last executing test programs:

1m42.096481405s ago: executing program 4 (id=878):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d576c00080000000400000008001e"], 0x24}}, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket(0x10, 0x803, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000002880)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(rfc4106(rfc4543(seqiv(authenc(sha512,cbc-camellia-asm)))'}, 0x58) (async)
r5 = socket$unix(0x1, 0x1, 0x0) (async)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0) (async)
syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="411002000000d798"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0x4, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wg0\x00', <r9=>0x0}) (rerun: 64)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000)

1m41.655280352s ago: executing program 4 (id=879):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
sendmsg(r5, &(0x7f00000014c0)={&(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x1, 0x4, 0x4, {0xa, 0x4e23, 0x9f22, @remote, 0x5}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001b80)="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", 0x1000}, {&(0x7f00000010c0)="4b561ee26e1ff16618c49f8a0155c8cbc14b821a1110d2", 0x17}, {&(0x7f0000001100)="bc9341b9f8ea2fa79d9ba29a048a0faaa520d20326a2a4954b967f7b56baaedc9fe5653d6c9adeda3825bbbe0273fca141fc2018e1b4a8bd1c437c7f869976f145b8c1fbdba7f5d643b0687c59654353cf39c960360386344a75bc436cc3b4294bd69ba03b39bf59a1eea02013f05204e6bec26831fe172cab531fc632f7f9c235", 0x81}, {&(0x7f00000011c0)="5f02eac11a1585981a2e5fa6ed9becfe91325c6692f72c14da23804864107706f18961b9032ad2d7ee589c5f55aca0ab51b15094be0d47b459cbf718287daca101adbf1feee5b5625fd45fa6139075004567ebbbc71883a16db68efa340a96d4ab25b8c40be6ea2c46da9e2b35a53454ec212d759f4622", 0x77}, {&(0x7f0000001240)="d7301b1e", 0x4}, {&(0x7f0000001280)="1337c070ecef5a", 0x7}, {&(0x7f00000012c0)="79c23b68e7339a841c47c628574ee9aae21fa9c7b1cf71e406e8d47e22c6acd928a67ad450a9b6dc010d5737fdadfb70a774f043d8ef9cc54933a14b7de7fe2a67a6523c17930998a4b9b0661144aafacc1841d014d27b1895d1f2e9918e11d19201a9234e0f975e27377e1af5d714b6efaa224a926121d058c8f106edae22", 0x7f}, {&(0x7f0000001340)="d68bd8fcd2f9d41bd55f76744cd7b142b39b975699a9344ee889cc3582fea863b87b2f3db6c4ae3668ff0f81480ab236b67a9e60f149ba9cbd51ce8b476999a98538c7a5a158c2f6f6c794fcb039dccf745f15918b916e9d2fdae09ef5395fa44b1087db1ba6ff257d788f78abe8018b3204934f0e746884524b1350fb122e09655f630d17dcba91c366fcbca1b07396209f6ebe74462fd9915ab3db8cf224ae5878fdd8ead934f190ea13a5f82d26baa8b37a68f50cfbe47b772863c6c00f317546", 0xc2}], 0x8}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil)
mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000)
socket$nl_generic(0x10, 0x3, 0x10)

1m41.42768833s ago: executing program 2 (id=881):
r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x82001)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x101c, 0x4, 0x0, 0x0, 0x5, 0x4}})
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000200)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590288ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3)
syz_open_dev$sg(&(0x7f0000000000), 0xffffffffffffffff, 0x20000)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x4)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000580)={{0xfc}, 'syz0\x00', 0x27})
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x4)
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x3)
ioctl$UI_DEV_CREATE(r4, 0x5501)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r7=>0x0})
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x1, {0x0, 0xf0, 0x2}}, 0x5d)
bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x80000000002, {0x0, 0xf0, 0x3}, 0xff}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r9, 0x2, {0x0, 0xf0, 0x1}, 0xff}, 0x18)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)

1m39.871665549s ago: executing program 2 (id=883):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x860)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket(0xa, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x4}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x2a, 0x6, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'})
memfd_create(&(0x7f0000000000)='%\x00\x00\x00\x00+\xe2a\xb1C\xfc \x00R\xaf\xa4:]J\xd1\xc1\xf6\xd4\xa9\x91\t\xa9\xae\xaf\x80Jl\xff\xe1\xdb\nn\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x18c9500503293b1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006000600843b0000100002800c0008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000'])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32, @ANYBLOB="020000000a000100aaaaaaaaaabb000008000f00"], 0x30}, 0x1, 0x0, 0x0, 0x68eaadec908dc23b}, 0x20024090)
r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0x7ffe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0xd, 0x1, 0x1, 0x0, 0x7})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0xfffffffd, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}})
r4 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0x80084121, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'})

1m39.192724458s ago: executing program 2 (id=885):
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3})
fcntl$lock(r2, 0x6, &(0x7f0000000000))
syz_open_dev$tty1(0xc, 0x4, 0x2)
r3 = socket$inet6(0xa, 0x1, 0x0)
socket(0x2, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x7ff, 0x0, 0x103, 0x1, 0x0, 0x8542}, 0x20)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240800e9fffff5ff0300ff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05"], 0x0)

1m39.135970462s ago: executing program 4 (id=887):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001500c74f79720000000000010c000000"], 0x14}, 0x1, 0x0, 0x0, 0x1000c001}, 0x4000000)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = io_uring_setup(0x65d5, &(0x7f00000000c0)={0x0, 0x1cb7, 0x800, 0x8005, 0x2a4})
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0, 0xf}, {0x0}, {0x0}], 0x0}, 0x2)
io_uring_enter(r3, 0x56dc, 0x7af2, 0x12, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x2, 0x48, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES8=r4, @ANYRES16=r4], 0x0)

1m38.216471678s ago: executing program 2 (id=892):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
setrlimit(0x0, &(0x7f00000001c0)={0x2, 0x3})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
r0 = socket(0x15, 0x5, 0x0)
connect$unix(r0, &(0x7f0000000140)=@abs={0xa}, 0x6e)
getsockname$packet(r0, 0x0, &(0x7f0000000040))
add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad83700398d1c7d7982b8f57fb20a3adc9", 0x1b, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m37.664026806s ago: executing program 2 (id=895):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x4, 0x0, 0x0, 0xc}}, 0x120) (async)
write$UHID_CREATE(r0, &(0x7f0000000180)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x3, 0x7, 0x0, 0x961d, 0xa}}, 0x120) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1)
r2 = syz_io_uring_setup(0xea8, &(0x7f0000000480), &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x3ff, 0x4)
ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x1815, 0x0, 0x0, 0x0, 0x0)

1m37.260939085s ago: executing program 2 (id=897):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
sendmsg(r5, &(0x7f00000014c0)={&(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x1, 0x4, 0x4, {0xa, 0x4e23, 0x9f22, @remote, 0x5}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001b80)="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", 0x1000}, {&(0x7f00000010c0)="4b561ee26e1ff16618c49f8a0155c8cbc14b821a1110d2", 0x17}, {&(0x7f0000001100)="bc9341b9f8ea2fa79d9ba29a048a0faaa520d20326a2a4954b967f7b56baaedc9fe5653d6c9adeda3825bbbe0273fca141fc2018e1b4a8bd1c437c7f869976f145b8c1fbdba7f5d643b0687c59654353cf39c960360386344a75bc436cc3b4294bd69ba03b39bf59a1eea02013f05204e6bec26831fe172cab531fc632f7f9c235", 0x81}, {&(0x7f00000011c0)="5f02eac11a1585981a2e5fa6ed9becfe91325c6692f72c14da23804864107706f18961b9032ad2d7ee589c5f55aca0ab51b15094be0d47b459cbf718287daca101adbf1feee5b5625fd45fa6139075004567ebbbc71883a16db68efa340a96d4ab25b8c40be6ea2c46da9e2b35a53454ec212d759f4622", 0x77}, {&(0x7f0000001240)="d7301b1e", 0x4}, {&(0x7f0000001280)="1337c070ecef5a", 0x7}, {&(0x7f00000012c0)="79c23b68e7339a841c47c628574ee9aae21fa9c7b1cf71e406e8d47e22c6acd928a67ad450a9b6dc010d5737fdadfb70a774f043d8ef9cc54933a14b7de7fe2a67a6523c17930998a4b9b0661144aafacc1841d014d27b1895d1f2e9918e11d19201a9234e0f975e27377e1af5d714b6efaa224a926121d058c8f106edae22", 0x7f}, {&(0x7f0000001340)="d68bd8fcd2f9d41bd55f76744cd7b142b39b975699a9344ee889cc3582fea863b87b2f3db6c4ae3668ff0f81480ab236b67a9e60f149ba9cbd51ce8b476999a98538c7a5a158c2f6f6c794fcb039dccf745f15918b916e9d2fdae09ef5395fa44b1087db1ba6ff257d788f78abe8018b3204934f0e746884524b1350fb122e09655f630d17dcba91c366fcbca1b07396209f6ebe74462fd9915ab3db8cf224ae5878fdd8ead934f190ea13a5f82d26baa8b37a68f50cfbe47b772863c6c00f317546", 0xc2}], 0x8}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil)
mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000)
socket$nl_generic(0x10, 0x3, 0x10)

1m34.27633432s ago: executing program 4 (id=906):
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r0 = syz_io_uring_setup(0x109, &(0x7f0000000580)={0x0, 0x114df, 0x100, 0x1, 0x89}, &(0x7f0000000a00)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x10, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x4c}}, 0x40000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xf7ffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_FLOWER_INDEV={0x14, 0x2, 'ip6gre0\x00'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012820b000100697036746e6c00002c000280140003000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)

1m20.107922134s ago: executing program 32 (id=897):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
sendmsg(r5, &(0x7f00000014c0)={&(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x1, 0x4, 0x4, {0xa, 0x4e23, 0x9f22, @remote, 0x5}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001b80)="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", 0x1000}, {&(0x7f00000010c0)="4b561ee26e1ff16618c49f8a0155c8cbc14b821a1110d2", 0x17}, {&(0x7f0000001100)="bc9341b9f8ea2fa79d9ba29a048a0faaa520d20326a2a4954b967f7b56baaedc9fe5653d6c9adeda3825bbbe0273fca141fc2018e1b4a8bd1c437c7f869976f145b8c1fbdba7f5d643b0687c59654353cf39c960360386344a75bc436cc3b4294bd69ba03b39bf59a1eea02013f05204e6bec26831fe172cab531fc632f7f9c235", 0x81}, {&(0x7f00000011c0)="5f02eac11a1585981a2e5fa6ed9becfe91325c6692f72c14da23804864107706f18961b9032ad2d7ee589c5f55aca0ab51b15094be0d47b459cbf718287daca101adbf1feee5b5625fd45fa6139075004567ebbbc71883a16db68efa340a96d4ab25b8c40be6ea2c46da9e2b35a53454ec212d759f4622", 0x77}, {&(0x7f0000001240)="d7301b1e", 0x4}, {&(0x7f0000001280)="1337c070ecef5a", 0x7}, {&(0x7f00000012c0)="79c23b68e7339a841c47c628574ee9aae21fa9c7b1cf71e406e8d47e22c6acd928a67ad450a9b6dc010d5737fdadfb70a774f043d8ef9cc54933a14b7de7fe2a67a6523c17930998a4b9b0661144aafacc1841d014d27b1895d1f2e9918e11d19201a9234e0f975e27377e1af5d714b6efaa224a926121d058c8f106edae22", 0x7f}, {&(0x7f0000001340)="d68bd8fcd2f9d41bd55f76744cd7b142b39b975699a9344ee889cc3582fea863b87b2f3db6c4ae3668ff0f81480ab236b67a9e60f149ba9cbd51ce8b476999a98538c7a5a158c2f6f6c794fcb039dccf745f15918b916e9d2fdae09ef5395fa44b1087db1ba6ff257d788f78abe8018b3204934f0e746884524b1350fb122e09655f630d17dcba91c366fcbca1b07396209f6ebe74462fd9915ab3db8cf224ae5878fdd8ead934f190ea13a5f82d26baa8b37a68f50cfbe47b772863c6c00f317546", 0xc2}], 0x8}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil)
mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000)
socket$nl_generic(0x10, 0x3, 0x10)

1m20.04528078s ago: executing program 4 (id=910):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m19.455506648s ago: executing program 4 (id=913):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x255f, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x37, 0x1, 0x0, "c8010000000a00010000b6035c2299230500e20000432600", 0x384c4150}) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (async)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async)
r6 = fcntl$dupfd(r4, 0x406, r2)
ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x24b) (async)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000540)=ANY=[@ANYRES64=r0], 0x18) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async)
write$vga_arbiter(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='trylock m'], 0xc) (async)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10})
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000a00100"]) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x1000, 0xfff7}, 'syz1\x00', 0x52}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r9 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x8000000000000000, 0x405c1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x104}}, 0x0) (async)
r11 = dup(r9)
write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r12 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x8000, 0x0, 0x4, 0x0, r11}, &(0x7f00000000c0)=<r13=>0x0, &(0x7f0000000480)=<r14=>0x0)
syz_io_uring_submit(r13, r14, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r11, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) (async)
io_uring_enter(r12, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async)
r15 = syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0x0)
readv(r15, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000003c0)=""/146, 0x92}], 0x3)

1m18.60868709s ago: executing program 3 (id=914):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x58}}, 0x8000000)

1m17.232696624s ago: executing program 3 (id=916):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_init()
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56e, 0xe6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0xb00f, 0x9e, 0x1, {0x22, 0xf87}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x36, 0x9, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x41, 0xd2, 0x39}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x0, 0x9, 0x5, 0xff, 0x9}, 0x75, &(0x7f0000000180)={0x5, 0xf, 0x75, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x4, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x9, 0x66, 0xfffe, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x7ffffff, 0xf0f, 0xf801, [0xffc000]}, @generic={0x43, 0x10, 0x3, "eb772cda1ccff7bdcdcf28dc3bd6aa554e98636dc84dc897b61318faf4bf763217ab58892c670a8f2c3475afb3327c69423984dae0b13ceb96bb096417980f25"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x5e902264dc716d24, 0x9, 0x4, 0x1000, 0x8}]}, 0x9, [{0x9d, &(0x7f0000000200)=@string={0x9d, 0x3, "cf8f61f675dab2044c524aeea58a17b2a858ef6e24bfef384959f879aecfb31138f0deeef1430186a2bc58e16e5c668c021788cdfd2184172cf2519f3cc93b1a23834f2767482c1ba668b6943059bb5e7596a44541d31de91de459401aea44bdb335d5c78b9e4c917791f634d99bdb9fbf83fac917ca72c01a77fd60c13fd43a1a0c9991e3d43f85675a54498ad976ecab3806e3d6ab8e0fc7c933"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x5b, &(0x7f0000000300)=@string={0x5b, 0x3, "85b18d419a2d8011b7f6dfa20eea3fd3f275cad8bff5f0b8be30a9c5dbaa7f61bf73f5fe791f3f7d32a3fa733aca6cd5a3f4a48b3616071670e8acc86947004ee058531c1bc44b2b70550bf08929fde2ee5b73f2e4ebc8d57d"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x405}}, {0xe2, &(0x7f0000000400)=@string={0xe2, 0x3, "4b31515529cc2c5a7b27528b27e756d3507ebc3374b6dba586be6737bc065572a1138d5878e6e565d6f3ffc177afbce00cf2b8a612e4659829c1e5fec519298200e6a95d767c4ce8dd3581394fd07fab4077b8ac4d3a21a6e062bd8faf7cc5c839e3478732f32d5d198d2cb4d5f6b31e2edfa44b9484b3f17d09783df5c491344987f73cab2dc9ae7d030bacd7d63a30f105fc5c159d216fb5825fcdddb8a9ae53509b225341ed3ec98e368e81c87e2fecb48700346073046d4dba3011305a7d4d78a6377bbcff179c54afa33592e7d174cc79d939c01021f92b7e91d66ffce0"}}, {0x5d, &(0x7f0000000500)=@string={0x5d, 0x3, "196d42736fe08efc9a6caecd6ce09840821d6346ccdaac28421bc0279e7fd38927384a43b5525469275703d084c1646801815658c185b67ec09c970a06cde8fe6df890bc57c3a9fef2c56a6c0bb039ec2ee11637763b74d2337da4"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc0a}}, {0x59, &(0x7f00000005c0)=@string={0x59, 0x3, "fd5d9ad222554d18d0233f152c05dd435db7e88585a11a6d50cb8e6b55a62990ca9f52f6d908753f77089758c023d21b4f5d8fb257924e958d8b46304dab0c81ee9e8d8f69e816307112c212602f7df015c6302652408d"}}]})
syz_usb_control_io$hid(r2, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x1, 0x100, 0x0, {0x9, 0x1, 0xffffffff, 0xfff}})

1m13.935704249s ago: executing program 3 (id=919):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000706050000000000000000000200000a0500010007000000080006400000a8000900020073797a3100000000"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x20000000)
r1 = socket(0x21, 0x5, 0xffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000bc0)=0x50000)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
syz_genetlink_get_family_id$mptcp(0x0, r1)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20040001)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@private=0xa010100, 0x0, 0x1000, 0x4e21, 0x0, 0x2}, {0x0, 0xfffffffffffffffb, 0x6, 0xfffffffffffffffe, 0x4000000000000000, 0x80000000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x7}, 0x40000, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x6c}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffc, 0x1002}}, 0xe8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000003ef0001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="19e728eab658415df94c9d41e5f72293555386c8b24ad65a5552e25ec1389f2c614a662adc0b6ab65af49aeac14e7ff5fbd5ae456682612caf832eac9fe1c2503f5b7e828fa138ad7cecdd67e9dcf077667f3cd832ed8229f4104359be47e997f75efe06cfd37675b0538892a9fb1f9d4a3b351c4e", @ANYRES8=r0], 0x0)

1m7.37197307s ago: executing program 3 (id=923):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc010000100013040000000000000000e000000100000000000000000000000020010000000000000000000000000000000000094e2400000a00002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc0100000000008100000000000000010000000032000000ac1414fe0000000000000000000000000000000000000000070000000000000000000000000000000400000000000000ffffffffffffffff00000000000000000800000000020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000200010100000000000000000b011200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f805000060"], 0x1fc}}, 0x804)

1m7.275426256s ago: executing program 0 (id=924):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001003f00b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)

1m6.608737189s ago: executing program 0 (id=926):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000fd00000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100be14140c0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04000002"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m6.488587824s ago: executing program 3 (id=927):
r0 = epoll_create1(0x0)
epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x6e, 0x0, 0x0)
r1 = syz_io_uring_setup(0xb9d, &(0x7f0000000240)={0x0, 0xfffffffe, 0x10100, 0x3}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0xc, 0x0, @fd_index=0x5, 0x8001, 0x0, 0x0, 0x14, 0x0, {0x1, r4}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB=' '], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x13, r5, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
close(r0)

1m6.356450234s ago: executing program 1 (id=928):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141220, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000204004d1504"], 0x48) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) (async)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x200, 0xffffffffffffffff, 0x0, 0xa00369a4}, 0x38) (async)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40890}, 0x24008004) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000100)="d68d425566a7d74e53f4efcaa41056d5c468e16230e750cfcda52092587ff23a9531257ccfc084e9824740de1f3aec860e4a66e1de3522bf449ff69189156dee43e889d9afe300c2154d191f4e701dce11d811a94ae139d7a6beada521b00e9664fb9c29e1fdc7818e2f78c9fdae91cb48dc3e1eb3a2e90bb050562aea7a586883", 0x81, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f00000001c0)={r5}) (async)
ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc)

1m6.139194275s ago: executing program 0 (id=929):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10d41, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'netpci0\x00', @local})
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
write$rfkill(r2, &(0x7f0000000100)={0x7, 0x6, 0x1, 0x1, 0x1}, 0x8) (async)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000180)=0xb9, 0x4) (async)
r4 = socket$igmp(0x2, 0x3, 0x2)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r4}, 0x18) (async)
setxattr$incfs_metadata(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)="6c5caec3d88d92b6a3261919d63da0e464fdb6fcb4c9e76612134d3dba41b0873ee257431d2ac9cf5e1e0f7b21b44588b4f53c3c0dad", 0x36, 0x3) (async)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x1, 'veth0_to_team\x00', {}, 0x3}) (async)
bind(r4, &(0x7f0000000340)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x1}, 0x80) (async)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000003c0)={0x1, 'batadv_slave_1\x00', 0x2}, 0x18) (async)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000400)={0x4, 0x6, 0x6, 0x9, 0x8, 0x1239}) (async)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x9c, 0x9, 0x6, 0x56597c795f16dd86, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_COMMENT={0x10, 0x1a, '/dev/rfkill\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x4}}, './file0\x00'})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000600)={0xffff8000, "25877d6a8b7bc14043acdee6b3fd9b305e4e44bd2f7767bf8680899504550b67"}) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000640)={0x0, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000680)={0x2, r6, 0x9, 0x7, 0x3, 0x8, 0x6})
r7 = dup(r0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5)
sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r8, 0x600, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x6d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000800)={0x0, 'dummy0\x00'}, 0x18) (async)
recvmmsg(r5, &(0x7f00000010c0)=[{{&(0x7f0000000840)=@ax25={{0x3, @default}, [@bcast, @default, @netrom, @bcast, @bcast, @remote, @netrom, @rose]}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000940)=""/10, 0xa}, {&(0x7f0000000980)=""/80, 0x50}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000000ac0)=""/113, 0x71}, {&(0x7f0000000b40)=""/90, 0x5a}, {&(0x7f0000000bc0)=""/38, 0x26}], 0x7}, 0x9}, {{&(0x7f0000000c80)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d00)=""/216, 0xd8}], 0x1, &(0x7f0000000e40)=""/187, 0xbb}, 0x6}, {{&(0x7f0000000f00)=@l2, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f80)=""/110, 0x6e}], 0x1, &(0x7f0000001040)=""/82, 0x52}, 0x4c59}], 0x3, 0x40002000, &(0x7f0000001180)={0x77359400}) (async)
r9 = eventfd2(0x8, 0x1) (async, rerun: 32)
io_setup(0x3958, &(0x7f00000011c0)=<r10=>0x0) (async, rerun: 32)
r11 = open_tree(r5, &(0x7f0000001440)='./file0/file0\x00', 0x800) (async)
r12 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000002500), 0x1, 0x0)
io_submit(r10, 0x6, &(0x7f0000003680)=[&(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f0000001200)="1d197bcbff0a7d51fe30b7532b699630b3e60a28ccd3fd5fa75ca673564a248e763f700fd5c98d9a8c53313a8f8bb5b34fcede779808cef01cd864f3d3896e410c67e20c46e049caa0ebf606da344bebede83c6bdb4e85f7209f3f55e1a65d2879538a512ca833a2cd42856a513a19d5a06ea74eb56c1d6efb5551f2995a86d10be720325c473cd20420369725316e9e57fb5fb846e6fff821d39b5dfeef7389468ccc454f2d7f24f6069b8c90f7b2677510b9fc4b3a10a948f885", 0xbb, 0x6, 0x0, 0x2}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001300)="9891bb8224e17d2e34a4b2c4d486592eef0d7ec320d9117cca5c4304edec64a2c9961f29a42f00cb2dfaf8a955b48868c1c379527764d565f2cb156830867a2013722cfaa62c2c94a99f5b79b329b507c42050587b4cea6033297a3e8a3d972a14e71c2078ad43b91f8e517ee3997d9fcda6eda227bd1bba0df45b58d2f802d17cb3a1", 0x83, 0x0, 0x0, 0x1, r5}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x8, 0x8, r9, &(0x7f0000001400)="8cf5e452c8edd2befd4eac6176bb8300a80a2ff90f278c1ce761b7a0f2544d40c053f01709a7471fe6bf9f40", 0x2c, 0x325, 0x0, 0x0, r11}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x7, 0x2, r2, &(0x7f00000014c0)="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", 0x1000, 0x4, 0x0, 0x3}, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x5, 0x34a, r12, &(0x7f0000002580)="7067af56b9fe49350f1ced627f40", 0xe, 0x2, 0x0, 0xd6caf26d108388ec}, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x5, 0xc0, r2, &(0x7f0000002640)="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", 0x1000, 0x9, 0x0, 0x3, r9}])

1m5.977260207s ago: executing program 3 (id=930):
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010040000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241cc0ff0a0a200905810300020000000904010000020d00000904011102"], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'batadv_slave_1\x00'})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m5.611635857s ago: executing program 1 (id=931):
r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) (async)
ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xc201) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x401)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000140)={0x0, 0x31, 0x7, &(0x7f0000000040)={0x11, "652519cab69bf9c9c3ee7e172bfe2548bca2a1406d186ff7ef4dd45197f36d6972"}})
syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0xc, 0x8f, {0x8f, 0xc, "4436eb40db523c870d61fb7177735922bd9210bf7087a2ceb7d8824b6c3b6d98f11f11720d49338f93e61901a26239f564af15f92af3f40e545f2ef9adc1c8657d9f6b62d2151e965489e896c6fac81aa8607c0074846e1c668e6af22f1d2e0ed5c582af0f677158850ce02bcc5b9146857f730f24270b707bf8f0185014efb9e774862f1ab41d112231b51096"}}, &(0x7f0000000440)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "66c95037bda970611bb3a42858f7f59dabb622f932ea0f6334ca282f62a5dc97f62347a6e9136f689fc94ccb582eb59204d51693ab2dc7a46da3797d775bed0d7797e66a992aec5eda1be166c929d788cc8f2baef0fab77f"}}, &(0x7f00000004c0)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x15, 0x9, 0x0, 0x0, 0x3}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x60, 0x5, 0x0, "df2534e9", "f9b3f81c"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x30, 0x8, 0x4, 0x80, 0x3, 0x1, 0x703}}}, &(0x7f0000000c40)={0x84, &(0x7f00000005c0)={0x40, 0x6, 0x56, "d7a2df0e4005706a44583a433bf56fe4b3b4679cd5cd71eb81724c98c96ea9cba00e5bc8f6b39c3bb8b40289b772301ba89742b9259b5ea58cb58c268f9b85553fa61c7d65de72bc6129a06478a349f3c2fe98694d39"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x30}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x800, 0x80}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0xde}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "22ae"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xcb48}, &(0x7f0000000840)={0x40, 0x13, 0x6, @random="8579cb6682c8"}, &(0x7f0000000900)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000940)={0x40, 0x19, 0x2, "853c"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x80}}) (async)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0xb, 0x1, 0x10, 0x9, &(0x7f0000001600)=[{}]}) (async)
syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0xe0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5eb, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0x9, 0x7}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x80, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x21, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x45, 0x9}}}}}}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000980)=@string={0x2}}, {0xce, &(0x7f0000000a40)=@string={0xce, 0x3, "ceb1ae51cbf15ca67fd49e10029547166170e66945e52e32dc985bbe2e3d475329e4a4104e83d4020a298e189fda1a7a1e9158cb328065e5c6dfe83ebac079c528aa56e7269295b65c6e3a8426e1c5ec9bb4c9a18ffa14d2bcc68886409e1a6ac18643fe90be58f8ea13b201183fc78e3e282c5c5ccfe610fb230e33e81558e6c99c24a4493c7b2d04a482f56eccb38f0d6658689fda2c51f206893a7413fc6a9a538429bc2c466d486319c2eeb6c56442381653a46c02fb90f091edf2dc3bbac8540fc519112ed949dab9de"}}]}) (async)
syz_usb_connect$uac1(0x1, 0xf3, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x3, 0x1, 0x3, 0x80, 0x6b, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x40}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x5, 0x8, 0x2, 0x2, 0xa}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x5, 0x6, [0x3, 0x2, 0x1, 0x3, 0x3, 0x5]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x6, 0x1001}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x7ff, 0x9d, "e24f300ec1559821b1"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x9, 0x9, "cecd"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x6, 0x24, {0x7, 0x25, 0x1, 0x81, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x10, 0x4, "b8bd", "921a"}, @as_header={0x7, 0x24, 0x1, 0x38, 0x7f, 0x4}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x8, 0x80, "d2"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xd5, 0x3, 0x81, 0x2, "84b0006a40eebb"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x5, 0x9, "0f3f", "ffe5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0xef, 0xe, {0x7, 0x25, 0x1, 0x2, 0x7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x6, 0x4, 0xff, 0x10, 0xff}, 0x1e, &(0x7f00000002c0)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x2, 0x8, 0x5, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x3e, 0x15, 0xfff8, 0x5e}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x280a}}]})

1m5.364593306s ago: executing program 0 (id=932):
r0 = socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0xa5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180e000009000000000000000500000095"], &(0x7f0000000300)='GPL\x00', 0xc, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x0, 0x1}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x0, 0x3)
r4 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef435000000e3bd6efb440009000e002e0010000000ba80013ffa85f59a0000005a8c3774fa0af3dc59a933c1e6a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f", 0x67}], 0x1}, 0x0)
getpid()
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv4_delroute={0x34, 0x19, 0x200, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x5e, 0xfe, 0x3, 0xff, 0x9, 0x2c00}, [@RTA_IIF={0x8}, @RTA_TABLE={0x8, 0xf, 0x5f}, @RTA_PRIORITY={0x8, 0x6, 0x4}]}, 0x34}}, 0x4810)

1m4.97718731s ago: executing program 0 (id=933):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1})
unshare(0x22020400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m4.531900852s ago: executing program 0 (id=934):
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c773666420f3a428ce80c00000000fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x4e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0000"], 0x15)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m4.160790946s ago: executing program 33 (id=913):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x255f, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x37, 0x1, 0x0, "c8010000000a00010000b6035c2299230500e20000432600", 0x384c4150}) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (async)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async)
r6 = fcntl$dupfd(r4, 0x406, r2)
ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x24b) (async)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000540)=ANY=[@ANYRES64=r0], 0x18) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async)
write$vga_arbiter(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='trylock m'], 0xc) (async)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10})
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000a00100"]) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x1000, 0xfff7}, 'syz1\x00', 0x52}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
r9 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x8000000000000000, 0x405c1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x104}}, 0x0) (async)
r11 = dup(r9)
write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r12 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x8000, 0x0, 0x4, 0x0, r11}, &(0x7f00000000c0)=<r13=>0x0, &(0x7f0000000480)=<r14=>0x0)
syz_io_uring_submit(r13, r14, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r11, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) (async)
io_uring_enter(r12, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async)
r15 = syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0x0)
readv(r15, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000003c0)=""/146, 0x92}], 0x3)

1m3.611689958s ago: executing program 1 (id=936):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc010000100013040000000000000000e000000100000000000000000000000020010000000000000000000000000000000000094e2400000a00002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000080ff00000000000000010000000032000000ac1414fe0000000000000000000000000000000000000000070000000000000000000000000000000400000000000000ffffffffffffffff00000000000000000800000000020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000200010100000000000000000b011200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f805000060"], 0x1fc}}, 0x804)

1m2.990891651s ago: executing program 1 (id=937):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x8, 0x0, &(0x7f0000000080)=[{0x6, 0x6b4}, {0xafca, 0x5f}, {0x0, 0x5}, {0x2, 0x3ff}, {0x3, 0x9}, {0x3, 0xffffffff}, {0x400, 0xffffffff}, {0xff, 0x1189}]})
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000140), 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x40}, 0x1, 0x0, 0x0, 0xb0}, 0x40000)
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000340)={0x28, 0x3, 0x0, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000300)})
ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000380)={0x8, r1})
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x82000, 0x0)
r6 = syz_open_pts(r5, 0x2100)
read$FUSE(r5, &(0x7f0000002800)={0x2020, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
newfstatat(0xffffffffffffff9c, &(0x7f0000004840)='./file0\x00', &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x800)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000004900)={0x3, 0x1, {<r9=>0xffffffffffffffff}, {0xee00}, 0x5, 0xfff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004940)={0x0, <r10=>0x0}, &(0x7f0000004980)=0xc)
getgroups(0x1, &(0x7f00000049c0)=[<r11=>0x0])
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000004a00)={0x0, <r12=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000004a80)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000004b80)=0xe8)
r14 = getegid()
r15 = syz_clone(0x10028100, &(0x7f0000004e80)="8691dd63ebc6780635a092a08f070497d63e7ca49f9ca0bec11ddeab11db6a828e707816b4dee7c02fd7317fe3f2931bbe5f8baf691955f861b541b969c282747adf06aac8aac094db82a11f1dc48fe22b0ef3669b26c3756b4a8dce26e15663c5fa212741104a60e7645126deed79d4d8e0723aa003f05763087b2f3ebbfde0e2deaa3805cb7e8c4ab9e44d2c08d64768c03f20f35d575fc603c6ffbb7351201b2fd7f4e53a15662ce83440bdf6f207f9d8fd5ffd88b48437729f77ec04bce3f77513382891b7b961e4", 0xca, &(0x7f0000004f80), &(0x7f0000004fc0), &(0x7f0000005000)="51eea8470370345946a8a1a1c9250f96f29612d1d44e11c3f5f59c412639af08ce26769ab5efcf9a47a15083107258780a26d0ad600d77c26ac9b86e6971a2fe8209e44fa1decfbd9b8a3283b45049046297253e35031c742f5ead6fcca3c05d83cdf150d972946d22925bcb44dca5966ae53690d166a4f0e7339d96594cbe803c3a67909cca08c6a155db579c9f0b141d70b02e88b3bd031937cc7bd87fe665c6133ef010")
read$FUSE(r5, &(0x7f00000050c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}, 0x2020)
r17 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x9)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000007100)={'\x00', 0xe7f, 0x3, 0x2, 0x81, 0x3, <r18=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000007180)={{0x1, 0x1, 0x18, r0, {0xee01, <r19=>0xffffffffffffffff}}, './file0\x00'})
r20 = gettid()
newfstatat(0xffffffffffffff9c, &(0x7f0000007480)='./file0\x00', &(0x7f00000074c0)={0x0, 0x0, 0x0, 0x0, <r21=>0x0}, 0x6000)
getgroups(0x4, &(0x7f0000007540)=[0x0, <r22=>0xee01, 0x0, 0xee01])
r23 = syz_open_dev$ttys(0xc, 0x2, 0x1)
sendmmsg$unix(r5, &(0x7f000000b2c0)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000000480)="d43103dac6373638dba2a8c1145c2bc4ce2c4f1b849d5cf4fb11c2aeec0492e4bd2ad7dec1b8d06d0ea32746e2da8eb38b14efc49ad8f8a3b9b91fd63a47fe4f4e5411198d556f2504432acf44b1f5d7435a5e78d99289f6f1010acab3d0523d8e95ece56a6a344b1dc4f9b7d2d21b985125db5da9e6ec", 0x77}, {&(0x7f0000000500)="d72b5ce19bf5dc9acd4b54b9797ed8753f1ae2a3960dc98da809760a6cf174608837f13acf40b515d021ba27ae8e13e84c02ab9519fbacb3020dd89dfb18a71f63be45cf365c9b2c00fed382e52469facbb024a2eafa2a1124dfd8159ea5185d16a50d298f6150b029dc185841a686ee8eed19c8e0006fd06a64b9c2de", 0x7d}, {&(0x7f0000000580)="c48950f4cc29121181cbf94e819ca8ab0fbf055c60dc5843814856a91e5e5084661bc050ef8984b8e0c1f9f5a035a8d1a044b7741f889824c330ead5cdc811c3ad07431cbd10003859b23befad2a46266bfd932b167479dce981bcb0239d16b5dece84b069340a647f8739dd195606a353c0127e13d516c3eabed5f77789247f8aeb697ff5b2a7bc37bf4d70bf98478503e5385b1a1fe48de2ac31dd4b6d7b714261def837c807d074beec924078d8b76b9aaa88444f20", 0xb7}, {&(0x7f0000000640)="9758eee18732191bb010b69ede1afe970391e00c07dcc12a712e17ecff0573367a94fbf8e8ae8dc1298b8ac23e20513b6d000109fab2f5b65107601a0f3ffe3153192ff67f39f0f1ce0ce4d3b49bd650903f66819d039c26d48a7e29d8c08c546e3bd480a5ab480fbaac6362ca6e40a403c4e1d3b132b0d9bc5ce6d81782674e4dba6a460f3b88ba5f50de50bcc5e8bd999103240aa1edf6b68a91e32fd246a754d181266d3fbf543bb5a3eba57cb7b0b8f3e9ff3fbf77f32ab0753860597f042496d21568c9513fc5a462d100eda2ab77a664852c4bc56dc6f73381c69781d19846147851665c3e2d37ab6974f6a66f01a0024fb0a5418712d3cf7a2266494d5176893179e3821f6afcc6d3e50c556a7bcba40ba680e9ebeecba907c4b978a77df0baae8ade071e0b0d23f486cc51c7eff412d46e28c97064bf985350e72ac745d9f1766982eae7f121481530e061b85901a843dfcc3c9c87e8079187b6a9afee8c580da001c1e2f50be71956d8be5fd7545f3e7a705b6db2a5a78d73ee4e18baa26af930c7d7be034bbe3789415f80a78f61f1359d29a1823f514d20262aa180779d3cdcce2a3deb83b4a4f4b09e40f5d56d29d17dfec4b09b92fb2e26c50e5ad7513983a6da3743193afaf0411b78f9c5cc7ae7080d09b4e42dfaf6c41e8c80446e7649da520989830833b92049bcc145705a9fbc64f06a44ab24455e786320253e19058f73c5387c07dadfa1ed832b6acc8fd5cca4949d7dd2dc97cfcb2b62f254c88a316c536ae37e50c4fb79c6173d8801348ec44079262c0881687982a43a618d46b18aa7689c879f24c4a617598552ca2dd51c946f367168852ff1f81147e32f75f8e7ecad3d87e5ab864eac40ce995fea622b32100df7e61fc90f39f3d24c48ec083284f83c67e5aec429bb18bbab64ab267e29c66366cd778773b299d785e02a268ff8ae671305e9f776bae0e6f93b3f78f4ffc86aac8c6481050c7bca5613d51a8db97113fd5c696ecbc8d23baa026c347f97942af2527c588f6933640cdcb56fc36d5a9235e9c0de82b71d8468781736d108931b66370500c79d8e426cdd9a5f10a0a50d2f50a0fd0e305609247ed87d829e76adb468335ea61219fd7f3558270c6939004fd3ca397a42d1c6788113509e324a9e6445e745cd110c2bb6da6890cdf277248fa1fe28d87b23a68a123387399c7a3817aa056d12f78de2b7cbaeb0f5879135095674da996dc4b55389af5fe3d5b856444b9f232dcb9dfb7c243ef180363f33017eb37090fe2d06a6bb70b57897449190b8cdd88c6e940a3115e7950d704a0e7896add840ccb4421a64ac67c216e1b5f89bbb92a6654739f4993d015aea0baf84036522e1dc60da08d18330873f5e18a1714bb786856a3d34dbca43f282e353627b93dcd837f89455417ade1145adabe05510ea80032fbbc044474273bd8b47bf5be7a440bd73fb6c3d5b9924c13c38095e77650b6808a743a824b3b5c6b7b0a7a5a94fd79fd7e677663e6631c14e66fa4598e8c5fa873f3dc15c665927b552d11d6531028e577c865597cd8137372249d5ff768bf9a062c090a2a64d71188213f64cf3f03d6159728c98524492056412a0253f05fb5f197ddeba1bb24eb936a6094719e9450926fdb1b20331fa5d6c3c83e62cf335398f93ec6dfa5de133cc31b47d73f0e6f4e6d45fea032a7da6bb76fec69fd1511497718f5c94537054689ba421093fe733e098defc68336af80396a3cc745bd4aead22f5d9b5b5807cc6fe503575739f4115a2df02496db8e64921d902068e720e7d74806809d7bfadc0b1c94c87a560ea28f600bd3c423b2738d323ddecb0bb87c90e4158e95295d5399473cc422edea3b3aaafdca44a49f0aa0223fd39b80a03e3c22cd601d38b538350bb241a9fe37ff0b755f72e6fec421c89d71e2dce90d1c35a20b4a86d27456673e9d20da7e102c5e0980d2444c31ecdeb4754f2050a3ae18fcbb4a5bc7d925437dcd9a082d7c2d89b912f584dfced1e7c8e4f142af571bf0165427ff5a91fec0d3babbfa717dcc4a2c673a697d81a4a7637228f6a7dc8abb2830fdf8abbb3af12ebd95f0c9606682120ef406a0bc698b43bc74fd5dde2b004d7d07d9f739efa8149145d7389da556993ab524df9120d7fcc29c2e408a9732a897510b9b7c65edfcfb242d343b428e221e72b20b875a55c6c5cf3ecec9adfc2330217274debab3b3846bec91196909a9271e029b1ae77abe02a53c8981bd88e74f3cf272d9d53259500d670b19f59253c0be847803734d960a5a41dce9e3f34ff976bebfa340278717b5eea418c3d00b5b9d869a95f4fc5ea4fdd76b089456e044bc2eafc73c67295962c91ddf0b148cd32e5670be48d9acfc59e9b0916009af8f88980034fbe3ce2bf51a38272f7149832c3b72dcb68c10cb136b848799c54446dc018b05b2d40c32b13cccbd73b384bd654728f1fc54f372bdf5b6caf8447dc3ca18f23426da2fb54b195de04df61b7da0277fce0da7d68760793ac196e41d68e083480c543c1fd3f19a8d8ef7ed2158da08d5f733d5da66e8394e8db25b83fb53a9b742110497d769cda20cd33bebe9c35811f50814f08ada29378beb88674482760a578adc7e1559ef20aaebeb891bd60870d77be2c289c8f497f2f14d98e46e3a8f441e8fe25e74b0508f79540f13bd9a613330726555e2c1a720b9a7f599f0c6e3fe3f4c2912d7dbb1a6333f54aa9960cdba675ea6fcf4f3795c1b3de1fce0670ba8f3448beea65821af9ce5592266776c220d9965a0f8ee17445cc18c9419feafc943f52931a5918ba0e59356269b283377d467495b5301d07ad6607ecf193d104e457a229d7adb61e444b1677358a9e7c42bffcf1107fa7069e0545a436d0ab97e8ee1628271d1f6f70bb35b57d25e04eca3c7be48ca9967183a102e2f5185c400e852937067a199a51fc46a7801f46610dd54b11cd4c7abdd1d10a8e3b3ba92019d1cb6366202b6ecd284c31c6952073b3f879f0a339a69c7dd9472da177174e6c578dde6a70d2fda71135c0b9669b1d9a9d555a18d3379fe7b9c94209622791bf6f406c14273db003a52df139c8be1cb68ed5ede4f616d7f2f2a8e819d0c3aa2ecc0bea463f00d6eee7f0ea071586a8ef6895ee620834205a2ecdecfd1262aac5994a12b8fad06db24682d2a1ab494a4c592aa1709109a1007c5e812553aff7fdefdb0bc1470e0eb9f63339d1589eb5927e2667c873b6cd1edf440e00b58eee3b7ea1bc42b30119feb29e7767edfd77ffaafbc85fdf66980cc5ffa37695d63b7c0bffa6f759756dacbcedd83667a77c065ebd541661e7c91f98d882480f4389ceafd1a0c3622b7e9d3388e591b3388afb963a416bf9cc45dc0efeda39fb16e6b775f5b80a4b12951b50eed5cd2ed68b8cc9fdfb62fe58ad236051eafb54dbbc2ee31bccf7f3f404d2a57765788b8177130e78ed0fa79ffc6989197618996d37ca7d6f2a8bd700c495aa836648a1dd3b685bf4a8798fbf2feac77536ceb009c890ed8e7c3968102bb69b2008c6a32695b2ebefa93ed26cdb08319f21df0fea2c3f0eea581f2cab6dd4f5c60717322f566de75faa5af8ddcfc19715023f42132deada3d11cc4a8db09b73716a757678aec7d1d9b14a242846e6167cdf1752ea91b6513d1521779a74f242276855f9cd5382f1a0b4d7146123d3b3a8de6b086c8cd3a8879502cd802c15350f0e0de78c8548caa1e11f6a68ca83e2d7bfb63c4a217811bf615f8a693d0012c37b001a4ae02232598262a0bd96371e33e3ed2a6fe510b50103767c99a9aa6a07d10a42b5e9927af5e81871b0c5d6dd33b3a122ab9b49de71de0e3b156d24b5bbe00c390d202f436e136431737d9dddd824dd60f04a92f53a5f184b8d67411f882e9d69cea365e547a7507008f7e47fdd296bed35e505f35803d17c836f813623d8e99d2ca0bb14fbcf4e35049d5f7cdee0d8dbdc5d2279d2a5ea5acfcbb6b1821d17c6ea02967fc89f19016be7de68606e7dd7213d4812e392ab1a91db8c68e91d8a619d37ebe1f3aea62b189bf050c34dbc04f1ca435efc62fce5231a1907ed7a360abefe0afa0f4f08b89a9f0b594410c39bd5c704ea86e3952084677c225a3eadb4b44acb73d91e41c523760200b53a11d655c6eb21d850dcd70e695224f6694b95a67543cd0a18655e45b94282ed50e14dcb8499631ab84a44ef4df85ec2c566daaca632831fddd8da80f27b2390f5db221fc49525fc785f77c68fce8cb2a653b3eb7c148ff19c5e70f9b1c7920a83827926fc8781b13f9b4475da9c5ce556b4ed6448f47de067ab7179ecf99bac3b7257d5f61e2b3f86a64ffa9a48e3e22682b51644b916214b35aa8ab9932ce850ce218f7bef25fc0208292c2182fe712611a46dd32837bb226517f69a0c2b8ac82d758edc45d53913db5299ec91b758db7fec5a5eb2a209565bd9b5e5b22e092dbc4938a9d9470bdc9a956836127cc4b9863b4a9c99dd9bd107be666a7ef902729198466b9b0989fb95dc3a15b82a690b34de29d7b78cd6b0653dfae21dfa036272b721791dcb630ce5e58a5bee5290fa386dd3134f3a453a23b20e7330cf1e7901b1fb25b8f1e57e68411880053f9f900f250241f6efa85e191c0dfead016f9fd0c299fc3215926818f71aa31bce6415c53862b8777d69cab04b0a4bb8d00f86796088ae26665befa2c0de9da2b47bb8747f78043a8d3ea4b71acc98772007bf877300a83af3763997c211cbd91b5a85ba9cc5f56037cc4c72102011a06027dc13468a72c6803b8d9ee88677d02f0373655a1649f140a48748dfeff8696f9830b65b4a7dd78448f3b12aa56c97344c21f3a74cce28a2e724dd057c479f73ea4291a87892af7c6f46ec9999f3d367168cd32ecf314c8fb83027ad782a667b77261025a96d36b3eed395885813ea0b74396d30b62c732d1b6bc5808495b4336254960d34d7fed61eda5aa71a8b968a0ecb2db5fbc799911027448bb71a81bb79b16665ecee63cf3f843628855f22a46bbb357638dcca3d2df7c65eb05d26091f456291bcfb1c9235b30fa09903aa7b9576612607ba32454334ca22b35ac132a957da93430e2a37059d1b7eaa9b242ac65a7372ef14382c8fd4aa9073d85ee49fdcfee0994d7611766791e7ebbd6d85b7dcc9788f7ef0a7e7e6fe18d480127c6b75cb3a51347431c64bd7437938db4c961be6cda00393f9cf7d9e3ce439987f851a4382223bf324a4f04e0a26ff451099fce6ff7ba1ca6b9fd45de233a51e5d2f4402610b140685a29382c09a09e2bf56f7126a845b0f3f0a49ad4a6e0a42f3383183a5da8f737f0ab5002eb7971179ede98fe0aacdb599a72698c111988498fca063732096d0228da5037ea17045eac6ad8f903da37b3a7fa5c2300aa35a2507dd7256ef56a82d4912dd50b99fafb60457b336a50c3561cc58661d14cad3c8f497275c4bbfac17c4ab75e2a3b89960c2b87dddd53afdd2951fb9297c579c94c9971d0c6e2229cb94a7cbc5338fa7c2f96515619910cadfdc27b39c33a38e7d0c303c5227b5e44b968aa7dcb577348e35dff4433f8bc1b3d57e65a4dcf158e30b1d8ee676dbf609326740af07bd54f2053fb608778272c07117006f1bc65f6dedad437071422205f83ebde45904d522d1959f18abfd54ab0deb7371b803797aef0d535ce75cdf5833bc7452b6053f8f152bd8cf7402315ba4e8ba7d75560afbbb7e910872594a25e093bf31b4e4ff9b24d0ce32a46d268952b4537ba908", 0x1000}, {&(0x7f0000001640)="d6d339fd73576a0d152e1a44f4aecf5f", 0x10}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="f21837d8ead2aa10f1c93b12d1262060928dba538f37c6885126f9f9d14acbefa9246cf2af47a157e06f104d16953b573b", 0x31}, {&(0x7f00000026c0)="d4491c28c6cfff4373c2591d6abf8eac4d0fb39ff4e486821073824be892a2a557f3860d08bbe33c72a15f42d0f509367a419c61d3675da8b5aa93d0d5ca7a2b13be4a5df61bd6d45e1cd83461041eb764b88b319013b66aeb10095a6a387eb118b59516b2fabff6e3e75d7e1f97a10b42b7561cfb1e79d69a9239077f3a6bb6964de3612b45438d4547a991bcacfdc8b6ec1beb4feb7ad47164ac54482a8d608d55c7a2734251bd9fcbead95560844fa3ead87008ce8c2d73136fe2", 0xbc}], 0x8, &(0x7f0000004bc0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff, r8}}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, r2, r0, r6, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x90, 0x4000}}, {{0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000004c80)="0cfc07487b82e52f7191cbe8d8da00dda4c56f37210ef7efc0add7573edf379f6b0bad1aa872c2071d399d2cddf78bbe11ce0ee2a37ed7bc15e557e323f50cde7ce483accd64ea0243fcb5a7446537ca844160ea093e82d0a40d274f29c0f68c319607c38972fd52ec9ea588af0fb39ba6b763149bd8f7ec5d99ac467e891efa12db05a0333d7a23fe4ff5748a3e5da926774927f33905135027", 0x9a}, {&(0x7f0000004d40)="b00276e9a43f139412030ec87f45458e3a5fa18f763c27607cb688c94788b36a6a610a8ed16a8d2aff78f5f9908a18a63e36e2853169f0fa6918dcfee217a04e70879b46d7713f02c6d91296b44fa9e470867a92", 0x54}, {&(0x7f0000004dc0)="ee8d460b0923af63d0b67976e05a979b2f5a0b318bc48effe57daf2e06c293552bddad2b73ffd712926996acda6d7c5c520d5ee369951e3c049328622dcc9903e14be50458dbd96816b64deb426071f8bb", 0x51}], 0x3, &(0x7f00000071c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, 0xffffffffffffffff, r19}}}], 0x88, 0x4000}}, {{&(0x7f0000007280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000007440)=[{&(0x7f0000007300)="04902ed71748d6d9a3de04ed217a2df38d195c11f72e3f9b1c2208876d05575d9fbaf58d98b72bf7413095cd6189222c892dfd53fc97077b81341ea92954fcd3caec428b1de2456678b7c686045d34fb04fb0f90a56d7e6cbbe01cfd638014eaa0430958182abc8b240ca70293caf6db53a150b04a22dff1213286c863054b203f863871ee6957abc48da8e57da5d0c94f", 0x91}, {&(0x7f00000073c0)="480fee13e155aaed1dd7cd4802372001cfbe19ce112e1ebb64592c040252d201e00d01", 0x23}, {&(0x7f0000007400)="08ab132613d2", 0x6}], 0x3, &(0x7f00000077c0)=[@cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @rights={{0x18, 0x1, 0x1, [r23, r0]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r5, r0, r0, r0, r5]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, r6, r6, 0xffffffffffffffff, r2, r5]}}], 0xc8, 0x4000010}}, {{&(0x7f00000078c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000079c0)=[{&(0x7f0000007940)="f8c52783e41542129535d9425d95b84e088ad553ffe3ea5d0d68a3be56019c84ae551ec736bebac794d51d0a224279dca45c3ca25d5a0b878f2dfad9dc672bb40591a8ee5b6aa17c313e22f8dc13f5a8e15e497535409ae4aeb50660a5cc69dd7e00b1efadf149da704c9dbee5f37caa087e22e817f9589a04f6d1b334305e41", 0x80}], 0x1, &(0x7f0000007c40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c}}], 0x58, 0x20004000}}, {{&(0x7f0000007cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007f40)=[{&(0x7f0000007d40)="e7c92306a86bcdec3fbcd660a567b8e2e616b9ff1943e691a23db3249afe25a19d55bc28559ea98ba49212ceaa1a0861a12f3d01e82cb87c9e251db90675cd89542b07998e8e4b985b14487e718cbd538a0e127fdf1f227d06248f3a6e12d92ab1afb3bc0434a470543776f8e46256f9657cb0bfeb7a01c6f2e9f7a9ea5347cde71ec4f2768c27a7c3827afde55700c5b7099bde2e2f0f612f3bdc785d50c81f1c772e5d8ad971606709bcf265eafcb366771bda70e7b0cfbb56ea1e0a1dc452bd71ea9d53aefb92afbb03177008f7f07d12d4536aec5baaec6d3e643853c7375658841729200a1095afaa67be2a", 0xee}, {&(0x7f0000007e40)="8443b08e72d0143d763e7e7c0966cb8fb75d72ad3d7217e56d625d498420ace0bdb49d280bb0f12c86", 0x29}, {&(0x7f0000007e80)="f9fe541ab041ddca4bfee1ff93dc2ec2f032ad523937ead5eb8c2a8369ba95b3c05d1af7d608805e7de5068528fa70b9ea602a97bdcfc6f08f2bd046b0330fb5304685e85f2b1da12198ff2262603297c81e61badfa98d996b605875e6e065544e04d22aa49fa89cff6faaa851326cdf2aee2c7c9d24249743f60426c33369aad6a1db3503a759c422acba69ae5ec59057a962241349e192ba37b291a00826072fae4bf2c4abd0", 0xa7}], 0x3, &(0x7f000000b240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r6, r3, r6, r3, 0xffffffffffffffff]}}], 0x48, 0x20000001}}], 0x5, 0x4008010)

1m1.620451503s ago: executing program 1 (id=938):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r0 = getpgrp(0x0)
syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x101301) (async)
syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x101301)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
rt_tgsigqueueinfo(r0, r0, 0x1a, &(0x7f0000000600)={0x2f, 0x1, 0x2})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1916, &(0x7f0000000000)={0x0, 0x75f, 0x4, 0x1, 0x11cb}) (async)
r3 = io_uring_setup(0x1916, &(0x7f0000000000)={0x0, 0x75f, 0x4, 0x1, 0x11cb})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r4 = request_key(&(0x7f0000000240)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00', 0xffffffffffffffff)
add_key$user(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000500)="7f342fcdc6218238811760f4c15ae14110eb10152999bd31ef44bf8e88b16e16678888be00cc89ae46412acfa44709e3387021832b90a718eb044700d5418a4b8bcc5306c08ba5e141efff1dcdea4b923921d9889800964a2b8cc2970440aa217b39ed633d95afc05ad0a801138ca21fedeb10904ea8b538ee31d8dd", 0x7c, r4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
poll(0x0, 0x0, 0x1)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0)
socket$kcm(0x21, 0x2, 0x2) (async)
socket$kcm(0x21, 0x2, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000)
r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a)

56.127639265s ago: executing program 1 (id=939):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x0, 0x8, 0xa, '\x00', 0x7})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x10000000000008, 0xe}, 0x0)
syz_open_dev$media(0x0, 0x0, 0x101d01)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x10000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)

50.251784471s ago: executing program 34 (id=930):
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010040000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241cc0ff0a0a200905810300020000000904010000020d00000904011102"], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'batadv_slave_1\x00'})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

49.049308821s ago: executing program 35 (id=934):
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c773666420f3a428ce80c00000000fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x4e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0000"], 0x15)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

40.782213083s ago: executing program 36 (id=939):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x0, 0x8, 0xa, '\x00', 0x7})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x10000000000008, 0xe}, 0x0)
syz_open_dev$media(0x0, 0x0, 0x101d01)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x10000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)

39.635912815s ago: executing program 5 (id=909):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x129103)
poll(&(0x7f0000000000)=[{r0, 0x400}, {r0, 0x2020}, {r0, 0x12}, {r0, 0x9005}], 0x4, 0x7) (async)
poll(&(0x7f0000000000)=[{r0, 0x400}, {r0, 0x2020}, {r0, 0x12}, {r0, 0x9005}], 0x4, 0x7)

39.339819367s ago: executing program 5 (id=943):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1})
unshare(0x22020400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

39.067301119s ago: executing program 5 (id=944):
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RMKNOD(r0, &(0x7f0000000200)={0x14, 0x13, 0x2, {0x40, 0x2, 0x2}}, 0x14)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x1f9a40)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf25100000001800018014000000000000006a626d61637674617000009e4cfbc1fc37f297244ae2179365bc67f63334efb817388dfcd8688493aee2cbcae034b74106ddb3b3717219ebc0ea479b5e159ca654f41b40290900000000000000358f5421e4302ed8c5fdb4801db3ee6fa2cce68de54d1c669ef2997e7a2aa54e295d221f34c1609a4a396fbc2e60478fca6e15df862986bea4a431de9092052351c351d1bccb3db8ab24f1643ec2a991937d490b2d87fce2797ef1"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r5 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x1000}, &(0x7f0000000240)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0x3d}, &(0x7f0000000040)='./file0/file0\x00', 0xff52})
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x2, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="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"], 0x0)
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x7ff, 0x349900)
ioctl$DRM_IOCTL_GET_CLIENT(r9, 0xc0286405, &(0x7f0000000680)={0x7, 0x9, {}, {}, 0x23ed, 0xff})
open(&(0x7f0000000000)='\x00', 0x80140, 0x38)

38.62460314s ago: executing program 5 (id=945):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f00000017c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e24, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x8}}}}, 0x3a)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
r3 = syz_io_uring_setup(0x1d91, &(0x7f0000000000)={0x0, 0x2444, 0x84, 0x1, 0xd8}, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_enter(r3, 0x1872, 0x2180, 0x9, &(0x7f0000000200)={[0x4]}, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
landlock_create_ruleset(0x0, 0x0, 0x0)
syz_emit_ethernet(0xc2, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x88, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x18000, {0x4, 0x6, '\x00', 0xfffb, 0x33, 0x0, @private2, @mcast1, [@srh={0x3c, 0xa, 0x4, 0x5, 0x0, 0x20, 0xcb, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x23}]}]}}}}}}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0], 0x2, 0x800, 0x0, <r4=>0xffffffffffffffff})
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x3)

30.713255008s ago: executing program 6 (id=946):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x3f, 0x58, 0x0, 0x0, 0x40, 0x2f, 0x0, @private=0x2, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x4000000}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x2, {0x0, 0x4}}}, {0x8, 0x6558, 0x40000}}}}}}, 0x0)

30.324169141s ago: executing program 6 (id=947):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000840000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c0001"], 0x188}}, 0x0)

29.969044846s ago: executing program 6 (id=948):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
io_setup(0xc, &(0x7f0000000000))
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000})
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0xc3, 0xff, 0x2, 0x0, 0x0, "f98c7ad7a34bda2dc45bece06e6a1b466b759f", 0x1, 0x4})
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

26.93413134s ago: executing program 8 (id=941):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00b6795591c81d70d4a25000c381a52deb"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x11e, 0x1d, 0x0, &(0x7f0000000600))
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000040)="60ef25")

25.388708029s ago: executing program 6 (id=949):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x485c0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/221, 0xdd}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000240)=""/155, 0x9b}], 0x4, 0x0, 0x1000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xffffd000)

25.069486953s ago: executing program 7 (id=940):
fsopen(&(0x7f0000000400)='f2fs\x00', 0x1) (async)
r0 = fsopen(&(0x7f0000000400)='f2fs\x00', 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x581, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004003}, 0x0)

24.645258162s ago: executing program 6 (id=950):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1})
unshare(0x22020400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

24.368433859s ago: executing program 7 (id=951):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}]}], {0x14}}, 0x98}}, 0x0) (fail_nth: 13)

24.224000065s ago: executing program 8 (id=952):
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
unshare(0x20040400)
signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) (async)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8)
syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xbbcf, 0x10100, 0x0, 0x242, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000140)) (async)
r3 = syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xbbcf, 0x10100, 0x0, 0x242, 0x0, r2}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r2}) (async)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r2})
io_uring_enter(r3, 0x353, 0x0, 0x0, 0x0, 0x0) (async)
io_uring_enter(r3, 0x353, 0x0, 0x0, 0x0, 0x0)
signalfd(r2, &(0x7f0000002340), 0x8)
socket$inet6(0xa, 0x1, 0x0) (async)
r6 = socket$inet6(0xa, 0x1, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in6=@loopback, 0x4d6, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x6, 0x8}}, 0xe8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'})
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9) (async)
ptrace(0x10, r9)
waitid(0x0, r9, 0x0, 0x8, 0x0)
prlimit64(r9, 0x9, 0x0, &(0x7f0000000100))
waitid(0x1, r9, 0x0, 0x4, 0x0) (async)
waitid(0x1, r9, 0x0, 0x4, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000280)={'\x00', 0x2, 0x3, 0x200, 0x8, 0x2, r9})
ioctl$UI_DEV_CREATE(r8, 0x5501)
ioctl$UI_DEV_DESTROY(r8, 0x5502)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x1, 0x2, 0x7ad32357, 0x6, 0xe79e, 0xeb9e})
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

24.079121521s ago: executing program 6 (id=953):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00')
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000040000b0000000c00058008000100756470"], 0x20}, 0x1, 0x0, 0x0, 0x24004011}, 0x4006800)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000063012000000000009500000000000000174cbc18c8c9941225f9ed4f0c016709f1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @reserved})

23.074306248s ago: executing program 37 (id=945):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f00000017c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e24, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x8}}}}, 0x3a)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
r3 = syz_io_uring_setup(0x1d91, &(0x7f0000000000)={0x0, 0x2444, 0x84, 0x1, 0xd8}, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_enter(r3, 0x1872, 0x2180, 0x9, &(0x7f0000000200)={[0x4]}, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
landlock_create_ruleset(0x0, 0x0, 0x0)
syz_emit_ethernet(0xc2, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x88, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x18000, {0x4, 0x6, '\x00', 0xfffb, 0x33, 0x0, @private2, @mcast1, [@srh={0x3c, 0xa, 0x4, 0x5, 0x0, 0x20, 0xcb, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x23}]}]}}}}}}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0], 0x2, 0x800, 0x0, <r4=>0xffffffffffffffff})
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x3)

22.996734519s ago: executing program 7 (id=955):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c0001"], 0x188}}, 0x0)

22.778073575s ago: executing program 8 (id=956):
r0 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) (async)
timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r2 = gettid()
tkill(r2, 0x14)
sched_getscheduler(r0) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000028017a0edd360000000141000000180017000000000000001a6574683a746d616d30000000"], 0x34}}, 0x0)
r5 = syz_clone(0x0, &(0x7f0000000080)="9f01a8fd305ae2cc61d5eebedb6f96d9b46b232ca64b8e7858c306551455ad13b215df632b65afebe26877ba03629f8b749b0f4f986a77e0490d2bcbea3f370d110c78c8e368f5ee6b", 0x49, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="1ed0e86a4dfdbc56600aed03")
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, 0x14, 0x0, 0x201, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x2}, [@generic="5312b5dbbebe1e9e107bdc764d6471e1d17729ff57bfe298f09880603700c976df806cec26ef069921ded949a8a0b5e660c6854f038e9f505a2b83dd10c7cd19a0043f28f1a7c0c7ebe0fccd4cd59ca08c9c81570f9c04cdf4522cfee8290955dcf9e9d177250ba5c9182628f317e3540fa846fdc5bcc3f13bb3c30784c7f744c4"]}, 0x98}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000002) (async)
syz_open_procfs(r5, &(0x7f00000001c0)='fdinfo/4\x00')

1.059518769s ago: executing program 38 (id=956):
r0 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) (async)
timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r2 = gettid()
tkill(r2, 0x14)
sched_getscheduler(r0) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000028017a0edd360000000141000000180017000000000000001a6574683a746d616d30000000"], 0x34}}, 0x0)
r5 = syz_clone(0x0, &(0x7f0000000080)="9f01a8fd305ae2cc61d5eebedb6f96d9b46b232ca64b8e7858c306551455ad13b215df632b65afebe26877ba03629f8b749b0f4f986a77e0490d2bcbea3f370d110c78c8e368f5ee6b", 0x49, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="1ed0e86a4dfdbc56600aed03")
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, 0x14, 0x0, 0x201, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x2}, [@generic="5312b5dbbebe1e9e107bdc764d6471e1d17729ff57bfe298f09880603700c976df806cec26ef069921ded949a8a0b5e660c6854f038e9f505a2b83dd10c7cd19a0043f28f1a7c0c7ebe0fccd4cd59ca08c9c81570f9c04cdf4522cfee8290955dcf9e9d177250ba5c9182628f317e3540fa846fdc5bcc3f13bb3c30784c7f744c4"]}, 0x98}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000002) (async)
syz_open_procfs(r5, &(0x7f00000001c0)='fdinfo/4\x00')

651.913153ms ago: executing program 39 (id=955):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c0001"], 0x188}}, 0x0)

0s ago: executing program 40 (id=953):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00')
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000040000b0000000c00058008000100756470"], 0x20}, 0x1, 0x0, 0x0, 0x24004011}, 0x4006800)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000063012000000000009500000000000000174cbc18c8c9941225f9ed4f0c016709f1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @reserved})

kernel console output (not intermixed with test programs):

-71
[  278.043341][ T8620] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  278.052606][ T8620] team0: Failed to send options change via netlink (err -105)
[  278.064748][ T8620] team0: Port device geneve0 added
[  278.111138][ T5835] usb usb2-port1: unable to enumerate USB device
[  278.130965][   T24] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623
[  278.140547][ T5908] usb 1-1: 0:1 : does not exist
[  278.156761][   T24] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  278.165077][   T24] gspca_pac7302 3-1:0.101: probe with driver gspca_pac7302 failed with error -71
[  278.192269][ T5908] usb 1-1: USB disconnect, device number 48
[  278.212154][   T24] usb 3-1: USB disconnect, device number 42
[  278.256545][ T6721] udevd[6721]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  278.503718][ T8649] netlink: 'syz.3.773': attribute type 10 has an invalid length.
[  278.723089][ T8655] netlink: 32 bytes leftover after parsing attributes in process `syz.2.775'.
[  278.775517][ T5890] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  279.013168][ T5890] usb 4-1: unable to get BOS descriptor or descriptor too short
[  279.027789][  T976] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  279.142177][ T5890] usb 4-1: config 0 has no interfaces?
[  279.266276][ T5835] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  279.316329][ T5890] usb 4-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00
[  279.335884][  T976] usb 3-1: Using ep0 maxpacket: 16
[  279.338824][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.351352][  T976] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  279.353104][ T5890] usb 4-1: Product: syz
[  279.365162][ T5890] usb 4-1: Manufacturer: syz
[  279.395187][ T5890] usb 4-1: SerialNumber: syz
[  279.400084][  T976] usb 3-1: config 1 has no interface number 0
[  279.412919][ T5890] usb 4-1: config 0 descriptor??
[  279.515651][  T976] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  279.525824][ T5835] usb 5-1: Using ep0 maxpacket: 8
[  279.538776][ T5835] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  279.549211][ T5835] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  279.585612][  T976] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  279.595758][  T976] usb 3-1: config 1 interface 105 has no altsetting 0
[  279.613320][ T5835] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  279.641210][ T8649] netlink: 'syz.3.773': attribute type 7 has an invalid length.
[  279.656708][  T976] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  279.664471][ T8649] netlink: 'syz.3.773': attribute type 8 has an invalid length.
[  279.676898][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.685500][  T976] usb 3-1: Product: syz
[  279.689876][  T976] usb 3-1: Manufacturer: syz
[  279.694631][  T976] usb 3-1: SerialNumber: syz
[  279.705531][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.731094][ T5835] usb 5-1: Product: syz
[  279.743895][ T5835] usb 5-1: Manufacturer: syz
[  279.755952][ T5835] usb 5-1: SerialNumber: syz
[  279.832177][ T8658] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  279.860000][ T8658] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  280.494658][ T8658] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  280.515767][ T8658] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  280.534713][  T976] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32
[  280.539039][ T8668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.552401][  T976] aqc111 3-1:1.105: probe with driver aqc111 failed with error -32
[  280.573790][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.591372][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.601032][ T8668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.874695][ T8674] FAULT_INJECTION: forcing a failure.
[  280.874695][ T8674] name failslab, interval 1, probability 0, space 0, times 0
[  280.888478][ T8674] CPU: 1 UID: 0 PID: 8674 Comm: syz.0.780 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) 
[  280.888507][ T8674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  280.888519][ T8674] Call Trace:
[  280.888528][ T8674]  <TASK>
[  280.888536][ T8674]  dump_stack_lvl+0x189/0x250
[  280.888572][ T8674]  ? __pfx____ratelimit+0x10/0x10
[  280.888610][ T8674]  ? __pfx_dump_stack_lvl+0x10/0x10
[  280.888641][ T8674]  ? __pfx__printk+0x10/0x10
[  280.888670][ T8674]  ? __pfx___might_resched+0x10/0x10
[  280.888704][ T8674]  should_fail_ex+0x414/0x560
[  280.888735][ T8674]  should_failslab+0xa8/0x100
[  280.888758][ T8674]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  280.888777][ T8674]  ? __alloc_skb+0x112/0x2d0
[  280.888802][ T8674]  __alloc_skb+0x112/0x2d0
[  280.888826][ T8674]  netlink_sendmsg+0x5c6/0xb30
[  280.888860][ T8674]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.888886][ T8674]  ? aa_sock_msg_perm+0x94/0x160
[  280.888914][ T8674]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  280.888940][ T8674]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.888964][ T8674]  __sock_sendmsg+0x21c/0x270
[  280.889000][ T8674]  ____sys_sendmsg+0x505/0x830
[  280.889029][ T8674]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.889065][ T8674]  ? import_iovec+0x74/0xa0
[  280.889090][ T8674]  ___sys_sendmsg+0x21f/0x2a0
[  280.889126][ T8674]  ? __pfx____sys_sendmsg+0x10/0x10
[  280.889190][ T8674]  ? __fget_files+0x2a/0x420
[  280.889212][ T8674]  ? __fget_files+0x3a0/0x420
[  280.889246][ T8674]  __x64_sys_sendmsg+0x19b/0x260
[  280.889273][ T8674]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  280.889309][ T8674]  ? __pfx_ksys_write+0x10/0x10
[  280.889325][ T8674]  ? rcu_is_watching+0x15/0xb0
[  280.889359][ T8674]  ? do_syscall_64+0xbe/0x3b0
[  280.889383][ T8674]  do_syscall_64+0xfa/0x3b0
[  280.889399][ T8674]  ? lockdep_hardirqs_on+0x9c/0x150
[  280.889427][ T8674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.889446][ T8674]  ? clear_bhb_loop+0x60/0xb0
[  280.889468][ T8674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.889487][ T8674] RIP: 0033:0x7fe6a7b8e929
[  280.889506][ T8674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.889524][ T8674] RSP: 002b:00007fe6a8996038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.889546][ T8674] RAX: ffffffffffffffda RBX: 00007fe6a7db5fa0 RCX: 00007fe6a7b8e929
[  280.889561][ T8674] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  280.889573][ T8674] RBP: 00007fe6a8996090 R08: 0000000000000000 R09: 0000000000000000
[  280.889586][ T8674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  280.889597][ T8674] R13: 0000000000000000 R14: 00007fe6a7db5fa0 R15: 00007fe6a7edfa28
[  280.889630][ T8674]  </TASK>
[  281.206295][ T8676] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  281.383767][ T8681] netlink: 'syz.0.781': attribute type 2 has an invalid length.
[  281.796639][ T5844] Bluetooth: hci4: Unknown advertising packet type: 0x75
[  281.796712][ T5844] Bluetooth: hci4: Unknown advertising packet type: 0x20
[  281.804005][ T5844] Bluetooth: hci4: Malformed LE Event: 0x0d
[  281.877571][ T5835] usb 5-1: 0:2 : does not exist
[  281.920558][ T5835] usb 5-1: USB disconnect, device number 37
[  281.993965][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  282.190266][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'.
[  282.261658][   T24] usb 4-1: USB disconnect, device number 30
[  282.372421][ T5890] usb 3-1: USB disconnect, device number 43
[  282.638659][ T8707] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  282.640795][ T8705] netlink: 44 bytes leftover after parsing attributes in process `syz.3.790'.
[  282.855702][ T5835] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  283.083201][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  283.135619][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  283.173635][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  283.190157][ T5835] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  283.256498][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.793'.
[  283.267623][ T8729] tipc: Can't bind to reserved service type 1
[  283.360114][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.368397][ T5835] usb 2-1: Product: syz
[  283.372716][ T5835] usb 2-1: Manufacturer: syz
[  283.377434][ T5835] usb 2-1: SerialNumber: syz
[  283.386704][ T5835] usb 2-1: config 0 descriptor??
[  283.621380][ T5890] usb 2-1: USB disconnect, device number 50
[  283.943329][ T8742] netlink: 'syz.2.796': attribute type 10 has an invalid length.
[  284.215637][   T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  284.399130][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  284.408459][   T24] usb 3-1: config 0 has no interfaces?
[  284.416971][   T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00
[  284.437635][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.457684][   T24] usb 3-1: Product: syz
[  284.476581][   T24] usb 3-1: Manufacturer: syz
[  284.481249][   T24] usb 3-1: SerialNumber: syz
[  284.561261][   T24] usb 3-1: config 0 descriptor??
[  284.576855][ T8744] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  284.816772][ T8742] netlink: 'syz.2.796': attribute type 7 has an invalid length.
[  284.824651][ T8742] netlink: 'syz.2.796': attribute type 8 has an invalid length.
[  284.969678][ T8752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.799'.
[  286.354788][   T30] audit: type=1326 audit(1750197655.921:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a7b8e929 code=0x7ffc0000
[  286.377038][    C1] vkms_vblank_simulate: vblank timer overrun
[  286.398093][   T30] audit: type=1326 audit(1750197655.961:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fe6a7b8e929 code=0x7ffc0000
[  286.424164][   T30] audit: type=1326 audit(1750197655.961:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a7b8e929 code=0x7ffc0000
[  286.446359][    C1] vkms_vblank_simulate: vblank timer overrun
[  286.461152][   T30] audit: type=1326 audit(1750197655.961:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6a7b8d290 code=0x7ffc0000
[  286.602393][   T30] audit: type=1326 audit(1750197655.961:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6a7b8e52b code=0x7ffc0000
[  286.624529][    C1] vkms_vblank_simulate: vblank timer overrun
[  286.635582][ T5901] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  286.805755][ T5901] usb 1-1: Using ep0 maxpacket: 16
[  286.817115][ T5901] usb 1-1: no configurations
[  286.821772][ T5901] usb 1-1: can't read configurations, error -22
[  286.829124][   T30] audit: type=1326 audit(1750197655.961:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6a7b8e52b code=0x7ffc0000
[  286.896065][   T30] audit: type=1326 audit(1750197655.971:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6a7b8e52b code=0x7ffc0000
[  286.935264][   T30] audit: type=1326 audit(1750197655.971:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6a7b8e52b code=0x7ffc0000
[  286.975604][ T5901] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  287.034569][   T30] audit: type=1326 audit(1750197656.081:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6a7b8e52b code=0x7ffc0000
[  287.197539][ T5901] usb 1-1: Using ep0 maxpacket: 16
[  287.204346][ T5901] usb 1-1: no configurations
[  287.215176][   T30] audit: type=1326 audit(1750197656.151:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.0.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6a7b8e52b code=0x7ffc0000
[  287.239752][ T8799] netlink: 36 bytes leftover after parsing attributes in process `syz.3.815'.
[  287.255659][ T5901] usb 1-1: can't read configurations, error -22
[  287.275806][ T5835] usb 3-1: USB disconnect, device number 44
[  287.314168][ T5901] usb usb1-port1: attempt power cycle
[  287.555870][   T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  287.728082][   T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  287.736068][ T5835] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  287.746016][   T24] usb 4-1: Using ep0 maxpacket: 32
[  287.754095][   T24] usb 4-1: config 0 has an invalid interface number: 108 but max is 0
[  287.790312][ T5901] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  287.802326][   T24] usb 4-1: config 0 has no interface number 0
[  287.809054][   T24] usb 4-1: config 0 interface 108 has no altsetting 0
[  287.817394][ T5901] usb 1-1: Using ep0 maxpacket: 16
[  287.824881][ T5901] usb 1-1: no configurations
[  287.832214][ T5901] usb 1-1: can't read configurations, error -22
[  287.840836][   T24] usb 4-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd
[  287.853517][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.875630][   T10] usb 2-1: device descriptor read/64, error -71
[  287.878327][   T24] usb 4-1: Product: syz
[  287.892178][   T24] usb 4-1: Manufacturer: syz
[  287.901614][   T24] usb 4-1: SerialNumber: syz
[  287.911657][   T24] usb 4-1: config 0 descriptor??
[  287.919588][ T5835] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  287.938119][   T24] gspca_main: spca506-2.14.0 probing 99fa:8988
[  287.952276][ T5835] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  287.972220][ T5835] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  287.982036][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.009713][ T5901] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  288.030576][ T8804] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  288.040579][ T5901] usb 1-1: Using ep0 maxpacket: 16
[  288.047778][ T5901] usb 1-1: no configurations
[  288.052504][ T5901] usb 1-1: can't read configurations, error -22
[  288.052658][ T5835] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  288.082426][ T5901] usb usb1-port1: unable to enumerate USB device
[  288.126237][   T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  288.275888][   T10] usb 2-1: device descriptor read/64, error -71
[  288.287110][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.346260][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.412259][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.425683][   T10] usb usb2-port1: attempt power cycle
[  288.502390][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.815626][   T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  288.857784][   T10] usb 2-1: device descriptor read/8, error -71
[  289.115693][   T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  289.201052][   T10] usb 2-1: device descriptor read/8, error -71
[  289.368554][   T10] usb usb2-port1: unable to enumerate USB device
[  289.825506][   T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  289.985639][   T10] usb 5-1: Using ep0 maxpacket: 32
[  290.001862][   T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 11
[  290.012537][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 12
[  290.023466][   T10] usb 5-1: config 0 has no interface number 0
[  290.031672][   T10] usb 5-1: config 0 interface 184 has no altsetting 0
[  290.044113][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  290.062912][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.071991][   T10] usb 5-1: Product: syz
[  290.079496][   T10] usb 5-1: Manufacturer: syz
[  290.084381][   T10] usb 5-1: SerialNumber: syz
[  290.098288][   T10] usb 5-1: config 0 descriptor??
[  290.108585][   T10] smsc75xx v1.0.0
[  290.259522][ T8847] netlink: 'syz.0.829': attribute type 10 has an invalid length.
[  290.274068][ T8847] netlink: 'syz.0.829': attribute type 7 has an invalid length.
[  290.282144][ T8847] netlink: 'syz.0.829': attribute type 8 has an invalid length.
[  290.374066][ T5901] usb 3-1: USB disconnect, device number 45
[  290.636788][   T24] usb 4-1: USB disconnect, device number 31
[  290.721341][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  290.771815][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  291.478027][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.496255][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.696850][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.837'.
[  291.990079][ T8881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.840'.
[  292.025559][   T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  292.047923][ T8881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.840'.
[  292.063764][ T8881] openvswitch: netlink: Flow key attr not present in new flow.
[  292.145871][    T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  292.185883][   T24] usb 3-1: Using ep0 maxpacket: 8
[  292.230220][   T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  292.261532][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.289136][   T24] usb 3-1: Product: syz
[  292.309956][   T24] usb 3-1: Manufacturer: syz
[  292.315556][    T9] usb 4-1: Using ep0 maxpacket: 8
[  292.315928][   T24] usb 3-1: SerialNumber: syz
[  292.335735][    T9] usb 4-1: config index 0 descriptor too short (expected 65298, got 18)
[  292.336605][   T24] usb 3-1: config 0 descriptor??
[  292.344139][    T9] usb 4-1: config 0 has an invalid interface number: 175 but max is 0
[  292.395590][    T9] usb 4-1: config 0 has no interface number 0
[  292.405993][    T9] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=bc.ed
[  292.425742][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.433851][    T9] usb 4-1: Product: syz
[  292.438854][    T9] usb 4-1: Manufacturer: syz
[  292.443554][    T9] usb 4-1: SerialNumber: syz
[  292.465834][    T9] usb 4-1: config 0 descriptor??
[  292.526395][ T5901] usb 1-1: new low-speed USB device number 53 using dummy_hcd
[  292.588024][   T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  292.679042][ T5901] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[  292.703556][ T5901] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  292.714918][ T5901] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt
[  292.731987][ T5901] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  292.752593][ T5901] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  292.762206][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.802447][ T5901] usbtmc 1-1:16.0: bulk endpoints not found
[  292.886818][    T9] usbserial_generic 4-1:0.175: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  292.904783][    T9] usbserial_generic 4-1:0.175: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  292.916195][    T9] usbserial_generic 4-1:0.175: device has no bulk endpoints
[  292.924542][    T9] safe_serial 4-1:0.175: safe_serial converter detected
[  292.933332][    T9] safe_serial 4-1:0.175: probe with driver safe_serial failed with error -22
[  292.955840][    T9] usb 4-1: USB disconnect, device number 32
[  292.996727][ T5835] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  293.006183][ T5901] usb 1-1: USB disconnect, device number 53
[  293.158149][ T5835] usb 2-1: config 0 has no interfaces?
[  293.170260][ T5835] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  293.179746][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.187967][ T5835] usb 2-1: Product: syz
[  293.192202][ T5835] usb 2-1: Manufacturer: syz
[  293.197012][ T5835] usb 2-1: SerialNumber: syz
[  293.205325][ T5835] usb 2-1: config 0 descriptor??
[  293.740369][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71
[  293.768900][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71
[  293.794792][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  293.812230][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  293.825030][   T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  293.842679][   T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  293.846101][ T5835] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  293.882373][   T10] usb 5-1: USB disconnect, device number 38
[  293.896808][   T24] usb 3-1: USB disconnect, device number 46
[  294.190535][ T5835] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  294.200062][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  294.211069][ T5835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  294.362321][ T5835] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.378555][ T5835] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  294.395559][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  294.450273][ T5835] usb 1-1: Product: syz
[  294.477876][ T5835] usb 1-1: Manufacturer: syz
[  294.522186][ T5835] cdc_wdm 1-1:1.0: skipping garbage
[  294.541486][ T5835] cdc_wdm 1-1:1.0: skipping garbage
[  294.557000][ T5835] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  294.934971][ T8914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.098555][ T8914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.364992][ T8923] FAULT_INJECTION: forcing a failure.
[  295.364992][ T8923] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.382347][ T8923] CPU: 1 UID: 0 PID: 8923 Comm: syz.3.855 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) 
[  295.382377][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  295.382390][ T8923] Call Trace:
[  295.382399][ T8923]  <TASK>
[  295.382407][ T8923]  dump_stack_lvl+0x189/0x250
[  295.382448][ T8923]  ? __pfx____ratelimit+0x10/0x10
[  295.382479][ T8923]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.382509][ T8923]  ? __pfx__printk+0x10/0x10
[  295.382531][ T8923]  ? __might_fault+0xb0/0x130
[  295.382581][ T8923]  should_fail_ex+0x414/0x560
[  295.382612][ T8923]  _copy_from_iter+0x1db/0x16f0
[  295.382646][ T8923]  ? rcu_is_watching+0x15/0xb0
[  295.382678][ T8923]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  295.382700][ T8923]  ? __pfx__copy_from_iter+0x10/0x10
[  295.382731][ T8923]  ? __build_skb_around+0x257/0x3e0
[  295.382757][ T8923]  ? netlink_sendmsg+0x642/0xb30
[  295.382790][ T8923]  ? skb_put+0x11b/0x210
[  295.382817][ T8923]  netlink_sendmsg+0x6b2/0xb30
[  295.382851][ T8923]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.382879][ T8923]  ? aa_sock_msg_perm+0x94/0x160
[  295.382906][ T8923]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  295.382931][ T8923]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.382956][ T8923]  __sock_sendmsg+0x21c/0x270
[  295.382990][ T8923]  ____sys_sendmsg+0x505/0x830
[  295.383020][ T8923]  ? __pfx_____sys_sendmsg+0x10/0x10
[  295.383057][ T8923]  ? import_iovec+0x74/0xa0
[  295.383081][ T8923]  ___sys_sendmsg+0x21f/0x2a0
[  295.383109][ T8923]  ? __pfx____sys_sendmsg+0x10/0x10
[  295.383175][ T8923]  ? __fget_files+0x2a/0x420
[  295.383195][ T8923]  ? __fget_files+0x3a0/0x420
[  295.383228][ T8923]  __x64_sys_sendmsg+0x19b/0x260
[  295.383257][ T8923]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  295.383293][ T8923]  ? __pfx_ksys_write+0x10/0x10
[  295.383310][ T8923]  ? rcu_is_watching+0x15/0xb0
[  295.383344][ T8923]  ? do_syscall_64+0xbe/0x3b0
[  295.383368][ T8923]  do_syscall_64+0xfa/0x3b0
[  295.383385][ T8923]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.383412][ T8923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.383432][ T8923]  ? clear_bhb_loop+0x60/0xb0
[  295.383456][ T8923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.383476][ T8923] RIP: 0033:0x7f614dd8e929
[  295.383494][ T8923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.383512][ T8923] RSP: 002b:00007f614eb82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  295.383536][ T8923] RAX: ffffffffffffffda RBX: 00007f614dfb5fa0 RCX: 00007f614dd8e929
[  295.383551][ T8923] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  295.383564][ T8923] RBP: 00007f614eb82090 R08: 0000000000000000 R09: 0000000000000000
[  295.383576][ T8923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.383588][ T8923] R13: 0000000000000000 R14: 00007f614dfb5fa0 R15: 00007f614e0dfa28
[  295.383619][ T8923]  </TASK>
[  295.668140][    C1] vkms_vblank_simulate: vblank timer overrun
[  295.756703][ T5908] usb 2-1: USB disconnect, device number 55
[  296.225796][ T5908] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  296.246119][ T5835] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  296.375753][ T5908] usb 2-1: Using ep0 maxpacket: 16
[  296.385588][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.399334][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.407619][ T5835] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  296.409342][ T5908] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  296.429745][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.430145][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.441228][ T5908] usb 2-1: config 0 descriptor??
[  296.456922][   T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  296.470288][ T5835] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c
[  296.480083][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.488340][ T5835] usb 4-1: Product: syz
[  296.492659][ T5835] usb 4-1: Manufacturer: syz
[  296.497661][ T5835] usb 4-1: SerialNumber: syz
[  296.513446][ T5835] usb 4-1: config 0 descriptor??
[  296.528077][ T5835] ims_pcu 4-1:0.0: Missing CDC union descriptor
[  296.534979][ T5835] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22
[  296.628050][   T10] usb 3-1: Using ep0 maxpacket: 32
[  296.643796][ T5835] usb 1-1: USB disconnect, device number 54
[  296.656398][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  296.688555][ T8934] kAFS: unable to lookup cell 'Þ“'
[  296.703574][   T10] usb 3-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.40
[  296.719633][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.732829][   T10] usb 3-1: Product: á°Š
[  296.736107][ T5901] usb 4-1: USB disconnect, device number 33
[  296.744437][   T10] usb 3-1: Manufacturer: 繑㯱�잤�汅ꦀ™￡软ᨓ핰솜鸣ꪌ㚪�└쭉쳱મ쑛㢆䱡˩�쇮諿鱳膵룟ᯈ轤帳�䠲���⡧豕䕷׬톱产纰䭘邷甑⠋᷺䳰陠Ⲗ扊嚞࢚뒞ร�踰橞缊噔ꖗ੧금뚣䋡瘒劮Ҩ㎬冕�茂穒饉⿪䗌防�슨쉒�嘂撌�饪⊦ꖉ
[  296.841341][   T10] usb 3-1: SerialNumber: Ч
[  296.916530][ T5908] usbhid 2-1:0.0: can't add hid device: -71
[  296.983137][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  297.028249][ T5908] usb 2-1: USB disconnect, device number 56
[  297.141668][ T8938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.185895][ T8938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.401104][   T10] usbhid 3-1:1.0: can't add hid device: -71
[  297.410554][   T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  297.449104][   T10] usb 3-1: USB disconnect, device number 47
[  298.190355][ T8972] FAULT_INJECTION: forcing a failure.
[  298.190355][ T8972] name failslab, interval 1, probability 0, space 0, times 0
[  298.239865][ T8972] CPU: 0 UID: 0 PID: 8972 Comm: syz.1.867 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) 
[  298.239901][ T8972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  298.239913][ T8972] Call Trace:
[  298.239922][ T8972]  <TASK>
[  298.239931][ T8972]  dump_stack_lvl+0x189/0x250
[  298.239968][ T8972]  ? __pfx____ratelimit+0x10/0x10
[  298.239999][ T8972]  ? __pfx_dump_stack_lvl+0x10/0x10
[  298.240036][ T8972]  ? __pfx__printk+0x10/0x10
[  298.240066][ T8972]  ? ref_tracker_alloc+0x318/0x460
[  298.240096][ T8972]  should_fail_ex+0x414/0x560
[  298.240126][ T8972]  should_failslab+0xa8/0x100
[  298.240151][ T8972]  kmem_cache_alloc_noprof+0x73/0x3c0
[  298.240182][ T8972]  ? skb_clone+0x212/0x3a0
[  298.240212][ T8972]  skb_clone+0x212/0x3a0
[  298.240242][ T8972]  __netlink_deliver_tap+0x404/0x850
[  298.240281][ T8972]  ? netlink_deliver_tap+0x2e/0x1b0
[  298.240308][ T8972]  netlink_deliver_tap+0x19c/0x1b0
[  298.240331][ T8972]  netlink_unicast+0x72f/0x8d0
[  298.240366][ T8972]  netlink_sendmsg+0x805/0xb30
[  298.240398][ T8972]  ? __pfx_netlink_sendmsg+0x10/0x10
[  298.240427][ T8972]  ? aa_sock_msg_perm+0x94/0x160
[  298.240453][ T8972]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  298.240479][ T8972]  ? __pfx_netlink_sendmsg+0x10/0x10
[  298.240501][ T8972]  __sock_sendmsg+0x21c/0x270
[  298.240534][ T8972]  ____sys_sendmsg+0x505/0x830
[  298.240565][ T8972]  ? __pfx_____sys_sendmsg+0x10/0x10
[  298.240602][ T8972]  ? import_iovec+0x74/0xa0
[  298.240627][ T8972]  ___sys_sendmsg+0x21f/0x2a0
[  298.240654][ T8972]  ? __pfx____sys_sendmsg+0x10/0x10
[  298.240723][ T8972]  ? __fget_files+0x2a/0x420
[  298.240745][ T8972]  ? __fget_files+0x3a0/0x420
[  298.240778][ T8972]  __x64_sys_sendmsg+0x19b/0x260
[  298.240807][ T8972]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  298.240845][ T8972]  ? __pfx_ksys_write+0x10/0x10
[  298.240861][ T8972]  ? rcu_is_watching+0x15/0xb0
[  298.240896][ T8972]  ? do_syscall_64+0xbe/0x3b0
[  298.240921][ T8972]  do_syscall_64+0xfa/0x3b0
[  298.240938][ T8972]  ? lockdep_hardirqs_on+0x9c/0x150
[  298.240965][ T8972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.240985][ T8972]  ? clear_bhb_loop+0x60/0xb0
[  298.241019][ T8972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.241038][ T8972] RIP: 0033:0x7f55a8f8e929
[  298.241057][ T8972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.241075][ T8972] RSP: 002b:00007f55a9d50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  298.241098][ T8972] RAX: ffffffffffffffda RBX: 00007f55a91b5fa0 RCX: 00007f55a8f8e929
[  298.241112][ T8972] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  298.241125][ T8972] RBP: 00007f55a9d50090 R08: 0000000000000000 R09: 0000000000000000
[  298.241137][ T8972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  298.241150][ T8972] R13: 0000000000000000 R14: 00007f55a91b5fa0 R15: 00007f55a92dfa28
[  298.241183][ T8972]  </TASK>
[  298.241625][ T8972] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  298.665508][ T5901] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  298.825527][ T5901] usb 3-1: Using ep0 maxpacket: 32
[  298.841170][ T5901] usb 3-1: no configurations
[  298.846896][ T5901] usb 3-1: can't read configurations, error -22
[  298.915999][    T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  298.995520][ T5901] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  299.065941][    T9] usb 2-1: Using ep0 maxpacket: 8
[  299.098225][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  299.116197][    T9] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  299.131838][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.146534][    T9] usb 2-1: Product: syz
[  299.153520][    T9] usb 2-1: Manufacturer: syz
[  299.171185][    T9] usb 2-1: SerialNumber: syz
[  299.175921][ T5901] usb 3-1: Using ep0 maxpacket: 32
[  299.179072][ T5901] usb 3-1: no configurations
[  299.191274][ T5901] usb 3-1: can't read configurations, error -22
[  299.220666][ T5901] usb usb3-port1: attempt power cycle
[  299.221577][    T9] usb 2-1: config 0 descriptor??
[  299.263751][    T9] gspca_main: stk014-2.14.0 probing 05e1:0893
[  299.285711][    T9] usb 2-1: selecting invalid altsetting 1
[  299.595534][ T5901] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  299.646508][ T5901] usb 3-1: Using ep0 maxpacket: 32
[  299.669819][ T5901] usb 3-1: no configurations
[  299.684365][ T5901] usb 3-1: can't read configurations, error -22
[  299.688247][ T8996] fuse: Bad value for 'fd'
[  299.839189][ T5901] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  299.886292][ T5901] usb 3-1: Using ep0 maxpacket: 32
[  299.901462][ T5901] usb 3-1: no configurations
[  299.916333][ T5901] usb 3-1: can't read configurations, error -22
[  299.923393][ T5901] usb usb3-port1: unable to enumerate USB device
[  300.336655][ T5901] usb 2-1: USB disconnect, device number 57
[  301.215830][ T9024] FAULT_INJECTION: forcing a failure.
[  301.215830][ T9024] name failslab, interval 1, probability 0, space 0, times 0
[  301.246749][ T9024] CPU: 0 UID: 0 PID: 9024 Comm: syz.0.880 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) 
[  301.246770][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  301.246777][ T9024] Call Trace:
[  301.246782][ T9024]  <TASK>
[  301.246788][ T9024]  dump_stack_lvl+0x189/0x250
[  301.246812][ T9024]  ? __pfx____ratelimit+0x10/0x10
[  301.246831][ T9024]  ? __pfx_dump_stack_lvl+0x10/0x10
[  301.246850][ T9024]  ? __pfx__printk+0x10/0x10
[  301.246866][ T9024]  ? __pfx___might_resched+0x10/0x10
[  301.246884][ T9024]  ? fs_reclaim_acquire+0x7d/0x100
[  301.246902][ T9024]  should_fail_ex+0x414/0x560
[  301.246921][ T9024]  should_failslab+0xa8/0x100
[  301.246935][ T9024]  kmem_cache_alloc_noprof+0x73/0x3c0
[  301.246960][ T9024]  ? skb_clone+0x212/0x3a0
[  301.246980][ T9024]  skb_clone+0x212/0x3a0
[  301.246995][ T9024]  ? nfnetlink_rcv+0x486/0x2520
[  301.247015][ T9024]  nfnetlink_rcv+0x4b4/0x2520
[  301.247036][ T9024]  ? __dev_queue_xmit+0x1cd7/0x3a70
[  301.247056][ T9024]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  301.247076][ T9024]  ? __dev_queue_xmit+0x27e/0x3a70
[  301.247094][ T9024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.247111][ T9024]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  301.247139][ T9024]  ? ref_tracker_free+0x63a/0x7d0
[  301.247154][ T9024]  ? __copy_skb_header+0xa7/0x550
[  301.247172][ T9024]  ? __pfx_ref_tracker_free+0x10/0x10
[  301.247188][ T9024]  ? __skb_clone+0x63/0x7a0
[  301.247206][ T9024]  ? __skb_clone+0x483/0x7a0
[  301.247225][ T9024]  ? skb_clone+0x246/0x3a0
[  301.247243][ T9024]  ? __netlink_deliver_tap+0x807/0x850
[  301.247257][ T9024]  ? netlink_deliver_tap+0x2e/0x1b0
[  301.247275][ T9024]  ? netlink_deliver_tap+0x2e/0x1b0
[  301.247288][ T9024]  ? netlink_deliver_tap+0x2e/0x1b0
[  301.247305][ T9024]  netlink_unicast+0x758/0x8d0
[  301.247324][ T9024]  netlink_sendmsg+0x805/0xb30
[  301.247344][ T9024]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.247360][ T9024]  ? aa_sock_msg_perm+0x94/0x160
[  301.247377][ T9024]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  301.247392][ T9024]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.247407][ T9024]  __sock_sendmsg+0x21c/0x270
[  301.247428][ T9024]  ____sys_sendmsg+0x505/0x830
[  301.247447][ T9024]  ? __pfx_____sys_sendmsg+0x10/0x10
[  301.247468][ T9024]  ? import_iovec+0x74/0xa0
[  301.247482][ T9024]  ___sys_sendmsg+0x21f/0x2a0
[  301.247499][ T9024]  ? __pfx____sys_sendmsg+0x10/0x10
[  301.247534][ T9024]  ? __fget_files+0x2a/0x420
[  301.247547][ T9024]  ? __fget_files+0x3a0/0x420
[  301.247567][ T9024]  __x64_sys_sendmsg+0x19b/0x260
[  301.247584][ T9024]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  301.247605][ T9024]  ? __pfx_ksys_write+0x10/0x10
[  301.247614][ T9024]  ? rcu_is_watching+0x15/0xb0
[  301.247636][ T9024]  ? do_syscall_64+0xbe/0x3b0
[  301.247649][ T9024]  do_syscall_64+0xfa/0x3b0
[  301.247659][ T9024]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.247677][ T9024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.247688][ T9024]  ? clear_bhb_loop+0x60/0xb0
[  301.247705][ T9024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.247716][ T9024] RIP: 0033:0x7fe6a7b8e929
[  301.247728][ T9024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.247739][ T9024] RSP: 002b:00007fe6a8996038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  301.247754][ T9024] RAX: ffffffffffffffda RBX: 00007fe6a7db5fa0 RCX: 00007fe6a7b8e929
[  301.247763][ T9024] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  301.247770][ T9024] RBP: 00007fe6a8996090 R08: 0000000000000000 R09: 0000000000000000
[  301.247778][ T9024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.247785][ T9024] R13: 0000000000000000 R14: 00007fe6a7db5fa0 R15: 00007fe6a7edfa28
[  301.247802][ T9024]  </TASK>
[  302.357096][ T9001] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  302.364721][ T9001] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  302.378192][ T9001] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  302.406845][ T9001] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  302.454299][ T9001] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  302.471964][ T9001] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  302.517671][ T9001] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  302.554995][ T9001] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  302.615650][ T5155] Bluetooth: hci4: command 0x0405 tx timeout
[  302.633993][ T9001] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  302.660643][ T9001] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  302.956081][    T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  303.148484][    T9] usb 2-1: config 0 has no interfaces?
[  303.164970][    T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  303.176168][ T5155] Bluetooth: hci0: command 0x0406 tx timeout
[  303.184509][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.214840][    T9] usb 2-1: Product: syz
[  303.243340][    T9] usb 2-1: Manufacturer: syz
[  303.277124][    T9] usb 2-1: SerialNumber: syz
[  303.384417][    T9] usb 2-1: config 0 descriptor??
[  303.585819][    T9] usb 2-1: USB disconnect, device number 58
[  303.643437][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'.
[  303.699605][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'.
[  303.724231][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'.
[  303.744689][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'.
[  303.995604][   T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  304.016213][ T5901] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  304.165524][ T5901] usb 5-1: device descriptor read/64, error -71
[  304.456684][ T5155] Bluetooth: hci3: command 0x0406 tx timeout
[  304.463741][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  304.535976][ T5155] Bluetooth: hci2: command 0x0406 tx timeout
[  304.545575][ T5901] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[  304.680988][ T5901] usb 5-1: device descriptor read/64, error -71
[  304.697821][ T5155] Bluetooth: hci4: command 0x0405 tx timeout
[  304.815923][ T5901] usb usb5-port1: attempt power cycle
[  304.996067][    T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  305.176619][ T5901] usb 5-1: new full-speed USB device number 41 using dummy_hcd
[  305.185884][    T9] usb 2-1: Using ep0 maxpacket: 16
[  305.195741][ T9083] UHID_CREATE from different security context by process 567 (syz.2.895), this is not allowed.
[  305.203776][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.239804][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.896'.
[  305.255304][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.255944][ T5155] Bluetooth: hci0: command 0x0406 tx timeout
[  305.271899][ T5901] usb 5-1: device descriptor read/8, error -71
[  305.317397][    T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  305.336330][ T9087] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  305.365841][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.438257][    T9] usb 2-1: config 0 descriptor??
[  305.515982][ T5901] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[  305.580472][ T5901] usb 5-1: device descriptor read/8, error -71
[  305.732245][ T5901] usb usb5-port1: unable to enumerate USB device
[  305.759614][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  305.769724][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  305.808226][    T9] usb 2-1: USB disconnect, device number 59
[  306.261293][ T5901] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  306.536106][ T5155] Bluetooth: hci3: command 0x0406 tx timeout
[  306.542198][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  306.616174][ T5155] Bluetooth: hci2: command 0x0406 tx timeout
[  306.965374][ T5155] Bluetooth: hci4: command 0x0405 tx timeout
[  315.750008][   T15] sched: DL replenish lagged too much
[  318.346020][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  318.352390][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  323.218229][ T9143] fuse: Unknown parameter 'defcontext'
[  325.976428][   T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  326.478115][   T24] usb 4-1: Using ep0 maxpacket: 16
[  328.238324][   T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  328.265466][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.273523][   T24] usb 4-1: Product: syz
[  328.515451][   T24] usb 4-1: Manufacturer: syz
[  328.520131][   T24] usb 4-1: SerialNumber: syz
[  328.544996][   T24] usb 4-1: config 0 descriptor??
[  328.665709][   T24] usb 4-1: can't set config #0, error -71
[  328.969016][   T24] usb 4-1: USB disconnect, device number 34
[  329.034670][ T5908] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  329.207520][ T5908] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  329.256918][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  329.267605][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  329.276453][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  329.285006][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  329.293421][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  329.332854][ T5908] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  329.375191][ T5908] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  329.389651][ T5908] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  329.412596][ T5908] usb 1-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40
[  329.424835][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.506327][ T5908] usb 1-1: Product: syz
[  329.510571][ T5908] usb 1-1: Manufacturer: syz
[  329.515196][ T5908] usb 1-1: SerialNumber: syz
[  329.562356][ T5908] cdc_ncm 1-1:1.0: skipping garbage
[  330.172781][   T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  330.407410][   T24] usb 4-1: config 0 has no interfaces?
[  330.432741][ T9162] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  330.451534][   T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  330.474811][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.523811][   T24] usb 4-1: Product: syz
[  330.535740][   T24] usb 4-1: Manufacturer: syz
[  330.540453][   T24] usb 4-1: SerialNumber: syz
[  330.571844][   T24] usb 4-1: config 0 descriptor??
[  331.033222][ T5908] cdc_ncm 1-1:1.0: bind() failure
[  331.065781][ T5908] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  331.416036][ T5844] Bluetooth: hci1: command tx timeout
[  331.485984][ T5908] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  331.616793][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.645927][ T5908] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[  331.990298][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.010696][ T5908] usb 1-1: USB disconnect, device number 56
[  333.324187][ T9165] chnl_net:caif_netlink_parms(): no params data found
[  333.496474][ T5844] Bluetooth: hci1: command tx timeout
[  335.008695][    T9] usb 4-1: USB disconnect, device number 35
[  335.045611][ T5908] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  335.789731][ T5844] Bluetooth: hci1: command tx timeout
[  336.534670][ T9196] loop2: detected capacity change from 0 to 7
[  336.598094][ T9196] Dev loop2: unable to read RDB block 7
[  336.603751][ T9196]  loop2: unable to read partition table
[  336.625201][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.688157][ T9165] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.706407][ T9196] loop2: partition table beyond EOD, truncated
[  336.750735][ T9165] bridge_slave_0: entered allmulticast mode
[  336.761191][ T9196] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  336.793082][ T9165] bridge_slave_0: entered promiscuous mode
[  336.876876][ T9165] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.942126][ T9165] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.981680][ T9165] bridge_slave_1: entered allmulticast mode
[  337.047972][ T9165] bridge_slave_1: entered promiscuous mode
[  337.274542][ T5908] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  337.495745][ T5908] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  337.509818][ T9165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.521956][ T5908] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.560557][ T5908] usb 4-1: config 1 interface 1 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  337.578721][ T9165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.594168][  T976] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  337.632807][ T5908] usb 4-1: config 1 interface 1 has no altsetting 1
[  337.669476][ T5908] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  337.701964][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.732553][ T5908] usb 4-1: Product: syz
[  337.774889][ T5908] usb 4-1: Manufacturer: syz
[  337.780097][  T976] usb 2-1: Using ep0 maxpacket: 8
[  337.802223][ T5908] usb 4-1: SerialNumber: syz
[  337.820957][ T5844] Bluetooth: hci1: command tx timeout
[  337.828383][  T976] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  337.873140][  T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.881894][ T5908] usb 4-1: selecting invalid altsetting 1
[  337.958117][  T976] pvrusb2: Hardware description: Terratec Grabster AV400
[  338.005742][  T976] pvrusb2: **********
[  338.020219][  T976] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  338.039908][ T9165] team0: Port device team_slave_0 added
[  338.074303][  T976] pvrusb2: Important functionality might not be entirely working.
[  338.117579][  T976] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  338.185749][  T976] pvrusb2: **********
[  338.235992][ T9165] team0: Port device team_slave_1 added
[  338.269748][ T2347] pvrusb2: Invalid write control endpoint
[  338.496420][ T9208] pvrusb2: Invalid write control endpoint
[  338.611852][ T9221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.703740][ T9221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.827587][ T2347] pvrusb2: Invalid write control endpoint
[  338.894406][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  338.952769][ T5901] usb 2-1: USB disconnect, device number 61
[  338.977399][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  339.058942][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  339.120149][ T2347] pvrusb2: Device being rendered inoperable
[  339.182239][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.200987][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  339.265585][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.309035][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  339.366800][ T2347] pvrusb2: Attached sub-driver cx25840
[  339.415756][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  339.485626][ T9165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.500069][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  339.603158][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.694675][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.889647][ T9165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.612282][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  340.622440][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  340.640587][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  340.658504][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  340.668434][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  342.576841][ T9165] hsr_slave_0: entered promiscuous mode
[  342.584143][ T9165] hsr_slave_1: entered promiscuous mode
[  342.995595][ T5908] cdc_ncm 4-1:1.0: bind() failure
[  343.106058][ T5155] Bluetooth: hci2: command tx timeout
[  343.114845][ T9165] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  343.135048][ T5908] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  343.142261][ T9165] Cannot create hsr debugfs directory
[  343.153456][ T5908] cdc_ncm 4-1:1.1: bind() failure
[  345.175682][ T5155] Bluetooth: hci2: command tx timeout
[  345.524966][ T9232] chnl_net:caif_netlink_parms(): no params data found
[  345.547961][ T9165] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  345.610348][ T9165] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  345.793880][ T9165] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  345.879169][ T9165] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  346.883235][ T9232] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.915862][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.923652][ T9232] bridge_slave_0: entered allmulticast mode
[  346.959420][ T9232] bridge_slave_0: entered promiscuous mode
[  347.135325][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.181267][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.189189][ T9232] bridge_slave_1: entered allmulticast mode
[  347.253277][ T9232] bridge_slave_1: entered promiscuous mode
[  347.259570][ T5155] Bluetooth: hci2: command tx timeout
[  349.341940][ T5155] Bluetooth: hci2: command tx timeout
[  350.643619][ T9232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  350.679031][ T9232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  350.738328][ T9165] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.911584][ T9232] team0: Port device team_slave_0 added
[  350.933795][ T9165] 8021q: adding VLAN 0 to HW filter on device team0
[  350.962756][ T9232] team0: Port device team_slave_1 added
[  351.105103][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.112326][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.153380][ T9232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.205284][ T8381] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.213498][ T8381] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.232873][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.243695][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.285560][ T9232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.317594][ T8381] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.324811][ T8381] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.026657][ T9232] hsr_slave_0: entered promiscuous mode
[  352.161130][ T9232] hsr_slave_1: entered promiscuous mode
[  352.168802][ T9232] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  352.182109][ T9232] Cannot create hsr debugfs directory
[  354.551616][ T9165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.427088][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  355.436899][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  355.445242][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  355.454285][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  355.462248][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  355.631071][ T5155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  355.640310][ T5155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  355.649269][ T5155] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  355.659534][ T5155] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  355.668693][ T5155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  356.598376][ T9165] veth0_vlan: entered promiscuous mode
[  357.417179][ T6984] bond0: (slave syz_tun): Releasing backup interface
[  357.495307][ T9165] veth1_vlan: entered promiscuous mode
[  357.529215][ T5155] Bluetooth: hci5: command tx timeout
[  357.542707][ T9232] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  357.612283][ T9232] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  357.641582][ T9232] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  357.713225][ T9232] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  357.763754][ T5155] Bluetooth: hci6: command tx timeout
[  358.043465][ T9165] veth0_macvtap: entered promiscuous mode
[  358.140182][ T9165] veth1_macvtap: entered promiscuous mode
[  358.360732][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.442367][ T9266] chnl_net:caif_netlink_parms(): no params data found
[  358.499667][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.561657][ T9264] chnl_net:caif_netlink_parms(): no params data found
[  358.603533][ T9165] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.631965][ T9165] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.644157][ T9165] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.665751][ T9165] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.325438][ T9232] 8021q: adding VLAN 0 to HW filter on device bond0
[  359.551155][ T9266] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.564644][ T9266] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.590301][ T5155] Bluetooth: hci5: command tx timeout
[  359.596656][ T9266] bridge_slave_0: entered allmulticast mode
[  359.612219][ T9266] bridge_slave_0: entered promiscuous mode
[  359.799216][ T9264] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.813304][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.823236][ T9264] bridge_slave_0: entered allmulticast mode
[  359.842614][ T9264] bridge_slave_0: entered promiscuous mode
[  359.879285][ T9266] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.895920][ T5155] Bluetooth: hci6: command tx timeout
[  359.904961][ T9266] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.915680][ T9266] bridge_slave_1: entered allmulticast mode
[  359.931470][ T9266] bridge_slave_1: entered promiscuous mode
[  359.941177][ T9264] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.955189][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.964593][ T9264] bridge_slave_1: entered allmulticast mode
[  359.984910][ T9264] bridge_slave_1: entered promiscuous mode
[  360.300792][ T9232] 8021q: adding VLAN 0 to HW filter on device team0
[  360.443357][ T9266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.480844][ T9266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.514416][ T9264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.644102][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.651454][ T8373] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.767678][ T9264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.787644][ T8381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.812423][ T8381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.939113][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.946368][ T8373] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.057742][ T9266] team0: Port device team_slave_0 added
[  361.248148][ T9266] team0: Port device team_slave_1 added
[  361.290021][ T9264] team0: Port device team_slave_0 added
[  361.439675][ T9264] team0: Port device team_slave_1 added
[  361.656406][ T5155] Bluetooth: hci5: command tx timeout
[  361.673097][ T9266] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.692210][ T9266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.729186][ T9266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.757559][ T9266] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.764573][ T9266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.892765][ T9266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.942264][ T8381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.962814][ T8381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.985520][ T5155] Bluetooth: hci6: command tx timeout
[  362.095120][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.122625][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.195879][ T9264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.304337][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.333970][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.416462][ T9264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.473784][ T9232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  362.883122][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  362.916415][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  362.925142][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  362.933606][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  362.960447][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  363.156763][ T9266] hsr_slave_0: entered promiscuous mode
[  363.163707][ T9266] hsr_slave_1: entered promiscuous mode
[  363.205345][ T9266] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  363.235977][ T9266] Cannot create hsr debugfs directory
[  363.420280][ T9264] hsr_slave_0: entered promiscuous mode
[  363.454713][ T9264] hsr_slave_1: entered promiscuous mode
[  363.483892][ T9264] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  363.506697][ T9264] Cannot create hsr debugfs directory
[  363.736137][ T5155] Bluetooth: hci5: command tx timeout
[  363.754731][ T9296] binder: 9295:9296 ioctl 40046210 0 returned -14
[  364.055797][ T5155] Bluetooth: hci6: command tx timeout
[  364.109898][ T9232] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.016471][ T5155] Bluetooth: hci3: command tx timeout
[  365.697389][ T9299] syzkaller1: entered promiscuous mode
[  365.702936][ T9299] syzkaller1: entered allmulticast mode
[  365.800727][ T9232] veth0_vlan: entered promiscuous mode
[  365.963663][ T9232] veth1_vlan: entered promiscuous mode
[  366.747166][ T9266] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  366.771879][ T9266] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  366.814207][ T9289] chnl_net:caif_netlink_parms(): no params data found
[  366.851484][ T9266] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  366.896636][ T9266] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  367.102845][ T5155] Bluetooth: hci3: command tx timeout
[  367.132479][ T9232] veth0_macvtap: entered promiscuous mode
[  367.339408][ T9232] veth1_macvtap: entered promiscuous mode
[  367.394525][ T9264] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  367.433743][ T9264] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  367.520966][ T9264] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  367.556996][ T9264] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  367.889562][ T9289] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.913953][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.926833][ T9289] bridge_slave_0: entered allmulticast mode
[  367.940085][ T9289] bridge_slave_0: entered promiscuous mode
[  368.004394][ T9232] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.030427][ T9289] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.045577][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.052979][ T9289] bridge_slave_1: entered allmulticast mode
[  368.083242][ T9289] bridge_slave_1: entered promiscuous mode
[  368.125036][ T9232] batman_adv: batadv0: Interface activated: batadv_slave_1
[  368.282672][ T9232] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.314736][ T9232] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.333813][ T9232] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.351715][ T9232] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  368.480309][ T9289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.613325][ T9289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.987550][ T9289] team0: Port device team_slave_0 added
[  369.024757][ T9266] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.177986][ T5155] Bluetooth: hci3: command tx timeout
[  369.208388][ T9289] team0: Port device team_slave_1 added
[  369.541090][ T6955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.569191][ T9289] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.592207][ T9289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.625494][ T6955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.644582][ T9289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.757355][ T9266] 8021q: adding VLAN 0 to HW filter on device team0
[  369.791412][ T9289] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.805595][ T9289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.847473][ T9289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.205088][ T9289] hsr_slave_0: entered promiscuous mode
[  370.241295][ T9289] hsr_slave_1: entered promiscuous mode
[  370.253365][ T9289] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  370.270764][ T9289] Cannot create hsr debugfs directory
[  370.284690][ T8373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.319105][ T8373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.339727][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.346989][ T6955] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.561790][ T9264] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.609112][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.616737][ T6955] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.083792][ T9264] 8021q: adding VLAN 0 to HW filter on device team0
[  371.255948][ T5155] Bluetooth: hci3: command tx timeout
[  371.304353][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.311643][ T6955] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.444843][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.452134][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.058278][ T9266] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.504413][ T9327] netlink: 32 bytes leftover after parsing attributes in process `syz.6.947'.
[  372.578763][ T9289] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  372.693584][ T9289] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  372.795299][ T9264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.830639][ T9266] veth0_vlan: entered promiscuous mode
[  372.866536][ T9289] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  372.970966][ T9289] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  373.068900][ T9266] veth1_vlan: entered promiscuous mode
[  373.411752][ T9264] veth0_vlan: entered promiscuous mode
[  373.488392][ T9266] veth0_macvtap: entered promiscuous mode
[  373.556617][ T9266] veth1_macvtap: entered promiscuous mode
[  373.673272][ T9264] veth1_vlan: entered promiscuous mode
[  373.771379][ T9266] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.835055][ T9266] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.892922][ T9266] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.925748][ T9266] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.948322][ T9266] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.965605][ T9266] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.493823][ T9264] veth0_macvtap: entered promiscuous mode
[  374.531132][ T9289] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.624371][ T9264] veth1_macvtap: entered promiscuous mode
[  374.782735][ T9289] 8021q: adding VLAN 0 to HW filter on device team0
[  374.795052][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.841268][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.950884][ T8381] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.958163][ T8381] bridge0: port 1(bridge_slave_0) entered forwarding state
[  375.112153][ T8381] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.119468][ T8381] bridge0: port 2(bridge_slave_1) entered forwarding state
[  375.171901][ T8381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.183618][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  375.201551][ T8381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.238622][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.347451][ T9264] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.390827][ T9264] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.414061][ T9264] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.437266][ T9264] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.226058][  T976] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  376.239606][ T9289] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.333594][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.379941][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  376.405712][  T976] usb 9-1: Using ep0 maxpacket: 16
[  376.445918][  T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.503190][  T976] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  376.560988][  T976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.657759][  T976] usb 9-1: config 0 descriptor??
[  376.791748][ T9289] veth0_vlan: entered promiscuous mode
[  376.800481][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.859648][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  376.881207][ T9341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.972949][ T9341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.100840][ T9289] veth1_vlan: entered promiscuous mode
[  377.274786][  T976] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0
[  377.415002][ T9289] veth0_macvtap: entered promiscuous mode
[  377.705277][  T976] usb 9-1: USB disconnect, device number 2
[  377.738548][ T9289] veth1_macvtap: entered promiscuous mode
[  378.081124][ T9289] batman_adv: batadv0: Interface activated: batadv_slave_0
[  378.188969][ T9289] batman_adv: batadv0: Interface activated: batadv_slave_1
[  378.250302][ T9289] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.345667][ T9289] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  378.354454][ T9289] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  378.475476][ T9289] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.641114][ T9352] FAULT_INJECTION: forcing a failure.
[  378.641114][ T9352] name failslab, interval 1, probability 0, space 0, times 0
[  378.707413][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  378.713807][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  378.723586][ T9352] CPU: 1 UID: 0 PID: 9352 Comm: syz.7.951 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) 
[  378.723613][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  378.723624][ T9352] Call Trace:
[  378.723633][ T9352]  <TASK>
[  378.723641][ T9352]  dump_stack_lvl+0x189/0x250
[  378.723680][ T9352]  ? __pfx____ratelimit+0x10/0x10
[  378.723707][ T9352]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.723733][ T9352]  ? __pfx__printk+0x10/0x10
[  378.723770][ T9352]  should_fail_ex+0x414/0x560
[  378.723803][ T9352]  should_failslab+0xa8/0x100
[  378.723828][ T9352]  kmem_cache_alloc_noprof+0x73/0x3c0
[  378.723860][ T9352]  ? skb_clone+0x212/0x3a0
[  378.723892][ T9352]  skb_clone+0x212/0x3a0
[  378.723923][ T9352]  __netlink_deliver_tap+0x404/0x850
[  378.723963][ T9352]  ? netlink_deliver_tap+0x2e/0x1b0
[  378.723989][ T9352]  netlink_deliver_tap+0x19c/0x1b0
[  378.724014][ T9352]  netlink_sendskb+0x68/0x140
[  378.724038][ T9352]  nfnetlink_rcv+0x2290/0x2520
[  378.724105][ T9352]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  378.724154][ T9352]  ? ref_tracker_free+0x63a/0x7d0
[  378.724218][ T9352]  ? __netlink_deliver_tap+0x807/0x850
[  378.724252][ T9352]  ? netlink_deliver_tap+0x2e/0x1b0
[  378.724275][ T9352]  ? netlink_deliver_tap+0x2e/0x1b0
[  378.724314][ T9352]  netlink_unicast+0x758/0x8d0
[  378.724349][ T9352]  netlink_sendmsg+0x805/0xb30
[  378.724384][ T9352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.724413][ T9352]  ? aa_sock_msg_perm+0x94/0x160
[  378.724442][ T9352]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  378.724467][ T9352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.724493][ T9352]  __sock_sendmsg+0x21c/0x270
[  378.724527][ T9352]  ____sys_sendmsg+0x505/0x830
[  378.724565][ T9352]  ? __pfx_____sys_sendmsg+0x10/0x10
[  378.724602][ T9352]  ? import_iovec+0x74/0xa0
[  378.724628][ T9352]  ___sys_sendmsg+0x21f/0x2a0
[  378.724657][ T9352]  ? __pfx____sys_sendmsg+0x10/0x10
[  378.724726][ T9352]  ? __fget_files+0x2a/0x420
[  378.724748][ T9352]  ? __fget_files+0x3a0/0x420
[  378.724783][ T9352]  __x64_sys_sendmsg+0x19b/0x260
[  378.724811][ T9352]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  378.724849][ T9352]  ? __pfx_ksys_write+0x10/0x10
[  378.724867][ T9352]  ? rcu_is_watching+0x15/0xb0
[  378.724904][ T9352]  ? do_syscall_64+0xbe/0x3b0
[  378.724928][ T9352]  do_syscall_64+0xfa/0x3b0
[  378.724945][ T9352]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.724973][ T9352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.724992][ T9352]  ? clear_bhb_loop+0x60/0xb0
[  378.725017][ T9352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.725036][ T9352] RIP: 0033:0x7f6a0418e929
[  378.725054][ T9352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.725072][ T9352] RSP: 002b:00007f6a050c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  378.725096][ T9352] RAX: ffffffffffffffda RBX: 00007f6a043b5fa0 RCX: 00007f6a0418e929
[  378.725111][ T9352] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  378.725124][ T9352] RBP: 00007f6a050c6090 R08: 0000000000000000 R09: 0000000000000000
[  378.725136][ T9352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  378.725148][ T9352] R13: 0000000000000000 R14: 00007f6a043b5fa0 R15: 00007f6a044dfa28
[  378.725179][ T9352]  </TASK>
[  379.192972][ T9357] loop2: detected capacity change from 0 to 1
[  379.210467][ T9357] Dev loop2: unable to read RDB block 1
[  379.216382][ T9357]  loop2: unable to read partition table
[  379.222317][ T9357] loop2: partition table beyond EOD, truncated
[  379.228742][ T9357] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  379.819573][ T9362] netlink: 32 bytes leftover after parsing attributes in process `syz.7.955'.
[  379.870892][ T8370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.955713][ T8370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.575469][ T5901] usb 4-1: USB disconnect, device number 36
[  408.556085][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  408.745927][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  408.768177][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  408.797174][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  408.805710][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  410.881515][ T5844] Bluetooth: hci7: command tx timeout
[  412.556193][ T5837] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  412.601212][ T5837] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  412.626011][ T5837] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  412.634929][ T5837] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  412.657324][ T5837] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  412.672179][ T5837] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  412.707524][ T5837] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  412.717796][ T5837] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  414.165503][ T5837] Bluetooth: hci7: command tx timeout
[  414.695568][ T5837] Bluetooth: hci8: command tx timeout
[  415.207658][ T5837] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  415.215735][ T5837] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  416.215607][ T5837] Bluetooth: hci7: command tx timeout
[  416.344962][ T5844] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  416.357836][ T5844] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  416.367395][ T5844] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  416.386932][ T5844] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  416.406391][ T5844] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  417.525807][ T5155] Bluetooth: hci8: command tx timeout
[  417.531333][ T5155] Bluetooth: hci9: command tx timeout
[  418.854020][ T5837] Bluetooth: hci7: command tx timeout
[  419.905923][ T5837] Bluetooth: hci9: command tx timeout
[  419.911425][ T5837] Bluetooth: hci8: command tx timeout
[  419.925526][ T5155] Bluetooth: hci10: command tx timeout
[  422.330240][ T5155] Bluetooth: hci9: command tx timeout
[  422.335835][ T5844] Bluetooth: hci8: command tx timeout
[  422.341280][ T5844] Bluetooth: hci10: command tx timeout
[  425.476056][ T5844] Bluetooth: hci9: command tx timeout
[  425.481550][ T5844] Bluetooth: hci10: command tx timeout
[  426.354194][ T8377] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.497168][ T5844] Bluetooth: hci10: command tx timeout
[  427.955969][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  427.966903][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  428.007321][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  428.017813][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  428.026896][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  430.056120][ T5155] Bluetooth: hci0: command tx timeout
[  430.940189][ T9384] chnl_net:caif_netlink_parms(): no params data found
[  432.135576][ T5155] Bluetooth: hci0: command tx timeout
[  434.235538][ T5155] Bluetooth: hci0: command tx timeout
[  434.689058][ T9387] chnl_net:caif_netlink_parms(): no params data found
[  434.907863][ T9385] chnl_net:caif_netlink_parms(): no params data found
[  436.298731][ T5155] Bluetooth: hci0: command tx timeout
[  440.141943][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  442.084714][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  453.523799][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  453.536572][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  453.546096][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  453.554422][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  453.563020][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  456.555630][ T5844] Bluetooth: hci1: command tx timeout
[  458.615684][ T5844] Bluetooth: hci1: command tx timeout
[  461.015417][ T5844] Bluetooth: hci1: command tx timeout
[  462.215710][ T9396] chnl_net:caif_netlink_parms(): no params data found
[  463.095724][ T5844] Bluetooth: hci1: command tx timeout
[  463.197487][ T9384] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR
[  463.906344][ T9387] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR
[  465.240247][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  465.265910][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  465.289559][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  465.311478][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  465.321213][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  465.335188][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  465.357851][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  465.372979][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  465.391901][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  465.402450][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  465.752467][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.831232][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.910975][ T9396] bridge_slave_0: entered allmulticast mode
[  465.976777][ T9396] bridge_slave_0: entered promiscuous mode
[  466.026810][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.034034][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.155738][ T9396] bridge_slave_1: entered allmulticast mode
[  466.164053][ T9396] bridge_slave_1: entered promiscuous mode
[  466.931924][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  466.946551][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  466.955133][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  466.974327][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  466.984702][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  467.576550][ T5837] Bluetooth: hci2: command tx timeout
[  467.585743][ T5155] Bluetooth: hci3: command tx timeout
[  468.048899][ T9396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  468.100656][ T9396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  468.498735][ T9396] team0: Port device team_slave_0 added
[  468.591386][ T9396] team0: Port device team_slave_1 added
[  469.000000][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_0
[  469.015971][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.053990][ T9396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  469.096562][ T5837] Bluetooth: hci4: command tx timeout
[  469.225197][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_1
[  469.249652][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.315014][ T9396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  469.672715][ T5837] Bluetooth: hci2: command tx timeout
[  469.682336][ T5155] Bluetooth: hci3: command tx timeout
[  470.046210][ T9396] hsr_slave_0: entered promiscuous mode
[  470.053246][ T9396] hsr_slave_1: entered promiscuous mode
[  470.084731][ T9396] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  470.110627][ T9396] Cannot create hsr debugfs directory
[  470.136525][ T9421] chnl_net:caif_netlink_parms(): no params data found
[  470.947971][ T9437] chnl_net:caif_netlink_parms(): no params data found
[  471.177601][ T5155] Bluetooth: hci4: command tx timeout
[  471.737613][ T5155] Bluetooth: hci3: command tx timeout
[  471.743104][ T5155] Bluetooth: hci2: command tx timeout
[  471.869240][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.893659][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.904178][ T9421] bridge_slave_0: entered allmulticast mode
[  471.928146][ T9421] bridge_slave_0: entered promiscuous mode
[  472.214681][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.253303][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.287920][ T9421] bridge_slave_1: entered allmulticast mode
[  472.326801][ T9421] bridge_slave_1: entered promiscuous mode
[  472.484912][ T9441] chnl_net:caif_netlink_parms(): no params data found
[  472.742651][ T9436] chnl_net:caif_netlink_parms(): no params data found
[  472.788476][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  472.839195][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  473.229120][ T9396] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.258045][ T5155] Bluetooth: hci4: command tx timeout
[  473.816954][ T5837] Bluetooth: hci3: command tx timeout
[  473.822490][ T5155] Bluetooth: hci2: command tx timeout
[  473.946256][ T9437] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.953701][ T9437] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.977422][ T9437] bridge_slave_0: entered allmulticast mode
[  474.007986][ T9437] bridge_slave_0: entered promiscuous mode
[  474.028054][ T9437] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.035259][ T9437] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.065121][ T9437] bridge_slave_1: entered allmulticast mode
[  474.097040][ T9437] bridge_slave_1: entered promiscuous mode
[  474.123343][ T9421] team0: Port device team_slave_0 added
[  474.401295][ T9421] team0: Port device team_slave_1 added
[  475.043569][ T9437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.089876][ T9437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  475.331181][ T9436] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.339807][ T5155] Bluetooth: hci4: command tx timeout
[  475.355649][ T9436] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.363020][ T9436] bridge_slave_0: entered allmulticast mode
[  475.391273][ T9436] bridge_slave_0: entered promiscuous mode
[  475.412016][ T9436] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.445879][ T9436] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.453258][ T9436] bridge_slave_1: entered allmulticast mode
[  475.478051][ T9436] bridge_slave_1: entered promiscuous mode
[  475.689250][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.705695][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.775928][ T9421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  475.804033][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_1
[  475.835907][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.896096][ T9421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  475.916532][ T9441] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.923741][ T9441] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.951456][ T9441] bridge_slave_0: entered allmulticast mode
[  475.969860][ T9441] bridge_slave_0: entered promiscuous mode
[  476.013784][ T9441] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.031001][ T9441] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.048934][ T9441] bridge_slave_1: entered allmulticast mode
[  476.068309][ T9441] bridge_slave_1: entered promiscuous mode
[  476.449851][ T9437] team0: Port device team_slave_0 added
[  476.691014][ T9436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.720645][ T9436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  476.770044][ T9437] team0: Port device team_slave_1 added
[  476.989284][ T9441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  477.346714][ T9441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.562141][ T9437] batman_adv: batadv0: Adding interface: batadv_slave_0
[  477.587463][ T9437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.634993][ T9437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.672148][ T9437] batman_adv: batadv0: Adding interface: batadv_slave_1
[  477.686092][ T9437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.733444][ T9437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  477.901241][ T9436] team0: Port device team_slave_0 added
[  477.929134][ T9421] hsr_slave_0: entered promiscuous mode
[  477.947152][ T9421] hsr_slave_1: entered promiscuous mode
[  477.953765][ T9421] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  477.987955][ T9421] Cannot create hsr debugfs directory
[  478.327550][ T9436] team0: Port device team_slave_1 added
[  478.466642][ T9437] hsr_slave_0: entered promiscuous mode
[  478.489449][ T9437] hsr_slave_1: entered promiscuous mode
[  478.507839][ T9437] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  478.521252][ T9437] Cannot create hsr debugfs directory
[  478.552515][ T9441] team0: Port device team_slave_0 added
[  478.579864][ T9441] team0: Port device team_slave_1 added
[  479.227611][ T9436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  479.234639][ T9436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  479.282513][ T9436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  479.329931][ T9436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  479.355869][ T9436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  479.421705][ T9436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  479.683816][ T9441] batman_adv: batadv0: Adding interface: batadv_slave_0
[  479.705521][ T9441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  479.775800][ T9441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  480.007937][ T9441] batman_adv: batadv0: Adding interface: batadv_slave_1
[  480.014957][ T9441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.096884][ T9441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  480.609068][ T9436] hsr_slave_0: entered promiscuous mode
[  480.646710][ T9436] hsr_slave_1: entered promiscuous mode
[  480.665649][ T9436] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  480.673274][ T9436] Cannot create hsr debugfs directory
[  480.838371][ T9441] hsr_slave_0: entered promiscuous mode
[  480.868367][ T9441] hsr_slave_1: entered promiscuous mode
[  480.886012][ T9441] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  480.893645][ T9441] Cannot create hsr debugfs directory
[  484.970456][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  484.980424][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  484.990693][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  485.000209][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  485.010051][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  485.777184][ T9470] chnl_net:caif_netlink_parms(): no params data found
[  486.208749][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.265904][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.295929][ T9470] bridge_slave_0: entered allmulticast mode
[  486.316093][ T9470] bridge_slave_0: entered promiscuous mode
[  486.329284][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.346838][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.354519][ T9470] bridge_slave_1: entered allmulticast mode
[  486.397254][ T9470] bridge_slave_1: entered promiscuous mode
[  486.738018][ T9470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  486.769959][ T9470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.039406][ T9470] team0: Port device team_slave_0 added
[  487.066681][ T9470] team0: Port device team_slave_1 added
[  487.096291][ T5837] Bluetooth: hci5: command tx timeout
[  487.328110][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  487.335126][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  487.415143][ T9470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.445928][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  487.452936][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  487.535691][ T9470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  487.898043][ T9470] hsr_slave_0: entered promiscuous mode
[  487.919012][ T9470] hsr_slave_1: entered promiscuous mode
[  487.939186][ T9470] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  487.956823][ T9470] Cannot create hsr debugfs directory
[  489.175849][ T5837] Bluetooth: hci5: command tx timeout
[  491.255782][ T5837] Bluetooth: hci5: command tx timeout
[  493.336144][ T5837] Bluetooth: hci5: command tx timeout
[  499.186998][ T8377] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.616162][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  501.622643][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  503.497417][ T5155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  503.512036][ T5155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  503.520859][ T5155] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  503.548055][ T5155] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  503.558106][ T5155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  504.356333][ T9481] chnl_net:caif_netlink_parms(): no params data found
[  504.838140][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.852022][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.866063][ T9481] bridge_slave_0: entered allmulticast mode
[  504.888108][ T9481] bridge_slave_0: entered promiscuous mode
[  504.910546][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.934626][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.961802][ T9481] bridge_slave_1: entered allmulticast mode
[  504.988086][ T9481] bridge_slave_1: entered promiscuous mode
[  505.219984][ T9481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  505.257821][ T9481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  505.539510][ T9481] team0: Port device team_slave_0 added
[  505.561230][ T9481] team0: Port device team_slave_1 added
[  505.655927][ T5155] Bluetooth: hci6: command tx timeout
[  505.798700][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.815756][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.875837][ T9481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.908641][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.925644][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.997042][ T9481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  506.358126][ T9481] hsr_slave_0: entered promiscuous mode
[  506.377472][ T9481] hsr_slave_1: entered promiscuous mode
[  506.384248][ T9481] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  506.415590][ T9481] Cannot create hsr debugfs directory
[  507.736309][ T5155] Bluetooth: hci6: command tx timeout
[  509.816369][ T5155] Bluetooth: hci6: command tx timeout
[  511.896286][ T5155] Bluetooth: hci6: command tx timeout
[  525.095104][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  525.107544][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  525.124452][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  525.135993][ T5837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  525.145200][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  525.203378][ T5844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  525.221318][ T5844] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  525.233966][ T5844] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  525.243810][ T5844] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  525.258797][ T5844] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  525.829941][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  525.839931][ T5844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  525.849009][ T5844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  525.866387][ T5844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  525.874330][ T5844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  527.042459][ T9499] chnl_net:caif_netlink_parms(): no params data found
[  527.087514][ T9497] chnl_net:caif_netlink_parms(): no params data found
[  527.265942][ T5844] Bluetooth: hci7: command tx timeout
[  527.335942][ T5844] Bluetooth: hci8: command tx timeout
[  527.896380][ T5844] Bluetooth: hci9: command tx timeout
[  528.430512][ T9499] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.462139][ T9499] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.507091][ T9499] bridge_slave_0: entered allmulticast mode
[  528.535838][ T9499] bridge_slave_0: entered promiscuous mode
[  528.840201][ T9501] chnl_net:caif_netlink_parms(): no params data found
[  528.870147][ T9499] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.889484][ T9499] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.906534][ T9499] bridge_slave_1: entered allmulticast mode
[  528.927483][ T9499] bridge_slave_1: entered promiscuous mode
[  529.055279][ T9497] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.063066][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.092319][ T9497] bridge_slave_0: entered allmulticast mode
[  529.157243][ T9497] bridge_slave_0: entered promiscuous mode
[  529.199994][ T9497] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.219048][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.236117][ T9497] bridge_slave_1: entered allmulticast mode
[  529.256405][ T9497] bridge_slave_1: entered promiscuous mode
[  529.336141][ T5844] Bluetooth: hci7: command tx timeout
[  529.416006][ T5844] Bluetooth: hci8: command tx timeout
[  529.427056][ T9499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  529.613629][ T9499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  529.909027][ T9497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  529.976437][ T5844] Bluetooth: hci9: command tx timeout
[  530.148398][ T9497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.414953][ T9499] team0: Port device team_slave_0 added
[  530.441333][ T9499] team0: Port device team_slave_1 added
[  530.534928][ T9497] team0: Port device team_slave_0 added
[  531.117712][ T9497] team0: Port device team_slave_1 added
[  531.233176][ T9501] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.256116][ T9501] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.263544][ T9501] bridge_slave_0: entered allmulticast mode
[  531.295640][ T9501] bridge_slave_0: entered promiscuous mode
[  531.307884][ T9501] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.315084][ T9501] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.358544][ T9501] bridge_slave_1: entered allmulticast mode
[  531.377553][ T9501] bridge_slave_1: entered promiscuous mode
[  531.416893][ T5844] Bluetooth: hci7: command tx timeout
[  531.496798][ T5844] Bluetooth: hci8: command tx timeout
[  531.504707][ T9499] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.526530][ T9499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  531.595705][ T9499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.629552][ T9499] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.656173][ T9499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  531.716392][ T9499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  531.944538][ T9497] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.966938][ T9497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.035680][ T9497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  532.056816][ T5844] Bluetooth: hci9: command tx timeout
[  532.204026][ T9497] batman_adv: batadv0: Adding interface: batadv_slave_1
[  532.227429][ T9497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.299199][ T9497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  532.583434][ T9501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  532.623446][ T9501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  532.772031][ T9499] hsr_slave_0: entered promiscuous mode
[  532.798735][ T9499] hsr_slave_1: entered promiscuous mode
[  532.818008][ T9499] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  532.836752][ T9499] Cannot create hsr debugfs directory
[  533.291310][ T9501] team0: Port device team_slave_0 added
[  533.473069][ T9497] hsr_slave_0: entered promiscuous mode
[  533.498576][ T5844] Bluetooth: hci7: command tx timeout
[  533.507901][ T9497] hsr_slave_1: entered promiscuous mode
[  533.523028][ T9497] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  533.547745][ T9497] Cannot create hsr debugfs directory
[  533.578249][ T5844] Bluetooth: hci8: command tx timeout
[  533.721644][ T9501] team0: Port device team_slave_1 added
[  534.140521][ T5844] Bluetooth: hci9: command tx timeout
[  534.147146][ T9501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  534.154129][ T9501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  534.226087][ T9501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  534.461038][ T9501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  534.485678][ T9501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  534.545871][ T9501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  535.119866][ T9501] hsr_slave_0: entered promiscuous mode
[  535.147292][ T9501] hsr_slave_1: entered promiscuous mode
[  535.153967][ T9501] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  535.180487][ T9501] Cannot create hsr debugfs directory
[  545.724619][ T5837] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  545.735180][ T5837] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  545.749989][ T5837] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  545.776058][ T5837] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  545.784273][ T5837] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  546.619373][ T9526] chnl_net:caif_netlink_parms(): no params data found
[  547.160816][ T9526] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.175659][ T9526] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.183090][ T9526] bridge_slave_0: entered allmulticast mode
[  547.217986][ T9526] bridge_slave_0: entered promiscuous mode
[  547.237769][ T9526] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.246598][ T9526] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.254005][ T9526] bridge_slave_1: entered allmulticast mode
[  547.288568][ T9526] bridge_slave_1: entered promiscuous mode
[  547.561518][ T9526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  547.598642][ T9526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  547.817337][ T5837] Bluetooth: hci10: command tx timeout
[  547.863008][ T9526] team0: Port device team_slave_0 added
[  547.899064][ T9526] team0: Port device team_slave_1 added
[  548.187201][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  548.194218][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  548.265812][ T9526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  548.297218][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  548.304225][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  548.376594][ T9526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  548.856353][ T9526] hsr_slave_0: entered promiscuous mode
[  548.866613][ T9526] hsr_slave_1: entered promiscuous mode
[  548.891254][ T9526] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  548.906011][ T9526] Cannot create hsr debugfs directory
[  549.895856][ T5837] Bluetooth: hci10: command tx timeout
[  551.976602][ T5837] Bluetooth: hci10: command tx timeout
[  554.058849][ T5844] Bluetooth: hci10: command tx timeout
[  554.862256][ T5844] Bluetooth: hci0: command 0x0406 tx timeout
[  563.023455][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  563.030285][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  564.746669][ T5844] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  564.757274][ T5844] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  564.766502][ T5844] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  564.775132][ T5844] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  564.787014][ T5844] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  565.658004][ T9540] chnl_net:caif_netlink_parms(): no params data found
[  566.167112][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.174421][ T9540] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.196023][ T9540] bridge_slave_0: entered allmulticast mode
[  566.226905][ T9540] bridge_slave_0: entered promiscuous mode
[  566.253844][ T9540] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.267599][ T9540] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.275019][ T9540] bridge_slave_1: entered allmulticast mode
[  566.309856][ T9540] bridge_slave_1: entered promiscuous mode
[  566.597850][ T9540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  566.633037][ T9540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  566.858826][ T5844] Bluetooth: hci11: command tx timeout
[  566.907036][ T9540] team0: Port device team_slave_0 added
[  566.939432][ T9540] team0: Port device team_slave_1 added
[  567.197880][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  567.204911][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  567.276525][ T9540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  567.309906][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  567.325848][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  567.396055][ T9540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  567.785585][ T9540] hsr_slave_0: entered promiscuous mode
[  567.807811][ T9540] hsr_slave_1: entered promiscuous mode
[  567.826428][ T9540] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  567.834065][ T9540] Cannot create hsr debugfs directory
[  568.946758][ T5837] Bluetooth: hci11: command tx timeout
[  571.016560][ T5837] Bluetooth: hci11: command tx timeout
[  573.096109][ T5837] Bluetooth: hci11: command tx timeout
[  580.476735][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  585.515983][ T5837] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  585.532500][ T5837] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  585.543044][ T5837] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  585.552669][ T5837] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  585.560843][ T5837] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  585.798066][ T5844] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  585.826875][ T5844] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  585.836178][ T5844] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  585.844530][ T5844] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  585.854164][ T5844] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  586.382441][ T5155] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  586.405665][ T5155] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  586.423085][ T5155] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  586.432646][ T5155] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  586.441359][ T5155] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  587.278068][ T9555] chnl_net:caif_netlink_parms(): no params data found
[  587.657827][ T5155] Bluetooth: hci12: command tx timeout
[  587.676656][ T9557] chnl_net:caif_netlink_parms(): no params data found
[  587.976604][ T5155] Bluetooth: hci13: command tx timeout
[  588.400151][ T9555] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.427013][ T9555] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.434869][ T9555] bridge_slave_0: entered allmulticast mode
[  588.489438][ T9555] bridge_slave_0: entered promiscuous mode
[  588.519520][ T9555] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.537895][ T5155] Bluetooth: hci14: command tx timeout
[  588.556065][ T9555] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.563501][ T9555] bridge_slave_1: entered allmulticast mode
[  588.608336][ T9555] bridge_slave_1: entered promiscuous mode
[  588.694519][ T9560] chnl_net:caif_netlink_parms(): no params data found
[  589.252601][ T9555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  589.681763][ T9555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  589.746769][ T9574] Bluetooth: hci12: command tx timeout
[  589.892696][ T9557] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.943846][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.968890][ T9557] bridge_slave_0: entered allmulticast mode
[  589.988144][ T9557] bridge_slave_0: entered promiscuous mode
[  590.056164][ T9574] Bluetooth: hci13: command tx timeout
[  590.218533][ T9555] team0: Port device team_slave_0 added
[  590.241564][ T9557] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.251520][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.276171][ T9557] bridge_slave_1: entered allmulticast mode
[  590.284699][ T9557] bridge_slave_1: entered promiscuous mode
[  590.484261][ T9555] team0: Port device team_slave_1 added
[  590.622316][ T9574] Bluetooth: hci14: command tx timeout
[  590.699811][ T9574] Bluetooth: hci3: command 0x0406 tx timeout
[  590.706494][ T9574] Bluetooth: hci2: command 0x0406 tx timeout
[  590.719445][ T9574] Bluetooth: hci4: command 0x0406 tx timeout
[  590.741805][ T9557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  590.970710][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  590.985321][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  591.059622][ T9555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  591.218459][ T9557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  591.658138][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  591.665170][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  591.746288][ T9555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  591.817567][ T5844] Bluetooth: hci12: command tx timeout
[  591.901062][ T9560] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.913015][ T9560] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.940372][ T9560] bridge_slave_0: entered allmulticast mode
[  591.968153][ T9560] bridge_slave_0: entered promiscuous mode
[  591.994281][ T9557] team0: Port device team_slave_0 added
[  592.123263][ T9560] bridge0: port 2(bridge_slave_1) entered blocking state
[  592.136672][ T5844] Bluetooth: hci13: command tx timeout
[  592.152819][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.181712][ T9560] bridge_slave_1: entered allmulticast mode
[  592.197996][ T9560] bridge_slave_1: entered promiscuous mode
[  592.338675][ T9557] team0: Port device team_slave_1 added
[  592.696253][ T5844] Bluetooth: hci14: command tx timeout
[  592.828890][ T9555] hsr_slave_0: entered promiscuous mode
[  592.846528][ T9555] hsr_slave_1: entered promiscuous mode
[  592.856629][ T9555] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  592.864522][ T9555] Cannot create hsr debugfs directory
[  592.923958][ T9560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  592.972885][ T9560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  593.369663][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_0
[  593.398227][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  593.455823][ T9557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  593.624078][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_1
[  593.645702][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  593.701218][ T9557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  593.773474][ T9560] team0: Port device team_slave_0 added
[  593.896967][ T5844] Bluetooth: hci12: command tx timeout
[  594.113675][ T9560] team0: Port device team_slave_1 added
[  594.217047][ T5844] Bluetooth: hci13: command tx timeout
[  594.327637][ T9557] hsr_slave_0: entered promiscuous mode
[  594.334936][ T9557] hsr_slave_1: entered promiscuous mode
[  594.360533][ T9557] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  594.382944][ T9557] Cannot create hsr debugfs directory
[  594.542020][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_0
[  594.563223][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  594.645781][ T9560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  594.675935][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_1
[  594.682962][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  594.755823][ T9560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  594.779498][ T5844] Bluetooth: hci14: command tx timeout
[  595.589005][ T9560] hsr_slave_0: entered promiscuous mode
[  595.616907][ T9560] hsr_slave_1: entered promiscuous mode
[  595.626689][ T9560] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  595.658317][ T9560] Cannot create hsr debugfs directory
[  606.845100][ T5837] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  606.858048][ T5837] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  606.869376][ T5837] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  606.898089][ T5837] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  606.907874][ T5837] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  607.693932][ T9588] chnl_net:caif_netlink_parms(): no params data found
[  608.265711][ T9588] bridge0: port 1(bridge_slave_0) entered blocking state
[  608.272935][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state
[  608.298747][ T9588] bridge_slave_0: entered allmulticast mode
[  608.319918][ T9588] bridge_slave_0: entered promiscuous mode
[  608.347562][ T9588] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.356776][ T9588] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.364502][ T9588] bridge_slave_1: entered allmulticast mode
[  608.389167][ T9588] bridge_slave_1: entered promiscuous mode
[  608.668599][ T9588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  608.722912][ T9588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  608.936717][ T5837] Bluetooth: hci15: command tx timeout
[  609.000347][ T9588] team0: Port device team_slave_0 added
[  609.030490][ T9588] team0: Port device team_slave_1 added
[  609.243195][ T9588] batman_adv: batadv0: Adding interface: batadv_slave_0
[  609.275920][ T9588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  609.337722][ T9588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  609.368948][ T9588] batman_adv: batadv0: Adding interface: batadv_slave_1
[  609.385349][ T9588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  609.458144][ T9588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  609.857811][ T9588] hsr_slave_0: entered promiscuous mode
[  609.898989][ T9588] hsr_slave_1: entered promiscuous mode
[  609.916870][ T9588] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  609.924490][ T9588] Cannot create hsr debugfs directory
[  611.016021][ T5844] Bluetooth: hci15: command tx timeout
[  611.180683][ T5844] Bluetooth: hci5: command 0x0406 tx timeout
[  613.099586][ T5837] Bluetooth: hci15: command tx timeout
[  615.181740][ T5837] Bluetooth: hci15: command tx timeout
[  616.776546][   T31] INFO: task syz.1.939:9242 blocked for more than 143 seconds.
[  616.784173][   T31]       Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  616.821233][   T31]       Blocked by coredump.
[  616.849333][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  616.904432][   T31] task:syz.1.939       state:D stack:23144 pid:9242  tgid:9242  ppid:5853   task_flags:0x40044c flags:0x00004006
[  616.966285][   T31] Call Trace:
[  616.969660][   T31]  <TASK>
[  616.972633][   T31]  __schedule+0x16f5/0x4d00
[  617.085389][   T31]  ? schedule+0x165/0x360
[  617.089825][   T31]  ? __pfx___schedule+0x10/0x10
[  617.094747][   T31]  ? schedule+0x91/0x360
[  617.225506][   T31]  schedule+0x165/0x360
[  617.229778][   T31]  schedule_preempt_disabled+0x13/0x30
[  617.276493][   T31]  __mutex_lock+0x724/0xe80
[  617.281094][   T31]  ? __mutex_lock+0x51b/0xe80
[  617.325518][   T31]  ? rcu_barrier+0x4c/0x570
[  617.330132][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  617.335197][   T31]  ? __mutex_unlock_slowpath+0x6ed/0x700
[  617.399995][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  617.416445][   T31]  ? free_one_page+0xfa/0x360
[  617.421217][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  617.445641][   T31]  rcu_barrier+0x4c/0x570
[  617.450067][   T31]  ? __free_pages_ok+0x535/0xc20
[  617.455069][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  617.511340][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  617.524158][   T31]  netdev_run_todo+0x327/0xea0
[  617.546516][   T31]  ? __pfx_netif_state_change+0x10/0x10
[  617.552143][   T31]  ? __pfx_netdev_run_todo+0x10/0x10
[  617.587336][   T31]  ? __lruvec_stat_mod_folio+0x79/0x2f0
[  617.593001][   T31]  ? netdev_state_change+0x1ca/0x220
[  617.620673][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  617.645555][   T31]  tun_chr_close+0x13c/0x1c0
[  617.665823][   T31]  __fput+0x44c/0xa70
[  617.669908][   T31]  task_work_run+0x1d1/0x260
[  617.674544][   T31]  ? __pfx_task_work_run+0x10/0x10
[  617.726378][   T31]  ? kmem_cache_free+0x18f/0x400
[  617.731416][   T31]  do_exit+0x6ad/0x22e0
[  617.753058][   T31]  ? do_raw_spin_lock+0x121/0x290
[  617.775434][   T31]  ? __pfx_do_exit+0x10/0x10
[  617.780131][   T31]  do_group_exit+0x21c/0x2d0
[  617.784771][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  617.815740][   T31]  get_signal+0x1286/0x1340
[  617.820378][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  617.875980][   T31]  ? blkcg_maybe_throttle_current+0x1ab/0xb40
[  617.882155][   T31]  ? kmem_cache_free+0x309/0x400
[  617.905616][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  617.911879][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  617.946209][   T31]  exit_to_user_mode_loop+0x75/0x110
[  617.951612][   T31]  do_syscall_64+0x2bd/0x3b0
[  618.005706][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.011869][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  618.037279][   T31]  ? clear_bhb_loop+0x60/0xb0
[  618.042064][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.061679][   T31] RIP: 0033:0x7f55a8f8e929
[  618.085619][   T31] RSP: 002b:00007f55a92dfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  618.094117][   T31] RAX: 0000000000000000 RBX: 00007f55a91b7ba0 RCX: 00007f55a8f8e929
[  618.125624][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  618.133670][   T31] RBP: 00007f55a91b7ba0 R08: 0000000000000214 R09: 0000001ea92dfe7f
[  618.157418][   T31] R10: 00007f55a91b7ac0 R11: 0000000000000246 R12: 00000000000558f2
[  618.187735][   T31] R13: 00007f55a91b64e0 R14: ffffffffffffffff R15: 00007f55a92dfca0
[  618.212367][   T31]  </TASK>
[  618.225382][   T31] INFO: task syz.5.945:9297 blocked for more than 144 seconds.
[  618.233175][   T31]       Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0
[  618.255976][   T31]       Blocked by coredump.
[  618.275925][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  618.284753][   T31] task:syz.5.945       state:D stack:24552 pid:9297  tgid:9297  ppid:9165   task_flags:0x40044c flags:0x00004006
[  618.335741][   T31] Call Trace:
[  618.339105][   T31]  <TASK>
[  618.342081][   T31]  __schedule+0x16f5/0x4d00
[  618.355606][   T31]  ? __lock_acquire+0xa90/0xd20
[  618.360543][   T31]  ? schedule+0x165/0x360
[  618.379989][   T31]  ? __pfx___schedule+0x10/0x10
[  618.384962][   T31]  ? schedule+0x91/0x360
[  618.411338][   T31]  schedule+0x165/0x360
[  618.416424][   T31]  schedule_preempt_disabled+0x13/0x30
[  618.421945][   T31]  __mutex_lock+0x724/0xe80
[  618.445471][   T31]  ? __mutex_lock+0x51b/0xe80
[  618.450235][   T31]  ? rcu_barrier+0x4c/0x570
[  618.454783][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  618.475624][   T31]  ? __mutex_unlock_slowpath+0x68a/0x700
[  618.481354][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  618.505569][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  618.510765][   T31]  rcu_barrier+0x4c/0x570
[  618.515154][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  618.545578][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  618.550794][   T31]  netdev_run_todo+0x327/0xea0
[  618.565366][   T31]  ? __pfx_netif_state_change+0x10/0x10
[  618.585400][   T31]  ? __pfx_netdev_run_todo+0x10/0x10
[  618.590861][   T31]  ? kasan_quarantine_put+0xdd/0x220
[  618.615772][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  618.621072][   T31]  ? netdev_state_change+0x1ca/0x220
[  618.636632][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  618.641833][   T31]  tun_chr_close+0x13c/0x1c0
[  618.665683][   T31]  __fput+0x44c/0xa70
[  618.669766][   T31]  task_work_run+0x1d1/0x260
[  618.685514][   T31]  ? __pfx_task_work_run+0x10/0x10
[  618.690721][   T31]  ? kmem_cache_free+0x18f/0x400
[  618.716543][   T31]  do_exit+0x6ad/0x22e0
[  618.720801][   T31]  ? do_raw_spin_lock+0x121/0x290
[  618.738979][   T31]  ? __pfx_do_exit+0x10/0x10
[  618.743672][   T31]  do_group_exit+0x21c/0x2d0
[  618.762178][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  618.777681][   T31]  get_signal+0x1286/0x1340
[  618.782331][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  618.805810][   T31]  ? blkcg_maybe_throttle_current+0x1ab/0xb40
[  618.811970][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  618.826769][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  618.833025][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  618.857091][   T31]  exit_to_user_mode_loop+0x75/0x110
[  618.862477][   T31]  do_syscall_64+0x2bd/0x3b0
[  618.885602][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  618.890898][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.915630][   T31]  ? clear_bhb_loop+0x60/0xb0
[  618.920417][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.937446][   T31] RIP: 0033:0x7f3faa78e929
[  618.941939][   T31] RSP: 002b:00007f3faaadfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  618.972652][   T31] RAX: 0000000000000000 RBX: 00007f3faa9b7ba0 RCX: 00007f3faa78e929
[  618.995962][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  619.004017][   T31] RBP: 00007f3faa9b7ba0 R08: 0000000000014aec R09: 00000012aaadfe7f
[  619.036923][   T31] R10: 00007f3faa9b7ac0 R11: 0000000000000246 R12: 0000000000059681
[  619.044979][   T31] R13: 00007f3faa9b6080 R14: ffffffffffffffff R15: 00007f3faaadfca0
[  619.067564][   T31]  </TASK>
[  619.117497][   T31] INFO: task syz-executor:9380 blocked for more than 145 seconds.
[  619.145575][   T31]       Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0
[  619.154473][   T31]       Blocked by coredump.
[  619.165549][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  619.174273][   T31] task:syz-executor    state:D stack:22760 pid:9380  tgid:9380  ppid:1      task_flags:0x40054c flags:0x00004006
[  619.222411][   T31] Call Trace:
[  619.235414][   T31]  <TASK>
[  619.238420][   T31]  __schedule+0x16f5/0x4d00
[  619.242998][   T31]  ? __lock_acquire+0xa90/0xd20
[  619.266632][   T31]  ? schedule+0x165/0x360
[  619.271069][   T31]  ? __pfx___schedule+0x10/0x10
[  619.289074][   T31]  ? schedule+0x91/0x360
[  619.293399][   T31]  schedule+0x165/0x360
[  619.305561][   T31]  schedule_preempt_disabled+0x13/0x30
[  619.311096][   T31]  __mutex_lock+0x724/0xe80
[  619.332393][   T31]  ? __mutex_lock+0x51b/0xe80
[  619.376752][   T31]  ? rcu_barrier+0x4c/0x570
[  619.381351][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  619.395845][   T31]  ? __mutex_unlock_slowpath+0x68a/0x700
[  619.401566][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  619.425553][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  619.430758][   T31]  rcu_barrier+0x4c/0x570
[  619.435140][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  619.465824][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  619.471026][   T31]  netdev_run_todo+0x327/0xea0
[  619.486820][   T31]  ? __pfx_netif_state_change+0x10/0x10
[  619.507193][   T31]  ? __pfx_netdev_run_todo+0x10/0x10
[  619.512564][   T31]  ? kasan_quarantine_put+0xdd/0x220
[  619.535579][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  619.540893][   T31]  ? netdev_state_change+0x1ca/0x220
[  619.557680][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  619.562884][   T31]  tun_chr_close+0x13c/0x1c0
[  619.587886][   T31]  __fput+0x44c/0xa70
[  619.598276][   T31]  task_work_run+0x1d1/0x260
[  619.602953][   T31]  ? __pfx_task_work_run+0x10/0x10
[  619.625755][   T31]  ? kmem_cache_free+0x18f/0x400
[  619.630779][   T31]  do_exit+0x6ad/0x22e0
[  619.634987][   T31]  ? do_raw_spin_lock+0x121/0x290
[  619.659213][   T31]  ? __pfx_do_exit+0x10/0x10
[  619.663908][   T31]  do_group_exit+0x21c/0x2d0
[  619.685357][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  619.690646][   T31]  get_signal+0x1286/0x1340
[  619.715619][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  619.721261][   T31]  ? blkcg_maybe_throttle_current+0x1ab/0xb40
[  619.735706][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  619.741998][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  619.769099][   T31]  exit_to_user_mode_loop+0x75/0x110
[  619.774480][   T31]  do_syscall_64+0x2bd/0x3b0
[  619.795667][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  619.804100][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.825724][   T31]  ? clear_bhb_loop+0x60/0xb0
[  619.830499][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.855657][   T31] RIP: 0033:0x7f557f9907bc
[  619.860150][   T31] RSP: 002b:00007f557fcdf6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  619.879117][   T31] RAX: 000000000000003c RBX: 00007f55806e4620 RCX: 00007f557f9907bc
[  619.903172][   T31] RDX: 000000000000003c RSI: 00007f55806e4670 RDI: 0000000000000003
[  619.929076][   T31] RBP: 0000000000000000 R08: 00007f557fcdf704 R09: 000000000000000c
[  619.945887][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  619.953957][   T31] R13: 0000000000000000 R14: 00007f55806e4670 R15: 0000000000000000
[  619.988850][   T31]  </TASK>
[  619.992030][   T31] INFO: task syz-executor:9384 blocked for more than 146 seconds.
[  620.017184][   T31]       Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0
[  620.024890][   T31]       Blocked by coredump.
[  620.065322][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  620.074065][   T31] task:syz-executor    state:D stack:22632 pid:9384  tgid:9384  ppid:1      task_flags:0x40054c flags:0x00004006
[  620.109296][   T31] Call Trace:
[  620.112655][   T31]  <TASK>
[  620.126919][   T31]  __schedule+0x16f5/0x4d00
[  620.131541][   T31]  ? __lock_acquire+0xa90/0xd20
[  620.155651][   T31]  ? schedule+0x165/0x360
[  620.160077][   T31]  ? __pfx___schedule+0x10/0x10
[  620.165013][   T31]  ? schedule+0x91/0x360
[  620.185734][   T31]  schedule+0x165/0x360
[  620.189998][   T31]  schedule_preempt_disabled+0x13/0x30
[  620.213033][   T31]  __mutex_lock+0x724/0xe80
[  620.223910][   T31]  ? __mutex_lock+0x51b/0xe80
[  620.236578][   T31]  ? rcu_barrier+0x4c/0x570
[  620.241172][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  620.266213][   T31]  ? __mutex_unlock_slowpath+0x68a/0x700
[  620.271941][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  620.285751][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  620.290946][   T31]  rcu_barrier+0x4c/0x570
[  620.318845][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  620.324053][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  620.346618][   T31]  netdev_run_todo+0x327/0xea0
[  620.351475][   T31]  ? __pfx_netif_state_change+0x10/0x10
[  620.369030][   T31]  ? __pfx_netdev_run_todo+0x10/0x10
[  620.374399][   T31]  ? kasan_quarantine_put+0xdd/0x220
[  620.395736][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  620.401047][   T31]  ? netdev_state_change+0x1ca/0x220
[  620.428825][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  620.434028][   T31]  tun_chr_close+0x13c/0x1c0
[  620.446503][   T31]  __fput+0x44c/0xa70
[  620.450591][   T31]  task_work_run+0x1d1/0x260
[  620.479435][   T31]  ? __pfx_task_work_run+0x10/0x10
[  620.484633][   T31]  ? kmem_cache_free+0x18f/0x400
[  620.495632][   T31]  do_exit+0x6ad/0x22e0
[  620.500222][   T31]  ? do_raw_spin_lock+0x121/0x290
[  620.518360][   T31]  ? __pfx_do_exit+0x10/0x10
[  620.523067][   T31]  do_group_exit+0x21c/0x2d0
[  620.539966][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  620.556526][   T31]  get_signal+0x1286/0x1340
[  620.561150][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  620.588942][   T31]  ? blkcg_maybe_throttle_current+0x1ab/0xb40
[  620.595114][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  620.621820][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  620.628626][   T31]  exit_to_user_mode_loop+0x75/0x110
[  620.633986][   T31]  do_syscall_64+0x2bd/0x3b0
[  620.656680][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  620.661966][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.685629][   T31]  ? clear_bhb_loop+0x60/0xb0
[  620.690393][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.706556][   T31] RIP: 0033:0x7f341e1907bc
[  620.711041][   T31] RSP: 002b:00007f341e4df6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  620.745592][   T31] RAX: 000000000000003c RBX: 00007f341eee4620 RCX: 00007f341e1907bc
[  620.753653][   T31] RDX: 000000000000003c RSI: 00007f341eee4670 RDI: 0000000000000003
[  620.786820][   T31] RBP: 0000000000000000 R08: 00007f341e4df704 R09: 000000000000000c
[  620.794968][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  620.819586][   T31] R13: 0000000000000000 R14: 00007f341eee4670 R15: 0000000000000000
[  620.845527][   T31]  </TASK>
[  620.848706][   T31] INFO: task syz-executor:9385 blocked for more than 147 seconds.
[  620.878685][   T31]       Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0
[  620.896882][   T31]       Blocked by coredump.
[  620.901530][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  620.932851][   T31] task:syz-executor    state:D stack:22760 pid:9385  tgid:9385  ppid:1      task_flags:0x40054c flags:0x00004006
[  620.965835][   T31] Call Trace:
[  620.969186][   T31]  <TASK>
[  620.972155][   T31]  __schedule+0x16f5/0x4d00
[  620.985357][   T31]  ? __lock_acquire+0xa90/0xd20
[  620.990310][   T31]  ? schedule+0x165/0x360
[  620.994718][   T31]  ? __pfx___schedule+0x10/0x10
[  621.029607][   T31]  ? schedule+0x91/0x360
[  621.033951][   T31]  schedule+0x165/0x360
[  621.045770][   T31]  schedule_preempt_disabled+0x13/0x30
[  621.051306][   T31]  __mutex_lock+0x724/0xe80
[  621.075740][   T31]  ? __mutex_lock+0x51b/0xe80
[  621.080510][   T31]  ? rcu_barrier+0x4c/0x570
[  621.085096][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  621.109128][   T31]  ? __mutex_unlock_slowpath+0x68a/0x700
[  621.114862][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  621.135488][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  621.140690][   T31]  rcu_barrier+0x4c/0x570
[  621.145157][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  621.176302][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  621.181508][   T31]  netdev_run_todo+0x327/0xea0
[  621.197532][   T31]  ? __pfx_netif_state_change+0x10/0x10
[  621.203166][   T31]  ? __pfx_netdev_run_todo+0x10/0x10
[  621.215699][   T31]  ? kasan_quarantine_put+0xdd/0x220
[  621.221064][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  621.263272][   T31]  ? netdev_state_change+0x1ca/0x220
[  621.269820][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  621.274999][   T31]  tun_chr_close+0x13c/0x1c0
[  621.295635][   T31]  __fput+0x44c/0xa70
[  621.299721][   T31]  task_work_run+0x1d1/0x260
[  621.304363][   T31]  ? __pfx_task_work_run+0x10/0x10
[  621.325606][   T31]  ? kmem_cache_free+0x18f/0x400
[  621.330623][   T31]  do_exit+0x6ad/0x22e0
[  621.357579][   T31]  ? do_raw_spin_lock+0x121/0x290
[  621.362692][   T31]  ? __pfx_do_exit+0x10/0x10
[  621.376278][   T31]  do_group_exit+0x21c/0x2d0
[  621.381075][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  621.405633][   T31]  get_signal+0x1286/0x1340
[  621.410256][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  621.425520][   T31]  ? blkcg_maybe_throttle_current+0x1ab/0xb40
[  621.431681][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  621.465658][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  621.471217][   T31]  exit_to_user_mode_loop+0x75/0x110
[  621.495644][   T31]  do_syscall_64+0x2bd/0x3b0
[  621.500310][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  621.515436][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.521579][   T31]  ? clear_bhb_loop+0x60/0xb0
[  621.541525][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.559966][   T31] RIP: 0033:0x7f9a371907bc
[  621.564456][   T31] RSP: 002b:00007f9a374df6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  621.590259][   T31] RAX: 000000000000002c RBX: 00007f9a37ee4620 RCX: 00007f9a371907bc
[  621.615620][   T31] RDX: 000000000000002c RSI: 00007f9a37ee4670 RDI: 0000000000000003
[  621.623676][   T31] RBP: 0000000000000000 R08: 00007f9a374df704 R09: 000000000000000c
[  621.656198][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  621.664249][   T31] R13: 0000000000000000 R14: 00007f9a37ee4670 R15: 0000000000000000
[  621.698582][   T31]  </TASK>
[  621.701686][   T31] INFO: task syz-executor:9387 blocked for more than 148 seconds.
[  621.716178][   T31]       Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0
[  621.723873][   T31]       Blocked by coredump.
[  621.748773][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  621.776779][   T31] task:syz-executor    state:D stack:22760 pid:9387  tgid:9387  ppid:1      task_flags:0x40054c flags:0x00004006
[  621.808469][   T31] Call Trace:
[  621.811817][   T31]  <TASK>
[  621.814785][   T31]  __schedule+0x16f5/0x4d00
[  621.835422][   T31]  ? __lock_acquire+0xa90/0xd20
[  621.840363][   T31]  ? schedule+0x165/0x360
[  621.857833][   T31]  ? __pfx___schedule+0x10/0x10
[  621.862792][   T31]  ? schedule+0x91/0x360
[  621.875454][   T31]  schedule+0x165/0x360
[  621.879689][   T31]  schedule_preempt_disabled+0x13/0x30
[  621.905822][   T31]  __mutex_lock+0x724/0xe80
[  621.910407][   T31]  ? __mutex_lock+0x51b/0xe80
[  621.915130][   T31]  ? rcu_barrier+0x4c/0x570
[  621.935448][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  621.940549][   T31]  ? __mutex_unlock_slowpath+0x68a/0x700
[  621.967696][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  621.973773][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  621.996783][   T31]  rcu_barrier+0x4c/0x570
[  622.001204][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  622.015342][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  622.020536][   T31]  netdev_run_todo+0x327/0xea0
[  622.045786][   T31]  ? __pfx_netif_state_change+0x10/0x10
[  622.065571][   T31]  ? __pfx_netdev_run_todo+0x10/0x10
[  622.070937][   T31]  ? kasan_quarantine_put+0xdd/0x220
[  622.085896][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  622.091186][   T31]  ? netdev_state_change+0x1ca/0x220
[  622.107140][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  622.112335][   T31]  tun_chr_close+0x13c/0x1c0
[  622.140055][   T31]  __fput+0x44c/0xa70
[  622.144135][   T31]  task_work_run+0x1d1/0x260
[  622.165639][   T31]  ? __pfx_task_work_run+0x10/0x10
[  622.170841][   T31]  ? kmem_cache_free+0x18f/0x400
[  622.187687][   T31]  do_exit+0x6ad/0x22e0
[  622.191927][   T31]  ? do_raw_spin_lock+0x121/0x290
[  622.205520][   T31]  ? __pfx_do_exit+0x10/0x10
[  622.210200][   T31]  do_group_exit+0x21c/0x2d0
[  622.214832][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  622.248479][   T31]  get_signal+0x1286/0x1340
[  622.253101][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  622.275456][   T31]  ? blkcg_maybe_throttle_current+0x1ab/0xb40
[  622.281626][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  622.305724][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  622.311267][   T31]  exit_to_user_mode_loop+0x75/0x110
[  622.339160][   T31]  do_syscall_64+0x2bd/0x3b0
[  622.343829][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  622.366050][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.372198][   T31]  ? clear_bhb_loop+0x60/0xb0
[  622.395698][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.401672][   T31] RIP: 0033:0x7fade49907bc
[  622.415394][   T31] RSP: 002b:00007fade4cdf6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  622.423887][   T31] RAX: 000000000000003c RBX: 00007fade56e4620 RCX: 00007fade49907bc
[  622.455362][   T31] RDX: 000000000000003c RSI: 00007fade56e4670 RDI: 0000000000000003
[  622.485606][   T31] RBP: 0000000000000000 R08: 00007fade4cdf704 R09: 000000000000000c
[  622.493670][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  622.517569][   T31] R13: 0000000000000000 R14: 00007fade56e4670 R15: 0000000000000000
[  622.539301][   T31]  </TASK>
[  622.548463][   T31] INFO: task syz-executor:9396 blocked for more than 149 seconds.
[  622.578632][   T31]       Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0
[  622.595498][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  622.616014][   T31] task:syz-executor    state:D stack:22536 pid:9396  tgid:9396  ppid:1      task_flags:0x480140 flags:0x00004006
[  622.638420][   T31] Call Trace:
[  622.641763][   T31]  <TASK>
[  622.644733][   T31]  __schedule+0x16f5/0x4d00
[  622.672151][   T31]  ? __lock_acquire+0xa90/0xd20
[  622.689912][   T31]  ? schedule+0x165/0x360
[  622.694340][   T31]  ? __pfx___schedule+0x10/0x10
[  622.715606][   T31]  ? schedule+0x91/0x360
[  622.720018][   T31]  schedule+0x165/0x360
[  622.724225][   T31]  schedule_preempt_disabled+0x13/0x30
[  622.745326][   T31]  __mutex_lock+0x724/0xe80
[  622.749923][   T31]  ? __mutex_lock+0x51b/0xe80
[  622.754654][   T31]  ? rcu_barrier+0x4c/0x570
[  622.779625][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  622.784732][   T31]  ? __mutex_unlock_slowpath+0x6ed/0x700
[  622.809385][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  622.825591][   T31]  rcu_barrier+0x4c/0x570
[  622.830023][   T31]  netdev_run_todo+0x327/0xea0
[  622.834840][   T31]  ? __pfx_netdev_run_todo+0x10/0x10
[  622.855759][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  622.861135][   T31]  ? nsim_destroy+0x3ec/0x670
[  622.889493][   T31]  nsim_destroy+0x40c/0x670
[  622.894103][   T31]  __nsim_dev_port_del+0x14d/0x1b0
[  622.905523][   T31]  nsim_dev_reload_destroy+0x288/0x490
[  622.911074][   T31]  nsim_drv_remove+0x58/0x160
[  622.936596][   T31]  ? __pfx_nsim_bus_remove+0x10/0x10
[  622.941979][   T31]  device_release_driver_internal+0x46f/0x7c0
[  622.957979][   T31]  bus_remove_device+0x34d/0x410
[  622.963033][   T31]  device_del+0x511/0x8e0
[  622.987133][   T31]  ? __lock_acquire+0xab9/0xd20
[  622.992086][   T31]  ? __pfx_device_del+0x10/0x10
[  623.015977][   T31]  device_unregister+0x20/0xc0
[  623.020850][   T31]  del_device_store+0x2aa/0x360
[  623.035579][   T31]  ? __pfx_del_device_store+0x10/0x10
[  623.041041][   T31]  ? sysfs_file_kobj+0x1e4/0x230
[  623.056199][   T31]  ? sysfs_kf_write+0x166/0x260
[  623.061129][   T31]  ? __pfx_sysfs_kf_write+0x10/0x10
[  623.085409][   T31]  kernfs_fop_write_iter+0x375/0x4f0
[  623.090825][   T31]  vfs_write+0x548/0xa90
[  623.095126][   T31]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  623.125609][   T31]  ? __pfx_vfs_write+0x10/0x10
[  623.130474][   T31]  ? do_sys_openat2+0x154/0x1c0
[  623.145342][   T31]  ? kmem_cache_free+0x18f/0x400
[  623.150368][   T31]  ksys_write+0x145/0x250
[  623.154745][   T31]  ? __pfx_ksys_write+0x10/0x10
[  623.185157][   T31]  ? rcu_is_watching+0x15/0xb0
[  623.205557][   T31]  ? do_syscall_64+0xbe/0x3b0
[  623.210325][   T31]  do_syscall_64+0xfa/0x3b0
[  623.214873][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  623.235533][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.241686][   T31]  ? clear_bhb_loop+0x60/0xb0
[  623.265311][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.271290][   T31] RIP: 0033:0x7efecb18d3df
[  623.297966][   T31] RSP: 002b:00007efecb4df220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  623.309923][   T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007efecb18d3df
[  623.325303][   T31] RDX: 0000000000000001 RSI: 00007efecb4df270 RDI: 0000000000000005
[  623.333339][   T31] RBP: 00007efecb211d8d R08: 0000000000000000 R09: 00007efecb4df077
[  623.365309][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  623.373354][   T31] R13: 00007efecb4df270 R14: 00007efecbee4620 R15: 0000000000000003
[  623.405329][   T31]  </TASK>
[  623.419388][   T31] 
[  623.419388][   T31] Showing all locks held in the system:
[  623.435508][   T31] 2 locks held by kworker/0:0/9:
[  623.440510][   T31] 4 locks held by kworker/u8:1/13:
[  623.475328][   T31]  #0: ffff888056321948 ((wq_completion)wg-kex-wg1#17){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  623.505797][   T31]  #1: ffffc90000127bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  623.538002][   T31]  #2: ffff888025efd308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0
[  623.568036][   T31]  #3: ffff88808260aad8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0
[  623.605649][   T31] 1 lock held by kworker/R-mm_pe/14:
[  623.611012][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  623.635520][   T31] 4 locks held by kworker/1:0/24:
[  623.640613][   T31]  #0: ffff888033e4c948 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  623.678286][   T31]  #1: ffffc900001e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  623.776803][   T31]  #2: ffff88807c261308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900
[  623.805621][   T31]  #3: ffff88807859c890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900
[  623.840643][   T31] 1 lock held by khungtaskd/31:
[  623.855387][   T31]  #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  623.875466][   T31] 2 locks held by kworker/u8:2/36:
[  623.880653][   T31] 2 locks held by kworker/0:2/979:
[  623.906111][   T31] 2 locks held by getty/5596:
[  623.910867][   T31]  #0: ffff8880337400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  623.935440][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  623.966019][   T31] 1 lock held by kworker/R-wg-cr/5878:
[  623.971549][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  624.009168][   T31] 1 lock held by kworker/R-wg-cr/5879:
[  624.014695][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  624.045641][   T31] 1 lock held by kworker/R-wg-cr/5880:
[  624.051162][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0
[  624.087017][   T31] 1 lock held by kworker/R-wg-cr/5883:
[  624.092543][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  624.135723][   T31] 1 lock held by kworker/R-wg-cr/5884:
[  624.141259][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  624.168360][   T31] 1 lock held by kworker/R-wg-cr/5886:
[  624.173884][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  624.204621][   T31] 3 locks held by kworker/0:4/5890:
[  624.217393][   T31] 2 locks held by kworker/0:5/5955:
[  624.228790][   T31] 4 locks held by kworker/0:7/5971:
[  624.234226][   T31] 1 lock held by syz.3.325/6984:
[  624.255693][   T31]  #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  624.278577][   T31] 6 locks held by kworker/u8:16/8377:
[  624.284017][   T31]  #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  624.325452][   T31]  #1: ffffc9001da5fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  624.355626][   T31]  #2: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  624.365071][   T31]  #3: ffff88807b05e0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0
[  624.395760][   T31]  #4: ffff88807b05f250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0
[  624.425514][   T31]  #5: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  624.476119][   T31] 1 lock held by kworker/R-wg-cr/9180:
[  624.481651][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  624.495664][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  624.502039][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  624.524281][   T31] 1 lock held by kworker/R-wg-cr/9183:
[  624.545653][   T31] 1 lock held by kworker/R-wg-cr/9241:
[  624.551185][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  624.575743][   T31] 1 lock held by syz.1.939/9242:
[  624.580740][   T31]  #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  624.613371][   T31] 1 lock held by kworker/R-wg-cr/9248:
[  624.637268][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  624.668666][   T31] 1 lock held by kworker/R-wg-cr/9251:
[  624.674190][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  624.695851][   T31] 1 lock held by kworker/R-wg-cr/9280:
[  624.701391][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0
[  624.737996][   T31] 1 lock held by kworker/R-wg-cr/9281:
[  624.743535][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  624.778827][   T31] 1 lock held by kworker/R-wg-cr/9282:
[  624.784359][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0
[  624.819757][   T31] 1 lock held by kworker/R-wg-cr/9283:
[  624.838069][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0
[  624.866878][   T31] 1 lock held by kworker/R-wg-cr/9284:
[  624.872412][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  624.900206][   T31] 1 lock held by kworker/R-wg-cr/9285:
[  624.921413][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  624.946292][   T31] 1 lock held by syz.5.945/9297:
[  624.951292][   T31]  #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  624.985622][   T31] 1 lock held by kworker/R-wg-cr/9310:
[  624.991151][   T31] 1 lock held by kworker/R-wg-cr/9311:
[  625.011574][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  625.045782][   T31] 1 lock held by kworker/R-wg-cr/9312:
[  625.051327][   T31]  #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0
[  625.078547][   T31] 2 locks held by kworker/0:9/9367:
[  625.083817][   T31] 1 lock held by syz-executor/9380:
[  625.105939][   T31]  #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  625.135496][   T31] 3 locks held by kworker/0:10/9383:
[  625.140865][   T31] 1 lock held by syz-executor/9384:
[  625.155776][   T31]  #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  625.188451][   T31] 1 lock held by syz-executor/9385:
[  625.193726][   T31]  #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  625.217193][   T31] 1 lock held by syz-executor/9387:
[  625.222443][   T31]  #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  625.257271][   T31] 1 lock held by kworker/0:12/9391:
[  625.262544][   T31] 3 locks held by kworker/0:13/9394:
[  625.288614][   T31] 7 locks held by syz-executor/9396:
[  625.293962][   T31]  #0: ffff888034e26428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  625.322268][   T31]  #1: ffff888065addc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  625.355751][   T31]  #2: ffff88814279be18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  625.375866][   T31]  #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  625.399235][   T31]  #4: ffff88803ca7a0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0
[  625.427075][   T31]  #5: ffff88803ca79250 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[  625.457917][   T31]  #6: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  625.485445][   T31] 4 locks held by syz-executor/9421:
[  625.490992][   T31]  #0: ffff888034e26428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  625.517099][   T31]  #1: ffff88807e040488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  625.545496][   T31]  #2: ffff88814279be18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  625.569661][   T31]  #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  625.595662][   T31] 4 locks held by syz-executor/9436:
[  625.601024][   T31]  #0: ffff888034e26428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  625.629999][   T31]  #1: ffff888030cf2c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  625.657099][   T31]  #2: ffff88814279be18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  625.685770][   T31]  #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  625.715460][   T31] 4 locks held by syz-executor/9437:
[  625.720834][   T31]  #0: ffff888034e26428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  625.755323][   T31]  #1: ffff88805f6a3488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  625.765222][   T31]  #2: ffff88814279be18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  625.798555][   T31]  #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  625.825432][   T31] 4 locks held by syz-executor/9441:
[  625.830786][   T31]  #0: ffff888034e26428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  625.865561][   T31]  #1: ffff888030cf0888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  625.885667][   T31]  #2: ffff88814279be18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  625.916593][   T31]  #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  625.935519][   T31] 2 locks held by kworker/0:14/9465:
[  625.959329][   T31] 4 locks held by syz-executor/9470:
[  625.964687][   T31]  #0: ffff888034e26428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  625.995655][   T31]  #1: ffff88805655d088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  626.017903][   T31]  #2: ffff88814279be18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  626.047519][   T31]  #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  626.068805][   T31] 4 locks held by syz-executor/9481:
[  626.074157][   T31]  #0: ffff888034e26428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  626.105632][   T31]  #1: ffff8880902ce888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  626.128941][   T31]  #2: ffff88814279be18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  626.154085][   T31]  #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  626.179454][   T31] 4 locks held by syz-executor/9497:
[  626.184808][   T31]  #0: ffff888034e26428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  626.216055][   T31]  #1: ffff888048855888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  626.237682][   T31]  #2: ffff88814279be18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  626.275429][   T31]  #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  626.305501][   T31] 4 locks held by syz-executor/9499:
[  626.310854][   T31]  #0: ffff888034e26428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  626.335508][   T31]  #1: ffff88803cf7cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  626.365491][   T31]  #2: ffff88814279be18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  626.385666][   T31]  #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  626.415324][   T31] 4 locks held by syz-executor/9501:
[  626.420712][   T31]  #0: ffff888034e26428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  626.445615][   T31]  #1: ffff888048a4c488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  626.475492][   T31]  #2: ffff88814279be18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  626.495375][   T31]  #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  626.525710][   T31] 4 locks held by syz-executor/9526:
[  626.531076][   T31]  #0: ffff888034e26428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  626.547753][ T5155] Bluetooth: hci6: command 0x0406 tx timeout
[  626.576443][   T31]  #1: ffff888099096488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  626.605777][   T31]  #2: ffff88814279be18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  626.635864][   T31]  #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  626.655303][   T31] 4 locks held by syz-executor/9540:
[  626.677677][   T31]  #0: ffff888034e26428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  626.705748][   T31]  #1: ffff88809e9c8c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  626.725333][   T31]  #2: ffff88814279be18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  626.745303][   T31]  #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360