute type 10 has an invalid length.
[   71.051576][ T5415] __nla_validate_parse: 10 callbacks suppressed
[   71.051597][ T5415] netlink: 116 bytes leftover after parsing attributes in process `syz.3.30'.
[   71.160445][ T5421] netlink: 116 bytes leftover after parsing attributes in process `syz.3.30'.
[   71.191730][ T5421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.30'.
[   71.279778][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   71.462286][ T5278] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   71.470409][    T9] usb 2-1: Using ep0 maxpacket: 8
[   71.472023][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   71.502048][    T9] usb 2-1: config 0 has no interfaces?
[   71.524365][    T9] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76
[   71.545757][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.555042][    T9] usb 2-1: Product: syz
[   71.564648][    T9] usb 2-1: Manufacturer: syz
[   71.584440][    T9] usb 2-1: SerialNumber: syz
[   71.599433][    T9] usb 2-1: config 0 descriptor??
[   71.652978][ T5278] usb 5-1: Using ep0 maxpacket: 32
[   71.662569][ T5278] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   71.682236][ T5278] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   71.726967][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.732847][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[   71.741666][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[   71.754165][ T5278] usb 5-1: config 0 descriptor??
[   71.789820][ T5278] hub 5-1:0.0: bad descriptor, ignoring hub
[   71.950755][ T5278] hub 5-1:0.0: probe with driver hub failed with error -5
[   72.080409][ T5419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.142174][ T5419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.154655][ T5227] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   72.482089][ T5227] usb 3-1: Using ep0 maxpacket: 32
[   72.490316][ T5227] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   72.502181][ T5227] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   72.511179][ T5227] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   72.555811][ T5227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.582435][    T9] usb 5-1: USB disconnect, device number 3
[   72.605023][ T5227] usb 3-1: config 0 descriptor??
[   72.684878][ T5434] netlink: 116 bytes leftover after parsing attributes in process `syz.0.35'.
[   72.857068][ T5434] netlink: 116 bytes leftover after parsing attributes in process `syz.0.35'.
[   72.883535][ T5434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.35'.
[   73.173595][ T5227] usb 3-1: USB disconnect, device number 3
[   73.209791][ T5441] netlink: 116 bytes leftover after parsing attributes in process `syz.3.36'.
[   73.274907][ T5278] usb 2-1: USB disconnect, device number 3
[   73.351685][ T5449] netlink: 116 bytes leftover after parsing attributes in process `syz.3.36'.
[   73.419030][ T5450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.36'.
[   74.034499][ T5454] netlink: 116 bytes leftover after parsing attributes in process `syz.4.38'.
[   74.562826][ T5470] openvswitch: netlink: Key type 29 is not supported
[   75.592139][   T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   75.832195][   T25] usb 1-1: Using ep0 maxpacket: 8
[   75.852462][   T25] usb 1-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2
[   75.861565][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.921569][   T25] usb 1-1: Product: syz
[   75.938907][   T25] usb 1-1: Manufacturer: syz
[   75.954614][   T25] usb 1-1: SerialNumber: syz
[   76.035365][   T25] usb 1-1: config 0 descriptor??
[   76.069398][   T25] usb 1-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I
[   76.125916][ T5494] __nla_validate_parse: 10 callbacks suppressed
[   76.125938][ T5494] netlink: 116 bytes leftover after parsing attributes in process `syz.1.46'.
[   76.232144][   T25] usb 1-1: reset high-speed USB device number 4 using dummy_hcd
[   76.326192][ T5494] netlink: 116 bytes leftover after parsing attributes in process `syz.1.46'.
[   76.408753][ T5500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.46'.
[   76.732354][ T5504] netlink: 116 bytes leftover after parsing attributes in process `syz.4.48'.
[   76.830008][ T5507] netlink: 116 bytes leftover after parsing attributes in process `syz.4.48'.
[   76.843109][  T936] cfg80211: failed to load regulatory.db
[   76.912176][   T25] usb 1-1: device descriptor read/64, error -71
[   76.932652][ T5508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.48'.
[   77.172252][   T25] usb 1-1: reset high-speed USB device number 4 using dummy_hcd
[   77.472523][ T5230] Bluetooth: Unknown BR/EDR signaling command 0x0d
[   77.479145][ T5230] Bluetooth: Wrong link type (-22)
[   77.571068][   T25] usb 1-1: [UEAGLE-ATM] interface 1 not found
[   77.577387][   T25] ueagle-atm 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[   77.592173][   T25] usb 1-1: USB disconnect, device number 4
[   77.792111][ T5293] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   77.962647][ T5293] usb 4-1: Using ep0 maxpacket: 8
[   77.980380][ T5293] usb 4-1: unable to get BOS descriptor or descriptor too short
[   78.005425][ T5293] usb 4-1: config 1 interface 0 has no altsetting 0
[   78.059060][ T5293] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40
[   78.080726][ T5293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=245
[   78.116272][ T5293] usb 4-1: Product: syz
[   78.133767][ T5293] usb 4-1: Manufacturer: syz
[   78.159130][ T5293] usb 4-1: SerialNumber: syz
[   78.349745][ T5517] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   78.389146][ T5517] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   78.405422][ T5293] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5
[   78.458089][ T4670] bcm5974 4-1:1.0: could not read from device
[   78.477526][ T5517] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   78.502312][ T5517] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   78.524010][ T4670] bcm5974 4-1:1.0: could not read from device
[   78.604023][ T5293] usb 4-1: USB disconnect, device number 4
[   78.608306][ T4670] bcm5974 4-1:1.0: could not read from device
[   78.635030][ T4670] bcm5974 4-1:1.0: could not read from device
[   78.644954][ T5517] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   78.690560][ T5517] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   78.725950][ T5279] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   78.776355][ T5537] netlink: 116 bytes leftover after parsing attributes in process `syz.0.54'.
[   78.834704][ T5517] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   78.846009][ T5517] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   78.874304][ T5548] netlink: 116 bytes leftover after parsing attributes in process `syz.0.54'.
[   78.905619][ T5517] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   78.918489][ T5279] usb 5-1: Using ep0 maxpacket: 8
[   78.932536][ T5548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54'.
[   78.941672][ T5517] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[   79.043749][ T5543] netlink: 116 bytes leftover after parsing attributes in process `syz.2.56'.
[   79.093643][ T5279] usb 5-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2
[   79.103174][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.111622][ T5279] usb 5-1: Product: syz
[   79.116043][ T5279] usb 5-1: Manufacturer: syz
[   79.120694][ T5279] usb 5-1: SerialNumber: syz
[   79.181050][ T5279] usb 5-1: config 0 descriptor??
[   79.251690][ T5517] ------------[ cut here ]------------
[   79.257330][ T5517] WARNING: CPU: 0 PID: 5517 at kernel/kcov.c:872 kcov_remote_start+0x542/0x7d0
[   79.266322][ T5517] Modules linked in:
[   79.270265][ T5517] CPU: 0 UID: 0 PID: 5517 Comm: syz.1.52 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0
[   79.280769][ T5517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   79.290843][ T5517] RIP: 0010:kcov_remote_start+0x542/0x7d0
[   79.296597][ T5517] Code: 4c 89 ff be 03 00 00 00 e8 8b dc 27 03 e9 04 fb ff ff e8 91 51 31 0a 41 f7 c6 00 02 00 00 0f 84 f2 fa ff ff e9 7f fc ff ff 90 <0f> 0b 90 e8 c6 6e 31 0a 89 c0 48 c7 c7 c0 d4 02 00 48 03 3c c5 50
[   79.316230][ T5517] RSP: 0018:ffffc900155c7210 EFLAGS: 00010002
[   79.322312][ T5517] RAX: 0000000080000200 RBX: ffff888027d08000 RCX: 0000000000000002
[   79.330298][ T5517] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c6100e0
[   79.338310][ T5517] RBP: 0000000000000000 R08: ffffffff942c986f R09: 1ffffffff285930d
[   79.346296][ T5517] R10: dffffc0000000000 R11: fffffbfff285930e R12: ffffffff8194f0f7
[   79.354278][ T5517] R13: ffff88802d11c140 R14: 0000000000000246 R15: ffff8880b862d4c0
[   79.362246][ T5517] FS:  0000000000000000(0000) GS:ffff8880b8600000(0063) knlGS:00000000f56b6b40
[   79.371189][ T5517] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[   79.377778][ T5517] CR2: 0000000032a0cff8 CR3: 000000005fae0000 CR4: 00000000003526f0
[   79.385755][ T5517] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   79.393737][ T5517] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   79.401716][ T5517] Call Trace:
[   79.405004][ T5517]  <TASK>
[   79.407942][ T5517]  ? __warn+0x168/0x4e0
[   79.412114][ T5517]  ? kcov_remote_start+0x542/0x7d0
[   79.417258][ T5517]  ? report_bug+0x2b3/0x500
[   79.421780][ T5517]  ? kcov_remote_start+0x542/0x7d0
[   79.426939][ T5517]  ? handle_bug+0x60/0x90
[   79.431291][ T5517]  ? exc_invalid_op+0x1a/0x50
[   79.435968][ T5517]  ? asm_exc_invalid_op+0x1a/0x20
[   79.441004][ T5517]  ? kcov_remote_start+0x97/0x7d0
[   79.446048][ T5517]  ? kcov_remote_start+0x542/0x7d0
[   79.451185][ T5517]  ? mark_lock+0x9a/0x360
[   79.455531][ T5517]  ieee80211_rx_list+0x799/0x3780
[   79.460579][ T5517]  ? __lock_acquire+0x1384/0x2050
[   79.465631][ T5517]  ? __pfx_ieee80211_rx_list+0x10/0x10
[   79.471147][ T5517]  ? __pfx_lock_acquire+0x10/0x10
[   79.476197][ T5517]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   79.482209][ T5517]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   79.488553][ T5517]  ? ieee80211_rx_napi+0xd6/0x3c0
[   79.493585][ T5517]  ieee80211_rx_napi+0x18a/0x3c0
[   79.498524][ T5517]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   79.504880][ T5517]  ? __local_bh_disable_ip+0x179/0x220
[   79.510344][ T5517]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[   79.515829][ T5517]  ? skb_dequeue+0x113/0x150
[   79.520437][ T5517]  ieee80211_handle_queued_frames+0xe7/0x1e0
[   79.526435][ T5517]  ? ieee80211_stop_device+0x2a/0xf0
[   79.531728][ T5517]  ieee80211_stop_device+0x3f/0xf0
[   79.536840][ T5517]  ieee80211_do_stop+0x1cb5/0x2300
[   79.541998][ T5517]  ? __pfx_ieee80211_do_stop+0x10/0x10
[   79.547473][ T5517]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[   79.553388][ T5517]  ? lockdep_hardirqs_on+0x99/0x150
[   79.558659][ T5517]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   79.565006][ T5517]  ? wiphy_work_cancel+0x1f0/0x3e0
[   79.570123][ T5517]  ieee80211_stop+0x436/0x4a0
[   79.574827][ T5517]  ? __pfx_ieee80211_stop+0x10/0x10
[   79.580034][ T5517]  __dev_close_many+0x219/0x300
[   79.584905][ T5517]  ? __pfx___dev_close_many+0x10/0x10
[   79.590302][ T5517]  ? __mutex_trylock_common+0x183/0x2e0
[   79.595874][ T5517]  ? __pfx___might_resched+0x10/0x10
[   79.601184][ T5517]  dev_close_many+0x24e/0x4c0
[   79.605914][ T5517]  ? rcu_is_watching+0x15/0xb0
[   79.610700][ T5517]  ? __pfx_dev_close_many+0x10/0x10
[   79.615933][ T5517]  ? trace_contention_end+0x3c/0x120
[   79.621243][ T5517]  ? __mutex_lock+0x2ef/0xd70
[   79.625918][ T5517]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   79.631911][ T5517]  dev_close+0x1c0/0x2c0
[   79.636168][ T5517]  ? cfg80211_rfkill_set_block+0x1e/0x50
[   79.641835][ T5517]  ? __pfx_dev_close+0x10/0x10
[   79.646643][ T5517]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[   79.652569][ T5517]  cfg80211_shutdown_all_interfaces+0xbb/0x1d0
[   79.658753][ T5517]  cfg80211_rfkill_set_block+0x2d/0x50
[   79.664306][ T5517]  ? __pfx_cfg80211_rfkill_set_block+0x10/0x10
[   79.670465][ T5517]  rfkill_set_block+0x1f1/0x440
[   79.675321][ T5517]  rfkill_fop_write+0x5b8/0x790
[   79.680181][ T5517]  ? end_current_label_crit_section+0x151/0x180
[   79.686436][ T5517]  ? __pfx_rfkill_fop_write+0x10/0x10
[   79.691820][ T5517]  ? bpf_lsm_file_permission+0x9/0x10
[   79.697199][ T5517]  ? security_file_permission+0x74/0x280
[   79.702850][ T5517]  ? rw_verify_area+0x1c3/0x6f0
[   79.707719][ T5517]  ? __pfx_rfkill_fop_write+0x10/0x10
[   79.713104][ T5517]  vfs_write+0x29c/0xc90
[   79.717353][ T5517]  ? __pfx_vfs_write+0x10/0x10
[   79.722130][ T5517]  ? __fget_files+0x29/0x470
[   79.726733][ T5517]  ? __fget_files+0x3f3/0x470
[   79.731448][ T5517]  ? __fget_files+0x29/0x470
[   79.736071][ T5517]  ? fdget_pos+0x19a/0x320
[   79.740518][ T5517]  ksys_write+0x183/0x2b0
[   79.744881][ T5517]  ? __pfx_ksys_write+0x10/0x10
[   79.749780][ T5517]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[   79.756403][ T5517]  ? lockdep_hardirqs_on+0x99/0x150
[   79.761634][ T5517]  __do_fast_syscall_32+0xb4/0x110
[   79.766766][ T5517]  ? exc_page_fault+0x590/0x8c0
[   79.771632][ T5517]  do_fast_syscall_32+0x34/0x80
[   79.776510][ T5517]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   79.782845][ T5517] RIP: 0023:0xf7f37579
[   79.786931][ T5517] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   79.806563][ T5517] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[   79.814979][ T5517] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000080
[   79.822943][ T5517] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000
[   79.830916][ T5517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   79.838894][ T5517] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   79.846882][ T5517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   79.854881][ T5517]  </TASK>
[   79.857916][ T5517] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   79.865225][ T5517] CPU: 0 UID: 0 PID: 5517 Comm: syz.1.52 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0
[   79.875742][ T5517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   79.885791][ T5517] Call Trace:
[   79.889088][ T5517]  <TASK>
[   79.892034][ T5517]  dump_stack_lvl+0x241/0x360
[   79.896709][ T5517]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.901917][ T5517]  ? __pfx__printk+0x10/0x10
[   79.906539][ T5517]  ? _printk+0xd5/0x120
[   79.910712][ T5517]  ? __init_begin+0x41000/0x41000
[   79.915748][ T5517]  ? vscnprintf+0x5d/0x90
[   79.920103][ T5517]  panic+0x349/0x880
[   79.924020][ T5517]  ? __warn+0x177/0x4e0
[   79.928182][ T5517]  ? __pfx_panic+0x10/0x10
[   79.932600][ T5517]  ? show_trace_log_lvl+0x3b2/0x410
[   79.937831][ T5517]  __warn+0x34b/0x4e0
[   79.941873][ T5517]  ? kcov_remote_start+0x542/0x7d0
[   79.947005][ T5517]  report_bug+0x2b3/0x500
[   79.951343][ T5517]  ? kcov_remote_start+0x542/0x7d0
[   79.956465][ T5517]  handle_bug+0x60/0x90
[   79.960625][ T5517]  exc_invalid_op+0x1a/0x50
[   79.965134][ T5517]  asm_exc_invalid_op+0x1a/0x20
[   79.970013][ T5517] RIP: 0010:kcov_remote_start+0x542/0x7d0
[   79.975737][ T5517] Code: 4c 89 ff be 03 00 00 00 e8 8b dc 27 03 e9 04 fb ff ff e8 91 51 31 0a 41 f7 c6 00 02 00 00 0f 84 f2 fa ff ff e9 7f fc ff ff 90 <0f> 0b 90 e8 c6 6e 31 0a 89 c0 48 c7 c7 c0 d4 02 00 48 03 3c c5 50
[   79.995359][ T5517] RSP: 0018:ffffc900155c7210 EFLAGS: 00010002
[   80.001427][ T5517] RAX: 0000000080000200 RBX: ffff888027d08000 RCX: 0000000000000002
[   80.009407][ T5517] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c6100e0
[   80.017378][ T5517] RBP: 0000000000000000 R08: ffffffff942c986f R09: 1ffffffff285930d
[   80.025354][ T5517] R10: dffffc0000000000 R11: fffffbfff285930e R12: ffffffff8194f0f7
[   80.033329][ T5517] R13: ffff88802d11c140 R14: 0000000000000246 R15: ffff8880b862d4c0
[   80.041314][ T5517]  ? kcov_remote_start+0x97/0x7d0
[   80.046373][ T5517]  ? mark_lock+0x9a/0x360
[   80.050715][ T5517]  ieee80211_rx_list+0x799/0x3780
[   80.055740][ T5517]  ? __lock_acquire+0x1384/0x2050
[   80.060794][ T5517]  ? __pfx_ieee80211_rx_list+0x10/0x10
[   80.066297][ T5517]  ? __pfx_lock_acquire+0x10/0x10
[   80.071346][ T5517]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   80.077337][ T5517]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   80.083669][ T5517]  ? ieee80211_rx_napi+0xd6/0x3c0
[   80.088700][ T5517]  ieee80211_rx_napi+0x18a/0x3c0
[   80.093656][ T5517]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   80.099980][ T5517]  ? __local_bh_disable_ip+0x179/0x220
[   80.105484][ T5517]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[   80.110964][ T5517]  ? skb_dequeue+0x113/0x150
[   80.115570][ T5517]  ieee80211_handle_queued_frames+0xe7/0x1e0
[   80.121574][ T5517]  ? ieee80211_stop_device+0x2a/0xf0
[   80.126859][ T5517]  ieee80211_stop_device+0x3f/0xf0
[   80.132003][ T5517]  ieee80211_do_stop+0x1cb5/0x2300
[   80.137141][ T5517]  ? __pfx_ieee80211_do_stop+0x10/0x10
[   80.142613][ T5517]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[   80.148522][ T5517]  ? lockdep_hardirqs_on+0x99/0x150
[   80.153751][ T5517]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   80.160106][ T5517]  ? wiphy_work_cancel+0x1f0/0x3e0
[   80.165226][ T5517]  ieee80211_stop+0x436/0x4a0
[   80.169906][ T5517]  ? __pfx_ieee80211_stop+0x10/0x10
[   80.175124][ T5517]  __dev_close_many+0x219/0x300
[   80.179983][ T5517]  ? __pfx___dev_close_many+0x10/0x10
[   80.185381][ T5517]  ? __mutex_trylock_common+0x183/0x2e0
[   80.190947][ T5517]  ? __pfx___might_resched+0x10/0x10
[   80.196245][ T5517]  dev_close_many+0x24e/0x4c0
[   80.200934][ T5517]  ? rcu_is_watching+0x15/0xb0
[   80.205723][ T5517]  ? __pfx_dev_close_many+0x10/0x10
[   80.210937][ T5517]  ? trace_contention_end+0x3c/0x120
[   80.216252][ T5517]  ? __mutex_lock+0x2ef/0xd70
[   80.220960][ T5517]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   80.226963][ T5517]  dev_close+0x1c0/0x2c0
[   80.231234][ T5517]  ? cfg80211_rfkill_set_block+0x1e/0x50
[   80.236885][ T5517]  ? __pfx_dev_close+0x10/0x10
[   80.241675][ T5517]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[   80.247594][ T5517]  cfg80211_shutdown_all_interfaces+0xbb/0x1d0
[   80.253845][ T5517]  cfg80211_rfkill_set_block+0x2d/0x50
[   80.259329][ T5517]  ? __pfx_cfg80211_rfkill_set_block+0x10/0x10
[   80.265483][ T5517]  rfkill_set_block+0x1f1/0x440
[   80.270348][ T5517]  rfkill_fop_write+0x5b8/0x790
[   80.275221][ T5517]  ? end_current_label_crit_section+0x151/0x180
[   80.281477][ T5517]  ? __pfx_rfkill_fop_write+0x10/0x10
[   80.286869][ T5517]  ? bpf_lsm_file_permission+0x9/0x10
[   80.292257][ T5517]  ? security_file_permission+0x74/0x280
[   80.297914][ T5517]  ? rw_verify_area+0x1c3/0x6f0
[   80.302799][ T5517]  ? __pfx_rfkill_fop_write+0x10/0x10
[   80.308194][ T5517]  vfs_write+0x29c/0xc90
[   80.312455][ T5517]  ? __pfx_vfs_write+0x10/0x10
[   80.317214][ T5517]  ? __fget_files+0x29/0x470
[   80.321846][ T5517]  ? __fget_files+0x3f3/0x470
[   80.326513][ T5517]  ? __fget_files+0x29/0x470
[   80.331116][ T5517]  ? fdget_pos+0x19a/0x320
[   80.335549][ T5517]  ksys_write+0x183/0x2b0
[   80.339892][ T5517]  ? __pfx_ksys_write+0x10/0x10
[   80.344745][ T5517]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[   80.351359][ T5517]  ? lockdep_hardirqs_on+0x99/0x150
[   80.356552][ T5517]  __do_fast_syscall_32+0xb4/0x110
[   80.361687][ T5517]  ? exc_page_fault+0x590/0x8c0
[   80.366555][ T5517]  do_fast_syscall_32+0x34/0x80
[   80.371432][ T5517]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   80.377768][ T5517] RIP: 0023:0xf7f37579
[   80.381876][ T5517] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   80.401519][ T5517] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[   80.409961][ T5517] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000080
[   80.417973][ T5517] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000
[   80.425957][ T5517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   80.433952][ T5517] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   80.441925][ T5517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   80.449915][ T5517]  </TASK>
[   80.453238][ T5517] Kernel Offset: disabled
[   80.457608][ T5517] Rebooting in 86400 seconds..