last executing test programs:

2m50.491094917s ago: executing program 3 (id=170):
r0 = socket$inet(0x2, 0xa, 0x5)
sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)

2m49.381171031s ago: executing program 3 (id=172):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x3c}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r7)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan1\x00', <r9=>0x0})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r8, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0)

2m48.880511781s ago: executing program 3 (id=175):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000)
sendmsg$can_bcm(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, &(0x7f0000000680)=@pppoe={0x18, 0x0, {0x3, @local}}, 0x80)
r1 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000fd40df6b3619896100000000000000000000000000ac1f3c78cd6ff2c5d8b67e64f0dedd2d2011ac1962d270d95091"], 0x48)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x800)
recvmmsg(r1, 0x0, 0x0, 0xfc0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480), 0xba, 0x280802)
syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')

2m46.954159815s ago: executing program 3 (id=178):
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x3ffffff}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0x25c}}, 0x0)

2m45.911642376s ago: executing program 3 (id=181):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000013c0), 0x2)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000001440)={0x30, 0x5, 0x0, {0x0, 0x2, 0x150ca1a0, 0xdc93e6a}}, 0x30)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x7, 0x242, 0x3, 0x4, 0x0, 0x71, 0xfffffff8, 0x7, 0x1, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x174, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0xb83, 0x7, 0x5, 0x7ff, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x1, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x1, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x800, 0x1ef, 0x800005, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x4, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0xff, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x2, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x1, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0xfffffffc, 0x7, 0x2, 0x4, 0x0, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x5, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2m45.718060089s ago: executing program 3 (id=183):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8018, 0x0)

2m30.172379567s ago: executing program 32 (id=183):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8018, 0x0)

27.646298792s ago: executing program 0 (id=459):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mount$binderfs(0x0, 0x0, &(0x7f0000002400), 0x4000, 0x0)
sendmmsg$unix(r3, &(0x7f0000001a40)=[{{&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000001940), 0x0, 0x90}}], 0x1, 0x40)
ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x4e, 0x0}}], 0x1, 0x40000)

26.23888102s ago: executing program 0 (id=460):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
write$binfmt_script(r4, &(0x7f0000000600), 0xfec8)
recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x5, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

21.038646689s ago: executing program 0 (id=467):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$UHID_INPUT(r2, &(0x7f00000025c0)={0xfc, {"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", 0x1000}}, 0x1006)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000000701020000000000000000000000000900010073797a300000000008000540000000038f30b8f358e7a1ebd5d170f4f67fac5df54d3d1bb281d6579b0fe65b5efb9900cb3b6ecc380208e07e79035c57116cf9376086c56a604d1aae395b7a65fb507fb9cfd1aa954539c8519182f17d48163cd248662eb94eb510d222eb66c8cfa05ec1d1897779f427ecca83e98baecf7567f037f28799579c167de20fa344e2"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r5 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r5)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000a40))
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000200)={0x1})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x11, 0x3, r6, 0x1, 0x6d, 0x6, @remote}, 0x14)

20.898545389s ago: executing program 1 (id=469):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x28143, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_rr_get_interval(0x0, &(0x7f0000000240))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000ba300000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
close_range(r3, 0xffffffffffffffff, 0x0)

14.986836289s ago: executing program 0 (id=477):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
write$binfmt_script(r4, &(0x7f0000000600), 0xfec8)
recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x5, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

14.678090098s ago: executing program 1 (id=478):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x78000100)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004400000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)
close(r2)

13.683834807s ago: executing program 1 (id=479):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe(0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, 0x0, 0x0)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = dup(r3)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
write$P9_RSTATFS(r6, &(0x7f00000001c0)={0x43, 0x9, 0x1, {0x4b0, 0xa3, 0x4, 0x8000000000000001, 0xb6, 0x0, 0x1, 0x401, 0x7fff}}, 0x43)

10.899493633s ago: executing program 2 (id=484):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r1, 0x0, 0x30}, &(0x7f00000000c0)=0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getrusage(0x0, &(0x7f00000003c0))

10.805632249s ago: executing program 4 (id=485):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000001ac0)=ANY=[@ANYBLOB], 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2037)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x7, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)
writev(r4, &(0x7f00000006c0)=[{&(0x7f00000005c0)="23ccaba1401d36d3d03d682ba47a8c2e0c5a5a5ed9131f73330e9e04295317ff97adac5549724581ef66f12aab8672659fb2b2b1f47546616b1e6f350a5bab3e49c7e52d6451f736cc13dbaa0792b73eda52278a769ee442ffd157512eae59b17dadfcb93af0a51fef7706dcd70f7d06e5409833e8cd578e5f73661abedacab46e02d12fbe7c3d9e54f068e26a20d338e6cc8316f6ad768c9c3d411dd535434386ccf1a972f547595740eac2b50108a4c2a264267ca6a64dd01a046829db5183c4d36dd8df2ad10f92dacfdebeca046a", 0xd0}], 0x1)
close(r2)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x240, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
ioctl$NBD_DISCONNECT(r4, 0xab08)
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0)

10.34354003s ago: executing program 2 (id=486):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="eb5974e8be09e387ab90b1569489ca152362cb44b1952d7a95d4e348dd0a24fdb5fbd2dc1f3ddba2f36dd88226e8ab7b58818a357b167f7671a57d73594a9107053189f3589268715fdfc605ce82d5053ca0394bd3ef6ccbdf534483f3c1d4f9ff65fb1863033c0b1caa3693e04df2ec20276f06deaacfacc12fcba68de29bde9a2ea9ba457ea429c807659f0625a5eb47b1ec44b0aa784104dfb70463705ab40799c86b2eb83432002fec798f0bdef9e3129d6fd289675b3398fa9f922160f45eade8d18b595a0fc72cd89e7ce9112fdd0994337ac9fdf91c43f4551bc2e594a4ed9151fe9bdfa478ce6047b4a2f3a6e1a2c24151a1", 0xf6}, {&(0x7f0000000480)}, {&(0x7f00000005c0)="fc79ea35d065b9ab3476a577889a62263064a4f9365db73c96a2400dc5e53ae73f60b7254d3278aa75b0a65755395ca9de7ecf950a347b85775287a2fae0c370b5829b030c08d2571c104a342e4d1050b0422de409d7cb8a94b330cc7d125cf20f442f12e5cfc948aa28", 0x6a}, {&(0x7f0000000900)="ea47bc5a315cb2157880ce304c1abce402167fd4bedfea9bbcc20cf6de0308c26ade72d36e2f01eb0e20a7b506b3c21e39c540cd8c10f12cd3bcd024240058198d7b5ab8b13a401e0ef540e84c344fc9ef33cc7a03b39d275822c8042bbac5b0553282a5931d458a28949a6540655dff4ccb62c28b165fe9fee71d10d88000ec0db22336ed6b6db60d2d766d0f736e", 0x8f}, {&(0x7f00000009c0)="8465f974b3e02d242b46ef902928809312de5adb9fc3efedeb11c99628cfeec4a7918887ba379f68ffaf7e88157baf179d50cd31c4faacfbaf87f7c30c6ffbed1bf304c2b3e2cf5e9351d8c861e3072379e113511a8199ffffe0c171582cbc39f2c1c2c7b4dae0d4dc7b2c27d23175e14043b0b5ab1f0441460fa161766205fc4522e3c5dd17b8f61bb2ddea83db1750", 0x90}], 0x5, 0x0, 0x0, 0x4000014}], 0x1, 0x4c885)
recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/165, 0xa5}], 0x2}, 0x4}], 0x1, 0x400101c3, 0x0)

10.172783836s ago: executing program 2 (id=487):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x28143, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sched_rr_get_interval(0x0, &(0x7f0000000240))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000ba300000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
close_range(r3, 0xffffffffffffffff, 0x0)

9.725935568s ago: executing program 0 (id=488):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x2a}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000b2b75b2f001000010a0000000000000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006d61637365630000"], 0x48}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000280)=<r4=>0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
timer_delete(r4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
flock(0xffffffffffffffff, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500030000000c001680080001"], 0x38}}, 0x10)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)

9.498337971s ago: executing program 4 (id=489):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
shmget(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x73ae, 0x0, 0x8})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r2, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xc7a, 0x9, 0x33524742, 0x3, 0x2, [{0x1, 0x3ff}, {0x0, 0xffffffff}, {0x816}, {0x8, 0xffffff49}, {0xe, 0x6}, {0xb3, 0x2}, {0x6, 0x401}, {0x9, 0xe}], 0x1, 0x1, 0x3, 0x2, 0x6}})

7.670611805s ago: executing program 4 (id=490):
accept(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040)
r6 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

6.393278538s ago: executing program 4 (id=491):
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000100))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
unshare(0x2040400)
r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(r2, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
unshare(0x22020400)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x4000001)
inotify_add_watch(r3, &(0x7f0000000000)='./file0/bus\x00', 0x5000402)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300100000b060500000000000000000000000004080009400000000114000880100007800c00148008000140ac14140b64000880100007800c00148008000140ac1414bb100007800c0018400000000000000080100007800c0001800800014064010100100007800a001100ffffffffffff0000100007800c0018400000000000000001100007800a0011000000000000000000780008801c0007801800168014000240ff010000000000000000000000000001100007800c00018008000140ffffffff1800078014001700626f6e645f736c6176655f31000000000c00078008000840000000020c000780060005404e2200"], 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000400009002bbd7000fddbdf250200000004001f00080001"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
getpid()
setns(0xffffffffffffffff, 0x24020000)
r5 = syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0)=<r6=>0x0, &(0x7f0000000240)=<r7=>0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/126, 0x7e}], 0x1})
io_uring_enter(r5, 0x847ba, 0x79c, 0xe, 0x0, 0x0)

6.306379306s ago: executing program 1 (id=492):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)

4.749229279s ago: executing program 1 (id=493):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x1946, &(0x7f0000000a80)={0x0, 0xa951, 0x10, 0x0, 0x22e})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$inet6(r3, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x17, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5ce1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b330600000000000000fd6700"}, 0xd8)
close_range(r2, 0xffffffffffffffff, 0x0)

3.103094116s ago: executing program 0 (id=494):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x1946, &(0x7f0000000a80)={0x0, 0xa951, 0x10, 0x0, 0x22e})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$inet6(r3, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
close_range(r2, 0xffffffffffffffff, 0x0)

2.481010443s ago: executing program 1 (id=495):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x32)

2.042182872s ago: executing program 2 (id=496):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="eb5974e8be09e387ab90b1569489ca152362cb44b1952d7a95d4e348dd0a24fdb5fbd2dc1f3ddba2f36dd88226e8ab7b58818a357b167f7671a57d73594a9107053189f3589268715fdfc605ce82d5053ca0394bd3ef6ccbdf534483f3c1d4f9ff65fb1863033c0b1caa3693e04df2ec20276f06deaacfacc12fcba68de29bde9a2ea9ba457ea429c807659f0625a5eb47b1ec44b0aa784104dfb70463705ab40799c86b2eb83432002fec798f0bdef9e3129d6fd289675b3398fa9f922160f45eade8d18b595a0fc72cd89e7ce9112fdd0994337ac9fdf91c43f4551bc2e594a4ed9151fe9bdfa478ce6047b4a2f3a6e1a2c24151a1", 0xf6}, {&(0x7f0000000480)}, {&(0x7f00000005c0)="fc79ea35d065b9ab3476a577889a62263064a4f9365db73c96a2400dc5e53ae73f60b7254d3278aa75b0a65755395ca9de7ecf950a347b85775287a2fae0c370b5829b030c08d2571c104a342e4d1050b0422de409d7cb8a94b330cc7d125cf20f442f12e5cfc948aa28", 0x6a}, {&(0x7f0000000900)="ea47bc5a315cb2157880ce304c1abce402167fd4bedfea9bbcc20cf6de0308c26ade72d36e2f01eb0e20a7b506b3c21e39c540cd8c10f12cd3bcd024240058198d7b5ab8b13a401e0ef540e84c344fc9ef33cc7a03b39d275822c8042bbac5b0553282a5931d458a28949a6540655dff4ccb62c28b165fe9fee71d10d88000ec0db22336ed6b6db60d2d766d0f736e", 0x8f}, {&(0x7f00000009c0)="8465f974b3e02d242b46ef902928809312de5adb9fc3efedeb11c99628cfeec4a7918887ba379f68ffaf7e88157baf179d50cd31c4faacfbaf87f7c30c6ffbed1bf304c2b3e2cf5e9351d8c861e3072379e113511a8199ffffe0c171582cbc39f2c1c2c7b4dae0d4dc7b2c27d23175e14043b0b5ab1f0441460fa161766205fc4522e3c5dd17b8f61bb2ddea83db1750", 0x90}], 0x5, 0x0, 0x0, 0x4000014}], 0x1, 0x4c885)
recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/165, 0xa5}], 0x2}, 0x4}], 0x1, 0x400101c3, 0x0)

1.990936542s ago: executing program 4 (id=497):
ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f00001859c0)={0x1, &(0x7f0000000040)=[{0xa000002, 0x0, 0x0, 0xfffeffff, 0x1ff}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000067930000000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000100))
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)={0x1c, 0x2d, 0x1, 0xfffffffc, 0x80, "", [@typed={0x8, 0x104, 0x0, 0x0, @uid}, @nested={0x4, 0x1}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4}, 0x5)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.847510246s ago: executing program 2 (id=498):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000001ac0)=ANY=[@ANYBLOB], 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2037)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x7, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)
writev(r4, &(0x7f00000006c0)=[{&(0x7f00000005c0)="23ccaba1401d36d3d03d682ba47a8c2e0c5a5a5ed9131f73330e9e04295317ff97adac5549724581ef66f12aab8672659fb2b2b1f47546616b1e6f350a5bab3e49c7e52d6451f736cc13dbaa0792b73eda52278a769ee442ffd157512eae59b17dadfcb93af0a51fef7706dcd70f7d06e5409833e8cd578e5f73661abedacab46e02d12fbe7c3d9e54f068e26a20d338e6cc8316f6ad768c9c3d411dd535434386ccf1a972f547595740eac2b50108a4c2a264267ca6a64dd01a046829db5183c4d36dd8df2ad10f92dacfdebeca046a", 0xd0}], 0x1)
close(r2)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x240, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
ioctl$NBD_DISCONNECT(r4, 0xab08)
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0)

345.082944ms ago: executing program 4 (id=499):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xba, 0x2)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r2, 0x90004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x3, 0x4, {0x0, @pix_mp={0x3ff, 0x2, 0x30314247, 0x6, 0xa, [{0x9, 0xff}, {0x10000, 0x1}, {0x9, 0x7}, {0x101}, {0x6, 0x8001}, {0x3, 0xe}, {0x5, 0xe}, {0x5, 0x4}], 0xe, 0xcc, 0x6, 0x1, 0x4}}})

0s ago: executing program 2 (id=500):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000500)={0x0, 0x2, 0x3, [0x5, 0xe8, 0x0]}, 0xe)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts.
[   80.278533][ T5826] cgroup: Unknown subsys name 'net'
[   80.554329][ T5826] cgroup: Unknown subsys name 'cpuset'
[   80.600322][ T5826] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   82.396840][ T5826] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.374123][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.387205][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.388696][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.392097][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.393408][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.394029][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.394500][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.401580][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.406821][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.407948][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.408100][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.409228][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.409378][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.410202][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.442385][   T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.443668][   T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.462590][   T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.463362][   T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.506481][   T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.508133][   T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   86.508832][   T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.511990][   T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.512759][   T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.528300][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.530036][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.687431][   T44] cfg80211: failed to load regulatory.db
[   87.372069][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   87.496897][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   87.600980][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   87.605719][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   87.689166][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   88.168422][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.169018][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.169347][ T5853] bridge_slave_0: entered allmulticast mode
[   88.173065][ T5853] bridge_slave_0: entered promiscuous mode
[   88.282744][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.282883][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.283065][ T5853] bridge_slave_1: entered allmulticast mode
[   88.286366][ T5853] bridge_slave_1: entered promiscuous mode
[   88.452422][ T5846] Bluetooth: hci2: command tx timeout
[   88.519900][ T5846] Bluetooth: hci0: command tx timeout
[   88.519921][ T5158] Bluetooth: hci3: command tx timeout
[   88.599934][ T5158] Bluetooth: hci4: command tx timeout
[   88.600181][ T5846] Bluetooth: hci1: command tx timeout
[   88.779028][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.779450][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.779625][ T5839] bridge_slave_0: entered allmulticast mode
[   88.786413][ T5839] bridge_slave_0: entered promiscuous mode
[   88.872936][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.873072][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.873247][ T5857] bridge_slave_0: entered allmulticast mode
[   88.876047][ T5857] bridge_slave_0: entered promiscuous mode
[   88.878639][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.878770][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.878946][ T5849] bridge_slave_0: entered allmulticast mode
[   88.883897][ T5849] bridge_slave_0: entered promiscuous mode
[   88.990744][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.990900][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.991023][ T5839] bridge_slave_1: entered allmulticast mode
[   88.992474][ T5839] bridge_slave_1: entered promiscuous mode
[   88.997095][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.997305][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.997486][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.997642][ T5857] bridge_slave_1: entered allmulticast mode
[   88.999327][ T5857] bridge_slave_1: entered promiscuous mode
[   89.011449][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.011578][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.011750][ T5849] bridge_slave_1: entered allmulticast mode
[   89.014335][ T5849] bridge_slave_1: entered promiscuous mode
[   89.154150][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.320532][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.320635][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.320741][ T5840] bridge_slave_0: entered allmulticast mode
[   89.322206][ T5840] bridge_slave_0: entered promiscuous mode
[   89.602741][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.602884][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.603388][ T5840] bridge_slave_1: entered allmulticast mode
[   89.606193][ T5840] bridge_slave_1: entered promiscuous mode
[   89.665837][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.782096][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.787037][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.854599][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.857100][ T5853] team0: Port device team_slave_0 added
[   89.864378][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.867475][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.032054][ T5853] team0: Port device team_slave_1 added
[   90.177897][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.455103][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.457556][ T5839] team0: Port device team_slave_0 added
[   90.519888][ T5846] Bluetooth: hci2: command tx timeout
[   90.538648][ T5857] team0: Port device team_slave_0 added
[   90.547291][ T5849] team0: Port device team_slave_0 added
[   90.599994][ T5158] Bluetooth: hci3: command tx timeout
[   90.600081][ T5846] Bluetooth: hci0: command tx timeout
[   90.613738][ T5839] team0: Port device team_slave_1 added
[   90.615462][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.615482][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.615506][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.631059][ T5857] team0: Port device team_slave_1 added
[   90.634777][ T5849] team0: Port device team_slave_1 added
[   90.689919][ T5158] Bluetooth: hci4: command tx timeout
[   90.690010][ T5846] Bluetooth: hci1: command tx timeout
[   90.804996][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.805007][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.805021][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.172871][ T5840] team0: Port device team_slave_0 added
[   91.384858][ T5840] team0: Port device team_slave_1 added
[   91.385752][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.385761][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.385775][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.389382][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.389391][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.389404][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.393536][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.393548][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.393572][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.561957][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.561973][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.561998][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.568102][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.568111][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.568125][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.569007][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.569014][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.569028][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.790582][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.790598][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.790622][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.879034][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.879046][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.879060][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.891831][ T5853] hsr_slave_0: entered promiscuous mode
[   91.893500][ T5853] hsr_slave_1: entered promiscuous mode
[   92.465457][ T5839] hsr_slave_0: entered promiscuous mode
[   92.466266][ T5839] hsr_slave_1: entered promiscuous mode
[   92.466843][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[   92.466919][ T5839] Cannot create hsr debugfs directory
[   92.498079][ T5857] hsr_slave_0: entered promiscuous mode
[   92.498830][ T5857] hsr_slave_1: entered promiscuous mode
[   92.499501][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   92.499522][ T5857] Cannot create hsr debugfs directory
[   92.595503][ T5849] hsr_slave_0: entered promiscuous mode
[   92.596270][ T5849] hsr_slave_1: entered promiscuous mode
[   92.596811][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   92.596828][ T5849] Cannot create hsr debugfs directory
[   92.600090][ T5846] Bluetooth: hci2: command tx timeout
[   92.680034][ T5846] Bluetooth: hci0: command tx timeout
[   92.680065][ T5846] Bluetooth: hci3: command tx timeout
[   92.759955][ T5158] Bluetooth: hci4: command tx timeout
[   92.760112][ T5846] Bluetooth: hci1: command tx timeout
[   92.781941][ T5840] hsr_slave_0: entered promiscuous mode
[   92.783292][ T5840] hsr_slave_1: entered promiscuous mode
[   92.784283][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   92.784306][ T5840] Cannot create hsr debugfs directory
[   94.407763][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   94.449136][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   94.505108][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   94.532276][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   94.653496][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.676620][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.686893][ T5846] Bluetooth: hci2: command tx timeout
[   94.716371][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.770228][ T5846] Bluetooth: hci3: command tx timeout
[   94.770259][ T5846] Bluetooth: hci0: command tx timeout
[   94.771644][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.840438][ T5158] Bluetooth: hci1: command tx timeout
[   94.840467][ T5158] Bluetooth: hci4: command tx timeout
[   94.914481][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   94.954766][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   94.993495][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   95.054524][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   95.231063][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   95.285132][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   95.346401][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   95.394639][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   95.527005][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   95.582793][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   95.634183][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   95.687753][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.691867][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   95.809514][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.820305][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   95.875974][ T1410] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.876458][ T1410] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.926388][ T1410] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.926511][ T1410] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.958876][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   96.004660][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.025755][ T1533] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.025876][ T1533] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.075638][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.075743][ T1498] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.167328][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   96.215075][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.215209][ T1498] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.267152][  T149] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.267314][  T149] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.291811][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.451319][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.458499][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   96.538374][ T1410] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.538521][ T1410] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.564853][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   96.598880][ T1410] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.599024][ T1410] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.613437][ T1410] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.613650][ T1410] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.664791][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.664939][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.930846][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.170203][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.238272][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.497766][ T5839] veth0_vlan: entered promiscuous mode
[   97.588699][ T5839] veth1_vlan: entered promiscuous mode
[   97.652176][ T5857] veth0_vlan: entered promiscuous mode
[   97.701997][ T5857] veth1_vlan: entered promiscuous mode
[   97.726226][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.818691][ T5839] veth0_macvtap: entered promiscuous mode
[   97.837187][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.853315][ T5839] veth1_macvtap: entered promiscuous mode
[   97.905933][ T5857] veth0_macvtap: entered promiscuous mode
[   97.931463][ T5857] veth1_macvtap: entered promiscuous mode
[   97.971399][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.013092][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.035919][ T5853] veth0_vlan: entered promiscuous mode
[   98.039703][ T5840] veth0_vlan: entered promiscuous mode
[   98.068001][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.074652][ T1482] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.097522][ T1482] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.103939][ T1482] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.118995][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.126342][ T1482] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.143568][ T5853] veth1_vlan: entered promiscuous mode
[   98.208268][ T5840] veth1_vlan: entered promiscuous mode
[   98.224055][ T5849] veth0_vlan: entered promiscuous mode
[   98.232677][ T1482] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.250666][ T1482] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.318040][ T1482] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.332687][ T1482] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.459335][ T5849] veth1_vlan: entered promiscuous mode
[   98.579598][ T1533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.579622][ T1533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.708005][ T5853] veth0_macvtap: entered promiscuous mode
[   98.742332][ T5840] veth0_macvtap: entered promiscuous mode
[   98.773846][ T1498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.773864][ T1498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.776051][ T5853] veth1_macvtap: entered promiscuous mode
[   98.810724][ T5840] veth1_macvtap: entered promiscuous mode
[   98.879999][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.880017][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.913950][ T5849] veth0_macvtap: entered promiscuous mode
[   98.963734][ T5849] veth1_macvtap: entered promiscuous mode
[   98.990617][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.993651][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.017705][ T1498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.017723][ T1498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.037209][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.052050][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.152327][ T1533] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.161347][ T1533] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.194836][ T1533] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.205937][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.206232][ T1533] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.224079][ T1498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.232851][ T1498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.242024][ T1498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.296188][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.296462][ T1498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.357837][ T5959] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   99.588210][ T1410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.615771][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.679920][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.699321][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.053672][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.053690][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.224898][ T1498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.224917][ T1498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.448013][ T1533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.448033][ T1533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.554728][ T1533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.554748][ T1533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.775142][ T1482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.775162][ T1482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.984873][ T1533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.984891][ T1533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.269790][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  101.279783][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  101.289761][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  101.384422][ T5975] syz.4.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  101.386018][ T5975] ptrace attach of "./syz-executor exec"[5853] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  103.819896][ T5990] trusted_key: syz.3.4 sent an empty control message without MSG_MORE.
[  107.050109][ T6024] Zero length message leads to an empty skb
[  107.086610][ T6029] input: syz1 as /devices/virtual/input/input5
[  108.072267][ T6041] fuse: Bad value for 'fd'
[  108.104909][ T6018] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  108.105081][ T6018] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  108.352981][ T6018] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  108.563906][ T6049] mmap: syz.3.26 (6049) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  108.603144][ T6018] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  108.603270][ T6018] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  108.901311][ T6018] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  109.283334][ T6018] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  109.283425][ T6018] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  109.309892][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  109.331203][ T5158] Bluetooth: hci4: command 0x0405 tx timeout
[  109.412198][ T6018] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  109.575220][ T6018] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  109.575362][ T6018] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  109.651417][ T6018] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  109.727468][ T6018] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  109.727589][ T6018] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  109.880027][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[  110.291123][ T6018] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  110.671275][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'.
[  110.889468][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout
[  111.320393][ T5158] Bluetooth: hci2: command 0x0c1a tx timeout
[  111.666359][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout
[  112.375392][ T5158] Bluetooth: hci4: command 0x0405 tx timeout
[  112.375426][ T5158] Bluetooth: hci0: command 0x0c1a tx timeout
[  112.489787][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  112.519794][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  113.127817][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout
[  113.588999][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout
[  113.721214][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[  113.722201][ T6097] fuse: Bad value for 'fd'
[  114.444663][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[  114.444697][ T5846] Bluetooth: hci4: command 0x0405 tx timeout
[  114.709781][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  115.209854][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout
[  115.520616][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'.
[  115.731198][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout
[  115.802591][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout
[  116.460406][ T6122] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  116.462565][ T6122] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  116.462757][ T6122] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  116.462928][ T6122] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  116.466756][ T6122] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  118.522008][ T5158] Bluetooth: hci4: command 0x0405 tx timeout
[  118.522053][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout
[  118.522078][ T5158] Bluetooth: hci2: command 0x0c1a tx timeout
[  118.522103][ T5158] Bluetooth: hci1: command 0x0c1a tx timeout
[  118.522129][ T5158] Bluetooth: hci0: command 0x0c1a tx timeout
[  118.526023][ T6159] syz.3.58 uses obsolete (PF_INET,SOCK_PACKET)
[  119.486377][ T6181] tipc: Started in network mode
[  119.486399][ T6181] tipc: Node identity aaa16ca57ba, cluster identity 4711
[  119.486927][ T6181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.507302][ T6184] syzkaller0: entered promiscuous mode
[  119.507331][ T6184] syzkaller0: entered allmulticast mode
[  119.579794][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  119.667727][ T6176] tipc: Resetting bearer <eth:syzkaller0>
[  119.727850][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'.
[  119.765082][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  119.905119][ T6175] tipc: Resetting bearer <eth:syzkaller0>
[  120.204133][ T6175] tipc: Disabling bearer <eth:syzkaller0>
[  120.229823][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  120.692749][    C1] vkms_vblank_simulate: vblank timer overrun
[  120.718619][ T5846] Bluetooth: hci4: command 0x0405 tx timeout
[  121.054157][    C1] vkms_vblank_simulate: vblank timer overrun
[  121.315206][    C1] vkms_vblank_simulate: vblank timer overrun
[  121.798477][    C1] vkms_vblank_simulate: vblank timer overrun
[  122.030758][ T6199] netlink: 52 bytes leftover after parsing attributes in process `syz.3.70'.
[  122.186385][ T6201] tipc: Enabled bearer <udp:syz2>, priority 10
[  122.219365][ T6201] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  122.263054][ T6201] tipc: Enabled bearer <udp:syz0>, priority 10
[  123.222607][ T5922] tipc: Node number set to 3506531493
[  123.437469][    C1] vkms_vblank_simulate: vblank timer overrun
[  126.010856][ T6246] netlink: 'syz.1.83': attribute type 10 has an invalid length.
[  126.013102][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.018600][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.073205][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.073301][ T6246] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.074035][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.074348][ T6246] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.134476][ T6246] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  127.005554][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'.
[  127.152814][ T6261] tipc: Started in network mode
[  127.152832][ T6261] tipc: Node identity ac14140f, cluster identity 4711
[  127.153017][ T6261] tipc: New replicast peer: 255.255.255.255
[  127.153782][ T6261] tipc: Enabled bearer <udp:syz2>, priority 10
[  127.528738][    C0] vkms_vblank_simulate: vblank timer overrun
[  128.081951][    C0] vkms_vblank_simulate: vblank timer overrun
[  128.310265][ T5929] tipc: Node number set to 2886997007
[  129.058700][    C0] vkms_vblank_simulate: vblank timer overrun
[  129.341375][    C0] vkms_vblank_simulate: vblank timer overrun
[  129.961760][    C0] vkms_vblank_simulate: vblank timer overrun
[  130.085128][    C0] vkms_vblank_simulate: vblank timer overrun
[  130.583362][    C0] vkms_vblank_simulate: vblank timer overrun
[  132.775152][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  132.775252][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  133.833085][ T6312] syz.3.102 (6312) used greatest stack depth: 18648 bytes left
[  135.426741][ T6329] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  145.903456][ T6449] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  152.418240][ T6498] block nbd4: shutting down sockets
[  154.779953][    C1] vkms_vblank_simulate: vblank timer overrun
[  155.527522][    C1] vkms_vblank_simulate: vblank timer overrun
[  156.288389][    C1] vkms_vblank_simulate: vblank timer overrun
[  156.985189][    C1] vkms_vblank_simulate: vblank timer overrun
[  157.053108][    C1] vkms_vblank_simulate: vblank timer overrun
[  157.774907][    C1] vkms_vblank_simulate: vblank timer overrun
[  161.493893][ T6587] block nbd3: Attempted send on invalid socket
[  161.493975][ T6587] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.494640][ T6587] block nbd3: Attempted send on invalid socket
[  161.494657][ T6587] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.307959][ T6593] fuse: root generation should be zero
[  171.934518][ T6650] team0: Port device vlan2 added
[  175.327462][ T5158] Bluetooth: hci4: command 0x0405 tx timeout
[  179.383826][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  179.481530][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  179.498256][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  179.520510][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  179.524078][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  180.178969][ T6704] syz.0.218 (6704) used greatest stack depth: 17080 bytes left
[  181.320065][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout
[  181.461897][ T6710] tipc: Started in network mode
[  181.461926][ T6710] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  181.462193][ T6710] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  181.462848][ T6710] tipc: Enabled bearer <udp:syz0>, priority 10
[  181.740952][ T5158] Bluetooth: hci5: command tx timeout
[  182.499483][   T44] tipc: Node number set to 1
[  183.944461][ T5158] Bluetooth: hci5: command tx timeout
[  184.202408][  T990] kernel write not supported for file /150/gid_map (pid: 990 comm: kworker/0:2)
[  185.400184][   T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  185.601657][   T31] usb 5-1: Using ep0 maxpacket: 32
[  185.611849][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  185.616741][   T31] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  185.616766][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.616787][   T31] usb 5-1: Product: syz
[  185.616801][   T31] usb 5-1: Manufacturer: syz
[  185.616815][   T31] usb 5-1: SerialNumber: syz
[  185.659557][   T31] usb 5-1: config 0 descriptor??
[  185.905391][   T31] usb 5-1: no audio or video endpoints found
[  185.960141][ T5158] Bluetooth: hci5: command tx timeout
[  186.658059][ T1101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.747130][ T6706] chnl_net:caif_netlink_parms(): no params data found
[  187.567856][ T1101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.636443][ T6779] =======================================================
[  187.636443][ T6779] WARNING: The mand mount option has been deprecated and
[  187.636443][ T6779]          and is ignored by this kernel. Remove the mand
[  187.636443][ T6779]          option from the mount to silence this warning.
[  187.636443][ T6779] =======================================================
[  187.844141][   T44] usb 5-1: USB disconnect, device number 2
[  187.889888][ T5831] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  188.019847][ T5831] usb 2-1: device descriptor read/64, error -71
[  188.041726][ T5158] Bluetooth: hci5: command tx timeout
[  188.456712][ T5831] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  188.938227][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.974592][    C0] vkms_vblank_simulate: vblank timer overrun
[  189.468338][    C0] vkms_vblank_simulate: vblank timer overrun
[  189.579885][ T5831] usb 2-1: device descriptor read/64, error -71
[  189.794136][    C0] vkms_vblank_simulate: vblank timer overrun
[  189.823728][ T5831] usb usb2-port1: attempt power cycle
[  190.467083][    C0] vkms_vblank_simulate: vblank timer overrun
[  191.897179][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'.
[  192.181947][ T1101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.231881][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.232780][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.233558][ T6706] bridge_slave_0: entered allmulticast mode
[  192.297780][ T6706] bridge_slave_0: entered promiscuous mode
[  192.306754][ T6810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.244'.
[  192.322353][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.322438][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.322591][ T6706] bridge_slave_1: entered allmulticast mode
[  192.352659][ T6706] bridge_slave_1: entered promiscuous mode
[  192.824524][ T1101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.147863][ T6706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.212284][ T6706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.710110][    C1] vkms_vblank_simulate: vblank timer overrun
[  193.922545][    C1] vkms_vblank_simulate: vblank timer overrun
[  194.028805][    C1] vkms_vblank_simulate: vblank timer overrun
[  194.128641][    C1] vkms_vblank_simulate: vblank timer overrun
[  194.255259][    C1] vkms_vblank_simulate: vblank timer overrun
[  194.399790][    C1] vkms_vblank_simulate: vblank timer overrun
[  194.790722][    C1] vkms_vblank_simulate: vblank timer overrun
[  194.799058][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  194.799133][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  195.440780][    C1] vkms_vblank_simulate: vblank timer overrun
[  196.042181][ T6706] team0: Port device team_slave_0 added
[  196.530927][ T6706] team0: Port device team_slave_1 added
[  196.557819][ T6858] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  196.637108][    C1] vkms_vblank_simulate: vblank timer overrun
[  197.215745][    C1] vkms_vblank_simulate: vblank timer overrun
[  197.902330][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.902692][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.906651][ T6867] bridge0: entered allmulticast mode
[  198.079105][ T6706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.079121][ T6706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.079144][ T6706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.181800][ T6706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.181816][ T6706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.181841][ T6706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.628900][ T1101] bridge_slave_1: left allmulticast mode
[  198.636585][ T1101] bridge_slave_1: left promiscuous mode
[  198.648687][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.825999][ T1101] bridge_slave_0: left allmulticast mode
[  198.826032][ T1101] bridge_slave_0: left promiscuous mode
[  198.826471][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.146097][    C0] vkms_vblank_simulate: vblank timer overrun
[  200.691501][    C0] vkms_vblank_simulate: vblank timer overrun
[  201.093507][    C0] vkms_vblank_simulate: vblank timer overrun
[  201.948989][    C0] vkms_vblank_simulate: vblank timer overrun
[  202.522573][    C0] vkms_vblank_simulate: vblank timer overrun
[  202.757128][    C0] vkms_vblank_simulate: vblank timer overrun
[  203.330614][    C0] vkms_vblank_simulate: vblank timer overrun
[  203.651552][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.711007][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.743849][ T1101] bond0 (unregistering): Released all slaves
[  204.321589][ T6706] hsr_slave_0: entered promiscuous mode
[  204.323281][ T6706] hsr_slave_1: entered promiscuous mode
[  204.327940][ T6706] debugfs: 'hsr0' already exists in 'hsr'
[  204.327964][ T6706] Cannot create hsr debugfs directory
[  205.191544][ T1101] tipc: Disabling bearer <udp:syz2>
[  205.191911][ T1101] tipc: Left network mode
[  206.388963][    C0] vkms_vblank_simulate: vblank timer overrun
[  206.522705][    C0] vkms_vblank_simulate: vblank timer overrun
[  207.342111][    C0] vkms_vblank_simulate: vblank timer overrun
[  207.521704][    C0] vkms_vblank_simulate: vblank timer overrun
[  207.669690][    C0] vkms_vblank_simulate: vblank timer overrun
[  207.949954][    C0] vkms_vblank_simulate: vblank timer overrun
[  208.567338][    C0] vkms_vblank_simulate: vblank timer overrun
[  208.950494][    C0] vkms_vblank_simulate: vblank timer overrun
[  209.159692][    C0] vkms_vblank_simulate: vblank timer overrun
[  209.792995][    C0] vkms_vblank_simulate: vblank timer overrun
[  215.475105][ T6997] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe
[  220.203386][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'.
[  220.203408][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'.
[  220.203433][ T7018] netlink: 'syz.4.295': attribute type 18 has an invalid length.
[  222.364357][ T1101] hsr_slave_0: left promiscuous mode
[  223.415329][ T1101] hsr_slave_1: left promiscuous mode
[  223.419064][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.419115][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.492252][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.492281][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.717108][ T1101] veth1_macvtap: left promiscuous mode
[  223.717441][ T1101] veth0_macvtap: left promiscuous mode
[  223.718239][ T1101] veth1_vlan: left promiscuous mode
[  223.718637][ T1101] veth0_vlan: left promiscuous mode
[  225.251714][ T5831] kernel write not supported for file /235/gid_map (pid: 5831 comm: kworker/1:3)
[  226.746062][ T7066] block nbd1: shutting down sockets
[  228.610652][ T1101] team0 (unregistering): Port device team_slave_1 removed
[  228.805702][ T1101] team0 (unregistering): Port device team_slave_0 removed
[  231.387485][    C0] vkms_vblank_simulate: vblank timer overrun
[  232.339442][ T7088] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  232.339652][ T7088] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  232.340761][ T7088] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  232.345982][ T7088] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  232.346060][ T7088] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  232.678252][ T7088] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  233.292440][ T6706] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  233.395936][ T6706] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  233.570928][ T6706] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  233.646572][    T9] kernel write not supported for file /225/gid_map (pid: 9 comm: kworker/0:0)
[  233.722958][ T6706] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  234.369162][ T5845] Bluetooth: hci4: command 0x0405 tx timeout
[  234.377946][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout
[  234.391947][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[  234.395330][ T5158] Bluetooth: hci5: command 0x0405 tx timeout
[  234.925901][ T7125] syz_tun: entered promiscuous mode
[  235.004822][ T7125] syz_tun: left promiscuous mode
[  236.763069][ T5158] Bluetooth: hci5: command 0x0405 tx timeout
[  239.045951][ T5158] Bluetooth: hci5: command 0x0405 tx timeout
[  240.258029][   T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  240.298119][   T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  240.308894][   T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  240.320939][   T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  240.332385][   T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  242.519944][ T5158] Bluetooth: hci2: command tx timeout
[  243.696951][    C1] vkms_vblank_simulate: vblank timer overrun
[  244.046819][    C1] vkms_vblank_simulate: vblank timer overrun
[  244.881664][    C1] vkms_vblank_simulate: vblank timer overrun
[  244.910092][ T5158] Bluetooth: hci2: command tx timeout
[  245.130519][    C1] vkms_vblank_simulate: vblank timer overrun
[  245.272539][    C1] vkms_vblank_simulate: vblank timer overrun
[  245.810012][    C1] vkms_vblank_simulate: vblank timer overrun
[  246.922088][ T5158] Bluetooth: hci2: command tx timeout
[  246.936819][ T7240] ceph: No mds server is up or the cluster is laggy
[  247.342221][    C1] vkms_vblank_simulate: vblank timer overrun
[  249.052500][ T5158] Bluetooth: hci2: command tx timeout
[  254.119910][ T6985] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  254.213576][ T7290] netlink: 'syz.4.356': attribute type 1 has an invalid length.
[  254.271177][ T6985] usb 3-1: Using ep0 maxpacket: 32
[  254.290480][ T6985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  254.297746][ T6985] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  254.297774][ T6985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.297795][ T6985] usb 3-1: Product: syz
[  254.297810][ T6985] usb 3-1: Manufacturer: syz
[  254.297824][ T6985] usb 3-1: SerialNumber: syz
[  254.409506][ T6985] usb 3-1: config 0 descriptor??
[  254.444912][ T6985] usb 3-1: no audio or video endpoints found
[  254.455644][ T7195] chnl_net:caif_netlink_parms(): no params data found
[  254.697769][   T10] usb 3-1: USB disconnect, device number 2
[  255.660718][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  255.660791][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  256.023994][ T7335] tipc: Started in network mode
[  256.024026][ T7335] tipc: Node identity 7f000001, cluster identity 4711
[  256.037837][ T7335] tipc: Enabled bearer <udp:syz2>, priority 10
[  257.340747][   T31] tipc: Node number set to 2130706433
[  259.384904][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.385063][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.385275][ T7195] bridge_slave_0: entered allmulticast mode
[  259.405118][ T7195] bridge_slave_0: entered promiscuous mode
[  259.461078][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.461220][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.461444][ T7195] bridge_slave_1: entered allmulticast mode
[  259.485025][ T7195] bridge_slave_1: entered promiscuous mode
[  259.661646][ T1498] bridge_slave_1: left allmulticast mode
[  259.661681][ T1498] bridge_slave_1: left promiscuous mode
[  259.662713][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.362545][ T1498] bridge_slave_0: left allmulticast mode
[  261.362579][ T1498] bridge_slave_0: left promiscuous mode
[  261.362916][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.981965][ T7382] netlink: 'syz.1.375': attribute type 1 has an invalid length.
[  265.751166][ T1498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  265.984899][ T1498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.316164][ T1498] bond0 (unregistering): Released all slaves
[  267.208471][ T7195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.219922][ T7195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.429956][ T1498] hsr_slave_0: left promiscuous mode
[  267.470165][ T1498] hsr_slave_1: left promiscuous mode
[  267.471149][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.678935][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_1
[  270.633039][ T1498] team0 (unregistering): Port device team_slave_1 removed
[  271.223377][ T1498] team0 (unregistering): Port device team_slave_0 removed
[  271.809667][ T7444] netlink: 'syz.4.394': attribute type 1 has an invalid length.
[  273.784405][ T7195] team0: Port device team_slave_0 added
[  273.883899][ T7195] team0: Port device team_slave_1 added
[  274.438548][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.438559][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.438573][ T7195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.470872][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.470887][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.470903][ T7195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.022603][ T7195] hsr_slave_0: entered promiscuous mode
[  276.023928][ T7195] hsr_slave_1: entered promiscuous mode
[  276.024890][ T7195] debugfs: 'hsr0' already exists in 'hsr'
[  276.024913][ T7195] Cannot create hsr debugfs directory
[  281.052156][ T7195] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  281.221642][ T7195] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  282.420832][ T7195] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  282.612926][ T7195] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  284.165206][ T7195] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.247775][ T7195] 8021q: adding VLAN 0 to HW filter on device team0
[  284.265610][ T6546] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.268224][ T6546] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.457117][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.460007][ T1498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.284902][ T7195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.556422][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'.
[  291.771553][ T7195] veth0_vlan: entered promiscuous mode
[  292.922605][ T7195] veth1_vlan: entered promiscuous mode
[  293.175909][ T7195] veth0_macvtap: entered promiscuous mode
[  293.199680][ T7195] veth1_macvtap: entered promiscuous mode
[  293.454345][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.494038][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.584757][ T1387] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.612345][ T1387] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.753853][ T1387] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.775189][ T1527] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.983538][ T1527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.983559][ T1527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.607630][   T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  301.630609][   T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  301.637530][   T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  301.648839][   T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.650826][   T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  304.156594][   T59] Bluetooth: hci5: command tx timeout
[  306.200492][   T59] Bluetooth: hci5: command tx timeout
[  308.279916][   T59] Bluetooth: hci5: command tx timeout
[  308.581019][ T7760] chnl_net:caif_netlink_parms(): no params data found
[  310.459844][   T59] Bluetooth: hci5: command tx timeout
[  311.536496][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.649883][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  311.779952][    T9] usb 5-1: device descriptor read/64, error -71
[  312.061922][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  312.209874][    T9] usb 5-1: device descriptor read/64, error -71
[  312.399238][    C1] vkms_vblank_simulate: vblank timer overrun
[  312.413756][    T9] usb usb5-port1: attempt power cycle
[  312.647678][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.740847][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.740996][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.741232][ T7760] bridge_slave_0: entered allmulticast mode
[  312.757650][ T7760] bridge_slave_0: entered promiscuous mode
[  312.792307][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.792565][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.792707][ T7760] bridge_slave_1: entered allmulticast mode
[  312.794355][ T7760] bridge_slave_1: entered promiscuous mode
[  312.799986][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  312.833905][    T9] usb 5-1: device descriptor read/8, error -71
[  313.203601][    C1] vkms_vblank_simulate: vblank timer overrun
[  313.382168][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  313.415064][    T9] usb 5-1: device descriptor read/8, error -71
[  313.520304][    T9] usb usb5-port1: unable to enumerate USB device
[  314.694520][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.897452][ T7760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.062913][    C1] vkms_vblank_simulate: vblank timer overrun
[  315.105746][ T7760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.609681][    C1] vkms_vblank_simulate: vblank timer overrun
[  316.497010][    C1] vkms_vblank_simulate: vblank timer overrun
[  317.088025][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  317.088193][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  317.212737][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.574283][ T7760] team0: Port device team_slave_0 added
[  317.591375][ T7760] team0: Port device team_slave_1 added
[  320.540790][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.540805][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.540829][ T7760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.561086][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.561101][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.561126][ T7760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.566686][ T7899] netlink: 'syz.0.488': attribute type 1 has an invalid length.
[  321.087616][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'.
[  322.029046][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.491'.
[  322.541463][ T7760] hsr_slave_0: entered promiscuous mode
[  322.542783][ T7760] hsr_slave_1: entered promiscuous mode
[  322.580292][ T7760] debugfs: 'hsr0' already exists in 'hsr'
[  322.580319][ T7760] Cannot create hsr debugfs directory
[  324.515395][   T12] bridge_slave_1: left allmulticast mode
[  324.515427][   T12] bridge_slave_1: left promiscuous mode
[  324.515704][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.824820][   T12] bridge_slave_0: left allmulticast mode
[  324.824853][   T12] bridge_slave_0: left promiscuous mode
[  324.825105][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.762114][ T5158] ==================================================================
[  327.762136][ T5158] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6e4/0x1040
[  327.762187][ T5158] Read of size 8 at addr ffff88802b99e500 by task kworker/u9:1/5158
[  327.762206][ T5158] 
[  327.762235][ T5158] CPU: 1 UID: 0 PID: 5158 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  327.762261][ T5158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  327.762276][ T5158] Workqueue: hci3 hci_rx_work
[  327.762313][ T5158] Call Trace:
[  327.762321][ T5158]  <TASK>
[  327.762331][ T5158]  dump_stack_lvl+0x189/0x250
[  327.762368][ T5158]  ? __kasan_check_byte+0x12/0x40
[  327.762397][ T5158]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.762427][ T5158]  ? lock_release+0x4b/0x3e0
[  327.762457][ T5158]  ? __virt_addr_valid+0x4a5/0x5c0
[  327.762478][ T5158]  print_report+0xca/0x240
[  327.762505][ T5158]  ? l2cap_connect_cfm+0x6e4/0x1040
[  327.762535][ T5158]  kasan_report+0x118/0x150
[  327.762563][ T5158]  ? l2cap_connect_cfm+0x6e4/0x1040
[  327.762597][ T5158]  l2cap_connect_cfm+0x6e4/0x1040
[  327.762633][ T5158]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  327.762666][ T5158]  ? mutex_lock_nested+0x154/0x1d0
[  327.762689][ T5158]  ? hci_connect_cfm+0x2c/0x140
[  327.762716][ T5158]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  327.762747][ T5158]  hci_connect_cfm+0x92/0x140
[  327.762775][ T5158]  le_conn_complete_evt+0xcd3/0x1220
[  327.762810][ T5158]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  327.762841][ T5158]  ? irqentry_exit+0x74/0x90
[  327.762871][ T5158]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.762900][ T5158]  ? skb_pull_data+0xfb/0x200
[  327.762926][ T5158]  hci_le_conn_complete_evt+0x187/0x450
[  327.762958][ T5158]  hci_event_packet+0x78f/0x1200
[  327.762983][ T5158]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  327.763011][ T5158]  ? __pfx_hci_event_packet+0x10/0x10
[  327.763035][ T5158]  ? __pfx_migrate_enable+0x10/0x10
[  327.763061][ T5158]  ? __rcu_read_unlock+0x84/0xe0
[  327.763087][ T5158]  ? hci_send_to_monitor+0xe2/0x570
[  327.763119][ T5158]  hci_rx_work+0x46a/0xe80
[  327.763146][ T5158]  ? process_scheduled_works+0x9ef/0x17b0
[  327.763173][ T5158]  process_scheduled_works+0xade/0x17b0
[  327.763212][ T5158]  ? __pfx_process_scheduled_works+0x10/0x10
[  327.763245][ T5158]  worker_thread+0x8a0/0xda0
[  327.763283][ T5158]  kthread+0x70e/0x8a0
[  327.763314][ T5158]  ? __pfx_worker_thread+0x10/0x10
[  327.763345][ T5158]  ? __pfx_kthread+0x10/0x10
[  327.763378][ T5158]  ? __pfx_kthread+0x10/0x10
[  327.763408][ T5158]  ret_from_fork+0x3f9/0x770
[  327.763436][ T5158]  ? __pfx_ret_from_fork+0x10/0x10
[  327.763466][ T5158]  ? __switch_to_asm+0x39/0x70
[  327.763485][ T5158]  ? __switch_to_asm+0x33/0x70
[  327.763504][ T5158]  ? __pfx_kthread+0x10/0x10
[  327.763535][ T5158]  ret_from_fork_asm+0x1a/0x30
[  327.763562][ T5158]  </TASK>
[  327.763570][ T5158] 
[  327.763574][ T5158] Allocated by task 5158:
[  327.763584][ T5158]  kasan_save_track+0x3e/0x80
[  327.763606][ T5158]  __kasan_kmalloc+0x93/0xb0
[  327.763628][ T5158]  __kmalloc_cache_noprof+0x1a8/0x320
[  327.763655][ T5158]  l2cap_chan_create+0x50/0x780
[  327.763673][ T5158]  l2cap_sock_new_connection_cb+0x182/0x2b0
[  327.763694][ T5158]  l2cap_connect_cfm+0x377/0x1040
[  327.763722][ T5158]  hci_connect_cfm+0x92/0x140
[  327.763746][ T5158]  le_conn_complete_evt+0xcd3/0x1220
[  327.763773][ T5158]  hci_le_conn_complete_evt+0x187/0x450
[  327.763798][ T5158]  hci_event_packet+0x78f/0x1200
[  327.763818][ T5158]  hci_rx_work+0x46a/0xe80
[  327.763837][ T5158]  process_scheduled_works+0xade/0x17b0
[  327.763860][ T5158]  worker_thread+0x8a0/0xda0
[  327.763883][ T5158]  kthread+0x70e/0x8a0
[  327.763910][ T5158]  ret_from_fork+0x3f9/0x770
[  327.763933][ T5158]  ret_from_fork_asm+0x1a/0x30
[  327.763964][ T5158] 
[  327.763968][ T5158] Freed by task 7966:
[  327.763977][ T5158]  kasan_save_track+0x3e/0x80
[  327.763998][ T5158]  kasan_save_free_info+0x46/0x50
[  327.764016][ T5158]  __kasan_slab_free+0x5b/0x80
[  327.764038][ T5158]  kfree+0x195/0x550
[  327.764061][ T5158]  l2cap_sock_cleanup_listen+0xea/0x3e0
[  327.764079][ T5158]  l2cap_sock_release+0x6a/0x230
[  327.764109][ T5158]  sock_close+0xc3/0x240
[  327.764130][ T5158]  __fput+0x45b/0xa80
[  327.764146][ T5158]  task_work_run+0x1d4/0x260
[  327.764163][ T5158]  exit_to_user_mode_loop+0xec/0x110
[  327.764188][ T5158]  do_syscall_64+0x2bd/0x3b0
[  327.764204][ T5158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.764223][ T5158] 
[  327.764228][ T5158] The buggy address belongs to the object at ffff88802b99e000
[  327.764228][ T5158]  which belongs to the cache kmalloc-2k of size 2048
[  327.764245][ T5158] The buggy address is located 1280 bytes inside of
[  327.764245][ T5158]  freed 2048-byte region [ffff88802b99e000, ffff88802b99e800)
[  327.764268][ T5158] 
[  327.764273][ T5158] The buggy address belongs to the physical page:
[  327.764292][ T5158] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b998
[  327.764315][ T5158] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  327.764333][ T5158] flags: 0x80000000000040(head|node=0|zone=1)
[  327.764359][ T5158] page_type: f5(slab)
[  327.764379][ T5158] raw: 0080000000000040 ffff888019842000 dead000000000100 dead000000000122
[  327.764397][ T5158] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  327.764417][ T5158] head: 0080000000000040 ffff888019842000 dead000000000100 dead000000000122
[  327.764435][ T5158] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  327.764454][ T5158] head: 0080000000000003 ffffea0000ae6601 00000000ffffffff 00000000ffffffff
[  327.764471][ T5158] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  327.764483][ T5158] page dumped because: kasan: bad access detected
[  327.764496][ T5158] page_owner tracks the page as allocated
[  327.764503][ T5158] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5839, tgid 5839 (syz-executor), ts 99080849121, free_ts 98962416613
[  327.764540][ T5158]  post_alloc_hook+0x240/0x2a0
[  327.764567][ T5158]  get_page_from_freelist+0x2119/0x21b0
[  327.764586][ T5158]  __alloc_frozen_pages_noprof+0x181/0x370
[  327.764605][ T5158]  alloc_pages_mpol+0xd1/0x380
[  327.764631][ T5158]  allocate_slab+0x8a/0x370
[  327.764649][ T5158]  ___slab_alloc+0x8d1/0xdc0
[  327.764677][ T5158]  __kmalloc_cache_noprof+0xe6/0x320
[  327.764702][ T5158]  psi_cgroup_alloc+0x56/0x200
[  327.764721][ T5158]  cgroup_mkdir+0x4a9/0xe50
[  327.764738][ T5158]  kernfs_iop_mkdir+0x20e/0x350
[  327.764759][ T5158]  vfs_mkdir+0x306/0x510
[  327.764780][ T5158]  do_mkdirat+0x247/0x590
[  327.764801][ T5158]  __x64_sys_mkdirat+0x87/0xa0
[  327.764822][ T5158]  do_syscall_64+0xfa/0x3b0
[  327.764838][ T5158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.764856][ T5158] page last free pid 5839 tgid 5839 stack trace:
[  327.764868][ T5158]  __free_frozen_pages+0xb59/0xce0
[  327.764895][ T5158]  __slab_free+0x2db/0x390
[  327.764913][ T5158]  qlist_free_all+0x97/0x140
[  327.764933][ T5158]  kasan_quarantine_reduce+0x148/0x160
[  327.764954][ T5158]  __kasan_slab_alloc+0x22/0x80
[  327.764977][ T5158]  kmem_cache_alloc_noprof+0x143/0x310
[  327.765002][ T5158]  sched_create_group+0x1d/0x80
[  327.765021][ T5158]  cpu_cgroup_css_alloc+0xe/0x40
[  327.765042][ T5158]  cgroup_apply_control_enable+0x3d4/0xab0
[  327.765060][ T5158]  cgroup_mkdir+0xc40/0xe50
[  327.765077][ T5158]  kernfs_iop_mkdir+0x20e/0x350
[  327.765097][ T5158]  vfs_mkdir+0x306/0x510
[  327.765117][ T5158]  do_mkdirat+0x247/0x590
[  327.765138][ T5158]  __x64_sys_mkdirat+0x87/0xa0
[  327.765159][ T5158]  do_syscall_64+0xfa/0x3b0
[  327.765175][ T5158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.765193][ T5158] 
[  327.765198][ T5158] Memory state around the buggy address:
[  327.765208][ T5158]  ffff88802b99e400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  327.765223][ T5158]  ffff88802b99e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  327.765236][ T5158] >ffff88802b99e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  327.765247][ T5158]                    ^
[  327.765257][ T5158]  ffff88802b99e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  327.765271][ T5158]  ffff88802b99e600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  327.765281][ T5158] ==================================================================
[  327.765301][ T5158] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  327.765316][ T5158] CPU: 1 UID: 0 PID: 5158 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  327.765345][ T5158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  327.765359][ T5158] Workqueue: hci3 hci_rx_work
[  327.765382][ T5158] Call Trace:
[  327.765390][ T5158]  <TASK>
[  327.765398][ T5158]  dump_stack_lvl+0x99/0x250
[  327.765429][ T5158]  ? __asan_memcpy+0x40/0x70
[  327.765450][ T5158]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.765481][ T5158]  ? __pfx__printk+0x10/0x10
[  327.765508][ T5158]  vpanic+0x281/0x750
[  327.765538][ T5158]  ? __pfx_print_hex_dump+0x10/0x10
[  327.765569][ T5158]  ? __pfx_vpanic+0x10/0x10
[  327.765605][ T5158]  panic+0xb9/0xc0
[  327.765634][ T5158]  ? __pfx_panic+0x10/0x10
[  327.765661][ T5158]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  327.765695][ T5158]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  327.765729][ T5158]  ? l2cap_connect_cfm+0x6e4/0x1040
[  327.765760][ T5158]  check_panic_on_warn+0x89/0xb0
[  327.765781][ T5158]  ? l2cap_connect_cfm+0x6e4/0x1040
[  327.765811][ T5158]  end_report+0x78/0x160
[  327.765837][ T5158]  kasan_report+0x129/0x150
[  327.765865][ T5158]  ? l2cap_connect_cfm+0x6e4/0x1040
[  327.765900][ T5158]  l2cap_connect_cfm+0x6e4/0x1040
[  327.765935][ T5158]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  327.765968][ T5158]  ? mutex_lock_nested+0x154/0x1d0
[  327.765992][ T5158]  ? hci_connect_cfm+0x2c/0x140
[  327.766019][ T5158]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  327.766050][ T5158]  hci_connect_cfm+0x92/0x140
[  327.766078][ T5158]  le_conn_complete_evt+0xcd3/0x1220
[  327.766113][ T5158]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  327.766144][ T5158]  ? irqentry_exit+0x74/0x90
[  327.766173][ T5158]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.766203][ T5158]  ? skb_pull_data+0xfb/0x200
[  327.766228][ T5158]  hci_le_conn_complete_evt+0x187/0x450
[  327.766260][ T5158]  hci_event_packet+0x78f/0x1200
[  327.766285][ T5158]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  327.766313][ T5158]  ? __pfx_hci_event_packet+0x10/0x10
[  327.766341][ T5158]  ? __pfx_migrate_enable+0x10/0x10
[  327.766367][ T5158]  ? __rcu_read_unlock+0x84/0xe0
[  327.766393][ T5158]  ? hci_send_to_monitor+0xe2/0x570
[  327.766425][ T5158]  hci_rx_work+0x46a/0xe80
[  327.766452][ T5158]  ? process_scheduled_works+0x9ef/0x17b0
[  327.766479][ T5158]  process_scheduled_works+0xade/0x17b0
[  327.766518][ T5158]  ? __pfx_process_scheduled_works+0x10/0x10
[  327.766551][ T5158]  worker_thread+0x8a0/0xda0
[  327.766589][ T5158]  kthread+0x70e/0x8a0
[  327.766621][ T5158]  ? __pfx_worker_thread+0x10/0x10
[  327.766647][ T5158]  ? __pfx_kthread+0x10/0x10
[  327.766679][ T5158]  ? __pfx_kthread+0x10/0x10
[  327.766710][ T5158]  ret_from_fork+0x3f9/0x770
[  327.766737][ T5158]  ? __pfx_ret_from_fork+0x10/0x10
[  327.766766][ T5158]  ? __switch_to_asm+0x39/0x70
[  327.766785][ T5158]  ? __switch_to_asm+0x33/0x70
[  327.766804][ T5158]  ? __pfx_kthread+0x10/0x10
[  327.766835][ T5158]  ret_from_fork_asm+0x1a/0x30
[  327.766862][ T5158]  </TASK>
[  327.767099][ T5158] Kernel Offset: disabled