last executing test programs:

7m54.017794741s ago: executing program 1 (id=6):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r1, 0x0, 0x0)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8)
write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000540), 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0)

7m52.386373709s ago: executing program 1 (id=7):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54)
clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x200000000048c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x8, 0x1000000085, 0x100, 0x101, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0xec4, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000001b0000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10)
process_mrelease(0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x80000, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
bind$unix(r3, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fsopen(&(0x7f0000000240)='jfs\x00', 0x1)

7m47.356028407s ago: executing program 1 (id=10):
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19], 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1015130004000000e5ffffff080000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x8000000000000000, 0x0, 0x0, 0x1}, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x400000, 0x4000, 0x90000}, 0x0, 0x0, &(0x7f00000001c0)={0x0})
socket$netlink(0x10, 0x3, 0xf)
syz_emit_ethernet(0x12b, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbba7bbbbbbaaaaa20ffe64a52fd20595ebc1e013f9aaaaaaaa86dd6000000000f53a0000000000000000000000000000000000fe8000000000000000000000000000bb8b009078040000080000000000008000df552380bd5ee3803805b2b840ff7633510a7127ef97ebee66ffffa4ff11d54d792fd5c8aadced82e63839a9ff4e337d327fdb4e1f1e61bc046714f81a9d13e6b4ff31e8c982d7200515d89c33121cc2c03bbe63d645071195a5bbedc2728d85eca4b399bbbf724efef4ad3b1c376ee42a9a053d06008288de03e4799b7fcfa287a0196ab3a42c05006a4ddb69e6ac5a8800ca8f89e551cfdd681b7396b3eb1d4b4c554502fbc97e4f7a918ab42678ac1a7c571e67e4df67c5b568a028f2d30d2d44992c4bcc8903a9f1eb14210769ad4f5f332b7b85b9"], 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x100000000001)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYRES32, @ANYBLOB="001b00f40000000000009fb44c6a209b51dc78af44f5c7cb02069556ba9d28c81bd37c7e225fb2ef8ba0163492cc4dd6f8a45cd11274dc6b1d9460f6889386503537af1fc27da84d0ff59f2b4d6b312183dd5f92cb82e5ffb1a7474bdaa414fd86ea190b3face6261f12054aacba730a2c2f1859ff56ef5618a873635192b4d43a", @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r7, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0)

7m38.919501446s ago: executing program 1 (id=20):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
userfaultfd(0x80001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x3, 0x0, 0x0, 0x0, 0x3}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0xf0, 0x9403, 0x3002, 0xf0, 0x2c0, 0x1d0, 0x3d8, 0x3d8, 0x1d0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x6, 0x48}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x100000, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, 0x0, 0x0, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000680)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x20040)
close_range(r0, 0xffffffffffffffff, 0x0)

7m33.825977565s ago: executing program 1 (id=25):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffd3fff000000000000000085"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='squashfs\x00', 0x30a0080, 0x0)
syz_open_dev$video4linux(&(0x7f0000000500), 0x20, 0x400)
ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000100)={0x1, 0x0, {0x6, 0x291e57e5, 0x2, 0x3}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc0984124, &(0x7f0000000c40))
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r4 = gettid()
process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000005c0)={0x4, <r6=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r6, 0x2031b000)

7m29.662030338s ago: executing program 1 (id=28):
socket$kcm(0x21, 0x2, 0xa)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000530000/0x3000)=nil)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0xfffffffe, 0x0, 0x0, 0xfff, 0xa, "0062ba7d82000000160000000000f738096304"})
r2 = syz_open_pts(0xffffffffffffffff, 0x80)
r3 = dup3(r2, 0xffffffffffffffff, 0x80000)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
open$dir(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000000)={0x200000, 0xa6eb, {<r5=>0xffffffffffffffff}, {0xee01}, 0x2, 0x5})
waitid(0x1, r5, &(0x7f0000000100), 0x80000000, &(0x7f0000000400))
write$tun(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x11)
getdents64(r4, &(0x7f0000000300)=""/152, 0x98)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)

7m11.929143504s ago: executing program 32 (id=28):
socket$kcm(0x21, 0x2, 0xa)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000530000/0x3000)=nil)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0xfffffffe, 0x0, 0x0, 0xfff, 0xa, "0062ba7d82000000160000000000f738096304"})
r2 = syz_open_pts(0xffffffffffffffff, 0x80)
r3 = dup3(r2, 0xffffffffffffffff, 0x80000)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
open$dir(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000000)={0x200000, 0xa6eb, {<r5=>0xffffffffffffffff}, {0xee01}, 0x2, 0x5})
waitid(0x1, r5, &(0x7f0000000100), 0x80000000, &(0x7f0000000400))
write$tun(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x11)
getdents64(r4, &(0x7f0000000300)=""/152, 0x98)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)

6m4.349788257s ago: executing program 3 (id=111):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_io_uring_setup(0x48be, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001180))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x32}, @in6=@loopback, {0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x3501, 0xa, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0x45}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004000}, 0x4810)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x4, 0x20, 0x1}, 0x50)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x24b9, &(0x7f00000011c0)={0x0, 0x7216, 0x40, 0x1, 0x1a3}, &(0x7f0000001140), &(0x7f0000001240))
pread64(r3, &(0x7f0000000080)=""/237, 0xed, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="c1dfb061cd21d3084d94d3540800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, 0x0, 0xc800)

6m4.175499142s ago: executing program 4 (id=112):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102)
dup(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50)
r5 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
write$tcp_congestion(r5, &(0x7f0000000300)='reno\x00', 0x5)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x90}}, 0x0)

6m2.507445642s ago: executing program 0 (id=114):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
vmsplice(r0, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xf0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x84}}, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getrlimit(0xd, &(0x7f0000000180))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189)
r5 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000400)=ANY=[], 0x1df)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x402c00, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0)
close(0xffffffffffffffff)
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15)
unshare(0x8000000)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)

6m1.383154009s ago: executing program 4 (id=116):
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
move_pages(0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$sock(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="5b63392b41febc78767f2c24eb5b020ff1b2de985295fe3c67b1be419eeb1d13daf99fe36f4d8aed1aef9d92bf5d5bbe250c5c01046ad658897799292f678394714da261743da93315daf6fd850c9a9f7b31", 0x52}], 0x1}, 0x8000)
sendto$inet(r5, &(0x7f0000000200)=';', 0x1, 0x20004810, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

6m0.036798842s ago: executing program 3 (id=117):
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x1000, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x0, 0xa, 0x10000}, {0x80}, {}, 0x1, 0x10, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000, 0x0, 0x0, 0x2, 0x6})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2(0x0, 0x84480)
fstat(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001040)="d876dd9087b7e81ee27cb4dd9b27ca83459c4800b98c1d0b60e7d3f7e441ba76e16bbde9b0b14febe201c1041ad25f85e790dbbe12fe67a30182967c38208bb3851a411bbb9689323a67820f614fab63aaa01f75e2c0f6a3a8477956994bbccff5cd890ec989067f1688cde9630bb2d1828d7dc525ecf0869a7d0604cfa278d047850316ddaea7546f2aa289b57a966edcbf758ee90f2af12bf73172ef505da07a0f33b1014d1376020eebb0934e93f3d3638e861a11de107c9801b6d6763a3adfa11acbacdd04c3856c080f00d4f6c956e3d4b0eb12cb176c72ae03b3b0a77677057b135dbd7b9a4306f0590e835b5e3660995de63ae5589b975c7bbcb7c58bce123af0628ce58a6fbdf5866e0370844ce274a4829b0eafb2a2dec6821b5ef05c47d88d614d147eb96d4ac89ed431e3217e0b1fec14513c921917cf15174fccb68d976add4bbfa9b2f4a93cc5a5dac2d5dc9383f693d0b9007eafd5f19839e680117685ae7c68f632b10e04bd107d28f23bd5c0e59a47d8c8ee68d6de2bf3400a520346a46672104ec9f0ae757ce89dd49c6bd36139607891983d1e3c71fc2e3d5dbfabbb634939c81306afe54c3999eda4c4e2461a80ffe5e9b23d9104f497772b20808b7d6759e3eb0793e9377f47435eaae8d7998e6cab04ae2586c6f59d1c6df9c4cd6b7575965b99119352f137d6fb67e0b62c2dc206c123b7ca8df17b2d3c4ecccf29636a80bbff8e20986a1d3c7dd93fe321bb4b6518b241c65bf0c798fbb80dbef8732b2127e4110e5c99ec50b3037a8633b701804cab5dd8e8f3fef8b2b48db9048fa14388581f35955c1b7b266df361f4f4726e34816c0cf753b338b36c1b3bdfb1b335b45b4afcbc1c7e82c8122f12cb87c9dd05a9f24677875e93b0248572358629d98af383a83eb1dbd1e51015440b0a7492e44529cf002f6db716b8266aeb6c9adf13a79e6de7d5a6cf5dd2a16bb207f281426aa0fba21b2e6676b28e6b4c999688b2d3164943d67624f5f0466c7c0301d7e9efd6356208c7cd467588967feefd974d8d63a01d34d15d91fce2d3f85da16dc8cd8862f1f26b460aac692dc9a22fd0f172b7055e81c4dfbcc269ddae3ae0038271d5045bd249bf5748851ce8e440b76d27b216bd2547aa6caca320890fe09dd02a97c2b5d310f1cbc6603802cefb0871a6bae13347295e910f9bc89e5d2a389f0414d6fb202b2db616d080477f642f64baf06f7d7ca095ac58eeb6498f6456147add655aac78c65b56747d2649413627cd48c6775aa8dd9fd0109ac4721843f159089bf70a67686850ee6004b5bd693c210bcea9c3054a4b9aafba3aa46c188ee89937a7cd55b845e3801dd4a839a4904627b079ca0e693c379828b2256284f188b2413c84e0c8273b94acdf8c52cbc79865531effdc643819d6c1f6f77f96d46cc9d59c4b722e1c3cb8461d3225b57377b2d49c8adf0f0aecf283adc98719832f03bbf9f5f8efff3d4de745071dcc0b155b0c83a215a7693f201fab5490456593ae790b5a41b4a331790e96fea53b36e2bee9b3eca90b59ac7d8c65c4d4bc2c287147d2af7565ad5edfc42c09dee6382d24ad40185da806f5f9f13b92e47ce2a5804b6044149c4eb916e72974b08b3a268839fe46fc2ccad5dca83428ca8ee185a631b975535b912d89152965b5a19c108f9ef813868ed65cb2e2557623f1eaa82e03225dfbb9b666d58e6ceeda2173d9e5555326501ecb74f64ca59d863f4e828d9e37d75ebf8dc1a9ceafdcffec777431f0f21755c6d93d809fb7531f3610f06766838cb6f31c5e83c12d91d7933e73dab1aa431acf01bda76a4d10b3681f147255f0cbf155c298573f1d43513aed99794792701aeee046a9caeb46de07bbe14bbd144b6f5c1df1d59f0da8ebddd2c833ccadddb8d2b18605716c376c6e09bf45afdc1f32b4b7c3d9472f9595c62fe32ecfc9978e3128163c8dff0d0d60570d31807f89d7b4f18c12e1d67c4952a495bc3e70a7ef8148f1da9ff6091181b6d2e83e0d0f38c8f32a0dde7630313b349b66da78e3d4e56b2cf62773549e55a5b0e68bbf23403ca5a7dcf961b9a687abda18ab7fc2f3a711a51c1e1dd044ef9b513e3f02ccecab7440f21c96e6d3ae0d964805f9e0b5fe8f9e5c6d41c81ff046801029fb5a80bd16c79e845474bc5b581cbf112988d6018dcc19be669aaa667bd8aa817ffffc5fb382db7b1387b543af46c4ec20ff352e8c5bc10a647fc842c39fdbb5cc7238422975f389563d11a69f213569bcf1afa876f4b2cc978c3fc0499b9dd0171f0cd40e69cc23a391ece0e5bc93e13abb2f3da0aa478710b7af18f5329f28c4c2878e6e76fe82951dd91876b219b523953141f412abbd3666c1afe5530ec898b25c93b3c100709e9c45486374bc9c2bb71a917471b773a34bed5d64a5e33889ed4881444af12331513ad682ca5e26a41ccc47329f99188b4636882d2c2578ef945f4161278c4693ce5b7f15248b3d86fff8b78150e827456174b533b3c7027a4c3b462c18b485d3f669bb00d51e083c81e8571ac8aaf3fb7865a603871fe16e24428d68625a85ad41bb1d3f602efda7cf1dc7d4a9cf801899c603c63ce5fcc47ebec2ef362a70e6646c40b7f490cecd2139117faa14aadc757422970787b8f673e4cb06f9b5e05d6e1f7d33234c481332ef0d92b6d3193357fa0cf4581184ac2c11f2d6f8e964cb62f19cb26e7a3198dfb067d41840e9c9742495fac26f2e0092f14e32c9b2b96622449478181fbba551840d19b8336ca80a0a4e07a82498bb5e6bd2554eb8e70838111c419274acd0171f719880d8f0303eb292e3b44adeaf7cd1bed345816f95d598da1ee96a9620de15a7333bc78350a44f1151fd62984cbec8ece28f2f5f57779da950998d3fe54f31a772223f27d9714b0e6ce761dd2b7cbe8efef6c20cada2ff11801b329fa462cc533384817856f230566f7ea030c9947b9108c6c66567ec47d3990e41dedd797d4d614ca46b380554b2c0c71e8b284edf50d91d2e691e99d0cd3e5718b041cc75729720b81c7a07d49b55dea5cc471092a2906e32e7a0e89ba952b9443184e15a9e4d97024de394a4b43c8d2446a4d021dadcc7a19627da1bc4b62f2b2c1faf3b6742e5954946a5e28e2f16e837dbb2269376e5dbd6fe95eaf00a9b8a5f54eb9b0c7c9cd6c99fb751074ee0ba396e57a58ee797036e0d09562844fd696d73e0bdc5d07f02b7d657847d2d2cb203487c72c86934ac651f95edb3860d9a8e4f67503d5d9902d2aa44d4014e34d2172d2ed175f1644570781448ced8ca0d05faf8c4f12d970f4d52e32b2c3ea694223303a32d7abfcb1447b171457afabb2630c24cfde2f0ed0cc7dca17a876011bc2b19bfa96515d17761a2c15588decf5a0d11a5f91983112ae18440d4545e3887d5835addd5f2a5665d352514fc83dc4d9b65d7674c5fee4b8166eb61e538b508b042a44ad47808e9b150d45ca9cc5bf268dde2a084f1717e0b9bfdb3cb3ee8229f047b4261f8c5f3b8662216b27c5efc69cbc0b84a4afe0f2ef9a1de491c1f378c65de72046500a22b91530376c91253181fbf7aa62881cce2329f50eab42b6900652ef08f823869da1aebfc954de85754cd898b819ca1546f29e4f45baba556ecbb39a58c16810b0bbc601694c2e1a22e4d9f6af6ca5475af2aa62b8223a8bc81cbb69736ae07a423eabe4916a93db40149aad66941421bb997c3c243dd9308e5f8af2e8c125045836485f21415a0f60b5cc032cba53dabe8adb02d3ce9bcfbd7cc9fa3f0db8fbecce196c1ef86fddce9a1d68d62566bfc588e8b94929cb4a6e217f7e02e12c55637c83a8570271693822d90069678e341ee06029423c7588440472dbbbeb35b9018dc683c0ae3ef29ef157613621a143ffa8c0178f55748a60cfc6e50267c319ff8c9a2f3978d4da419e6032b0907b3e436cf458f919b10b62339fa9c4148bea8a7fef6558016e14b193bcc71d525cc7f0ebca91b137e84c40a7b6100705d739fe95a1aef90e60bf94188c7b64162df20c25cc4aff64ffb50fad4db8701f938627f0553eb29eb911c9d3f9187173966defba767ec75c8ac85307312140a15a762b1a64a4ad0dd6be27035360dc88fe4fb895866d426e62cce25ddd2b2961116b5bf317b89f849eeb6f39cbdcd3bff28e1a2f70ed56783a931e08ccf514d2d6bb2aec9d3068f4ec2e5692e14d9d01c1e8c33d943c2e681e341ad41d7f51c68f044e3b05b8a73f3226596e540463fcfdd3d1558b0bd9a426bc4ad49f24c060880727420a1fefcd1a5e40be463baaf15c8b206e42b872c4d96fde6bd31d8a411f065340a2bef5ced8d789406d97e8eb3c7ca44a4b1c1936838814f947d2e699a1884e531d35b97717aed8fca34ab4a6f6ca1998a39630bb01d975f1ffacb1b42040ab1165f3a7808a2136fba4e81af82c61b941f563e9f54559181cc2f200950a240f9e6a4fd395d200153bafe94b0ab69178b969ba6f67633589eaadac223499aefb7ea6efb9608895b1bc547c97ceb87c5e0655dfeaca1067082aa34f47c43a44ccc6041257ea538aa7a8b6338938f49244a718c17e42257a7de185ca1eb2161a1f1b8cb58d78778ef9e6d74a39b5913d8f293dd98742feefa3136893122cf8eaa1eab19a043981f546684d654a27104d90000b4339ab17787fc02c491cc746c007b40699bae42e1182b76c4c7518753df6b379e4fb7b471cebfc2c29832e943dfa7ade1bba583922896c6a8e0487ed91211e7aac8b3e01786eafe1a5a287c0e656a3b7ed1f15954367d624b04d2cf263adaf7a5f1d689bfc64d695690ca6e2b6d1a8b74d75481a06ecd4e3d0445d6cfb1fda201b77bbd212a7db4bb6ff1234b5271a5862c8c016f75e165601c24026a5c4b7c99644a9258842ff64c48c3b54e07cb335086ea3dbda4b014314b2de2219ff3334db6ed2b2b691d8d9f6d4e3bf2fbcb94bc5cf55005c7dd14252430d01ceaf9588cf13f03559ecc71200bb4b10fd30a6e1dd6e162e6e196ef03c4304ab030a22d818124ecc9ffe035d623820d24b2a3d40744825d96e0b610dc94adeb019fd9bf024f1d92848e5a026ce02f41cc368fc7c11242da1908b4000901670f265938576a7bfe10473f718912aee8c9f14e33b2e5a79a58c5236a4eb8c970f02f144996c3aa1e87573af4af3bef16c2345b4506e702de640153cc26e8e44392396f11cb4c083f8d02f0034b7ca79f5e5ab5e3d1fe9929f5abb1f4b15f06de5ec5e4ddab0992dcaa98cf95db307c5e290d1c72abb7126deca6c83e7d78fccb89d1e3262272f0db3fcf3f70df343b9cd0231a86983186140e2d7e231c214f19b7527e92673ab2d329a8a371b8d6496ecbbfd3d4685323fac85e7163133a9cf63b77ef39676cc977e8d3688ccae37f08d4977d91e352ff265c97448b446e69b3cc326e242feceb66d90575f912b2c8b50f8df258a417d9d7968122fbcfa5073a431abeca6c5f354130d44b3e3d312bd0f6ba450452f8ae141e64aec348ddb51feca2f14fe7e67f5812e0c1252edf853ddcf0ab55b33272ed00a082b1b8768c7669a2a092e4559fb65032c1158ebf1ace8772e01df287f28bd1b598b6ab2bc52679716b9c8d99b17a417c96af0e0c8882ecc3301f5b7cfaeb31e01632e0df034b8564e714189c8d9b2cb2f332950d436bf6f6eb6e9bf9c6727bae9d8daee47a116b8120bc8850ac443638aa33df8b1273650ac4241893c7b4429f8908d1d4fb4cd8280b506ecd9db5524d8d68b05cfd52454243238aed5607358c847cbd16116229748bb1df9a3f2a51c5b4d12ab1bca4a6c7fd02e08ce23b6ba1e2891e37e298d2f9864be49656dd2c344e931cda5ab94917242ce743419827126b3b4202627681275c7285d41c9add1e45e4996c60c3449f45c6562b68ddeff296d201c38d713e7cca6a57034f04718efb851e99a6cd439f316754f69879d058e6c21e8f272af4e0aa38876e8602d3112721c959138e17c7a41d8234340a4064e6e468d87c78b2010dc6e3069a82426cd4c56dd0f6c680e1a9eefb1a7af19d807f1a1b7951d5a56608b7bba43954746bb1e80a5684d86b2164f2ba227aa2f0e82d5b93e569703849e86f2daa70714d123465394e332459f59ab707803a8a5c1a8c0be1ac278723286965957bc896d774fd63b1f9b2e18543fb23e266ae4e58d0e9d1f27acb74f72459643d935f0be40e129a5f67a5ae58a5ceef9e08901f3c9d9761ceb9d1953139508b99b1ba296c909e351fc20a370dfeb93fc485fb793121a98953031f2cf5b2c375b2419242e264eca984c9799cfe31d46e8131dae686948aca2b26d4eae701699ec78a38c84d1c9724f44a601de43ae4fd313582a46782d46fff7e79003109168b04028d46eb018915c3ee1659695d56c0f855f39a23c51d8d3cf9475f6820748d439bd1cb235e960ed93548d8478683fb3ead2f0b0a0d225c14cf7cfd49d7bdf28b6c9dbb1e86983c671b685633686944eb2796a152634415453c99b9884109b353941c673d4f4d211924181e7d0f96045e5ced44447402ab482c0a1e63a60083748faae5870203c85c05ed307fbb4872f80547a2aa6e17e46f5ab37ed664f63cbc3cbee36dca0647becc0b16d8745ddb78f0b8efb6f00c5b4c302434ab98af98d904b04c3fe6f3d33b0fa8c5f4f2b5a402957dfee3c5ed0ae167624b96847cb905d80f071ad428a6a585df1e010b2e51e1082360dbb957da2756c0e14440ac6ad14ed060c3ad666edb6041bd9f77cf6db76cdf7c3981d48bd8515f55d534c7aec4475965291e4a3b27e3c68aff9988c984db14a1230a20b49e00603db8f2bf0b69c5af031c322fecb6285e93c5edf53f26c076dd1f056a0015e4941a57412f4c4a85a9d90d2629b1e53b03199b322f05cece85b9e7bc69689b6bfabd8486c652a897b162aff55d0c01cc05763fc798bba6ee319acdb55e96aec675267a672a751c687794b4dfd35032a37f0d73701bfdbdf6c71afef9d5e7f4e5532f3e41d9f25641869064b354be55fe12aa77a6bc92fe8852081d28b8e54e07849fe94e57f33762a0620df6604d728615baf165741bc195f84ba5b236f65f761b11575296c8029b3290f079ef779c318dcde0fe8071f0ccc702816c36b971fb8d377063ec82af4aafc2e1252b585551ee5d86a9a249e09e2de0f9b3e97662fbcdae8c69384f54bca462bdbb2e14fefe1e45779deff040ec6a1785f1a12f6a2f288f9cdb79f941b30661dfa91a2eee2b3dfe77ae0127a23e20cc9e2ab466aa2d9a6b390fc073a09f99a9187dcb439ee3434143078105ffd8a3bc70d25272db7dc94f4dfcb9242743aa502065f1c5b1161da98fe3ab159cb309c9f8f8f4188dcc5d084e7d246e91da5e04694b1aef0b0d03d03ed546384f4485ca05665f9dea5f1c7551782a3021a96dda0b20f114eb3c37035a32c04ff87f044bd024dbcfa82605eb1ee7a1305880796515abf9f4c26a8df485b42d0fb8ba8be881fdd53ba7c165396590965a76a01906e9744072c919c182292507ee172c489387ce300cbfb89c85e20363a822efa548b421598ffb4119cfb9bbba1958771c7f1b1595556bbfe062862408c13e114c2dc4eb5f7d90acedc8066c49316621303fe3b335f27f4e8013323f5cc56ffca34aebe966dc4971b89905c2d9444fb541bdb338326943fe20fb340213ebcaafdbbfee9fbe099a39118f3d423ce0e49e21c9558b6606a9453075ebbe30f69b458c17f022a9da5390e5f83a7e83f33d179445c1d3b3b55a05ca88570527eed001a635c063726069efd55b3de933d11f52443a8f69b69fdb6162b16a84a7ddb87014b92aa4750d732733795c39e45f261f9a775eeb92eeda159acc365ea783503e4bef9cd5bb2a39b96cdddf212295e2c9a9362fa15a8e794db8abd081193f50b88f5589e71ca393d4728eea561f243e1a3b4afaea18b905165371215083bcb58a080df80a8c3287f88cc0610695f88e0613ce9afba5d1791de35d2cf3eef87c15e311650f0c8b446eab07bdd5893d649ddc9cfdd45fc9d8171f44023d112d00f317ff78e24d31676143979824f353d734c661b190cf2939c2c9ad6bb73c7e94eb0001736fb95532e743a823ece6d234bc122b42a4885407eefc1f08fbf12492d6c0acc38c1651999e470e90d80a27c673bd160713d54ede333e2358f70e5b15c9a264a0802e68b5f90af295169a4390c2390db21ebc02d9d03082f680a8763a842304c278db9efbdee6d9a17c97f7c8d6085055fb73a68a562fbd550a52433e4fa3b45621b645cab15013dd91d112bf5503607a64b7c5c998bf91758c8677a4b77f50f6f4dfdb24930bd8264f5f3b774073890ace4534f3ed31f250f7600b99a70cfc43db6d6eea3a9f0d8334e20625c4a86be0951ccb43e1f38e0b207dab2d0ae591be57635b0af1e7d9ffbc576aa51d7332140d38b8f047c4cabca0e5316524628a4d100e5fd6268bcf19b4e8a29fc42ae4b4a86239a3b2fb76e880b255ced706fd14a881d2c6bf8802e1e13f40d9d49474e5f6f55a50b9997b11a3c3d4d6a233abb6c51c6f88efc37b6694d7f3fa3693f7ef0687d8aee66ef5b0c50c35891dd929305cf91093bfc96b007a73e68dcecae5d8752e36a4c6663ddec96a67f86e0bc8b3c85cdc9560b16ca789db7195828a321e0dc091a72d62bb98846e8982d40f2d04ef722becfd111bcb59ebad973f2edd3c88e2b9f0be5f4137cdd3b07ac22f105fc6f87fee60ca1114728d42d442de3c9d9d6ae7bba3e6708f9c7433beb41a3252fc38afa0b56fdde42b45bbc56855e07bd61069715e63082983790cf5ad2a6c3da040c0b07d0825d05199733878f2fc85f2e2877dba84b8c208ac64b882d690f3c133a7a74fbab84b71be17f2aa7403d2747259eae5048a3ff30f4034f0d30c5732285dbc9451329f04f79b089c04e43c86ef5532519d2e32a3126cdefa380767a95bbac0f28e92e2969741f29c481bceb8b001ff8fdfd166f29e06bd4e7b8e71eec7c7d4ebd4f716e8f031dbb58513dc88163a10d4830963b5e4f13b38e72ab34c75768ab21ff7d232c8ff4cbbe1c14cc1f14bfc1d7f089c73cf2632ba43f0561727de97d79801bdcec59b868312850bd26c82d51d1d201b66b6cb9278f7355d53e335980cb7c40160ae3388c11494960ac202486046e4696ba2ea7245b94bd45bb134fc7c36895889bff04c6837353a83d433ade26f591d315d321b457535d8f361ccc21dc707eca50ed12961edb6250f8d76889bddc5d9c81ceb21d83b325b36cf7c4bd1be0447965db45da723e71a90ea18a5805e0dd385365cbf6b2751f54ae6c57cbe21b7e21b45b23109deecafcae2ff6cbb68761395ec6618f8995cc44f8b76c08791c0b2a53378da51c26084664917816e67e59ad9bcc7d40e613cd9f8f79f2ad350ea9e3ba9df27cf30d7303b25235cf9a8d0bddf68521c25e4111d46d1850bc5888082105a5df4fca01b66854ecba4fd1576ca2835bd0a924cc64d67af02e3878ac5aaf7d84b4e1caa15421de58a62fbc84f4970ea300897ef18830836afff5a7c113e55183a29a022f5d4b714a2f35cbe6d572b3a39b27c7996fc3302c39378f384cbaa743275f98113d342db1c70a88e56a360d8cc86449440b35ebf2d2cf878c2f01e84e25377b8b7096c9f41daaedae887c1a25262881460885a509b96ada62f5f6df96ed5b168ad43d7d1637f0076e4bf8e80fe340799d2aee3718a4e2774b3e8d1addf118dfc6cd036a9765cc512d1b4c1e56868ad5e1a92acc305abd3a107ea9174c563d8f29dc2c84e2af0c701838db1a787d95fd698808cf5e515eb8c8a6755205aef6441b3cacd47d014ea96ee73211617ab6f8a110a2d4d22b678f42c5ebb5a10728fa5284e64a2c0d76691ed7a8ee8138436475e62b894703c82f39b82117036ebe9583cd9755432cc7f6318850e7b4af56d91790dfb95ab7a8b5d7b3b1cc6c1bcc501846968b6d8e0b1990fea817606aa6d2ede67b7777329286c90b75194608e9ad82a4b7560088e73dde22d9308f6270dc28d13bba19cbe1138327246b1efbb99be4ee45d8efe7d0606c360bd9f15b34ae640a0a5a4948147076289cd60aa6022bebee23b5afa252bed4e7c05bcceb74dbf57a2a0b3f4471bc95a68117643108c9579aa7cc569860ae1758c20ee33308b29e7e8a88dcae8117ee49fd364d890b84c8662638b62a17e629f2053bb385388c1050356440858a6ab4994a799f1686dcf0f785445ce911e5e8f051b822e1fd4cb7e204603cc9427503029236d10e3b40d779988dcf06ae552b07aeb648c5cd0fb7682abfa60f75400e628df6b70469588f7fe5bc639a9900228a471d9d053088b4fec186b995f6a764307c2cdc423558371fc4c42d96ff277b500a1819cf87eb35c33812460630a851c3845cd32974a039744275d94f87c7e8f5eac80646b3430ba82e7202277718ad26ed5ef150f355dba827cc1143c0f9eabc3619ae6eef463711da26986f29eedde6d00e710467004c9c441e18ea32204501b0b64d8cc24ed1dd4fa185b162d3940e2868fc3e599396dbfba0c0dcb5ef53e731fd299df298afb69d3edd98916314a70cd32ccc64ff5923caccca1cd6a785f0b790f029fc78762bb3c59f0a2322548217ae1e60711728d466f70f49496abdee1d0ab4770b94c8e048e6df1dbf66fb9069a4553f19d83c643ca7c0f4a8d4373073ff716e0d1a693254b7e7db19ebc61e4fe824c60f830dab48ed84200f058f1d2efd652fb6ab3e52990bd7f5b628dfac770d86d8551bb8dd288b4f1dfc6220a2ab490c39f29c41092d9d3d82055f8baac256d3c296db9992338bf01d311817554e4db9a823e13c471f9efeb3da99f55fc57c12981c71fafe77daaf7f9d0801b7276f70f1d08fd178465de9f9fdb547697ccfb1f728a73d17b62f995621cf199fd829b430dccd9da12634e8d54d3c17f0bd3ca32bb9de86d36c3ce13057664ad4f2d9cea1a85a79732efa114bd96c4e17181bd1f8e344031df80a5e0fa83a7b2690fae127231f95a36d4395906127a4ab145a93b00bd3faff18ff00f6f3d95900dc1d399dcb3a3871d88d2d4b6f6d7d71aa1305f84b0e01ee86a1a109b102ec27c662da1212b775120b85a6c6a512081154000b90608e24d6d05812764ae1307e52cfd353d81c73e39cde8ab45dfac4bea9624d6582821c26c59127d68227e9c2c86f6c045b5bda5b28ed21f6b4a54883721a9fff006af1011b3d35edeb45fa0f77ef3baa7352452300cdd0e017eecb96040a88f5a20a0413fe2fad61b1e6bb22217316754a345f5b89b857007edef5f6eed97aa786b865b56d4788b9df27e84e0a6bab8271f0f050f9f49c1b1f354d1ae373de25a1e4f6bd9137e4436c1e7dfecd55a89447c52142cf7dcbb0d34c48a38f8d293abab9eb81442e105b7fc51ed6a83de89658bb8a882df697a25a188065d3f8e99e8d145df33e92a9f3e2f56e2512aa4cf270c129c5a425bbd42c1584f3d5d4d34b393b9bec091adee02152f0252c08871725397e6dcdbf75d1ed4", 0x2000, &(0x7f0000000d80)={&(0x7f0000000180)={0x50, 0x0, 0x8, {0x7, 0x2b, 0x2, 0x40101000, 0x101, 0xfff, 0x8, 0x2, 0x0, 0x0, 0x40, 0x9}}, &(0x7f0000000280)={0x18, 0x0, 0x3, {0x4ec8e43c}}, &(0x7f00000002c0)={0x18, 0x0, 0x8001, {0xfffffffffffffffe}}, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x8000000000000001, {0x101}}, &(0x7f0000000400)={0x18, 0x0, 0x3656, {0xfffff764}}, &(0x7f0000000440)={0x28, 0xfffffffffffffffe, 0x4, {{0xfff, 0xa1a3, 0x2}}}, &(0x7f00000004c0)={0x60, 0xfffffffffffffffe, 0x7fff, {{0x2, 0x9, 0x35189cbf, 0x9, 0x12, 0xaa9d7d6, 0x7, 0x7fffffff}}}, &(0x7f0000000580)={0x18, 0xfffffffffffffffe, 0x4, {0x5}}, &(0x7f00000005c0)={0x11, 0x0, 0xb62, {'\x00'}}, &(0x7f0000000600)={0x20, 0x0, 0x8001, {0x0, 0x8}}, &(0x7f00000007c0)={0x78, 0x0, 0xc, {0x2, 0x8, 0x0, {0x6, 0x9, 0x9, 0x8, 0x5, 0x400000000000000, 0x8, 0x8, 0x8, 0xc000, 0xffffff8f, 0x0, 0x0, 0x0, 0x9}}}, &(0x7f00000008c0)={0x90, 0x0, 0x3, {0x3, 0x0, 0x7, 0x7fffffff, 0x7fff, 0xd, {0x3, 0x794, 0xfff, 0x5, 0x5, 0xb, 0x1, 0x200000, 0x1, 0x4000, 0x1, 0x0, 0x0, 0x9, 0x9}}}, &(0x7f0000000980)={0x48, 0xfffffffffffffffe, 0xe09, [{0x4, 0xc52c, 0x3, 0x3cf, '-{^'}, {0x3, 0x7ff, 0x0, 0x9}]}, &(0x7f0000000a00)={0xc0, 0x0, 0x7, [{{0x3, 0x3, 0x9, 0x8001, 0x9, 0x8, {0x0, 0x6af, 0xd, 0x100000001, 0xd81, 0x4, 0xfffffff8, 0x180, 0x0, 0xc000, 0x8, 0x0, 0x0, 0x0, 0x8}}, {0x0, 0xffffffff, 0x11, 0x0, '/dev/vhost-vsock\x00'}}]}, &(0x7f0000000ac0)={0xa0, 0xfffffffffffffff5, 0x4, {{0x0, 0x3, 0x1, 0x7ff, 0x2, 0xffffff95, {0x3, 0xfffffffffffffffb, 0x54, 0xffffffffffff95a1, 0x5, 0xff, 0x4, 0xc, 0x3, 0xa000, 0x7, 0x0, 0xee01, 0x3, 0xfffffffd}}, {0x0, 0x10}}}, &(0x7f0000000b80)={0x20, 0xfffffffffffffff5, 0x0, {0x6, 0x4, 0x2, 0x1}}, &(0x7f0000000c40)={0x130, 0x0, 0x1, {0x0, 0x8, 0x0, '\x00', {0x8, 0x100, 0xfffffffffffffffe, 0x2, r4, 0xee00, 0xc000, '\x00', 0xfffffffffffffffa, 0x7fffffffffffffff, 0x4, 0x4c1, {0xcb, 0x5}, {0x76, 0x9}, {0x8000000000000000, 0x10001}, {0x7fffffff, 0x6}, 0xfffffffc, 0x7fff, 0x9, 0x3f3e}}}})
pipe(&(0x7f0000000540)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xffe, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x4)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r8, 0x29, 0x30, 0x0, &(0x7f0000001000))
r9 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r9, 0x0, 0xfffffffffffffff2, 0x0, &(0x7f0000000480)={0x23, 0x28, 0xfd, 0x3}, 0x10)
writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000300)='\x00', 0x0)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0)

5m57.452222765s ago: executing program 3 (id=118):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x1, 0x5}, 0x50)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080))
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r5, &(0x7f00000001c0)='N', 0x1, 0x80, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a06030000002300"/49], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)

5m56.87608526s ago: executing program 0 (id=119):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000303000000c001ae2e66e90085000000840000feb600"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0)
epoll_create1(0x0)
ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x22, 0xfffffffffffffffd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044)
syz_emit_ethernet(0xbe, &(0x7f0000000540)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "a034d532ee3432d2210796eb298794b076e60046d98f7b0d857657b26b00ca81", "749271046ac8a596855227e00bcd7f1ebec5de80a44f799faadb8092addb37261cc2a31eb206d1342585bbe72565efda", "86aec9e041768d530d61351616d9316455abe3284c8b453fee110d51", {"2bf6ed2ab65ebfbc4d0b72d1152050fc", "7af82a7f928d62623d7ad271c15cd385"}}}}}}}, 0x0)

5m56.873618604s ago: executing program 2 (id=120):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x262200, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
r7 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[], 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, 0x0)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14)
fcntl$setstatus(r1, 0x4, 0x2000)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r7)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf25010000000500040002000000050002000a0000001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})

5m55.886861095s ago: executing program 4 (id=121):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000b340d64800000000002e0000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r1}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=<r3=>r0, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
r4 = io_uring_setup(0x1d8f, &(0x7f0000000100)={0x0, 0xe79a, 0x8000, 0x3, 0x214})
syz_io_uring_setup(0x1dfd, &(0x7f0000002480)={0x0, 0xb764, 0x1ffd, 0x20, 0x3a1, 0x0, r4}, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x8d)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRESHEX=r0, @ANYRES8=r1, @ANYRESDEC=r3, @ANYRES64=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
r7 = socket(0x18, 0x4, 0x0)
connect$pppoe(r7, &(0x7f0000000740)={0x18, 0x0, {0x6, @empty, 'ip_vti0\x00'}}, 0x1e)
sendfile(r7, r6, 0x0, 0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r9 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r10, 0x0)
accept4$x25(r10, 0x0, 0x0, 0x80800)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r11, &(0x7f0000000400)=ANY=[@ANYBLOB='b *:* rm'], 0x9)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)

5m55.850942472s ago: executing program 2 (id=122):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007)
sendmsg$nl_route(r3, 0x0, 0x40c0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
setresuid(0xee01, 0xee00, 0x0)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
shutdown(r2, 0x2)

5m53.247277063s ago: executing program 3 (id=123):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x3, 0xa, 0x2})
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x130, 0x0, 0x2c8, 0x230, 0x130, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x40}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x60, 0x52, 0x1}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460)
set_mempolicy(0x3, &(0x7f00000014c0)=0x7fff, 0x467d)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x0, 0x24})
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180))
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setregs(0xd, r6, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={0x0, 0x30})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)

5m53.246518192s ago: executing program 0 (id=124):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102)
dup(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r4, &(0x7f0000000100)='reno\x00', 0x5)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
write$tcp_congestion(r4, &(0x7f0000000300)='reno\x00', 0x5)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x90}}, 0x0)

5m50.954014862s ago: executing program 2 (id=125):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102)
dup(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50)
r5 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
write$tcp_congestion(r5, &(0x7f0000000300)='reno\x00', 0x5)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x90}}, 0x0)

5m49.510689327s ago: executing program 4 (id=126):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26)
write$dsp(0xffffffffffffffff, &(0x7f0000000880), 0x0)
io_uring_enter(0xffffffffffffffff, 0x2565, 0x61c, 0x4, &(0x7f0000000000)={[0xe3]}, 0x8)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18)
r2 = syz_open_procfs(0x0, 0x0)
preadv(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0xfffffffc, 0x104)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x4)
socket$inet_icmp(0x2, 0x2, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
userfaultfd(0x801)
syz_open_dev$loop(&(0x7f0000000080), 0x7ff, 0x200000)
r4 = socket$alg(0x26, 0x5, 0x0)
accept4(r4, 0x0, 0x0, 0x0)

5m49.31084847s ago: executing program 3 (id=127):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x434}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000100)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x38415261}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$key(0xf, 0x3, 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r5, 0x1, 0x10000000000009, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

5m48.642749994s ago: executing program 0 (id=128):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000040)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x4, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x38}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
setrlimit(0x1, &(0x7f0000000280)={0x4, 0x697})
r8 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x30000000})
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000240)={0x5, 0x8, '\x00', 0x1, &(0x7f00000000c0)=[0x0]})

5m47.872327305s ago: executing program 2 (id=129):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
syz_usbip_server_init(0xaa7f3cec63cbb9d)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000001c0), &(0x7f0000000200)={'U+', 0x10001}, 0x16, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1, 0x0, 0x7f})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000540)={<r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x2, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r7, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0})
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
close_range(r10, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

5m46.268692355s ago: executing program 4 (id=130):
r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfffc}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={r8, @in={{0x2, 0x4e20, @empty}}, 0x3b, 0x9, 0x81, 0x4, 0x20, 0x7fffffff, 0xff}, &(0x7f0000000140)=0x9c)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={r8, 0xfff}, &(0x7f0000000240)=0x8)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000048000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031400048008000240000000120800014000000001140000001100010000000000000000070000000a9c5c00ad1c760da0cbb19d461854b83062491a1cce9959a6e493fe3ab1ad0133"], 0x90}, 0x1, 0x0, 0x0, 0x400c041}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9})
timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
io_uring_enter(r0, 0x133d, 0x3e000000, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1)
syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa91d65a"], 0x11)
socket$nl_generic(0x10, 0x3, 0x10)

5m46.219273764s ago: executing program 0 (id=131):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="dc05ee057ada978f61034835c9655cc8f5553beda9f730e151772060ac74b31cd73d524a83d2278bcacaf9ccf186df9ce51f99f2e19707bd19279dea3a989ab3c0bcffcfba1b5cdd4eb33ba40f0198d12e4108f58d9942e2a7a2efac7ed3d4a8ba0211be34077582823b52cea03ece14b22f2f5754", @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
close(r1)
bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000100000001"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0x1c)
listen(r6, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
close(r2)

5m44.000196104s ago: executing program 4 (id=132):
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r5, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)
setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f00000002c0)=0x65, 0x2)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000280)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a4, &(0x7f0000000180)={{@any, 0xffffffff}, @hyper})
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043000000090006006e6f6e6500000000080008"], 0x50}}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r8, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c804}, 0x8000)

5m43.90625229s ago: executing program 2 (id=133):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000000000000000850000006d0000009579fff7a22a94621d2aed86b37406e07f932d9e4e7cd2ed54ecce630bad7679c4cd5a416787f81f091d09d0caca94a1f813105a854b861d8d01e2bdfd71c4c60f7d6615ed232914fcdc16d2bbcc2c976e24c8fc28518ab985ff8069d85927d5510c8e1b13304d6b3191d7a060077e7a4114cc8073f05956b30e0e7c81eb56f5d166267c91e9eca0923175e95ffc83b0bc39692f97538e7e909b69cfb8b20f33d0baaa00431be1f344fccd00082a1b4f31"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = socket(0x2, 0x2, 0x1)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14)
keyctl$set_reqkey_keyring(0xf, 0xfffffffb)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x101800)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x80, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x404, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x1, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x12, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x400, 0x6, 0x2, 0xff, 0x2, 0xc2, 0x4, 0xd, 0x4e0, 0x801, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xc113, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x5, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x40, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x7d, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x8001, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x40000004, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2007, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xb, 0x9, 0xfffff003, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x60000000, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0x40a1f, 0xf40, 0x7, 0x1, 0x6c1c, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c)
chdir(0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000000)="0a000000010001", 0x7)
openat$rtc(0xffffffffffffff9c, 0x0, 0x20440, 0x0)

5m43.890933961s ago: executing program 3 (id=134):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007)
sendmsg$nl_route(r3, 0x0, 0x40c0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
setresuid(0xee01, 0xee00, 0x0)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
shutdown(r2, 0x2)

5m42.354015487s ago: executing program 2 (id=135):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f00000004c0)="9bb9bb65cedfbf4f1b49a037e8ca58a2a3932e4d8662c8d00fd82bac59985169f6e1472aee233478d2449763ccbb92a1ca69afe835a4faf947a62cf61afec25e4d29afbcaadd61deb97fcc2e978f2e3538ace7a2d13cebda74d7e89bbea78eddfde3f93869dab2ef89468e925441ad466992ef4de40a6447ada9db7bf0286dbea29f", 0x4d)
ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f00000001c0)={0x0, "9800003de8f644ad6c8a55930700", 0x3})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0)
execve(0x0, 0x0, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0)
r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0x80000000, 0x5, '\x00', 0x13})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x4000000})
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[0x0]}, 0x0)

5m41.606312471s ago: executing program 0 (id=136):
openat$nullb(0xffffffffffffff9c, 0x0, 0x82, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007)
sendmsg$nl_route(r3, 0x0, 0x40c0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
setresuid(0xee01, 0xee00, 0x0)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
shutdown(r2, 0x2)

5m20.502985485s ago: executing program 33 (id=132):
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r5, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)
setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f00000002c0)=0x65, 0x2)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000280)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a4, &(0x7f0000000180)={{@any, 0xffffffff}, @hyper})
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043000000090006006e6f6e6500000000080008"], 0x50}}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r8, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c804}, 0x8000)

5m20.375606587s ago: executing program 34 (id=136):
openat$nullb(0xffffffffffffff9c, 0x0, 0x82, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007)
sendmsg$nl_route(r3, 0x0, 0x40c0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
setresuid(0xee01, 0xee00, 0x0)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
shutdown(r2, 0x2)

5m20.234796631s ago: executing program 35 (id=135):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f00000004c0)="9bb9bb65cedfbf4f1b49a037e8ca58a2a3932e4d8662c8d00fd82bac59985169f6e1472aee233478d2449763ccbb92a1ca69afe835a4faf947a62cf61afec25e4d29afbcaadd61deb97fcc2e978f2e3538ace7a2d13cebda74d7e89bbea78eddfde3f93869dab2ef89468e925441ad466992ef4de40a6447ada9db7bf0286dbea29f", 0x4d)
ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f00000001c0)={0x0, "9800003de8f644ad6c8a55930700", 0x3})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0)
execve(0x0, 0x0, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0)
r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0x80000000, 0x5, '\x00', 0x13})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x4000000})
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[0x0]}, 0x0)

5m20.066250172s ago: executing program 36 (id=134):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007)
sendmsg$nl_route(r3, 0x0, 0x40c0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
setresuid(0xee01, 0xee00, 0x0)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
shutdown(r2, 0x2)

35.957889939s ago: executing program 9 (id=482):
capset(0x0, 0x0)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3)
socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000300)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
sendfile(r5, r5, 0x0, 0xcb3e)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4)
sendfile(r7, r7, &(0x7f0000000000)=0x1, 0x4)
socket$packet(0x11, 0x3, 0x300)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4)

34.904055906s ago: executing program 9 (id=484):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}}, 0x0)

34.281575298s ago: executing program 9 (id=487):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102)
dup(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50)
r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
write$tcp_congestion(r5, &(0x7f0000000300)='reno\x00', 0x5)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x90}}, 0x0)

34.007016198s ago: executing program 8 (id=489):
r0 = getpgrp(0x0)
r1 = syz_pidfd_open(r0, 0x0)
process_madvise(r1, &(0x7f0000000200)=[{&(0x7f0000000000)="5c45903f", 0x4}, {&(0x7f0000000100)="9b08", 0x2}], 0x2, 0xa, 0x0)

33.850582847s ago: executing program 8 (id=490):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
r5 = gettid()
r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
r9 = fcntl$dupfd(r7, 0x406, r7)
bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r8, 0x2, {0x0, 0xff}, 0xfe}, 0x18)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5})
r10 = socket(0xa, 0x3, 0x3a)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}})
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

33.669121622s ago: executing program 6 (id=492):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000040)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x4, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x38}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

32.595692844s ago: executing program 5 (id=493):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

32.535181945s ago: executing program 6 (id=494):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
r5 = gettid()
r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {}, 0xfd}, 0x18)
sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
r9 = fcntl$dupfd(r7, 0x406, r7)
bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r8, 0x2, {0x0, 0xff}, 0xfe}, 0x18)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5})
r10 = socket(0xa, 0x3, 0x3a)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}})
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

32.311045401s ago: executing program 8 (id=495):
openat$nullb(0xffffffffffffff9c, 0x0, 0x82, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007)
sendmsg$nl_route(r3, 0x0, 0x40c0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
setresuid(0xee01, 0xee00, 0x0)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
shutdown(r2, 0x2)

31.373766914s ago: executing program 8 (id=496):
r0 = syz_io_uring_setup(0x2666, &(0x7f0000000580)={0x0, 0xc6f4, 0x200, 0xffffffff, 0x1}, &(0x7f0000000800), &(0x7f0000000840))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fcntl$setsig(0xffffffffffffffff, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r1, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/sys/kernel/debug/sync/info\x00'}, 0x30)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r7, 0x4b3a, 0x1)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r8, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}, {&(0x7f0000000240)}, {0x0}], 0x3, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100de2ae663e7005d35b94082058d00ac7a010203010902120001000000000904000000959ec800"], 0x0)

31.358905879s ago: executing program 6 (id=497):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0)

31.315784349s ago: executing program 5 (id=498):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
request_key(0x0, 0x0, 0x0, 0x0)

30.993014611s ago: executing program 5 (id=499):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000e80)="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", 0x141}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="78fa12a63e6ad688fd773a60f37516cdd3046bf74f6bcba0bb42fbb007c4d9aba8b6601a4e9bf7e3577c2e8eec81a2a4979641f006a16075ce22cab98b59fc1d478b3f258d43d580", 0x48}, {&(0x7f0000001080)="54e9498763dd5250c697dbbefe317cc7f260b3aa6a7d42b697f9dc923a273271a7d209b622e1c666df05e011c00c052b2b12c1358bb59f004bde945032c5ab51b8a7eeac480480b2e86e73cea813da8c20d75b76af42c424017c909d330e195c38ac12ed085ca18365b3192a4a1936fbdd30ad895008b0212f872cb0eb5cadb3cbdedab6870c51b40897731d739106a4f2fe1e3dafac5b1caa252de07dfa508eefc200ac515173aac5138f72c54a3d4ce083e7f35d9bc9db2299b589bc54adf01c062bc510a0eec7069dafa2daffa0e435efa697293fd1ff22b3e288cf86ea1fcf69c509c905a4d196d440ebe559ed91fc31afef6dafc9dfe99bede2b8219fad183fa3cd84417a43e80c4c5c49104f5d303f80b1e8120abea9cedb5c9270f9379b63cb8636a212140ba70fdd93243a1208bfc4161d2ac00eba76780342a4c95dbe8722472ee46d688c20f6a5e551faf0019386063fefa36e858cda037d1eea55d7fcbd433e29da3e4168aeaefac7766e2d10958be81b03e0ee3b3b16a1847a2a70f4fd808dbcff008cfa27e7f2e60db577a489826de727a04fff7acb9aa120f22694a2b5d3f09c62bd0b9bfb0347b4dce7ece04838907700ed9a93a615269b9fbd045b003b978a47a4086f3fe9e9da232b128a6d6b4dde7fd64d4001df268386a714c6fce0d7271c3a26e6eca9f60d3a50f86e34a8b624e2bd95b6eb4cfe59f978aec1fabef776b5aaab0f6b09085714d6b336a518a5dba4ca2d0a4442336d34ee0679c1f54bcea2e38127e551d8f24e76badcf21a03429cd8405ac18c3e15f90c575afc60a574e541dffa9edb972d42e85a517f42d633ef988e7f3e4cbffd4fd94b1be9e392406a05614ad935fae6dcb58aa728c180e071381dfae8d52c381e4037c6b86dae81e2e5ce4dfc23a6b0a53d312989362dbc4bde214a5aac9e38c65c6651d186ed990f0fc3ce22de742e40ca810a52f897159edf4ea9ce091ca3ec89f9dae8a5d914ddb307c5ddc04c2279cf6b8eac09ecb9b9ced0b85a9c969da50206c8117abc02e617496bb393e5ca7584c65176a83bf4d242670663e7f984fdfd51a5c0851b60eaf5", 0x309}], 0x2}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
ioctl$EVIOCGREP(r2, 0x80084503, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r3 = openat$mice(0xffffffffffffff9c, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x3, 0x822b01)
read$FUSE(r3, 0x0, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c25)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0)
ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000240))

29.477117215s ago: executing program 6 (id=500):
writev(0xffffffffffffffff, &(0x7f0000001040)=[{&(0x7f0000000000)="007c0985dd164473618115ad53aa95e4485b369705c617b7d4fd56b3ae03c2d640f1f92505b839d4c80dfb539ef3154ecdadb85bb3c60c729434fee5cecc3560af78d0a68443289e9e16e31e82bcfc5db532bad95fde4fc9d4b50a655737af94b6bb0c6c1b25e048fc3b78b8edc23aeca1977266cb11175de87a972eb09524fa2ee5c6d549592272c2d71c574fdf27", 0x8f}], 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0xcf, 0x0}}, {{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100), 0x10}}], 0x2, 0x45)

28.128361668s ago: executing program 9 (id=501):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x36, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x20, 0xa, 0x10, {0x10, 0x24, "7b60dc86fe066b529740ae13b132"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

27.110544916s ago: executing program 9 (id=502):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0xe9e7490c5270708f, 0x12, 0xb}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)

25.993209177s ago: executing program 8 (id=503):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000040)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x4, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x38}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

24.152086469s ago: executing program 6 (id=504):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
r5 = gettid()
r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
r9 = fcntl$dupfd(r7, 0x406, r7)
bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r8, 0x2, {0x0, 0xff}, 0xfe}, 0x18)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5})
r10 = socket(0xa, 0x3, 0x3a)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}})
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

24.079431844s ago: executing program 5 (id=505):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setopts(0x4200, r0, 0x9d7, 0x11)

23.550274415s ago: executing program 5 (id=506):
openat$nullb(0xffffffffffffff9c, 0x0, 0x82, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007)
sendmsg$nl_route(r3, 0x0, 0x40c0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
setresuid(0xee01, 0xee00, 0x0)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
shutdown(r2, 0x2)

18.207228006s ago: executing program 8 (id=507):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
r5 = gettid()
r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {}, 0xfd}, 0x18)
sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
r9 = fcntl$dupfd(r7, 0x406, r7)
bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r8, 0x2, {0x0, 0xff}, 0xfe}, 0x18)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5})
r10 = socket(0xa, 0x3, 0x3a)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}})
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

18.135306719s ago: executing program 6 (id=508):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4)

16.624803995s ago: executing program 5 (id=509):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='dctcp-reno\x00', 0xb)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000380)=0xffffffff, 0x4)

16.475264974s ago: executing program 9 (id=510):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000100000000070000000500040000000000050005"], 0x34}, 0x2, 0x34005}, 0x0)

1.328170256s ago: executing program 37 (id=507):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
r5 = gettid()
r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {}, 0xfd}, 0x18)
sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
r9 = fcntl$dupfd(r7, 0x406, r7)
bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r8, 0x2, {0x0, 0xff}, 0xfe}, 0x18)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5})
r10 = socket(0xa, 0x3, 0x3a)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}})
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

927.226092ms ago: executing program 38 (id=508):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4)

381.214235ms ago: executing program 39 (id=509):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='dctcp-reno\x00', 0xb)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000380)=0xffffffff, 0x4)

0s ago: executing program 40 (id=510):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000100000000070000000500040000000000050005"], 0x34}, 0x2, 0x34005}, 0x0)

kernel console output (not intermixed with test programs):

xpected cc 0x0c38 length: 249 > 2
[  264.244716][   T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  264.253933][   T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  264.256700][   T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  264.266564][   T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  264.280249][   T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  264.303950][  T733] bond0 (unregistering): Released all slaves
[  266.260158][ T5851] Bluetooth: hci6: command tx timeout
[  266.260401][   T59] Bluetooth: hci0: command tx timeout
[  266.340204][   T59] Bluetooth: hci4: command tx timeout
[  266.340213][ T5851] Bluetooth: hci7: command tx timeout
[  267.090338][  T733] hsr_slave_0: left promiscuous mode
[  267.110483][  T733] hsr_slave_1: left promiscuous mode
[  267.113965][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.114062][  T733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.182977][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.183012][  T733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.275035][  T733] veth1_macvtap: left promiscuous mode
[  267.275289][  T733] veth0_macvtap: left promiscuous mode
[  267.275622][  T733] veth1_vlan: left promiscuous mode
[  267.275949][  T733] veth0_vlan: left promiscuous mode
[  268.340280][   T59] Bluetooth: hci6: command tx timeout
[  268.340287][ T5851] Bluetooth: hci0: command tx timeout
[  268.420084][ T5851] Bluetooth: hci7: command tx timeout
[  268.420118][ T5851] Bluetooth: hci4: command tx timeout
[  269.581011][  T733] team0 (unregistering): Port device team_slave_1 removed
[  269.852275][  T733] team0 (unregistering): Port device team_slave_0 removed
[  270.420308][ T5851] Bluetooth: hci6: command tx timeout
[  270.420321][   T59] Bluetooth: hci0: command tx timeout
[  270.500126][ T5851] Bluetooth: hci4: command tx timeout
[  270.500139][   T59] Bluetooth: hci7: command tx timeout
[  272.499954][ T5851] Bluetooth: hci6: command tx timeout
[  272.501514][ T5851] Bluetooth: hci0: command tx timeout
[  272.579985][ T5851] Bluetooth: hci4: command tx timeout
[  272.586544][ T5851] Bluetooth: hci7: command tx timeout
[  273.500792][ T6537] chnl_net:caif_netlink_parms(): no params data found
[  273.575227][ T6649] chnl_net:caif_netlink_parms(): no params data found
[  273.660409][ T6646] chnl_net:caif_netlink_parms(): no params data found
[  273.677405][ T6642] chnl_net:caif_netlink_parms(): no params data found
[  273.936925][ T6643] chnl_net:caif_netlink_parms(): no params data found
[  275.503212][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.503462][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.503724][ T6537] bridge_slave_0: entered allmulticast mode
[  275.506708][ T6537] bridge_slave_0: entered promiscuous mode
[  275.547758][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.547920][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.548500][ T6649] bridge_slave_0: entered allmulticast mode
[  275.572723][ T6649] bridge_slave_0: entered promiscuous mode
[  275.979003][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.979141][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.979639][ T6537] bridge_slave_1: entered allmulticast mode
[  276.003251][ T6537] bridge_slave_1: entered promiscuous mode
[  276.090775][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.090918][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.091294][ T6649] bridge_slave_1: entered allmulticast mode
[  276.093224][ T6649] bridge_slave_1: entered promiscuous mode
[  276.094219][ T6646] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.094350][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.094491][ T6646] bridge_slave_0: entered allmulticast mode
[  276.096278][ T6646] bridge_slave_0: entered promiscuous mode
[  276.099672][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.109999][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.110590][ T6642] bridge_slave_0: entered allmulticast mode
[  276.113525][ T6642] bridge_slave_0: entered promiscuous mode
[  276.651078][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.651214][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.651721][ T6642] bridge_slave_1: entered allmulticast mode
[  276.656313][ T6642] bridge_slave_1: entered promiscuous mode
[  276.658660][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.658793][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.658983][ T6646] bridge_slave_1: entered allmulticast mode
[  276.664317][ T6646] bridge_slave_1: entered promiscuous mode
[  276.771246][ T6643] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.771395][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.771583][ T6643] bridge_slave_0: entered allmulticast mode
[  276.774402][ T6643] bridge_slave_0: entered promiscuous mode
[  277.115919][  T733] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.265222][ T6537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.265756][ T6643] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.265868][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.266036][ T6643] bridge_slave_1: entered allmulticast mode
[  277.272359][ T6643] bridge_slave_1: entered promiscuous mode
[  277.277598][ T6649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.578276][ T6537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  277.592326][ T6649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  277.598826][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.734643][  T733] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.787122][ T6646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.122665][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.145063][ T6646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.149318][ T6643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.257726][   T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  278.268337][   T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  278.269550][   T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  278.286928][   T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  278.287838][   T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  278.614761][  T733] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.806205][ T6643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.808787][ T6649] team0: Port device team_slave_0 added
[  279.403414][ T6649] team0: Port device team_slave_1 added
[  279.406662][ T6642] team0: Port device team_slave_0 added
[  279.545650][  T733] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.602752][ T6646] team0: Port device team_slave_0 added
[  279.755904][ T6642] team0: Port device team_slave_1 added
[  279.767210][ T6646] team0: Port device team_slave_1 added
[  279.779600][ T6643] team0: Port device team_slave_0 added
[  280.035623][ T6643] team0: Port device team_slave_1 added
[  280.135831][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.135849][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.135875][ T6649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.340530][   T59] Bluetooth: hci2: command tx timeout
[  280.442966][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.442983][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.443011][ T6649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.460995][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.461013][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.461059][ T6646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.464496][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.464511][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.464538][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.665127][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.665144][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.665169][ T6646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.671636][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.671653][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.671680][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.693674][ T6643] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.693692][ T6643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.693722][ T6643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.854551][ T6643] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.854568][ T6643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.854596][ T6643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.503727][ T6649] hsr_slave_0: entered promiscuous mode
[  281.505117][ T6649] hsr_slave_1: entered promiscuous mode
[  281.506033][ T6649] debugfs: 'hsr0' already exists in 'hsr'
[  281.506055][ T6649] Cannot create hsr debugfs directory
[  281.816505][ T6646] hsr_slave_0: entered promiscuous mode
[  281.817892][ T6646] hsr_slave_1: entered promiscuous mode
[  281.818874][ T6646] debugfs: 'hsr0' already exists in 'hsr'
[  281.818899][ T6646] Cannot create hsr debugfs directory
[  281.832425][ T6642] hsr_slave_0: entered promiscuous mode
[  281.834072][ T6642] hsr_slave_1: entered promiscuous mode
[  281.835195][ T6642] debugfs: 'hsr0' already exists in 'hsr'
[  281.835222][ T6642] Cannot create hsr debugfs directory
[  282.071148][ T6643] hsr_slave_0: entered promiscuous mode
[  282.072439][ T6643] hsr_slave_1: entered promiscuous mode
[  282.073443][ T6643] debugfs: 'hsr0' already exists in 'hsr'
[  282.073469][ T6643] Cannot create hsr debugfs directory
[  282.430011][   T59] Bluetooth: hci2: command tx timeout
[  282.815435][  T733] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.285511][  T733] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.625615][  T733] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.048501][  T733] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.499920][   T59] Bluetooth: hci2: command tx timeout
[  284.780723][ T6719] chnl_net:caif_netlink_parms(): no params data found
[  285.135464][ T6649] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  285.341824][  T733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.427822][ T6649] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  285.565213][ T6649] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  285.854087][  T733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.883786][ T6649] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  285.929019][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.929172][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.929378][ T6719] bridge_slave_0: entered allmulticast mode
[  285.941958][ T6719] bridge_slave_0: entered promiscuous mode
[  285.968613][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.969031][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.969251][ T6719] bridge_slave_1: entered allmulticast mode
[  285.978267][ T6719] bridge_slave_1: entered promiscuous mode
[  286.117985][  T733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.487930][  T733] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.518315][ T6719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.557423][ T6719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.581419][   T59] Bluetooth: hci2: command tx timeout
[  286.670690][ T6646] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  286.816950][ T6646] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  286.882171][ T6719] team0: Port device team_slave_0 added
[  286.882941][ T6646] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  286.970791][ T6719] team0: Port device team_slave_1 added
[  286.974592][ T6646] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  287.381060][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.381078][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.381115][ T6719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.450330][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.450346][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.450372][ T6719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.761796][ T6642] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  287.975274][ T6642] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  288.044246][ T6719] hsr_slave_0: entered promiscuous mode
[  288.045584][ T6719] hsr_slave_1: entered promiscuous mode
[  288.046483][ T6719] debugfs: 'hsr0' already exists in 'hsr'
[  288.046506][ T6719] Cannot create hsr debugfs directory
[  288.061869][  T733] bridge_slave_1: left allmulticast mode
[  288.061902][  T733] bridge_slave_1: left promiscuous mode
[  288.062173][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.155869][  T733] bridge_slave_0: left allmulticast mode
[  288.155914][  T733] bridge_slave_0: left promiscuous mode
[  288.156211][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.254546][  T733] bridge_slave_1: left allmulticast mode
[  288.254581][  T733] bridge_slave_1: left promiscuous mode
[  288.254831][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.342144][  T733] bridge_slave_0: left allmulticast mode
[  288.342181][  T733] bridge_slave_0: left promiscuous mode
[  288.342456][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.456760][  T733] bridge_slave_1: left allmulticast mode
[  288.456796][  T733] bridge_slave_1: left promiscuous mode
[  288.457134][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.535300][  T733] bridge_slave_0: left allmulticast mode
[  288.535337][  T733] bridge_slave_0: left promiscuous mode
[  288.535606][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.616862][  T733] bridge_slave_1: left allmulticast mode
[  288.616900][  T733] bridge_slave_1: left promiscuous mode
[  288.617175][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.681923][  T733] bridge_slave_0: left allmulticast mode
[  288.681959][  T733] bridge_slave_0: left promiscuous mode
[  288.682249][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.710898][  T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.791625][  T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.854669][  T733] bond0 (unregistering): Released all slaves
[  291.580933][  T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.642147][  T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.664496][  T733] bond0 (unregistering): Released all slaves
[  293.202185][  T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.262557][  T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.306107][  T733] bond0 (unregistering): Released all slaves
[  294.930896][  T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  294.992421][  T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.014629][  T733] bond0 (unregistering): Released all slaves
[  295.080971][ T6642] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  295.283102][ T6642] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  296.195019][ T6643] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  296.245309][ T6643] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  296.583239][ T6643] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  296.708293][ T6643] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  298.244767][ T6649] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.935343][ T6719] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  299.014129][ T6719] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  299.054107][ T6719] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  299.098186][ T6649] 8021q: adding VLAN 0 to HW filter on device team0
[  299.126524][ T6719] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  299.186350][ T6646] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.340179][  T733] hsr_slave_0: left promiscuous mode
[  299.381653][  T733] hsr_slave_1: left promiscuous mode
[  299.382659][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.382689][  T733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.411185][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.411214][  T733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.600140][  T733] hsr_slave_0: left promiscuous mode
[  299.620090][  T733] hsr_slave_1: left promiscuous mode
[  299.621022][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.621049][  T733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.671177][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.671208][  T733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.812191][  T733] hsr_slave_0: left promiscuous mode
[  299.830233][  T733] hsr_slave_1: left promiscuous mode
[  299.831181][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.831208][  T733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.894072][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.894105][  T733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.047389][  T733] veth1_macvtap: left promiscuous mode
[  300.047514][  T733] veth0_macvtap: left promiscuous mode
[  300.047875][  T733] veth1_vlan: left promiscuous mode
[  300.048093][  T733] veth0_vlan: left promiscuous mode
[  300.170867][  T733] veth1_macvtap: left promiscuous mode
[  300.170986][  T733] veth0_macvtap: left promiscuous mode
[  300.171275][  T733] veth1_vlan: left promiscuous mode
[  300.173486][  T733] veth0_vlan: left promiscuous mode
[  300.310602][  T733] veth1_macvtap: left promiscuous mode
[  300.310713][  T733] veth0_macvtap: left promiscuous mode
[  300.310973][  T733] veth1_vlan: left promiscuous mode
[  300.311165][  T733] veth0_vlan: left promiscuous mode
[  303.751757][  T733] team0 (unregistering): Port device team_slave_1 removed
[  303.952209][  T733] team0 (unregistering): Port device team_slave_0 removed
[  308.250742][  T733] team0 (unregistering): Port device team_slave_1 removed
[  308.493402][  T733] team0 (unregistering): Port device team_slave_0 removed
[  312.960946][  T733] team0 (unregistering): Port device team_slave_1 removed
[  313.181293][  T733] team0 (unregistering): Port device team_slave_0 removed
[  315.575652][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.575892][ T6030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.626570][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.626749][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.707715][ T6646] 8021q: adding VLAN 0 to HW filter on device team0
[  315.729948][ T6642] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.789185][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.789389][ T6613] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.865512][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.865703][ T6613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.071088][ T6642] 8021q: adding VLAN 0 to HW filter on device team0
[  316.085783][ T6643] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.184279][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.190545][ T6613] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.268292][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.268550][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.448066][ T6643] 8021q: adding VLAN 0 to HW filter on device team0
[  316.534703][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.534925][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.656905][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.657082][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.845642][ T6719] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.077041][ T6719] 8021q: adding VLAN 0 to HW filter on device team0
[  317.148452][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.148605][ T6613] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.307146][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.307301][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  317.546015][ T6649] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.689250][ T6646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.986697][ T6642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.243411][ T6643] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.975170][ T6719] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.178524][ T6649] veth0_vlan: entered promiscuous mode
[  319.278195][ T6649] veth1_vlan: entered promiscuous mode
[  319.482218][ T6646] veth0_vlan: entered promiscuous mode
[  319.633627][ T6646] veth1_vlan: entered promiscuous mode
[  319.744950][ T6649] veth0_macvtap: entered promiscuous mode
[  319.836015][ T6649] veth1_macvtap: entered promiscuous mode
[  319.951720][ T6642] veth0_vlan: entered promiscuous mode
[  320.044830][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_0
[  320.046660][ T6642] veth1_vlan: entered promiscuous mode
[  320.051176][ T6646] veth0_macvtap: entered promiscuous mode
[  320.109026][ T6643] veth0_vlan: entered promiscuous mode
[  320.116384][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.136231][ T6646] veth1_macvtap: entered promiscuous mode
[  320.212982][ T6375] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.225432][ T6375] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.247613][ T6375] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.260181][ T6643] veth1_vlan: entered promiscuous mode
[  320.280911][ T6375] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.392276][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  320.542351][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.650394][ T6719] veth0_vlan: entered promiscuous mode
[  320.653502][ T6642] veth0_macvtap: entered promiscuous mode
[  320.741039][ T6375] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.769594][ T6375] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.810903][ T6642] veth1_macvtap: entered promiscuous mode
[  320.812518][ T6375] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.860129][ T6375] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.891846][ T6719] veth1_vlan: entered promiscuous mode
[  321.060781][ T3609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.060803][ T3609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.111030][ T6643] veth0_macvtap: entered promiscuous mode
[  321.316819][ T6643] veth1_macvtap: entered promiscuous mode
[  321.474528][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.527557][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.537042][ T1490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.537063][ T1490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.667741][   T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.681027][ T6613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.681048][ T6613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.689171][   T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.715898][ T6643] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.736282][   T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.747758][   T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.783645][ T6719] veth0_macvtap: entered promiscuous mode
[  321.808954][ T6643] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.955733][ T6719] veth1_macvtap: entered promiscuous mode
[  321.972718][ T6030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.972738][ T6030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.999572][ T3609] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.030633][ T3609] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.145194][ T3609] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.185450][ T3609] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.339820][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  323.788648][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  324.663710][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.088377][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  327.101334][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  327.105725][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  327.106820][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  327.111220][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  327.679883][ T6391] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  327.724947][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  327.753384][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  327.756513][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  327.758394][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  327.761236][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  327.833827][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.834146][ T6391] usb 10-1: Using ep0 maxpacket: 8
[  327.867918][ T6391] usb 10-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[  327.867945][ T6391] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.867963][ T6391] usb 10-1: Product: syz
[  327.867976][ T6391] usb 10-1: Manufacturer: syz
[  327.867989][ T6391] usb 10-1: SerialNumber: syz
[  327.881587][ T6391] usb 10-1: config 0 descriptor??
[  327.977542][   T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  328.050302][   T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  328.055650][   T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  328.073446][   T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  328.084270][   T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  328.127164][ T5905] usb 10-1: USB disconnect, device number 2
[  329.399564][  T733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.572312][   T59] Bluetooth: hci1: command tx timeout
[  329.859938][   T59] Bluetooth: hci3: command tx timeout
[  330.260138][   T59] Bluetooth: hci4: command tx timeout
[  330.608015][ T3609] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.623621][ T3609] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.735205][ T6032] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  330.774520][  T733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.821642][ T3609] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.828488][ T3609] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.895972][ T6032] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.911665][ T6032] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  330.911697][ T6032] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.911717][ T6032] usb 10-1: Product: syz
[  330.911731][ T6032] usb 10-1: Manufacturer: syz
[  330.911746][ T6032] usb 10-1: SerialNumber: syz
[  332.047314][ T5851] Bluetooth: hci3: command tx timeout
[  332.055326][   T59] Bluetooth: hci1: command tx timeout
[  332.418885][   T59] Bluetooth: hci4: command tx timeout
[  332.584661][  T733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.768838][ T6945] netlink: 16 bytes leftover after parsing attributes in process `syz.9.145'.
[  332.787014][ T6945] geneve2: entered promiscuous mode
[  333.025162][  T733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.952654][ T6032] cdc_ncm 10-1:1.0: SET_NTB_FORMAT failed
[  333.973509][ T6032] cdc_ncm 10-1:1.0: bind() failure
[  334.047904][ T6032] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found
[  334.047947][ T6032] cdc_ncm 10-1:1.1: bind() failure
[  334.101576][ T5851] Bluetooth: hci3: command tx timeout
[  334.101673][   T59] Bluetooth: hci1: command tx timeout
[  334.118007][ T6032] usb 10-1: USB disconnect, device number 3
[  334.138723][ T6052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.138745][ T6052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.429874][   T59] Bluetooth: hci4: command tx timeout
[  336.190041][ T5851] Bluetooth: hci3: command tx timeout
[  336.190081][   T59] Bluetooth: hci1: command tx timeout
[  336.500321][   T59] Bluetooth: hci4: command tx timeout
[  337.852006][ T6960] vivid-004: disconnect
[  338.156844][ T6960] Bluetooth: MGMT ver 1.23
[  339.397133][  T733] bridge_slave_1: left allmulticast mode
[  339.397270][  T733] bridge_slave_1: left promiscuous mode
[  339.397548][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.596969][  T733] bridge_slave_0: left allmulticast mode
[  339.597003][  T733] bridge_slave_0: left promiscuous mode
[  339.597298][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.841326][  T733] bridge_slave_1: left allmulticast mode
[  339.841362][  T733] bridge_slave_1: left promiscuous mode
[  339.847763][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.073226][ T6955] vivid-004: reconnect
[  340.304338][  T733] bridge_slave_0: left allmulticast mode
[  340.304369][  T733] bridge_slave_0: left promiscuous mode
[  340.304614][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.012900][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  342.017684][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  342.018862][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  342.042974][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  342.044388][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  344.464219][   T59] Bluetooth: hci0: command tx timeout
[  346.489598][ T7015] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  346.986000][   T59] Bluetooth: hci0: command tx timeout
[  347.861338][ T7023] Bluetooth: MGMT ver 1.23
[  348.814495][  T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.900002][ T5928] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  348.918494][  T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.934850][  T733] bond0 (unregistering): Released all slaves
[  349.053769][ T5928] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  349.053842][ T5928] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15
[  349.057441][ T5928] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  349.057468][ T5928] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  349.057486][ T5928] usb 10-1: SerialNumber: syz
[  349.060247][   T59] Bluetooth: hci0: command tx timeout
[  349.136282][ T5928] usb 10-1: bad CDC descriptors
[  349.226723][  T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  349.320997][  T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  349.337250][ T5907] usb 10-1: USB disconnect, device number 4
[  349.427684][  T733] bond0 (unregistering): Released all slaves
[  350.269971][ T6032] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  350.332054][ T6927] chnl_net:caif_netlink_parms(): no params data found
[  350.351725][ T6934] chnl_net:caif_netlink_parms(): no params data found
[  350.430805][ T6032] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  350.430834][ T6032] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.430853][ T6032] usb 10-1: Product: syz
[  350.430866][ T6032] usb 10-1: Manufacturer: syz
[  350.430897][ T6032] usb 10-1: SerialNumber: syz
[  350.481537][ T6032] usb 10-1: config 0 descriptor??
[  350.539662][ T6937] chnl_net:caif_netlink_parms(): no params data found
[  350.706949][ T6032] hso 10-1:0.0: Failed to find BULK IN ep
[  350.722480][ T6032] usb-storage 10-1:0.0: USB Mass Storage device detected
[  350.911315][ T6032] usb 10-1: USB disconnect, device number 5
[  351.139838][   T59] Bluetooth: hci0: command tx timeout
[  351.776328][ T7047] geneve3: entered promiscuous mode
[  352.483185][ T7054] random: crng reseeded on system resumption
[  353.321011][  T733] hsr_slave_0: left promiscuous mode
[  353.554787][  T733] hsr_slave_1: left promiscuous mode
[  353.571231][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  353.571254][  T733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.621062][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.621093][  T733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.819393][  T733] veth1_macvtap: left promiscuous mode
[  353.819510][  T733] veth0_macvtap: left promiscuous mode
[  354.118330][  T733] veth1_vlan: left promiscuous mode
[  354.118575][  T733] veth0_vlan: left promiscuous mode
[  355.470752][ T6391] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  355.629949][ T6391] usb 10-1: Using ep0 maxpacket: 32
[  355.634566][ T6391] usb 10-1: config 0 has an invalid interface number: 212 but max is 0
[  355.634593][ T6391] usb 10-1: config 0 has no interface number 0
[  355.634648][ T6391] usb 10-1: config 0 interface 212 has no altsetting 0
[  355.647174][ T6391] usb 10-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=c5.d3
[  355.647208][ T6391] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.647230][ T6391] usb 10-1: Product: syz
[  355.647246][ T6391] usb 10-1: Manufacturer: syz
[  355.647262][ T6391] usb 10-1: SerialNumber: syz
[  355.666680][ T6391] usb 10-1: config 0 descriptor??
[  355.672079][ T6391] kvaser_usb 10-1:0.212: error -ENODEV: Cannot get usb endpoint(s)
[  355.885551][ T5993] usb 10-1: USB disconnect, device number 6
[  356.541592][ T7066] syz.9.162 uses obsolete (PF_INET,SOCK_PACKET)
[  357.249881][ T6391] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  357.433396][ T6391] usb 10-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  357.433510][ T6391] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  357.436004][ T6391] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  357.436030][ T6391] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  357.436049][ T6391] usb 10-1: SerialNumber: syz
[  357.725653][ T6391] cdc_acm 10-1:1.0: ttyACM0: USB ACM device
[  357.742154][ T6391] usb 10-1: USB disconnect, device number 7
[  357.940919][  T733] team0 (unregistering): Port device team_slave_1 removed
[  358.182171][  T733] team0 (unregistering): Port device team_slave_0 removed
[  361.224055][ T6927] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.224215][ T6927] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.224437][ T6927] bridge_slave_0: entered allmulticast mode
[  361.227420][ T6927] bridge_slave_0: entered promiscuous mode
[  361.333270][ T6934] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.333439][ T6934] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.333670][ T6934] bridge_slave_0: entered allmulticast mode
[  361.336583][ T6934] bridge_slave_0: entered promiscuous mode
[  361.360063][ T6927] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.386446][ T6927] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.386708][ T6927] bridge_slave_1: entered allmulticast mode
[  361.389573][ T6927] bridge_slave_1: entered promiscuous mode
[  361.558188][ T6934] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.558329][ T6934] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.558627][ T6934] bridge_slave_1: entered allmulticast mode
[  361.563630][ T6934] bridge_slave_1: entered promiscuous mode
[  361.682882][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.683031][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.683243][ T6937] bridge_slave_0: entered allmulticast mode
[  361.686002][ T6937] bridge_slave_0: entered promiscuous mode
[  361.937388][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.937579][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.937798][ T6937] bridge_slave_1: entered allmulticast mode
[  361.943459][ T6937] bridge_slave_1: entered promiscuous mode
[  362.183946][ T6927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.189049][ T6934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.309437][ T6927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.340762][ T6934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.523408][ T6937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.717849][ T6937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.014378][ T6927] team0: Port device team_slave_0 added
[  363.017776][ T6934] team0: Port device team_slave_0 added
[  363.136213][ T6927] team0: Port device team_slave_1 added
[  363.164191][ T6934] team0: Port device team_slave_1 added
[  363.167418][ T6937] team0: Port device team_slave_0 added
[  363.468960][ T6937] team0: Port device team_slave_1 added
[  364.068637][ T6927] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.068650][ T6927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.068668][ T6927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.085759][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.085776][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.085803][ T6934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.204088][ T6927] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.204106][ T6927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.204133][ T6927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.277912][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.277940][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.277966][ T6934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.342782][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.342800][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.342829][ T6937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.433698][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.433716][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.433745][ T6937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.973466][ T6927] hsr_slave_0: entered promiscuous mode
[  364.974956][ T6927] hsr_slave_1: entered promiscuous mode
[  365.073820][ T6985] chnl_net:caif_netlink_parms(): no params data found
[  365.099246][ T6934] hsr_slave_0: entered promiscuous mode
[  365.102325][ T6934] hsr_slave_1: entered promiscuous mode
[  365.104029][ T6934] debugfs: 'hsr0' already exists in 'hsr'
[  365.104058][ T6934] Cannot create hsr debugfs directory
[  365.230041][ T6937] hsr_slave_0: entered promiscuous mode
[  365.231320][ T6937] hsr_slave_1: entered promiscuous mode
[  365.232226][ T6937] debugfs: 'hsr0' already exists in 'hsr'
[  365.232252][ T6937] Cannot create hsr debugfs directory
[  367.262117][ T6985] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.262254][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.262436][ T6985] bridge_slave_0: entered allmulticast mode
[  367.265223][ T6985] bridge_slave_0: entered promiscuous mode
[  367.484317][  T733] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.567450][ T6985] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.567560][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.567696][ T6985] bridge_slave_1: entered allmulticast mode
[  367.569478][ T6985] bridge_slave_1: entered promiscuous mode
[  368.048460][  T733] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.219550][ T6985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.570492][  T733] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.625480][ T6985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.244127][  T733] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.309583][ T6985] team0: Port device team_slave_0 added
[  369.470576][ T6927] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.533023][ T6985] team0: Port device team_slave_1 added
[  369.875591][ T6927] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.983385][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.983403][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.983432][ T6985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.990811][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.990830][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.990862][ T6985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.204785][ T6927] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.497709][ T6927] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.769099][ T6985] hsr_slave_0: entered promiscuous mode
[  370.789032][ T6985] hsr_slave_1: entered promiscuous mode
[  370.801102][ T6985] debugfs: 'hsr0' already exists in 'hsr'
[  370.801129][ T6985] Cannot create hsr debugfs directory
[  371.037956][  T733] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.457642][ T6934] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.664501][  T733] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.936997][ T6934] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.139412][  T733] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.347839][ T6934] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.578028][  T733] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.771789][ T6934] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.521350][  T733] bridge_slave_1: left allmulticast mode
[  373.521386][  T733] bridge_slave_1: left promiscuous mode
[  373.522494][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.610896][  T733] bridge_slave_0: left allmulticast mode
[  373.610932][  T733] bridge_slave_0: left promiscuous mode
[  373.611245][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.694684][  T733] bridge_slave_1: left allmulticast mode
[  373.694715][  T733] bridge_slave_1: left promiscuous mode
[  373.694947][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.801938][  T733] bridge_slave_0: left allmulticast mode
[  373.801972][  T733] bridge_slave_0: left promiscuous mode
[  373.802268][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.894361][  T733] bridge_slave_1: left allmulticast mode
[  373.894393][  T733] bridge_slave_1: left promiscuous mode
[  373.894633][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.991577][  T733] bridge_slave_0: left allmulticast mode
[  373.991611][  T733] bridge_slave_0: left promiscuous mode
[  373.991970][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.074718][  T733] bridge_slave_1: left allmulticast mode
[  374.074752][  T733] bridge_slave_1: left promiscuous mode
[  374.075014][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.151716][  T733] bridge_slave_0: left allmulticast mode
[  374.151752][  T733] bridge_slave_0: left promiscuous mode
[  374.152019][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.821732][  T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  376.881046][  T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  376.925975][  T733] bond0 (unregistering): Released all slaves
[  378.430695][  T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  378.490482][  T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  378.517182][  T733] bond0 (unregistering): Released all slaves
[  380.050734][  T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.110675][  T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.135105][  T733] bond0 (unregistering): Released all slaves
[  381.681937][  T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  381.750795][  T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  381.803392][  T733] bond0 (unregistering): Released all slaves
[  383.084184][ T6927] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  383.382916][ T6927] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  383.537233][ T6927] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  383.616849][ T6927] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  383.880358][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  383.880431][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  385.170189][  T733] hsr_slave_0: left promiscuous mode
[  385.204118][  T733] hsr_slave_1: left promiscuous mode
[  385.205117][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.205146][  T733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.272022][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  385.272056][  T733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.424185][  T733] hsr_slave_0: left promiscuous mode
[  385.440489][  T733] hsr_slave_1: left promiscuous mode
[  385.441501][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.441530][  T733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.500970][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  385.500999][  T733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.679982][  T733] hsr_slave_0: left promiscuous mode
[  385.729951][  T733] hsr_slave_1: left promiscuous mode
[  385.730923][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.730952][  T733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.823372][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  385.823406][  T733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  386.101092][  T733] hsr_slave_0: left promiscuous mode
[  386.160963][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  386.166903][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  386.168694][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  386.186060][  T733] hsr_slave_1: left promiscuous mode
[  386.187150][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  386.187182][  T733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  386.200882][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  386.201814][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  386.283882][  T733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  386.283914][  T733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  386.587991][  T733] veth1_macvtap: left promiscuous mode
[  386.588117][  T733] veth0_macvtap: left promiscuous mode
[  386.588419][  T733] veth1_vlan: left promiscuous mode
[  386.588614][  T733] veth0_vlan: left promiscuous mode
[  386.624605][   T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  386.650182][   T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  386.653939][   T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  386.655151][   T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  386.656573][   T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  386.721168][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  386.729072][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  386.741442][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  386.743032][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  386.744088][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  386.772741][  T733] veth1_macvtap: left promiscuous mode
[  386.772874][  T733] veth0_macvtap: left promiscuous mode
[  386.773180][  T733] veth1_vlan: left promiscuous mode
[  386.773400][  T733] veth0_vlan: left promiscuous mode
[  386.872470][  T733] veth1_macvtap: left promiscuous mode
[  386.872586][  T733] veth0_macvtap: left promiscuous mode
[  386.872885][  T733] veth1_vlan: left promiscuous mode
[  386.873112][  T733] veth0_vlan: left promiscuous mode
[  387.010350][  T733] veth1_macvtap: left promiscuous mode
[  387.010483][  T733] veth0_macvtap: left promiscuous mode
[  387.012816][  T733] veth1_vlan: left promiscuous mode
[  387.013081][  T733] veth0_vlan: left promiscuous mode
[  388.345044][ T5840] Bluetooth: hci2: command tx timeout
[  388.739927][ T5840] Bluetooth: hci5: command tx timeout
[  388.819833][ T5840] Bluetooth: hci6: command tx timeout
[  390.113235][  T733] team0 (unregistering): Port device team_slave_1 removed
[  390.367522][  T733] team0 (unregistering): Port device team_slave_0 removed
[  390.420379][ T5851] Bluetooth: hci2: command tx timeout
[  390.820015][ T5851] Bluetooth: hci5: command tx timeout
[  390.910014][ T5851] Bluetooth: hci6: command tx timeout
[  391.059844][ T5851] Bluetooth: hci7: command 0x0406 tx timeout
[  392.513556][ T5840] Bluetooth: hci2: command tx timeout
[  392.899924][ T5840] Bluetooth: hci5: command tx timeout
[  392.980077][ T5840] Bluetooth: hci6: command tx timeout
[  394.591932][ T5840] Bluetooth: hci2: command tx timeout
[  394.920792][  T733] team0 (unregistering): Port device team_slave_1 removed
[  394.979999][ T5840] Bluetooth: hci5: command tx timeout
[  395.064158][ T5840] Bluetooth: hci6: command tx timeout
[  395.132308][  T733] team0 (unregistering): Port device team_slave_0 removed
[  399.516744][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  399.521551][ T5851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  399.534930][ T5851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  399.536951][ T5851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  399.556296][ T5851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  399.732289][  T733] team0 (unregistering): Port device team_slave_1 removed
[  400.008477][  T733] team0 (unregistering): Port device team_slave_0 removed
[  401.619889][ T5840] Bluetooth: hci8: command tx timeout
[  403.699816][ T5840] Bluetooth: hci8: command tx timeout
[  404.492082][  T733] team0 (unregistering): Port device team_slave_1 removed
[  404.710683][  T733] team0 (unregistering): Port device team_slave_0 removed
[  405.779976][ T5840] Bluetooth: hci8: command tx timeout
[  407.870303][ T5840] Bluetooth: hci8: command tx timeout
[  410.353216][ T7160] chnl_net:caif_netlink_parms(): no params data found
[  410.365233][ T7154] chnl_net:caif_netlink_parms(): no params data found
[  410.454590][ T7156] chnl_net:caif_netlink_parms(): no params data found
[  410.772058][ T7152] chnl_net:caif_netlink_parms(): no params data found
[  411.991322][ T7160] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.991544][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.991742][ T7160] bridge_slave_0: entered allmulticast mode
[  411.994558][ T7160] bridge_slave_0: entered promiscuous mode
[  411.996815][ T7154] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.996982][ T7154] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.997524][ T7154] bridge_slave_0: entered allmulticast mode
[  412.001618][ T7154] bridge_slave_0: entered promiscuous mode
[  412.154573][ T7154] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.154738][ T7154] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.154950][ T7154] bridge_slave_1: entered allmulticast mode
[  412.158936][ T7154] bridge_slave_1: entered promiscuous mode
[  412.161853][ T7160] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.161993][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.162251][ T7160] bridge_slave_1: entered allmulticast mode
[  412.165641][ T7160] bridge_slave_1: entered promiscuous mode
[  412.288468][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.288633][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.288907][ T7156] bridge_slave_0: entered allmulticast mode
[  412.305614][ T7156] bridge_slave_0: entered promiscuous mode
[  412.582206][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.582357][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.582579][ T7156] bridge_slave_1: entered allmulticast mode
[  412.586827][ T7156] bridge_slave_1: entered promiscuous mode
[  412.799913][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.800081][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.800351][ T7152] bridge_slave_0: entered allmulticast mode
[  412.803578][ T7152] bridge_slave_0: entered promiscuous mode
[  412.905130][ T7154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.909125][ T7160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.929195][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.938375][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.938645][ T7152] bridge_slave_1: entered allmulticast mode
[  412.956222][ T7152] bridge_slave_1: entered promiscuous mode
[  413.045104][ T7154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.065222][ T7160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.287519][ T7156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.561347][ T7156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.747613][ T7152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.795640][ T7154] team0: Port device team_slave_0 added
[  413.842466][ T7160] team0: Port device team_slave_0 added
[  413.854608][ T7152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.932123][ T7154] team0: Port device team_slave_1 added
[  413.963900][ T7160] team0: Port device team_slave_1 added
[  414.103871][ T7156] team0: Port device team_slave_0 added
[  414.363650][ T7156] team0: Port device team_slave_1 added
[  414.768815][ T7152] team0: Port device team_slave_0 added
[  414.864654][ T7154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  414.864673][ T7154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.864701][ T7154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  414.867398][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  414.867413][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.867440][ T7160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  414.961801][ T7152] team0: Port device team_slave_1 added
[  415.063320][ T7154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  415.063339][ T7154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.063367][ T7154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.064845][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  415.064859][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.064884][ T7160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.222618][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.222635][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.222663][ T7156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  415.371244][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_1
[  415.371261][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.371289][ T7156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.379642][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.384420][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.384450][ T7152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  415.471285][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  415.471302][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.471330][ T7152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.933209][ T7154] hsr_slave_0: entered promiscuous mode
[  415.934664][ T7154] hsr_slave_1: entered promiscuous mode
[  415.935575][ T7154] debugfs: 'hsr0' already exists in 'hsr'
[  415.935597][ T7154] Cannot create hsr debugfs directory
[  415.948021][ T7160] hsr_slave_0: entered promiscuous mode
[  415.986910][ T7160] hsr_slave_1: entered promiscuous mode
[  415.988095][ T7160] debugfs: 'hsr0' already exists in 'hsr'
[  415.988117][ T7160] Cannot create hsr debugfs directory
[  416.212376][ T7156] hsr_slave_0: entered promiscuous mode
[  416.213867][ T7156] hsr_slave_1: entered promiscuous mode
[  416.214872][ T7156] debugfs: 'hsr0' already exists in 'hsr'
[  416.214898][ T7156] Cannot create hsr debugfs directory
[  416.691206][ T7152] hsr_slave_0: entered promiscuous mode
[  416.692633][ T7152] hsr_slave_1: entered promiscuous mode
[  416.693672][ T7152] debugfs: 'hsr0' already exists in 'hsr'
[  416.693698][ T7152] Cannot create hsr debugfs directory
[  421.967529][  T733] bridge_slave_1: left allmulticast mode
[  421.967620][  T733] bridge_slave_1: left promiscuous mode
[  421.967840][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.022354][  T733] bridge_slave_0: left allmulticast mode
[  422.022375][  T733] bridge_slave_0: left promiscuous mode
[  422.022547][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.094896][  T733] bridge_slave_1: left allmulticast mode
[  422.094931][  T733] bridge_slave_1: left promiscuous mode
[  422.095203][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.151716][  T733] bridge_slave_0: left allmulticast mode
[  422.151752][  T733] bridge_slave_0: left promiscuous mode
[  422.152028][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.224219][  T733] bridge_slave_1: left allmulticast mode
[  422.224256][  T733] bridge_slave_1: left promiscuous mode
[  422.224497][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.293447][  T733] bridge_slave_0: left allmulticast mode
[  422.293494][  T733] bridge_slave_0: left promiscuous mode
[  422.293788][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.374617][  T733] bridge_slave_1: left allmulticast mode
[  422.374654][  T733] bridge_slave_1: left promiscuous mode
[  422.374921][  T733] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.441864][  T733] bridge_slave_0: left allmulticast mode
[  422.441899][  T733] bridge_slave_0: left promiscuous mode
[  422.442171][  T733] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.854357][  T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  422.930911][  T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.010200][  T733] bond0 (unregistering): Released all slaves
[  423.260645][  T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.363981][  T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.424007][  T733] bond0 (unregistering): Released all slaves
[  423.681015][  T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.760608][  T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.845121][  T733] bond0 (unregistering): Released all slaves
[  424.260699][  T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  424.340771][  T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  424.406307][  T733] bond0 (unregistering): Released all slaves
[  425.349986][  T733] hsr_slave_0: left promiscuous mode
[  425.369845][  T733] hsr_slave_1: left promiscuous mode
[  425.372384][  T733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.400926][  T733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.579914][  T733] hsr_slave_0: left promiscuous mode
[  425.599962][  T733] hsr_slave_1: left promiscuous mode
[  425.600929][  T733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.650690][  T733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.789916][  T733] hsr_slave_0: left promiscuous mode
[  425.811273][  T733] hsr_slave_1: left promiscuous mode
[  425.812193][  T733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.854407][  T733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.990097][  T733] hsr_slave_0: left promiscuous mode
[  426.020176][  T733] hsr_slave_1: left promiscuous mode
[  426.022315][  T733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.074607][  T733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.930678][  T733] team0 (unregistering): Port device team_slave_1 removed
[  427.071951][  T733] team0 (unregistering): Port device team_slave_0 removed
[  428.320656][  T733] team0 (unregistering): Port device team_slave_1 removed
[  428.460673][  T733] team0 (unregistering): Port device team_slave_0 removed
[  429.678520][  T733] team0 (unregistering): Port device team_slave_1 removed
[  429.820832][  T733] team0 (unregistering): Port device team_slave_0 removed
[  431.080848][  T733] team0 (unregistering): Port device team_slave_1 removed
[  431.231931][  T733] team0 (unregistering): Port device team_slave_0 removed
[  432.071528][ T7154] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  432.134352][ T7154] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  432.197516][ T7154] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  432.288468][ T7154] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  432.498046][ T7160] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  432.556041][ T7160] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  432.630626][ T7160] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  432.739399][ T7160] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  432.970195][ T7156] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  433.035461][ T7156] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  433.171845][ T7156] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  433.239885][ T7156] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  433.561576][ T7152] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  433.607637][ T7152] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  433.667987][ T7152] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  433.741825][ T7152] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  434.016359][ T7154] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.242967][ T7154] 8021q: adding VLAN 0 to HW filter on device team0
[  434.267675][ T7160] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.328924][ T6595] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.329875][ T6595] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.399086][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.399942][ T6375] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.469423][ T7160] 8021q: adding VLAN 0 to HW filter on device team0
[  434.548669][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.548964][ T6375] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.595202][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.626044][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.626693][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.787571][ T7152] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.799208][ T7156] 8021q: adding VLAN 0 to HW filter on device team0
[  434.898332][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.898532][ T6375] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.983102][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.983258][ T6375] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.045510][ T7152] 8021q: adding VLAN 0 to HW filter on device team0
[  435.129287][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.133844][ T6375] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.236382][ T6595] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.239930][ T6595] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.956000][ T7154] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.959430][ T7160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.505823][ T7156] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.751547][ T7152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.239959][ T7160] veth0_vlan: entered promiscuous mode
[  437.301265][ T7160] veth1_vlan: entered promiscuous mode
[  437.570161][ T7160] veth0_macvtap: entered promiscuous mode
[  437.609606][ T7160] veth1_macvtap: entered promiscuous mode
[  437.661417][ T7154] veth0_vlan: entered promiscuous mode
[  437.752525][ T7154] veth1_vlan: entered promiscuous mode
[  437.783733][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  437.825960][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  437.917410][ T7156] veth0_vlan: entered promiscuous mode
[  437.942310][ T6566] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.951414][ T6566] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.978672][ T6566] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.000528][ T6566] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.094868][ T7156] veth1_vlan: entered promiscuous mode
[  438.173742][ T7152] veth0_vlan: entered promiscuous mode
[  438.212790][ T7154] veth0_macvtap: entered promiscuous mode
[  438.283837][ T7154] veth1_macvtap: entered promiscuous mode
[  438.397913][ T7152] veth1_vlan: entered promiscuous mode
[  438.545949][ T7154] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.596039][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.596060][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.617934][ T7154] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.627637][ T7156] veth0_macvtap: entered promiscuous mode
[  438.731954][ T7156] veth1_macvtap: entered promiscuous mode
[  438.766632][ T6566] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.776126][ T6566] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.796011][ T6566] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.822169][ T6566] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.844357][ T6566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.844377][ T6566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.870633][ T7152] veth0_macvtap: entered promiscuous mode
[  438.964395][ T7152] veth1_macvtap: entered promiscuous mode
[  438.985611][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_0
[  439.065843][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_1
[  439.229767][ T6375] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  439.251687][ T6375] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  439.268504][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  439.268599][ T6375] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  439.271552][ T3580] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.164561][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  440.406370][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.406393][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.534837][ T3580] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.555682][ T3580] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.642258][ T3580] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.798252][ T3605] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.848065][ T7355] netlink: 'syz.9.167': attribute type 13 has an invalid length.
[  440.848086][ T7355] netlink: 172 bytes leftover after parsing attributes in process `syz.9.167'.
[  441.351708][ T7358] random: crng reseeded on system resumption
[  442.534646][ T7355] erspan0: refused to change device tx_queue_len
[  442.615421][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.615441][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.870216][ T6051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.870238][ T6051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.243911][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.243934][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.403491][ T7379] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  443.791667][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.791687][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.160025][   T44] usb 10-1: new low-speed USB device number 8 using dummy_hcd
[  444.318997][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.319017][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.340775][ T5993] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  445.321650][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  445.321731][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  445.463358][   T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  445.463396][   T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  445.463452][   T44] usb 10-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00
[  445.463477][   T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.528288][   T44] usb 10-1: config 0 descriptor??
[  445.541673][ T5993] usb 6-1: Using ep0 maxpacket: 16
[  445.550488][ T7383] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  445.560470][ T5993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  445.575045][ T5993] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  445.575069][ T5993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.575087][ T5993] usb 6-1: Product: syz
[  445.575099][ T5993] usb 6-1: Manufacturer: syz
[  445.575112][ T5993] usb 6-1: SerialNumber: syz
[  445.668810][ T5993] usb 6-1: config 0 descriptor??
[  445.809251][   T44] usb 10-1: string descriptor 0 read error: -71
[  445.825353][ T5993] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  445.865752][ T5840] Bluetooth: hci7: unexpected event for opcode 0x1003
[  446.094412][ T5993] usb 6-1: USB disconnect, device number 2
[  446.097156][ T6595] usb 6-1: Failed to submit usb control message: -71
[  446.097188][ T6595] usb 6-1: unable to send the bmi data to the device: -71
[  446.097203][ T6595] usb 6-1: unable to get target info from device
[  446.097229][ T6595] usb 6-1: could not get target info (-71)
[  446.098146][ T6595] usb 6-1: could not probe fw (-71)
[  446.171863][   T44] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input7
[  446.236256][ T5192] bcm5974 10-1:0.0: could not read from device
[  446.412245][ T5192] bcm5974 10-1:0.0: could not read from device
[  446.504520][   T44] usb 10-1: USB disconnect, device number 8
[  446.977377][ T7218] udevd[7218]: Error opening device "/dev/input/event4": No such file or directory
[  446.977520][ T7218] udevd[7218]: Unable to EVIOCGABS device "/dev/input/event4"
[  446.977639][ T7218] udevd[7218]: Unable to EVIOCGABS device "/dev/input/event4"
[  446.977756][ T7218] udevd[7218]: Unable to EVIOCGABS device "/dev/input/event4"
[  446.977876][ T7218] udevd[7218]: Unable to EVIOCGABS device "/dev/input/event4"
[  448.516844][ T7425] block nbd0: Attempted send on invalid socket
[  448.516870][ T7425] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  449.174980][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  449.188558][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  449.225853][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  449.234782][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  449.235950][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  449.250172][  T991] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  449.400493][  T991] usb 6-1: Using ep0 maxpacket: 8
[  449.413553][  T991] usb 6-1: config 2 has an invalid interface number: 175 but max is 0
[  449.413582][  T991] usb 6-1: config 2 has no interface number 0
[  449.413625][  T991] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=92.5b
[  449.413642][  T991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.181016][ T7444] tty tty3: ldisc open failed (-12), clearing slot 2
[  450.392822][  T991] usb 6-1: USB disconnect, device number 3
[  451.620821][ T5840] Bluetooth: hci0: command tx timeout
[  451.994166][ T7494] i2c i2c-0: Invalid block read size 255
[  453.537229][ T6051] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.700082][ T5840] Bluetooth: hci0: command tx timeout
[  455.779955][ T5840] Bluetooth: hci0: command tx timeout
[  456.036154][ T6051] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.332544][   T44] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  456.532572][   T44] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  456.532600][   T44] usb 9-1: config 220 has 1 interface, different from the descriptor's value: 3
[  456.532639][   T44] usb 9-1: config 220 interface 0 has no altsetting 0
[  456.536440][   T44] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  456.536469][   T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.536491][   T44] usb 9-1: Product: syz
[  456.536505][   T44] usb 9-1: Manufacturer: syz
[  456.536520][   T44] usb 9-1: SerialNumber: syz
[  457.010473][   T44] usb 9-1: Found UVC 0.00 device syz (8086:0b07)
[  457.010532][   T44] usb 9-1: No valid video chain found.
[  457.045723][ T6051] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.070375][   T44] usb 9-1: USB disconnect, device number 2
[  457.653697][ T6051] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.969795][ T5840] Bluetooth: hci0: command tx timeout
[  458.854725][ T5840] Bluetooth: hci5: unexpected cc 0x2002 length: 65 > 4
[  459.074384][ T7441] chnl_net:caif_netlink_parms(): no params data found
[  459.522630][ T6051] bridge_slave_1: left allmulticast mode
[  459.522663][ T6051] bridge_slave_1: left promiscuous mode
[  459.522940][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.663943][ T6051] bridge_slave_0: left allmulticast mode
[  459.663977][ T6051] bridge_slave_0: left promiscuous mode
[  459.664269][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.779941][ T5907] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  459.801388][   T38] kauditd_printk_skb: 9 callbacks suppressed
[  459.801407][   T38] audit: type=1326 audit(1758242386.973:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7603 comm="syz.8.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77912eba9 code=0x7ffc0000
[  459.840222][   T38] audit: type=1326 audit(1758242386.993:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7603 comm="syz.8.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77912eba9 code=0x7ffc0000
[  459.840274][   T38] audit: type=1326 audit(1758242387.033:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7603 comm="syz.8.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fe77912eba9 code=0x7ffc0000
[  459.840318][   T38] audit: type=1326 audit(1758242387.033:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7603 comm="syz.8.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77912eba9 code=0x7ffc0000
[  459.840588][   T38] audit: type=1326 audit(1758242387.033:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7603 comm="syz.8.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77912eba9 code=0x7ffc0000
[  459.969891][ T5907] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  459.969922][ T5907] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.007370][ T5907] usb 10-1: config 0 descriptor??
[  460.049068][ T5907] cp210x 10-1:0.0: cp210x converter detected
[  460.279840][ T5907] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -121
[  460.279880][ T5907] cp210x 10-1:0.0: querying part number failed
[  460.306579][ T5907] usb 10-1: cp210x converter now attached to ttyUSB0
[  460.474391][    C0] vkms_vblank_simulate: vblank timer overrun
[  460.730043][ T5907] usb 10-1: USB disconnect, device number 9
[  461.119456][ T5907] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  461.146239][ T5907] cp210x 10-1:0.0: device disconnected
[  461.227278][   T38] audit: type=1326 audit(1758242388.413:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7614 comm="syz.5.238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58d0adeba9 code=0x0
[  463.619342][    C1] vkms_vblank_simulate: vblank timer overrun
[  464.979898][ T6021] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  465.122217][ T6021] usb 10-1: device descriptor read/64, error -71
[  465.361724][ T6021] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  465.511141][ T6021] usb 10-1: device descriptor read/64, error -71
[  465.656060][ T6021] usb usb10-port1: attempt power cycle
[  468.355486][    C0] vcan0: j1939_tp_rxtimer: 0xffff888031962800: rx timeout, send abort
[  468.858528][    C0] vcan0: j1939_tp_rxtimer: 0xffff888031962800: abort rx timeout. Force session deactivation
[  470.275103][ T6051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  470.380640][ T6051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  470.451532][ T6051] bond0 (unregistering): Released all slaves
[  471.012546][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805db58800: rx timeout, send abort
[  471.512633][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805db58800: abort rx timeout. Force session deactivation
[  471.877278][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805e5b8c00: rx timeout, send abort
[  472.062992][ T7441] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.064434][ T7441] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.064658][ T7441] bridge_slave_0: entered allmulticast mode
[  472.122107][ T7441] bridge_slave_0: entered promiscuous mode
[  472.155535][ T7441] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.155681][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.155930][ T7441] bridge_slave_1: entered allmulticast mode
[  472.201530][ T7441] bridge_slave_1: entered promiscuous mode
[  472.239751][ T6204] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  472.377362][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805e5b8c00: abort rx timeout. Force session deactivation
[  472.422234][ T6204] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  472.422265][ T6204] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.422285][ T6204] usb 10-1: Product: syz
[  472.422299][ T6204] usb 10-1: Manufacturer: syz
[  472.422313][ T6204] usb 10-1: SerialNumber: syz
[  473.145917][ T6204] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  473.146507][ T6204] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  473.679300][ T6204] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  473.753297][ T6204] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[  473.842506][ T6204] usb 10-1: USB disconnect, device number 13
[  474.470082][    C1] vkms_vblank_simulate: vblank timer overrun
[  474.499284][ T7441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  474.521831][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880365fd000: rx timeout, send abort
[  474.846559][    C1] vkms_vblank_simulate: vblank timer overrun
[  475.022007][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880365fd000: abort rx timeout. Force session deactivation
[  475.045585][    C1] vkms_vblank_simulate: vblank timer overrun
[  475.810968][ T6051] hsr_slave_0: left promiscuous mode
[  475.911478][ T6051] hsr_slave_1: left promiscuous mode
[  476.227296][    C1] vkms_vblank_simulate: vblank timer overrun
[  476.287700][ T6051] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  476.287734][ T6051] batman_adv: batadv0: Removing interface: batadv_slave_0
[  477.314301][ T7740] netlink: 24 bytes leftover after parsing attributes in process `syz.8.281'.
[  478.084761][ T7748] binder: 7747:7748 ioctl 40046210 0 returned -14
[  478.196781][ T6051] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  478.196807][ T6051] batman_adv: batadv0: Removing interface: batadv_slave_1
[  478.629247][ T6051] veth1_macvtap: left promiscuous mode
[  478.629359][ T6051] veth0_macvtap: left promiscuous mode
[  478.630900][ T6051] veth1_vlan: left promiscuous mode
[  478.631147][ T6051] veth0_vlan: left promiscuous mode
[  479.366154][ T5993] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  480.433669][ T5840] Bluetooth: hci5: Malformed LE Event: 0x1d
[  483.721074][ T6051] team0 (unregistering): Port device team_slave_1 removed
[  483.962588][ T6051] team0 (unregistering): Port device team_slave_0 removed
[  486.294264][ T7441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  486.534791][ T7783] netlink: 'syz.8.298': attribute type 2 has an invalid length.
[  486.534810][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.8.298'.
[  486.663487][ T7783] : entered promiscuous mode
[  486.888494][ T7441] team0: Port device team_slave_0 added
[  486.964087][ T7794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  486.966360][ T7441] team0: Port device team_slave_1 added
[  488.357445][ T7441] batman_adv: batadv0: Adding interface: batadv_slave_0
[  488.357462][ T7441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.357492][ T7441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.926851][ T7441] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.926870][ T7441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.926900][ T7441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  491.568856][ T7835] netlink: 56 bytes leftover after parsing attributes in process `syz.6.316'.
[  491.686967][ T7441] hsr_slave_0: entered promiscuous mode
[  491.688317][ T7441] hsr_slave_1: entered promiscuous mode
[  494.634805][ T5840] Bluetooth: hci7: unexpected event for opcode 0x0c25
[  494.651029][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880605bc400: rx timeout, send abort
[  495.151100][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880605bc400: abort rx timeout. Force session deactivation
[  498.026163][ T7441] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  498.092732][ T7441] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  498.231881][ T7441] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  498.985816][ T7441] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  502.190285][ T5993] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  502.235577][ T7441] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.301199][ T7441] 8021q: adding VLAN 0 to HW filter on device team0
[  502.331181][ T5993] usb 7-1: device descriptor read/64, error -71
[  502.338991][ T4578] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.340389][ T4578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  502.385549][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.385701][ T6613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  502.580255][ T5993] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  502.638425][ T6204] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  502.720431][ T5993] usb 7-1: device descriptor read/64, error -71
[  502.799923][ T6204] usb 6-1: Using ep0 maxpacket: 16
[  502.802715][ T6204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  502.802749][ T6204] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  502.802790][ T6204] usb 6-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00
[  502.802812][ T6204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.833556][ T5993] usb usb7-port1: attempt power cycle
[  502.885875][ T6204] usb 6-1: config 0 descriptor??
[  503.267123][ T5993] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  503.280346][ T5993] usb 7-1: device descriptor read/8, error -71
[  503.452593][ T6204] smartjoyplus 0003:0925:0005.0001: item fetching failed at offset 3/5
[  503.453471][ T6204] smartjoyplus 0003:0925:0005.0001: parse failed
[  503.453555][ T6204] smartjoyplus 0003:0925:0005.0001: probe with driver smartjoyplus failed with error -22
[  503.529967][ T5993] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  503.550627][ T5993] usb 7-1: device descriptor read/8, error -71
[  503.644693][ T6032] usb 6-1: USB disconnect, device number 4
[  503.663865][ T5993] usb usb7-port1: unable to enumerate USB device
[  504.116560][ T7441] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.462052][ T8026] tipc: Invalid UDP bearer configuration
[  504.462098][ T8026] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  506.868942][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  506.869020][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  507.157398][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805d76a400: rx timeout, send abort
[  507.375682][ T8060] netlink: 64691 bytes leftover after parsing attributes in process `syz.9.376'.
[  507.597403][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030e7f400: rx timeout, send abort
[  507.657502][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805d76a400: abort rx timeout. Force session deactivation
[  508.097606][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030e7f400: abort rx timeout. Force session deactivation
[  508.391429][ T8080] xt_time: invalid argument - start or stop time greater than 23:59:59
[  508.744530][   T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  508.747216][   T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  508.748722][   T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  508.756979][   T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  508.761909][   T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  508.819723][ T5851] Bluetooth: hci5: command 0x0406 tx timeout
[  510.821714][ T5840] Bluetooth: hci0: command tx timeout
[  511.867310][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805c632800: rx timeout, send abort
[  511.867506][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c632800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  512.031978][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805c632000: rx timeout, send abort
[  512.369792][ T6021] usb 10-1: new full-speed USB device number 14 using dummy_hcd
[  512.532054][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805c632000: abort rx timeout. Force session deactivation
[  512.572157][ T6021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  512.572181][ T6021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  512.572207][ T6021] usb 10-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  512.572222][ T6021] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.633899][ T6021] usb 10-1: config 0 descriptor??
[  512.760590][   T38] audit: type=1400 audit(1758242439.943:28): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8137 comm="syz.6.394" netif=wpan0
[  512.899969][ T5840] Bluetooth: hci0: command tx timeout
[  513.184598][ T6021] hid-u2fzero 0003:10C4:8ACF.0002: unknown main item tag 0x3
[  513.184665][ T6021] hid-u2fzero 0003:10C4:8ACF.0002: item fetching failed at offset 4/5
[  513.185654][ T6021] hid-u2fzero 0003:10C4:8ACF.0002: probe with driver hid-u2fzero failed with error -22
[  513.347753][ T6021] usb 10-1: USB disconnect, device number 14
[  513.646492][ T8087] chnl_net:caif_netlink_parms(): no params data found
[  513.967121][ T5840] Bluetooth: hci6: command 0x0406 tx timeout
[  514.825073][ T6375] bridge_slave_1: left allmulticast mode
[  514.825106][ T6375] bridge_slave_1: left promiscuous mode
[  514.825383][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.990144][ T5840] Bluetooth: hci0: command tx timeout
[  515.071134][ T6375] bridge_slave_0: left allmulticast mode
[  515.071166][ T6375] bridge_slave_0: left promiscuous mode
[  515.071430][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.369749][ T5907] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  515.519893][ T5907] usb 10-1: Using ep0 maxpacket: 32
[  515.522714][ T5907] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  515.522773][ T5907] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  515.522804][ T5907] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  515.522829][ T5907] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  515.522863][ T5907] usb 10-1: config 0 interface 0 has no altsetting 0
[  515.522899][ T5907] usb 10-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  515.522925][ T5907] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.618995][ T5907] usb 10-1: config 0 descriptor??
[  516.999817][ T5907] hid-thrustmaster 0003:044F:B65D.0003: global environment stack underflow
[  516.999838][ T5907] hid-thrustmaster 0003:044F:B65D.0003: item 0 4 1 11 parsing failed
[  517.000556][ T5907] hid-thrustmaster 0003:044F:B65D.0003: parse failed with error -22
[  517.000622][ T5907] hid-thrustmaster 0003:044F:B65D.0003: probe with driver hid-thrustmaster failed with error -22
[  517.094380][ T5851] Bluetooth: hci0: command tx timeout
[  517.735128][ T5907] usb 10-1: USB disconnect, device number 15
[  517.972238][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880243cfc00: rx timeout, send abort
[  518.895389][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805e66e400: rx timeout, send abort
[  519.409813][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805e66e400: abort rx timeout. Force session deactivation
[  519.540334][ T1243] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  519.707669][ T1243] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  519.707696][ T1243] usb 6-1: config 0 has no interface number 0
[  519.707744][ T1243] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  519.707778][ T1243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.720264][ T1243] usb 6-1: config 0 descriptor??
[  519.726931][ T1243] usb 6-1: selecting invalid altsetting 1
[  519.734702][ T1243] dvb_ttusb_budget: ttusb_init_controller: error
[  519.736171][ T1243] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  520.643646][ T1243] DVB: Unable to find symbol cx22700_attach()
[  520.709910][ T1243] DVB: Unable to find symbol tda10046_attach()
[  520.709926][ T1243] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  520.717464][ T1243] usb 6-1: USB disconnect, device number 5
[  521.241088][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805ea9e800: rx timeout, send abort
[  521.241372][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ea9e800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  523.118778][ T5892] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  523.296693][ T5892] usb 6-1: device descriptor read/64, error -71
[  523.329029][ T6375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  523.367703][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.417'.
[  523.367735][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.417'.
[  523.420563][ T6375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  523.466228][ T6375] bond0 (unregistering): Released all slaves
[  523.549685][ T5892] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  523.709910][ T5892] usb 6-1: device descriptor read/64, error -71
[  523.823372][ T5892] usb usb6-port1: attempt power cycle
[  523.917515][   T10] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  524.196301][ T5851] Bluetooth: hci8: command 0x0406 tx timeout
[  524.214494][ T5892] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  524.571707][ T5892] usb 6-1: device not accepting address 8, error -71
[  524.739699][   T10] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  524.739733][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  524.739767][   T10] usb 7-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00
[  524.739789][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.762365][   T10] usb 7-1: config 0 descriptor??
[  525.443482][ T8232] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  525.577985][ T6375] hsr_slave_0: left promiscuous mode
[  525.733778][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029a82000: rx timeout, send abort
[  525.734081][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029a82000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  525.846462][ T6375] hsr_slave_1: left promiscuous mode
[  526.186583][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805ec2ac00: rx timeout, send abort
[  526.186741][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ec2ac00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  526.261500][ T6375] batman_adv: batadv0: Removing interface: batadv_slave_0
[  526.378695][ T6375] batman_adv: batadv0: Removing interface: batadv_slave_1
[  526.763563][   T10] lenovo 0003:17EF:60A4.0004: hidraw0: USB HID v1.01 Device [HID 17ef:60a4] on usb-dummy_hcd.6-1/input0
[  526.965726][   T10] usb 7-1: USB disconnect, device number 7
[  528.119017][ T8265] fido_id[8265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  530.438974][    C1] vkms_vblank_simulate: vblank timer overrun
[  530.749680][    C1] vkms_vblank_simulate: vblank timer overrun
[  530.956275][    C1] vkms_vblank_simulate: vblank timer overrun
[  531.649846][ T5993] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  531.756522][ T8304] capability: warning: `syz.5.435' uses 32-bit capabilities (legacy support in use)
[  531.779883][ T5993] usb 9-1: device descriptor read/64, error -71
[  532.119432][    C1] vkms_vblank_simulate: vblank timer overrun
[  532.193672][ T5993] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  532.218492][    C1] vkms_vblank_simulate: vblank timer overrun
[  532.273742][    C1] vkms_vblank_simulate: vblank timer overrun
[  532.469043][    C1] vkms_vblank_simulate: vblank timer overrun
[  532.639545][    C1] vkms_vblank_simulate: vblank timer overrun
[  533.308088][    C1] vkms_vblank_simulate: vblank timer overrun
[  533.439887][ T5993] usb 9-1: device descriptor read/64, error -71
[  533.569722][ T5993] usb usb9-port1: attempt power cycle
[  533.616251][ T6021] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  533.749400][ T6021] usb 6-1: device descriptor read/64, error -71
[  533.979784][ T6021] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  534.130135][ T6021] usb 6-1: device descriptor read/64, error -71
[  534.250686][ T6021] usb usb6-port1: attempt power cycle
[  534.599787][ T6021] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  534.635304][ T6021] usb 6-1: device descriptor read/8, error -71
[  534.730626][ T6375] team0 (unregistering): Port device team_slave_1 removed
[  534.869759][ T6021] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  534.961233][    C1] vkms_vblank_simulate: vblank timer overrun
[  535.032757][ T6021] usb 6-1: device descriptor read/8, error -71
[  535.140111][ T6021] usb usb6-port1: unable to enumerate USB device
[  535.670246][ T6375] team0 (unregistering): Port device team_slave_0 removed
[  536.817885][    C1] vkms_vblank_simulate: vblank timer overrun
[  537.102357][    C1] vkms_vblank_simulate: vblank timer overrun
[  537.281784][    C1] vkms_vblank_simulate: vblank timer overrun
[  537.581493][    C1] vkms_vblank_simulate: vblank timer overrun
[  537.824598][    C1] vkms_vblank_simulate: vblank timer overrun
[  538.649689][ T6021] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  538.800113][ T6021] usb 7-1: Using ep0 maxpacket: 16
[  538.802396][ T6021] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10
[  538.802440][ T6021] usb 7-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  538.802455][ T6021] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.807548][ T6021] usb 7-1: config 0 descriptor??
[  539.350679][ T6021] uclogic 0003:5543:0781.0005: hidraw0: USB HID v0.04 Device [HID 5543:0781] on usb-dummy_hcd.6-1/input0
[  539.429797][ T5993] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  539.538742][ T6021] usb 7-1: USB disconnect, device number 8
[  539.581516][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  539.581560][ T5993] usb 10-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00
[  539.581581][ T5993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.653520][ T5993] usb 10-1: config 0 descriptor??
[  540.116054][ T5993] kye 0003:0458:5017.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  540.117390][ T5993] kye 0003:0458:5017.0006: unknown main item tag 0x0
[  540.117415][ T5993] kye 0003:0458:5017.0006: unknown main item tag 0x0
[  540.117438][ T5993] kye 0003:0458:5017.0006: unknown main item tag 0x0
[  540.117461][ T5993] kye 0003:0458:5017.0006: unknown main item tag 0x0
[  540.117484][ T5993] kye 0003:0458:5017.0006: unknown main item tag 0x0
[  540.206712][ T5993] kye 0003:0458:5017.0006: hidraw0: USB HID v0.2f Device [HID 0458:5017] on usb-dummy_hcd.9-1/input0
[  540.206749][ T5993] kye 0003:0458:5017.0006: tablet-enabling feature report not found
[  540.206766][ T5993] kye 0003:0458:5017.0006: tablet enabling failed
[  540.330829][ T5905] usb 10-1: USB disconnect, device number 16
[  540.355925][ T8371] fido_id[8371]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory
[  540.949471][    C1] vkms_vblank_simulate: vblank timer overrun
[  541.137955][ T8334] warning: `syz.5.446' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  541.410172][ T8087] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.410317][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.410546][ T8087] bridge_slave_0: entered allmulticast mode
[  541.415475][ T8087] bridge_slave_0: entered promiscuous mode
[  541.502272][ T8087] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.502417][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.502656][ T8087] bridge_slave_1: entered allmulticast mode
[  541.519870][ T8087] bridge_slave_1: entered promiscuous mode
[  541.719805][ T6021] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  541.895166][ T6021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  541.895346][ T6021] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  541.895373][ T6021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  541.895395][ T6021] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  541.895457][ T6021] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  541.895478][ T6021] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.961932][ T6021] usb 10-1: config 0 descriptor??
[  542.885528][    C1] vcan0: j1939_tp_rxtimer: 0xffff888031985c00: rx timeout, send abort
[  542.887535][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031985c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  543.082985][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.114453][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  543.141218][ T6021] hdpvr 10-1:0.0: firmware version 0xd dated 
[  543.336415][ T8087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  543.364852][ T8087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  543.388949][ T6021] hdpvr 10-1:0.0: device init failed
[  543.389028][ T6021] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12
[  543.420164][ T6021] usb 10-1: USB disconnect, device number 17
[  543.553597][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805c1d6000: rx timeout, send abort
[  543.553843][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c1d6000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  545.154455][ T5993] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  545.160524][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  545.444737][ T5993] usb 6-1: device descriptor read/64, error -32
[  545.677287][ T8087] team0: Port device team_slave_0 added
[  545.711852][ T8087] team0: Port device team_slave_1 added
[  545.719786][ T5993] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  545.869736][ T5993] usb 6-1: Using ep0 maxpacket: 8
[  545.893432][ T5993] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d
[  545.893463][ T5993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.893486][ T5993] usb 6-1: Product: syz
[  545.893501][ T5993] usb 6-1: Manufacturer: syz
[  545.893517][ T5993] usb 6-1: SerialNumber: syz
[  545.936066][ T5993] usb 6-1: config 0 descriptor??
[  545.994662][ T5993] usb_ehset_test 6-1:0.0: probe with driver usb_ehset_test failed with error -32
[  546.211540][ T5993] usb 6-1: USB disconnect, device number 15
[  546.284131][ T5995] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  546.357595][ T8087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  546.357614][ T8087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  546.357643][ T8087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  546.416925][ T8087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  546.416944][ T8087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  546.416982][ T8087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  546.458796][ T5995] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  546.495345][ T5995] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  546.495375][ T5995] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.495394][ T5995] usb 9-1: Product: syz
[  546.495409][ T5995] usb 9-1: Manufacturer: syz
[  546.495423][ T5995] usb 9-1: SerialNumber: syz
[  546.597837][ T5995] usb 9-1: config 0 descriptor??
[  546.736269][ T5995] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  547.785291][    C1] vcan0: j1939_tp_rxtimer: 0xffff888034e4e000: rx timeout, send abort
[  547.785509][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888034e4e000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  548.226667][ T5995] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -2
[  548.235213][ T8087] hsr_slave_0: entered promiscuous mode
[  548.257238][ T8087] hsr_slave_1: entered promiscuous mode
[  548.260478][ T5995] usb 9-1: USB disconnect, device number 6
[  548.336204][ T5993] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[  548.336237][ T5993] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[  548.336261][ T5993] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[  548.414542][ T5993] hid-generic 0000:0004:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  548.522587][ T8018] udevd[8018]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  548.596965][ T8466] fido_id[8466]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  552.984547][ T5993] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  553.134167][ T5993] usb 9-1: device descriptor read/64, error -71
[  553.379844][ T5993] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  553.529884][ T5993] usb 9-1: device descriptor read/64, error -71
[  553.640415][ T5993] usb usb9-port1: attempt power cycle
[  553.719746][ T6021] usb 10-1: new low-speed USB device number 18 using dummy_hcd
[  553.872664][ T6021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  553.872703][ T6021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.872745][ T6021] usb 10-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  553.872770][ T6021] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.932494][ T6021] usb 10-1: config 0 descriptor??
[  554.009894][ T5993] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  554.030905][ T5993] usb 9-1: device descriptor read/8, error -71
[  554.291843][ T5993] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  554.310864][ T5993] usb 9-1: device descriptor read/8, error -71
[  554.439722][ T5993] usb usb9-port1: unable to enumerate USB device
[  554.449522][ T6021] glorious 0003:258A:0036.0008: unknown main item tag 0x1
[  554.490372][ T6021] glorious 0003:258A:0036.0008: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.9-1/input0
[  554.844437][ T6204] usb 10-1: USB disconnect, device number 18
[  555.232260][ T8526] fido_id[8526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  568.842740][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  568.843688][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  581.080950][ T8563] netlink: 16 bytes leftover after parsing attributes in process `syz.9.510'.
[  581.705855][    C0] sched: DL replenish lagged too much
[  584.828376][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  584.849802][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  584.851445][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  584.954411][   T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  584.960388][   T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  584.962308][   T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  584.963622][   T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  584.964553][   T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  585.017368][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  585.018255][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  585.724056][ T8588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  585.743162][ T8588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  585.744518][ T8588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  585.746461][ T8588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  585.747387][ T8588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  586.171130][ T8587] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  586.192543][ T8587] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  586.193884][ T8587] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  586.195978][ T8587] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  586.226244][ T8587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  586.250613][ T8587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  586.255372][ T8587] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  586.288856][ T8588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  586.302906][ T8588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  586.326602][ T8587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  587.316958][ T8587] Bluetooth: hci1: command tx timeout
[  587.317284][ T8587] Bluetooth: hci2: command tx timeout
[  587.859801][ T5840] Bluetooth: hci3: command tx timeout
[  587.958604][ T8582] chnl_net:caif_netlink_parms(): no params data found
[  588.419922][ T5840] Bluetooth: hci4: command tx timeout
[  588.420425][ T5840] Bluetooth: hci9: command tx timeout
[  589.399694][ T8587] Bluetooth: hci2: command tx timeout
[  589.399737][ T8587] Bluetooth: hci1: command tx timeout
[  589.940227][ T5840] Bluetooth: hci3: command tx timeout
[  590.499797][ T5840] Bluetooth: hci9: command tx timeout
[  590.499829][ T5840] Bluetooth: hci4: command tx timeout
[  591.459838][ T8587] Bluetooth: hci1: command tx timeout
[  591.459874][ T8587] Bluetooth: hci2: command tx timeout
[  592.037472][ T5840] Bluetooth: hci3: command tx timeout
[  592.579887][ T5840] Bluetooth: hci4: command tx timeout
[  592.579922][ T5840] Bluetooth: hci9: command tx timeout
[  593.539853][ T8587] Bluetooth: hci1: command tx timeout
[  593.539907][ T5840] Bluetooth: hci2: command tx timeout
[  594.102303][ T5840] Bluetooth: hci3: command tx timeout
[  594.670057][ T8587] Bluetooth: hci4: command tx timeout
[  594.670112][ T5840] Bluetooth: hci9: command tx timeout
[  597.750158][ T8591] chnl_net:caif_netlink_parms(): no params data found
[  629.628170][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  629.628243][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  644.715740][ T8587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  644.750078][ T8587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  644.752474][ T8587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  644.753996][ T8587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  644.755579][ T8587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  644.864821][ T8588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  644.910176][ T8588] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  644.929132][ T8588] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  644.940924][ T8588] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  644.941751][ T8588] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  645.242644][ T8588] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  645.280178][ T8588] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  645.283874][ T8588] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  645.285291][ T8588] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  645.286184][ T8588] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  645.441320][ T8587] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  645.459300][ T8587] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  645.468339][ T8587] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  645.490785][ T8587] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  645.491607][ T8587] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  645.751643][ T8588] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  645.773672][ T8588] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  645.774994][ T8588] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  645.776804][ T8588] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  645.778400][ T8588] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  646.899902][ T8588] Bluetooth: hci5: command tx timeout
[  647.069886][ T8587] Bluetooth: hci6: command tx timeout
[  647.383623][ T8587] Bluetooth: hci7: command tx timeout
[  647.539840][ T8587] Bluetooth: hci8: command tx timeout
[  647.859821][ T8587] Bluetooth: hci10: command tx timeout
[  648.986191][ T8587] Bluetooth: hci5: command tx timeout
[  649.139763][ T8587] Bluetooth: hci6: command tx timeout
[  649.460350][ T8587] Bluetooth: hci7: command tx timeout
[  649.619689][ T8587] Bluetooth: hci8: command tx timeout
[  649.939745][ T8587] Bluetooth: hci10: command tx timeout
[  651.059947][ T8587] Bluetooth: hci5: command tx timeout
[  651.219695][ T8587] Bluetooth: hci6: command tx timeout
[  651.549964][ T8587] Bluetooth: hci7: command tx timeout
[  651.709646][ T8587] Bluetooth: hci8: command tx timeout
[  652.029990][ T8587] Bluetooth: hci10: command tx timeout
[  653.149885][ T8587] Bluetooth: hci5: command tx timeout
[  653.300126][ T8587] Bluetooth: hci6: command tx timeout
[  653.630085][ T8587] Bluetooth: hci7: command tx timeout
[  653.783236][ T8587] Bluetooth: hci8: command tx timeout
[  654.103076][ T8587] Bluetooth: hci10: command tx timeout
[  691.174299][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  691.174395][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  707.964807][ T8683] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  707.992814][ T8683] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  707.997574][ T8683] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  708.029694][ T8683] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  708.030592][ T8683] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  708.224261][ T8673] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  708.247355][ T8673] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  708.248739][ T8673] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  708.265487][ T8673] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  708.266414][ T8673] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  708.414755][ T8673] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  708.439245][ T8673] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  708.455818][ T8673] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  708.458013][ T8673] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  708.458896][ T8673] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  708.546004][   T59] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  708.570603][   T59] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  708.571969][   T59] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  708.574799][   T59] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  708.578594][   T59] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  708.579778][ T8681] Bluetooth: hci2: command 0x0406 tx timeout
[  708.579806][ T8681] Bluetooth: hci3: command 0x0406 tx timeout
[  708.579829][ T8681] Bluetooth: hci9: command 0x0406 tx timeout
[  708.579852][ T8681] Bluetooth: hci4: command 0x0406 tx timeout
[  709.963059][ T8683] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  709.982525][ T8683] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  709.983902][ T8683] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  710.015024][ T8683] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  710.015967][ T8683] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  710.099959][ T8683] Bluetooth: hci11: command tx timeout
[  710.420408][ T8683] Bluetooth: hci14: command tx timeout
[  712.179797][ T8683] Bluetooth: hci11: command tx timeout
[  712.500136][ T8683] Bluetooth: hci14: command tx timeout
[  714.261365][ T8587] Bluetooth: hci11: command tx timeout
[  714.580018][ T8587] Bluetooth: hci14: command tx timeout
[  716.340076][ T8587] Bluetooth: hci11: command tx timeout
[  716.662167][ T8587] Bluetooth: hci14: command tx timeout
[  721.782722][   T39] INFO: task syz-executor:8087 blocked for more than 143 seconds.
[  721.782754][   T39]       Not tainted syzkaller #0
[  721.782766][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  721.782781][   T39] task:syz-executor    state:D stack:21488 pid:8087  tgid:8087  ppid:1      task_flags:0x480140 flags:0x00004006
[  721.782844][   T39] Call Trace:
[  721.782852][   T39]  <TASK>
[  721.782867][   T39]  __schedule+0x16f3/0x4c20
[  721.782930][   T39]  ? __lock_acquire+0xab9/0xd20
[  721.782961][   T39]  ? __pfx___schedule+0x10/0x10
[  721.783028][   T39]  ? schedule+0x91/0x360
[  721.783064][   T39]  schedule+0x165/0x360
[  721.783098][   T39]  schedule_timeout+0x9a/0x270
[  721.783130][   T39]  ? __pfx_schedule_timeout+0x10/0x10
[  721.783176][   T39]  ? _raw_spin_unlock_irq+0x23/0x50
[  721.783210][   T39]  ? lockdep_hardirqs_on+0x9c/0x150
[  721.783241][   T39]  ? wait_for_completion+0x267/0x5d0
[  721.783277][   T39]  wait_for_completion+0x2bf/0x5d0
[  721.783327][   T39]  ? __pfx_wait_for_complet[  721.783327][   T39]  ? __pfx_wait_for_completion+0x10/0x10
[  721.783369][   T39]  ? __init_swait_queue_head+0xa9/0x150
[  721.783401][   T39]  rcu_barrier+0x463/0x570
[  721.783437][   T39]  netdev_run_todo+0x327/0xea0
[  721.783471][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[  721.783493][   T39]  ? kasan_quarantine_put+0xdd/0x220
[  721.783520][   T39]  ? lockdep_hardirqs_on+0x9c/0x150
[  721.783556][   T39]  ? nsim_destroy+0x385/0x670
[  721.783583][   T39]  ? kfree+0x195/0x550
[  721.783618][   T39]  nsim_destroy+0x3a6/0x670
[  721.783660][   T39]  __nsim_dev_port_del+0x14d/0x1b0
[  721.783695][   T39]  nsim_dev_reload_destroy+0x288/0x490
[  721.783724][   T39]  ? nsim_drv_remove+0x50/0x160
[  721.783757][   T39]  nsim_drv_remove+0x58/0x160
[  721.783783][   T39]  ? __pfx_nsim_bus_remove+0x10/0x10
[  721.783809][   T39]  device_release_driver_internal+0x46c/0x800
[  721.783845][   T39]  bus_remove_device+0x355/0x420
[  721.783885][   T39]  device_del+0x515/0x8e0
[  721.783912][   T39]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  721.783951][   T39]  ? __pfx_device_del+0x10/0x10
[  721.783985][   T39]  device_unregister+0x20/0xc0
[  721.784009][   T39]  del_device_store+0x2aa/0x360
[  721.784037][   T39]  ? __pfx_del_device_store+0x10/0x10
[  721.784062][   T39]  ? sysfs_file_kobj+0x1e4/0x230
[  721.784097][   T39]  ? sysfs_kf_write+0x166/0x260
[  721.784135][   T39]  ? __pfx_sysfs_kf_write+0x10/0x10
[  721.784166][   T39]  kernfs_fop_write_iter+0x3ad/0x540
[  721.784205][   T39]  vfs_write+0x5d5/0xb40
[  721.784240][   T39]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  721.784272][   T39]  ? __pfx_vfs_write+0x10/0x10
[  721.784304][   T39]  ? do_sys_openat2+0x154/0x1c0
[  721.784325][   T39]  ? kmem_cache_free+0x195/0x510
[  721.784374][   T39]  ksys_write+0x14b/0x260
[  721.784406][   T39]  ? __pfx_ksys_write+0x10/0x10
[  721.784431][   T39]  ? rcu_is_watching+0x15/0xb0
[  721.784471][   T39]  ? do_syscall_64+0xbe/0x3b0
[  721.784499][   T39]  do_syscall_64+0xfa/0x3b0
[  721.784532][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.784554][   T39]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  721.784575][   T39]  ? clear_bhb_loop+0x60/0xb0
[  721.784602][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.784645][   T39] RIP: 0033:0x7f49ec86d65f
[  721.784668][   T39] RSP: 002b:00007ffe1ea38a00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  721.784690][   T39] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f49ec86d65f
[  721.784706][   T39] RDX: 0000000000000001 RSI: 00007ffe1ea38a50 RDI: 0000000000000005
[  721.784720][   T39] RBP: 00007f49ec8f30c1 R08: 0000000000000000 R09: 00007ffe1ea38857
[  721.784736][   T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  721.784749][   T39] R13: 00007ffe1ea38a50 R14: 00007f49ed5e4620 R15: 0000000000000003
[  721.784783][   T39]  </TASK>
[  721.786187][   T39] 
[  721.786187][   T39] Showing all locks held in the system:
[  721.786200][   T39] 7 locks held by ktimers/0/16:
[  721.786216][   T39] 1 lock held by khungtaskd/39:
[  721.786228][   T39]  #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  721.786304][   T39] 4 locks held by kworker/u9:0/59:
[  721.786317][   T39]  #0: ffff888023236938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  721.786391][   T39]  #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  721.786447][   T39]  #2: ffff88808e8880a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  721.786502][   T39]  #3: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  721.786557][   T39] 3 locks held by kworker/u8:4/67:
[  721.786569][   T39]  #0: ffff88814cd85138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  721.786623][   T39]  #1: ffffc9000152fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  721.786687][   T39]  #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  721.786763][   T39] 3 locks held by kworker/u8:12/3609:
[  721.786776][   T39]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  721.786831][   T39]  #1: ffffc9000dd57bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  721.786885][   T39]  #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  721.786938][   T39] 1 lock held by dhcpcd/5502:
[  721.786950][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0x109/0x210
[  721.787005][   T39] 2 locks held by getty/5596:
[  721.787017][   T39]  #0: ffff88823bf660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  721.787078][   T39]  #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410
[  721.787134][   T39] 6 locks held by kworker/u9:4/5851:
[  721.787147][   T39]  #0: ffff888073daf938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  721.787202][   T39]  #1: ffffc90004647bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  721.787257][   T39]  #2: ffff888074290e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  721.787310][   T39]  #3: ffff8880742900a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  721.787368][   T39]  #4: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  721.787428][   T39]  #5: ffff888073d97b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  721.787480][   T39] 2 locks held by kworker/0:4/5907:
[  721.787493][   T39] 3 locks held by kworker/1:4/5927:
[  721.787505][   T39]  #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  721.787560][   T39]  #1: ffffc90004fcfbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  721.787614][   T39]  #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  721.787676][   T39] 1 lock held by syz.9.148/6981:
[  721.787688][   T39]  #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  721.787739][   T39] 1 lock held by syz-executor/7154:
[  721.787751][   T39]  #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  721.787800][   T39] 1 lock held by syz-executor/7156:
[  721.787813][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[  721.787872][   T39] 1 lock held by syz-executor/7160:
[  721.787884][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[  721.787949][   T39] 7 locks held by syz-executor/8087:
[  721.787961][   T39]  #0: ffff8880348e8488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40
[  721.788019][   T39]  #1: ffff88805e5d5078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[  721.788075][   T39]  #2: ffff8880272e6698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[  721.788136][   T39]  #3: ffffffff8e542e78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  721.788188][   T39]  #4: ffff888038d3c0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800
[  721.788240][   T39]  #5: ffff888055af5300 (&devlink->lock_key#16){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[  721.788299][   T39]  #6: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  721.788350][   T39] 2 locks held by kworker/0:11/8535:
[  721.788364][   T39] 3 locks held by syz-executor/8582:
[  721.788375][   T39]  #0: ffff8880311c0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  721.788430][   T39]  #1: ffff8880311c00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  721.788488][   T39]  #2: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  721.788538][   T39] 2 locks held by syz-executor/8583:
[  721.788551][   T39]  #0: ffffffff8ecc6840 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  721.788608][   T39]  #1: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990
[  721.788673][   T39] 4 locks held by kworker/u9:3/8588:
[  721.788686][   T39]  #0: ffff88805dfc8138 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  721.788741][   T39]  #1: ffffc90003ac7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  721.788796][   T39]  #2: ffff88804fe10e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  721.788846][   T39]  #3: ffff88804fe100a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  721.788905][   T39] 2 locks held by syz-executor/8591:
[  721.788918][   T39]  #0: ffffffff8e43b8a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  721.788982][   T39]  #1: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  721.789038][   T39] 1 lock held by syz-executor/8593:
[  721.789050][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  721.789107][   T39] 1 lock held by syz-executor/8594:
[  721.789119][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  721.789176][   T39] 1 lock held by syz-executor/8654:
[  721.789189][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  721.789240][   T39] 1 lock held by syz-executor/8655:
[  721.789252][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  721.789302][   T39] 1 lock held by syz-executor/8661:
[  721.789314][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  721.789364][   T39] 1 lock held by syz-executor/8663:
[  721.789377][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  721.888614][   T39] 1 lock held by syz-executor/8666:
[  721.888641][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  721.888703][   T39] 4 locks held by kworker/u9:5/8673:
[  721.888716][   T39]  #0: ffff88808aa02938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  721.888777][   T39]  #1: ffffc90003ca7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  721.888833][   T39]  #2: ffff88808e88c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  721.888888][   T39]  #3: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  721.888942][   T39] 1 lock held by syz-executor/8674:
[  721.888955][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  721.889005][   T39] 1 lock held by syz-executor/8675:
[  721.889017][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  721.889068][   T39] 1 lock held by syz-executor/8677:
[  721.889080][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  721.889131][   T39] 1 lock held by syz-executor/8678:
[  721.889143][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  721.889193][   T39] 4 locks held by kworker/u9:6/8679:
[  721.889205][   T39]  #0: ffff8880903da938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  721.889266][   T39]  #1: ffffc90003b47bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  721.889321][   T39]  #2: ffff8880905ac0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  721.889376][   T39]  #3: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  721.889566][   T39] 1 lock held by syz-executor/8691:
[  721.889580][   T39]  #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  721.889641][   T39] 
[  721.889647][   T39] =============================================
[  721.889647][   T39] 
[  721.889668][   T39] NMI backtrace for cpu 1
[  721.889695][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  721.889719][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  721.889733][   T39] Call Trace:
[  721.889741][   T39]  <TASK>
[  721.889750][   T39]  dump_stack_lvl+0x189/0x250
[  721.889787][   T39]  ? __pfx_dump_stack_lvl+0x10/0x10
[  721.889819][   T39]  ? __pfx__printk+0x10/0x10
[  721.889857][   T39]  nmi_cpu_backtrace+0x39e/0x3d0
[  721.889907][   T39]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  721.889939][   T39]  ? __pfx__printk+0x10/0x10
[  721.889968][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  721.889999][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  721.890032][   T39]  watchdog+0xf93/0xfe0
[  721.890067][   T39]  ? watchdog+0x1de/0xfe0
[  721.890102][   T39]  kthread+0x70e/0x8a0
[  721.890140][   T39]  ? __pfx_watchdog+0x10/0x10
[  721.890167][   T39]  ? __pfx_kthread+0x10/0x10
[  721.890205][   T39]  ? __pfx_kthread+0x10/0x10
[  721.890240][   T39]  ret_from_fork+0x436/0x7d0
[  721.890272][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  721.890309][   T39]  ? __switch_to_asm+0x39/0x70
[  721.890329][   T39]  ? __switch_to_asm+0x33/0x70
[  721.890348][   T39]  ? __pfx_kthread+0x10/0x10
[  721.890383][   T39]  ret_from_fork_asm+0x1a/0x30
[  721.890421][   T39]  </TASK>
[  721.890430][   T39] Sending NMI from CPU 1 to CPUs 0:
[  721.890457][    C0] NMI backtrace for cpu 0
[  721.890472][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  721.890493][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  721.890504][    C0] RIP: 0010:rcu_is_watching+0x35/0xb0
[  721.890535][    C0] Code: 05 70 28 51 10 e8 1b 03 52 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 10 2d 25 8d 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 dc 9c 78 00 48 c7 c3 18 74 f7 91
[  721.890552][    C0] RSP: 0018:ffffc90000156d28 EFLAGS: 00000802
[  721.890567][    C0] RAX: 1ffffffff1a4a5a2 RBX: 0000000000000000 RCX: 872d010ce3b14100
[  721.890581][    C0] RDX: 0000000000000000 RSI: ffffffff8b621660 RDI: ffffffff8b621620
[  721.890594][    C0] RBP: ffffc90000156de0 R08: ffffffff8f1d6137 R09: 1ffffffff1e3ac26
[  721.890608][    C0] R10: dffffc0000000000 R11: fffffbfff1e3ac27 R12: dffffc0000000000
[  721.890624][    C0] R13: ffff88806c3f5300 R14: ffffffff8d252d10 R15: dffffc0000000000
[  721.890638][    C0] FS:  0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000
[  721.890652][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  721.890664][    C0] CR2: fffffffffffffffd CR3: 000000000d7a6000 CR4: 00000000003526f0
[  721.890680][    C0] Call Trace:
[  721.890686][    C0]  <TASK>
[  721.890694][    C0]  trace_irq_disable+0x37/0x110
[  721.890718][    C0]  _raw_spin_lock_irqsave+0x82/0xf0
[  721.890746][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  721.890780][    C0]  debug_check_no_obj_freed+0x17a/0x470
[  721.890816][    C0]  ? skb_release_data+0x62d/0x7c0
[  721.890833][    C0]  kmem_cache_free+0x113/0x510
[  721.890863][    C0]  skb_release_data+0x62d/0x7c0
[  721.890893][    C0]  consume_skb+0x9e/0xf0
[  721.890920][    C0]  nft_synproxy_eval_v4+0x376/0x560
[  721.890944][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  721.890966][    C0]  ? nf_ip_checksum+0x13c/0x510
[  721.890987][    C0]  nft_synproxy_do_eval+0x345/0x570
[  721.891007][    C0]  ? skb_orphan+0xaf/0xd0
[  721.891046][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  721.891075][    C0]  nft_do_chain+0x40c/0x1920
[  721.891095][    C0]  ? __pfx_ip_list_rcv+0x10/0x10
[  721.891125][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  721.891141][    C0]  ? __netif_receive_skb_list_core+0x7d2/0x800
[  721.891188][    C0]  nft_do_chain_inet+0x25d/0x340
[  721.891212][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  721.891230][    C0]  ? __lock_acquire+0xab9/0xd20
[  721.891284][    C0]  ? NF_HOOK+0x9a/0x3a0
[  721.891308][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  721.891328][    C0]  nf_hook_slow+0xc2/0x220
[  721.891358][    C0]  NF_HOOK+0x206/0x3a0
[  721.891383][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  721.891409][    C0]  ? NF_HOOK+0x9a/0x3a0
[  721.891433][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  721.891456][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[  721.891496][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  721.891522][    C0]  ? skb_dst+0x4f/0xd0
[  721.891546][    C0]  ? ip_local_deliver+0x12a/0x1b0
[  721.891573][    C0]  NF_HOOK+0x30c/0x3a0
[  721.891598][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  721.891623][    C0]  ? NF_HOOK+0x9a/0x3a0
[  721.891646][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  721.891671][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  721.891702][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  721.891724][    C0]  __netif_receive_skb+0x143/0x380
[  721.891746][    C0]  ? rt_spin_unlock+0x65/0x80
[  721.891770][    C0]  ? process_backlog+0x27b/0x900
[  721.891793][    C0]  process_backlog+0x31e/0x900
[  721.891824][    C0]  __napi_poll+0xb3/0x540
[  721.891848][    C0]  net_rx_action+0x707/0xe00
[  721.891876][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  721.891914][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  721.891958][    C0]  handle_softirqs+0x22f/0x710
[  721.891986][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  721.892015][    C0]  run_ktimerd+0xcf/0x190
[  721.892039][    C0]  ? __pfx_run_ktimerd+0x10/0x10
[  721.892065][    C0]  ? preempt_schedule_thunk+0x16/0x30
[  721.892088][    C0]  ? smpboot_thread_fn+0x5f4/0xa60
[  721.892110][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  721.892131][    C0]  smpboot_thread_fn+0x53f/0xa60
[  721.892154][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  721.892181][    C0]  kthread+0x70e/0x8a0
[  721.892209][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  721.892231][    C0]  ? __pfx_kthread+0x10/0x10
[  721.892260][    C0]  ? __pfx_kthread+0x10/0x10
[  721.892287][    C0]  ret_from_fork+0x436/0x7d0
[  721.892312][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  721.892338][    C0]  ? __switch_to_asm+0x39/0x70
[  721.892354][    C0]  ? __switch_to_asm+0x33/0x70
[  721.892370][    C0]  ? __pfx_kthread+0x10/0x10
[  721.892397][    C0]  ret_from_fork_asm+0x1a/0x30
[  721.892424][    C0]  </TASK>
[  721.892458][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[  721.892473][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  721.892498][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  721.892510][   T39] Call Trace:
[  721.892518][   T39]  <TASK>
[  721.892526][   T39]  dump_stack_lvl+0x99/0x250
[  721.892559][   T39]  ? __asan_memcpy+0x40/0x70
[  721.892582][   T39]  ? __pfx_dump_stack_lvl+0x10/0x10
[  721.892613][   T39]  ? __pfx__printk+0x10/0x10
[  721.892659][   T39]  vpanic+0x281/0x750
[  721.892693][   T39]  ? __pfx_vpanic+0x10/0x10
[  721.892720][   T39]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  721.892742][   T39]  ? lockdep_hardirqs_on+0x9c/0x150
[  721.892786][   T39]  panic+0xb9/0xc0
[  721.892816][   T39]  ? __pfx_panic+0x10/0x10
[  721.892850][   T39]  ? irq_work_queue+0xc3/0x140
[  721.892883][   T39]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[  721.892914][   T39]  watchdog+0xfd2/0xfe0
[  721.892947][   T39]  ? watchdog+0x1de/0xfe0
[  721.892999][   T39]  kthread+0x70e/0x8a0
[  721.893035][   T39]  ? __pfx_watchdog+0x10/0x10
[  721.893063][   T39]  ? __pfx_kthread+0x10/0x10
[  721.893102][   T39]  ? __pfx_kthread+0x10/0x10
[  721.893137][   T39]  ret_from_fork+0x436/0x7d0
[  721.893169][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  721.893205][   T39]  ? __switch_to_asm+0x39/0x70
[  721.893225][   T39]  ? __switch_to_asm+0x33/0x70
[  721.893245][   T39]  ? __pfx_kthread+0x10/0x10
[  721.893280][   T39]  ret_from_fork_asm+0x1a/0x30
[  721.893319][   T39]  </TASK>
[  721.893573][   T39] Kernel Offset: disabled