last executing test programs:

10m46.32587582s ago: executing program 32 (id=100):
sysinfo(&(0x7f0000000000)=""/196)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000040000000040100"})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
write$char_usb(r2, &(0x7f0000001300)='7', 0x1)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="67fbbf905175ffe6e131200100000000"], 0x0})

10m36.625359755s ago: executing program 33 (id=106):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
socket$alg(0x26, 0x5, 0x0)
rt_sigaction(0x17, &(0x7f0000000080)={0x0, 0x98000004, 0x0, {[0xffffffffffffffff]}}, 0x0, 0x8, &(0x7f0000000200))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

10m26.074077302s ago: executing program 34 (id=107):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x2, 0x80, 0x7d889395ab3b5234, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x4d5, 0x6c}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x9}, {0x0, 0x4, 0x40000000, 0xfffffffffffffffc}, {0x42}, 0x0, 0x0, 0xa, 0x2, 0x1, 0xe0}}, 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0x4810)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000070a01020000000000bb0000020000000900020073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000)

10m6.63637189s ago: executing program 35 (id=108):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
write$char_usb(r1, &(0x7f0000001300)='7', 0x1)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0})

8m47.18511441s ago: executing program 36 (id=458):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x2, 0xb, 0x1, r4}, 0x10)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'veth1_vlan\x00', &(0x7f0000000480)=@ethtool_pauseparam={0x13, 0x6b31d9cf, 0x3ff, 0x6}})
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x8641, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f00000003c0)=""/166, &(0x7f0000000100)=0xa6)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002800), 0x400c2, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r6, 0x3b8b, &(0x7f00000028c0)={0x10, 0x1})
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000180)={0x1, "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"})
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r9}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x3c}}, 0x0)
ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x1)

8m6.297437391s ago: executing program 37 (id=900):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000000)={'bond0\x00', 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x34}}, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x230)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r3, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x14f, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x119, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [{0x4, 0x1e, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34c"}]}}}}}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, 0x0, 0x10)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r5, 0x0, 0x119)
close(0x3)

8m5.268962239s ago: executing program 38 (id=912):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
socket$l2tp(0x2, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
copy_file_range(r4, 0x0, r1, &(0x7f0000000040)=0x8, 0x3, 0x0)

7m58.50700293s ago: executing program 39 (id=942):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x34}}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x230)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f000000a540)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:'], 0xa)
socket(0x1d, 0x2, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0)

7m50.4328732s ago: executing program 40 (id=956):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'})
syz_pidfd_open(0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r7, 0x1, 0x0, 0x80000000, {0x4, 0x74, 0x609}}, 0x14}, 0x1, 0xffffffff00000003}, 0x0)

6m51.92619653s ago: executing program 41 (id=984):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

6m49.427456629s ago: executing program 42 (id=991):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}}, 0x14}}, 0x4800)

6m48.4114008s ago: executing program 43 (id=999):
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x10200)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4b0100, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
prlimit64(0x0, 0x9, &(0x7f0000000140)={0x44ebf16c, 0x8b}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sigaltstack(&(0x7f0000000480)={0x0, 0x80000001}, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00'}, 0x10)
futex(&(0x7f00000002c0), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x400)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000000040)={0x0, 0x2, 0x300, 0x2})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'})
setsockopt$sock_attach_bpf(r1, 0x1, 0x42, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)

5m51.8051836s ago: executing program 44 (id=1176):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000c7000000"], &(0x7f0000000140)='GPL\x00'}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x4}, 0x4c8c0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc)
readv(r1, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getrlimit(0x1, &(0x7f0000000000))
unshare(0x2040400)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x29)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
ioctl$FIONCLEX(r1, 0x5450)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

5m9.846767925s ago: executing program 45 (id=1348):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
fsopen(0x0, 0x0)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'pcl816\x00', [0x2f00, 0x5, 0xd097, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x7fff, 0x4, 0xfffe, 0x8, 0x5, 0x7, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0x100101, 0x2, 0xffffffff, 0x7, 0x3, 0x4, 0x4, 0x70f]})

5m8.797404808s ago: executing program 46 (id=1354):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r1, 0x0, 0x40080c1)
r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0)
tkill(0x0, 0xb)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, r1)
syz_open_dev$MSR(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setrlimit(0xc, 0x0)

4m47.70614968s ago: executing program 47 (id=1418):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']})
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f005, 0x2})
socket$nl_netfilter(0x10, 0x3, 0xc)
keyctl$read(0xb, 0x0, &(0x7f0000000680)=""/4096, 0x1000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setuid(0x0)

4m46.486124275s ago: executing program 48 (id=1426):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4004743b, &(0x7f0000001200))

4m25.31865115s ago: executing program 49 (id=1466):
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)

4m25.275902973s ago: executing program 50 (id=1465):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x20008041)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
r4 = socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000400009dd34e042f30a6aef4d2a3f9aef0c222df150000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{}, 0x0, &(0x7f00000003c0)=r6}, 0x20)
shutdown(r3, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
shutdown(r2, 0x1)

3m40.689735055s ago: executing program 51 (id=1494):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
keyctl$setperm(0x5, 0x0, 0x10)
timer_create(0x0, 0x0, 0x0)
syz_open_pts(0xffffffffffffffff, 0x101)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0xffffffffffffff9d, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, 0x0, &(0x7f0000001cc0)=""/194, 0xc2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0)
shutdown(r5, 0x0)
setreuid(0x0, r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0)
mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0)

3m39.672397688s ago: executing program 52 (id=1498):
r0 = socket(0x28, 0x5, 0x0)
listen(r0, 0x0)
chdir(0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x28}, 0x28)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"})

3m29.401219405s ago: executing program 5 (id=1554):
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0xf)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b00)=""/77, 0x4d}], 0x1}, 0x4c2003a0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)

3m27.714486016s ago: executing program 53 (id=1523):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c})
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
chdir(0x0)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

3m24.625299172s ago: executing program 0 (id=1565):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8)
io_setup(0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000002c0)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f027, 0x0, '\x00', @p_u8=0x0}})
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001000c0080000000", @ANYRES32=0x0, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x50)

3m23.665415782s ago: executing program 0 (id=1566):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xc003, 0xe, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x7, "0062ba5d8200"})
r1 = syz_open_pts(r0, 0x40080)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44)

3m22.795253782s ago: executing program 0 (id=1567):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000100)='./file0\x00')
utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffc000, 0x0)

3m21.925173609s ago: executing program 5 (id=1568):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x120, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xf0, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0xd4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x3c, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec20"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x14, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

3m20.814903229s ago: executing program 0 (id=1569):
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x10000}, &(0x7f00000000c0)=0x8)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
setpriority(0x2, 0x0, 0x7)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

3m19.853860625s ago: executing program 0 (id=1570):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240))

3m19.853632938s ago: executing program 5 (id=1571):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000080), 0x12)

3m19.803245194s ago: executing program 0 (id=1572):
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)

3m16.795323118s ago: executing program 5 (id=1573):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x70, @loopback, 0x400}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28)
write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
msgget$private(0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

3m16.795136745s ago: executing program 5 (id=1574):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8)
io_setup(0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000002c0)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f027, 0x0, '\x00', @p_u8=0x0}})
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001000c0080000000", @ANYRES32=0x0, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x50)

3m15.875009124s ago: executing program 5 (id=1575):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000280)=@ethtool_cmd={0x1c, 0x9, 0x5, 0x6, 0x6, 0x0, 0x1, 0x5, 0x2, 0x7, 0x3d95, 0x2, 0x40, 0x6, 0x3, 0x6, [0x200, 0x7ff]}})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r7 = accept$alg(r2, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d", 0x1f}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/36, 0x24}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x2}, 0xc3}], 0x1, 0x2003, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4800}, 0x24020000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x5004}, 0x4000)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r9], 0x40}}, 0x8080)

3m4.133897164s ago: executing program 54 (id=1572):
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)

3m0.766690329s ago: executing program 55 (id=1575):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000280)=@ethtool_cmd={0x1c, 0x9, 0x5, 0x6, 0x6, 0x0, 0x1, 0x5, 0x2, 0x7, 0x3d95, 0x2, 0x40, 0x6, 0x3, 0x6, [0x200, 0x7ff]}})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r7 = accept$alg(r2, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d", 0x1f}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/36, 0x24}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x2}, 0xc3}], 0x1, 0x2003, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4800}, 0x24020000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x5004}, 0x4000)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r9], 0x40}}, 0x8080)

2m4.234642343s ago: executing program 6 (id=1667):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd5000000000000100000008000100", @ANYRES32=r1], 0x20}, 0x1, 0xf000, 0x0, 0x4008000}, 0x4800)

1m54.750833553s ago: executing program 6 (id=1690):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a2"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000100)='./file0\x00')
utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffc000, 0x0)

1m54.601408003s ago: executing program 6 (id=1694):
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000012c0)={{0x12, 0x1, 0x310, 0x72, 0x1, 0x54, 0x10, 0x7d1, 0x3a08, 0x297, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x6, 0x90, 0x4, [{{0x9, 0x4, 0x47, 0x81, 0x2, 0x2e, 0x65, 0x22, 0xc, [], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x7, 0x1, 0xb5}}, {{0x9, 0x5, 0x87, 0x10, 0x400, 0xf6, 0x4, 0x41}}]}}]}}]}}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0})

1m53.350948798s ago: executing program 6 (id=1700):
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x10002000000, 0x242001)
open_tree(r1, 0x0, 0x1800)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt(r0, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10)

1m52.472483295s ago: executing program 6 (id=1702):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000100)='./file0\x00')
utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffc000, 0x0)

1m52.472161757s ago: executing program 6 (id=1703):
r0 = io_uring_setup(0x2623, &(0x7f00000001c0)={0x0, 0x45f8, 0x0, 0x0, 0x192})
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x2)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x8840)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000140)={0x0, 0x7ff})
recvmmsg(0xffffffffffffffff, &(0x7f0000005c80), 0x0, 0x10122, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m36.881337359s ago: executing program 56 (id=1703):
r0 = io_uring_setup(0x2623, &(0x7f00000001c0)={0x0, 0x45f8, 0x0, 0x0, 0x192})
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x2)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x8840)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000140)={0x0, 0x7ff})
recvmmsg(0xffffffffffffffff, &(0x7f0000005c80), 0x0, 0x10122, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m35.413197877s ago: executing program 3 (id=1758):
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})

1m35.332294844s ago: executing program 3 (id=1759):
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r0)

1m35.284104308s ago: executing program 3 (id=1760):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
syz_emit_ethernet(0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8864"], 0x0)

1m35.181604112s ago: executing program 3 (id=1761):
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
setpriority(0x2, 0x0, 0x7)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

1m34.894267063s ago: executing program 3 (id=1762):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x804, 0x6, "001bf100eeff000022c2000100000000002000"})
r1 = syz_open_pts(r0, 0x28101)
r2 = dup3(r1, r0, 0x0)
write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"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", 0xe00}}, 0xffffff5c)

1m34.796685116s ago: executing program 3 (id=1764):
syz_io_uring_setup(0x497, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
socket$inet6(0xa, 0x80003, 0xff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x840000000002, 0x3, 0xff)
setpriority(0x2, 0x0, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23, 0xfffffffc}, 0x18}}, 0x20008050)
syz_io_uring_submit(0x0, 0x0, 0x0)

1m27.594250738s ago: executing program 2 (id=1802):
r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000002080)=[{0x7, 0x211, 0x0, 0x0}, {0x50, 0x4000, 0x0, 0x0}, {0x401, 0x0, 0x0, 0x0}], 0x3})

1m26.034391565s ago: executing program 2 (id=1808):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/544, @ANYRES32=0x0], 0x230)
timer_delete(0x0)
socket(0x1d, 0x2, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r2, 0x0, 0x119)
syz_open_dev$hidraw(0x0, 0x0, 0x81)
close(0x3)

1m19.794080401s ago: executing program 57 (id=1764):
syz_io_uring_setup(0x497, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
socket$inet6(0xa, 0x80003, 0xff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x840000000002, 0x3, 0xff)
setpriority(0x2, 0x0, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23, 0xfffffffc}, 0x18}}, 0x20008050)
syz_io_uring_submit(0x0, 0x0, 0x0)

1m14.824001306s ago: executing program 8 (id=1842):
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
setpriority(0x2, 0x0, 0x7)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

1m14.752857692s ago: executing program 8 (id=1843):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000002c0)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f027, 0x0, '\x00', @p_u8=0x0}})
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001000c0080000000", @ANYRES32=0x0, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x50)

1m13.892571064s ago: executing program 8 (id=1844):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000080), 0x12)

1m12.614066742s ago: executing program 2 (id=1845):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04"], 0x3b)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x80004, 0x0, 0x9, 0x3c5b, 0x790, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000001, 0x242, 0x13, 0xe, 0x0, 0x80008071, 0x9, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0xb, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0xbac, 0x78, 0xea4, 0x0, 0x4, 0x7, 0xbbd9, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x10, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0xa, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0xfffc, 0x6, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x2, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7fb, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0xff, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa21, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0xc141, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x2000000fc)

1m11.731300961s ago: executing program 2 (id=1851):
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
setpriority(0x2, 0x0, 0x7)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

1m11.594166685s ago: executing program 2 (id=1854):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="b9af090000b8de000000ba000000000f3066bad00466b8000066ef66b8bd000f00d0c744240000000000c744240287000000c7442406000000000f011c2466baf80cb86a636685ef66bafc0c66ed2e660fc7b5ab000000f466baf80cb8669b628bef66bafc0cb0c2ee0fc731640f1f00", 0x70}], 0x1, 0x1b, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m11.432925545s ago: executing program 2 (id=1855):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)

1m10.836721872s ago: executing program 8 (id=1856):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffe}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, 0x0)

1m10.836243108s ago: executing program 8 (id=1858):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)

1m10.754066721s ago: executing program 8 (id=1859):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)

56.12894197s ago: executing program 58 (id=1855):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)

55.53175412s ago: executing program 59 (id=1859):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)

4.273176425s ago: executing program 9 (id=2468):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="ea", 0x1}, {&(0x7f00000003c0)="8c", 0x1}], 0x2)

2.452966604s ago: executing program 4 (id=2485):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)={0x3, 0x800000, 0x5, 0x2})
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r2])
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x2, 0x5, 0x28}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x3c, 0x0, 0xb97534d5fe9704cf, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0)

2.366299832s ago: executing program 4 (id=2486):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)={0x3, 0x800000, 0x5, 0x2})
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r2])
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x2, 0x5, 0x28}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)

2.365029817s ago: executing program 4 (id=2487):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000a0}, 0x4000004)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace$getregs(0xe, 0x0, 0x81, &(0x7f00000001c0)=""/132)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'})
sendfile(r1, r1, 0x0, 0x200000)

1.460428123s ago: executing program 4 (id=2498):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

1.388561937s ago: executing program 4 (id=2500):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000002c0)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f027, 0x0, '\x00', @p_u8=0x0}})
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50)

1.312744295s ago: executing program 7 (id=2503):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)={0x3, 0x800000, 0x5, 0x2})
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r2])
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x2, 0x5, 0x28}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x3c, r4, 0xb97534d5fe9704cf, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0)

1.312447473s ago: executing program 7 (id=2504):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

1.250318109s ago: executing program 7 (id=2505):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)={0x3, 0x800000, 0x5, 0x2})
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r2])
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x2, 0x5, 0x28}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)

1.248964055s ago: executing program 7 (id=2506):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000a0}, 0x4000004)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace$getregs(0xe, 0x0, 0x81, &(0x7f00000001c0)=""/132)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'})
sendfile(r1, r1, 0x0, 0x200000)

1.248718002s ago: executing program 9 (id=2507):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x3ff}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000)
sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0x0)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

1.102762318s ago: executing program 9 (id=2509):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, 0x0})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0)
r4 = syz_open_dev$media(0x0, 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, 0x0)
fchdir(r3)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, 0x2)
getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000)

912.422975ms ago: executing program 1 (id=2511):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})

812.990335ms ago: executing program 1 (id=2512):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

622.743091ms ago: executing program 1 (id=2513):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)={0x3, 0x800000, 0x5, 0x2})
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r2])
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x2, 0x5, 0x28}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x3c, r4, 0xb97534d5fe9704cf, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0)

510.915045ms ago: executing program 1 (id=2514):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

302.77989ms ago: executing program 1 (id=2515):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)={0x3, 0x800000, 0x5, 0x2})
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r2])
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x2, 0x5, 0x28}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)

242.291729ms ago: executing program 4 (id=2516):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0)

93.546144ms ago: executing program 1 (id=2517):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="ea", 0x1}, {&(0x7f00000003c0)="8c", 0x1}], 0x2)

69.485581ms ago: executing program 9 (id=2518):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x3ff}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000)
sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0x0)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

723.71µs ago: executing program 7 (id=2519):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

455.326µs ago: executing program 9 (id=2520):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

203.642µs ago: executing program 7 (id=2521):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})

0s ago: executing program 9 (id=2522):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)={0x3, 0x800000, 0x5, 0x2})
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r2])
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x3c, r5, 0xb97534d5fe9704cf, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0)

kernel console output (not intermixed with test programs):

llmulticast mode
[  460.717280][   T46] bridge_slave_1: left promiscuous mode
[  460.719118][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.731654][   T46] bridge_slave_0: left allmulticast mode
[  460.733601][   T46] bridge_slave_0: left promiscuous mode
[  460.735469][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.767596][   T46] bridge_slave_1: left allmulticast mode
[  460.769418][   T46] bridge_slave_1: left promiscuous mode
[  460.771252][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.777721][   T46] bridge_slave_0: left allmulticast mode
[  460.779516][   T46] bridge_slave_0: left promiscuous mode
[  460.781340][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.789345][   T46] bridge_slave_1: left allmulticast mode
[  460.791145][   T46] bridge_slave_1: left promiscuous mode
[  460.792960][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.800631][   T46] bridge_slave_0: left allmulticast mode
[  460.802435][   T46] bridge_slave_0: left promiscuous mode
[  460.804401][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.816477][   T46] bridge_slave_1: left allmulticast mode
[  460.818287][   T46] bridge_slave_1: left promiscuous mode
[  460.820102][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.831184][   T46] bridge_slave_0: left allmulticast mode
[  460.832962][   T46] bridge_slave_0: left promiscuous mode
[  460.835042][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.257681][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  461.268093][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  461.276983][   T46] bond0 (unregistering): Released all slaves
[  461.895402][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  461.901678][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  461.908086][   T46] bond0 (unregistering): Released all slaves
[  462.243924][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  462.251571][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  462.257284][   T46] bond0 (unregistering): Released all slaves
[  462.825499][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  462.833098][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  462.838759][   T46] bond0 (unregistering): Released all slaves
[  463.103863][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  463.114055][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  463.120643][   T46] bond0 (unregistering): Released all slaves
[  463.317038][   T46] tipc: Left network mode
[  463.660045][T12164] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  463.669747][T12164] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  463.688363][T12164] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  463.697273][T12164] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  463.766646][T12175] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  463.844384][T12175] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  463.850115][T12175] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  463.857798][T12175] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  464.411542][T12175] 8021q: adding VLAN 0 to HW filter on device bond0
[  464.417203][T12164] 8021q: adding VLAN 0 to HW filter on device bond0
[  464.432021][T12175] 8021q: adding VLAN 0 to HW filter on device team0
[  464.438648][T12164] 8021q: adding VLAN 0 to HW filter on device team0
[  464.449014][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.451283][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.455902][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.458215][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.512060][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.514367][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.520971][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.523296][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.638013][T12258] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  464.648662][T12258] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  464.705764][T12258] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  464.710938][T12258] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  464.826979][   T46] hsr_slave_0: left promiscuous mode
[  464.830151][   T46] hsr_slave_1: left promiscuous mode
[  464.832126][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.834928][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.839781][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.842066][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.865023][   T46] hsr_slave_0: left promiscuous mode
[  464.867573][   T46] hsr_slave_1: left promiscuous mode
[  464.869697][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.872179][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.878017][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.880298][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.893089][   T46] hsr_slave_0: left promiscuous mode
[  464.900742][   T46] hsr_slave_1: left promiscuous mode
[  464.902775][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.906580][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.913888][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.916161][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.928903][   T46] hsr_slave_0: left promiscuous mode
[  464.931455][   T46] hsr_slave_1: left promiscuous mode
[  464.938102][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.940367][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.944599][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.946877][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.963460][   T46] hsr_slave_0: left promiscuous mode
[  464.973469][   T46] hsr_slave_1: left promiscuous mode
[  464.975441][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.977731][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.982660][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.985293][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  465.112562][   T46] veth1_macvtap: left promiscuous mode
[  465.114387][   T46] veth0_macvtap: left promiscuous mode
[  465.116142][   T46] veth1_vlan: left promiscuous mode
[  465.117794][   T46] veth0_vlan: left promiscuous mode
[  465.132107][   T46] veth1_macvtap: left promiscuous mode
[  465.133899][   T46] veth0_macvtap: left promiscuous mode
[  465.135638][   T46] veth1_vlan: left promiscuous mode
[  465.137296][   T46] veth0_vlan: left promiscuous mode
[  465.147516][   T46] veth1_macvtap: left promiscuous mode
[  465.149245][   T46] veth0_macvtap: left promiscuous mode
[  465.150998][   T46] veth1_vlan: left promiscuous mode
[  465.152646][   T46] veth0_vlan: left promiscuous mode
[  465.162950][   T46] veth1_macvtap: left promiscuous mode
[  465.164767][   T46] veth0_macvtap: left promiscuous mode
[  465.166544][   T46] veth1_vlan: left promiscuous mode
[  465.168215][   T46] veth0_vlan: left promiscuous mode
[  465.178338][   T46] veth1_macvtap: left promiscuous mode
[  465.180083][   T46] veth0_macvtap: left promiscuous mode
[  465.181847][   T46] veth1_vlan: left promiscuous mode
[  465.183590][   T46] veth0_vlan: left promiscuous mode
[  466.176127][   T46] team0 (unregistering): Port device team_slave_1 removed
[  466.274581][   T46] team0 (unregistering): Port device team_slave_0 removed
[  467.754138][   T46] team0 (unregistering): Port device team_slave_1 removed
[  467.861207][   T46] team0 (unregistering): Port device team_slave_0 removed
[  469.276809][   T46] team0 (unregistering): Port device team_slave_1 removed
[  469.369316][   T46] team0 (unregistering): Port device team_slave_0 removed
[  470.821936][   T46] team0 (unregistering): Port device team_slave_1 removed
[  470.930469][   T46] team0 (unregistering): Port device team_slave_0 removed
[  472.395543][   T46] team0 (unregistering): Port device team_slave_1 removed
[  472.489064][   T46] team0 (unregistering): Port device team_slave_0 removed
[  473.333856][T12175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  473.431600][T12164] 8021q: adding VLAN 0 to HW filter on device batadv0
[  473.452973][T12258] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.471875][T12258] 8021q: adding VLAN 0 to HW filter on device team0
[  473.488589][T12175] veth0_vlan: entered promiscuous mode
[  473.497859][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.500120][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  473.517289][T12175] veth1_vlan: entered promiscuous mode
[  473.522540][T12164] veth0_vlan: entered promiscuous mode
[  473.552613][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.554962][ T6341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  473.568128][T12164] veth1_vlan: entered promiscuous mode
[  473.592234][T12257] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  473.598876][T12257] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  473.604652][T12257] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  473.614836][T12175] veth0_macvtap: entered promiscuous mode
[  473.617154][T12257] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  473.633510][T12175] veth1_macvtap: entered promiscuous mode
[  473.658849][T12175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  473.662817][T12175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  473.686452][   T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.689375][   T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.695176][T12164] veth0_macvtap: entered promiscuous mode
[  473.701353][   T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  473.705397][ T1150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  473.720798][T12164] veth1_macvtap: entered promiscuous mode
[  473.771934][T12164] batman_adv: batadv0: Interface activated: batadv_slave_0
[  473.791311][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  473.798971][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  473.802941][T12258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  473.807002][T12164] batman_adv: batadv0: Interface activated: batadv_slave_1
[  473.812317][T12257] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.826577][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  473.830415][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  473.857425][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.860210][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.871870][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  473.883967][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  473.909041][T12257] 8021q: adding VLAN 0 to HW filter on device team0
[  473.922410][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.924753][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state
[  473.945041][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.947296][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  473.988469][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  473.990940][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.022871][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.029428][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.064754][T12258] veth0_vlan: entered promiscuous mode
[  474.070479][T12258] veth1_vlan: entered promiscuous mode
[  474.091350][T12258] veth0_macvtap: entered promiscuous mode
[  474.106908][T12258] veth1_macvtap: entered promiscuous mode
[  474.139629][T12258] batman_adv: batadv0: Interface activated: batadv_slave_0
[  474.151982][T12258] batman_adv: batadv0: Interface activated: batadv_slave_1
[  474.167462][ T6341] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  474.182273][ T6341] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  474.191311][ T6341] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  474.198631][   T77] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.202651][T12257] 8021q: adding VLAN 0 to HW filter on device batadv0
[  474.258083][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.260525][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.278456][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.280922][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.364894][   T40] audit: type=1326 audit(1754580059.122:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12596 comm="syz.8.1468" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c39f8ebe9 code=0x0
[  474.496035][T12257] veth0_vlan: entered promiscuous mode
[  474.513853][T12257] veth1_vlan: entered promiscuous mode
[  474.545558][T12257] veth0_macvtap: entered promiscuous mode
[  474.553161][T12257] veth1_macvtap: entered promiscuous mode
[  474.569336][T12257] batman_adv: batadv0: Interface activated: batadv_slave_0
[  474.620204][T12257] batman_adv: batadv0: Interface activated: batadv_slave_1
[  474.646983][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  474.660088][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  474.690388][ T6341] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  474.694001][ T6341] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.714039][ T6341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.720767][ T6341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.744411][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.746896][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.817921][T12613] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1467'.
[  474.872718][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1469'.
[  475.470284][   T46] IPVS: stop unused estimator thread 0...
[  476.387692][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1478'.
[  476.504451][   T40] audit: type=1326 audit(1754580061.262:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12679 comm="syz.1.1480" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8389d8ebe9 code=0x0
[  478.673414][ T9675] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  478.839475][ T9675] usb 5-1: config 7 has an invalid interface number: 101 but max is 0
[  478.842027][ T9675] usb 5-1: config 7 has no interface number 0
[  478.846291][ T9675] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  478.849248][ T9675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.851881][ T9675] usb 5-1: Product: syz
[  478.853306][ T9675] usb 5-1: Manufacturer: syz
[  478.854818][ T9675] usb 5-1: SerialNumber: syz
[  479.268158][ T9675] as10x_usb: device has been detected
[  479.270267][ T9675] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  479.280608][ T9675] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  479.294608][   T40] audit: type=1400 audit(1754580064.052:548): avc:  denied  { firmware_load } for  pid=9675 comm="kworker/3:7" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  479.304728][ T9675] as10x_usb: error during firmware upload part1
[  479.306845][ T9675] Registered device Elgato EyeTV DTT Deluxe
[  479.375062][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1487'.
[  479.467358][ T9383] usb 5-1: USB disconnect, device number 3
[  479.482012][ T9383] Unregistered device Elgato EyeTV DTT Deluxe
[  479.487934][ T9383] as10x_usb: device has been disconnected
[  480.006481][   T40] audit: type=1326 audit(1754580064.762:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12849 comm="syz.0.1490" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ee138ebe9 code=0x0
[  481.772748][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1496'.
[  483.629569][   T40] audit: type=1326 audit(1754580068.382:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.1.1500" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8389d8ebe9 code=0x0
[  483.903326][ T6058] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  484.053323][ T6058] usb 5-1: Using ep0 maxpacket: 16
[  484.057065][ T6058] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  484.060578][ T6058] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  484.065481][ T6058] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  484.069833][ T6058] usb 5-1: config 0 interface 0 has no altsetting 0
[  484.071980][ T6058] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  484.075142][ T6058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.079351][ T6058] usb 5-1: config 0 descriptor??
[  484.690415][   T10] usb 5-1: USB disconnect, device number 4
[  486.377702][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1506'.
[  488.273919][   T40] audit: type=1326 audit(1754580073.032:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13183 comm="syz.0.1510" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ee138ebe9 code=0x0
[  489.409066][T13242] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1513'.
[  490.147493][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'.
[  490.433027][   T40] audit: type=1326 audit(1754580075.182:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13280 comm="syz.1.1519" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8389d8ebe9 code=0x0
[  491.331443][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'.
[  496.469086][ T5977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  496.473150][ T5977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  496.476387][ T5977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  496.479060][ T5977] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  496.481516][ T5977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  496.581688][T13526] chnl_net:caif_netlink_parms(): no params data found
[  496.659805][T13526] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.662184][T13526] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.665390][T13526] bridge_slave_0: entered allmulticast mode
[  496.668109][T13526] bridge_slave_0: entered promiscuous mode
[  496.671281][T13526] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.674218][T13526] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.676481][T13526] bridge_slave_1: entered allmulticast mode
[  496.679151][T13526] bridge_slave_1: entered promiscuous mode
[  496.737580][T13526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.742467][T13526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.782099][T13526] team0: Port device team_slave_0 added
[  496.786191][T13526] team0: Port device team_slave_1 added
[  496.821180][T13526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.824614][T13526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.832711][T13526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  496.837584][T13526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  496.839882][T13526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.848187][T13526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  496.892447][T13526] hsr_slave_0: entered promiscuous mode
[  496.895116][T13526] hsr_slave_1: entered promiscuous mode
[  496.897286][T13526] debugfs: 'hsr0' already exists in 'hsr'
[  496.899223][T13526] Cannot create hsr debugfs directory
[  497.487251][ T5332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  497.491096][ T5332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  497.496395][ T5332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  497.499183][ T5332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  497.502397][ T5332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  497.631291][T13526] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  497.664171][T13526] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  497.671949][T13576] chnl_net:caif_netlink_parms(): no params data found
[  497.679373][T13526] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  497.686925][T13526] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  497.815091][T13576] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.817422][T13576] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.819818][T13576] bridge_slave_0: entered allmulticast mode
[  497.823291][T13576] bridge_slave_0: entered promiscuous mode
[  497.833135][T13576] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.835477][T13576] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.837755][T13576] bridge_slave_1: entered allmulticast mode
[  497.840319][T13576] bridge_slave_1: entered promiscuous mode
[  497.900761][T13526] 8021q: adding VLAN 0 to HW filter on device bond0
[  497.906245][T13576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  497.917031][T13576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  497.937992][T13526] 8021q: adding VLAN 0 to HW filter on device team0
[  497.966093][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.968341][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  497.971537][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.973817][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  498.001834][T13576] team0: Port device team_slave_0 added
[  498.008256][T13576] team0: Port device team_slave_1 added
[  498.067410][T13576] batman_adv: batadv0: Adding interface: batadv_slave_0
[  498.069632][T13576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  498.080442][T13576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  498.091357][T13576] batman_adv: batadv0: Adding interface: batadv_slave_1
[  498.093990][T13576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  498.105148][T13576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  498.144294][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1526'.
[  498.226090][T13576] hsr_slave_0: entered promiscuous mode
[  498.228354][T13576] hsr_slave_1: entered promiscuous mode
[  498.230482][T13576] debugfs: 'hsr0' already exists in 'hsr'
[  498.232794][T13576] Cannot create hsr debugfs directory
[  498.510609][T13526] 8021q: adding VLAN 0 to HW filter on device batadv0
[  498.515111][ T5332] Bluetooth: hci2: command tx timeout
[  498.555023][T13526] veth0_vlan: entered promiscuous mode
[  498.560282][T13526] veth1_vlan: entered promiscuous mode
[  498.699822][T13526] veth0_macvtap: entered promiscuous mode
[  498.709161][T13526] veth1_macvtap: entered promiscuous mode
[  498.719175][T13526] batman_adv: batadv0: Interface activated: batadv_slave_0
[  498.792117][T13526] batman_adv: batadv0: Interface activated: batadv_slave_1
[  498.801983][   T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  498.808678][   T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  498.832450][   T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  498.843928][   T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  498.993061][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.998101][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  499.017951][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  499.021138][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  499.100228][T13576] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  499.111384][T13576] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  499.122220][T13576] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  499.128474][T13576] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  499.177700][T13576] 8021q: adding VLAN 0 to HW filter on device bond0
[  499.189052][T13576] 8021q: adding VLAN 0 to HW filter on device team0
[  499.197631][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.199920][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  499.203161][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.205539][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  499.385050][T13576] 8021q: adding VLAN 0 to HW filter on device batadv0
[  499.428713][   T40] audit: type=1326 audit(1754580084.182:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13684 comm="syz.0.1530" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ee138ebe9 code=0x0
[  499.544454][T13576] veth0_vlan: entered promiscuous mode
[  499.549305][T13576] veth1_vlan: entered promiscuous mode
[  499.556035][ T5332] Bluetooth: hci3: command tx timeout
[  499.574067][T13576] veth0_macvtap: entered promiscuous mode
[  499.577655][T13576] veth1_macvtap: entered promiscuous mode
[  499.588347][T13576] batman_adv: batadv0: Interface activated: batadv_slave_0
[  499.595228][T13576] batman_adv: batadv0: Interface activated: batadv_slave_1
[  499.601910][ T1150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.605717][ T6341] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.608939][ T6341] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.611746][ T6341] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.658797][ T6341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  499.666926][ T6341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  499.680668][ T6341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  499.683993][ T6341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.368521][T13747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'.
[  500.594341][ T5332] Bluetooth: hci2: command tx timeout
[  501.236226][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  501.238273][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  501.633547][ T5332] Bluetooth: hci3: command tx timeout
[  502.683431][ T5332] Bluetooth: hci2: command tx timeout
[  503.592011][T13894] ALSA: mixer_oss: invalid OSS volume 'u'
[  503.753316][ T5332] Bluetooth: hci3: command tx timeout
[  504.175205][   T40] audit: type=1326 audit(1754580088.932:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.3.1541" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbad2d8ebe9 code=0x0
[  504.243301][   T34] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  504.393448][   T34] usb 10-1: Using ep0 maxpacket: 32
[  504.396658][   T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  504.400286][   T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  504.403480][   T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  504.408093][   T34] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  504.411010][   T34] usb 10-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  504.413918][   T34] usb 10-1: Product: syz
[  504.415302][   T34] usb 10-1: Manufacturer: syz
[  504.416784][   T34] usb 10-1: SerialNumber: syz
[  504.423600][   T34] usb 10-1: config 0 descriptor??
[  504.630243][ T9726] usb 10-1: USB disconnect, device number 5
[  504.755886][ T5332] Bluetooth: hci2: command tx timeout
[  504.851027][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'.
[  504.926294][T13941] netlink: 'syz.0.1543': attribute type 3 has an invalid length.
[  505.793333][ T5332] Bluetooth: hci3: command tx timeout
[  506.844414][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'.
[  509.000624][T14109] netlink: 'syz.0.1557': attribute type 7 has an invalid length.
[  509.222741][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'.
[  509.478531][ T5977] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  509.482468][ T5977] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  509.486005][ T5977] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  509.488701][ T5977] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  509.491749][ T5977] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  509.590889][T14134] chnl_net:caif_netlink_parms(): no params data found
[  509.669103][T14134] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.671424][T14134] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.675009][T14134] bridge_slave_0: entered allmulticast mode
[  509.677656][T14134] bridge_slave_0: entered promiscuous mode
[  509.680759][T14134] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.683053][T14134] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.686348][T14134] bridge_slave_1: entered allmulticast mode
[  509.688949][T14134] bridge_slave_1: entered promiscuous mode
[  509.748788][T14134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  509.756410][T14134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.799574][T14134] team0: Port device team_slave_0 added
[  509.802876][T14134] team0: Port device team_slave_1 added
[  509.877470][T14134] batman_adv: batadv0: Adding interface: batadv_slave_0
[  509.879832][T14134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.887962][T14134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  509.892283][T14134] batman_adv: batadv0: Adding interface: batadv_slave_1
[  509.897686][T14134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.907582][T14134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.959675][T14134] hsr_slave_0: entered promiscuous mode
[  509.962155][T14134] hsr_slave_1: entered promiscuous mode
[  509.965402][T14134] debugfs: 'hsr0' already exists in 'hsr'
[  509.967281][T14134] Cannot create hsr debugfs directory
[  511.553491][ T5332] Bluetooth: hci4: command tx timeout
[  513.633309][ T5332] Bluetooth: hci4: command tx timeout
[  515.733833][ T5332] Bluetooth: hci4: command tx timeout
[  516.205524][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'.
[  517.274000][T14134] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  517.793341][ T5977] Bluetooth: hci4: command tx timeout
[  519.873301][ T5977] Bluetooth: hci4: command 0x0405 tx timeout
[  521.373934][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'.
[  529.489316][T14317] kernel read not supported for file /eth0 (pid: 14317 comm: syz.3.1578)
[  529.492312][   T40] audit: type=1800 audit(1754580114.242:555): pid=14317 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1578" name="eth0" dev="mqueue" ino=56833 res=0 errno=0
[  529.992383][   T40] audit: type=1326 audit(1754580114.742:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.3.1579" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbad2d8ebe9 code=0x0
[  535.137352][T14336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'.
[  537.538530][T14134] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  537.604518][T14284] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  537.607073][T14284] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  537.609582][T14284] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  537.619069][ T1252] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.619829][T14284] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  537.637847][T14284] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  537.639780][T14284] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  537.642888][T14134] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  537.658542][T14284] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  537.666249][T14134] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  537.674620][T14284] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  537.678345][T14284] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  537.709230][T14284] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  537.710929][T14134] 8021q: adding VLAN 0 to HW filter on device bond0
[  537.723193][T14134] 8021q: adding VLAN 0 to HW filter on device team0
[  537.821595][ T1252] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.839423][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.841687][ T6341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  537.856822][T12177] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  537.857223][ T5980] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  537.866230][ T5980] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  537.869730][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.870242][ T5980] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  537.871967][ T6341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  537.874786][ T5980] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  537.879475][ T5980] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  537.880430][T12177] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  537.891499][ T5980] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  537.894676][T12177] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  537.905664][ T5332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  539.633912][ T5332] Bluetooth: hci2: command 0x0c1a tx timeout
[  539.713464][ T5332] Bluetooth: hci4: command 0x0405 tx timeout
[  539.953354][ T5332] Bluetooth: hci7: command tx timeout
[  540.043413][ T5332] Bluetooth: hci0: command tx timeout
[  541.078740][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1592'.
[  541.713339][ T5332] Bluetooth: hci2: command 0x0c1a tx timeout
[  541.793310][ T5332] Bluetooth: hci4: command 0x0405 tx timeout
[  542.033386][ T5332] Bluetooth: hci7: command tx timeout
[  542.113329][ T5332] Bluetooth: hci0: command tx timeout
[  543.793380][ T5332] Bluetooth: hci2: command 0x0c1a tx timeout
[  543.873671][ T5332] Bluetooth: hci4: command 0x0405 tx timeout
[  544.113346][ T5332] Bluetooth: hci7: command tx timeout
[  544.193786][ T5332] Bluetooth: hci0: command tx timeout
[  546.193310][ T5332] Bluetooth: hci7: command tx timeout
[  546.273374][ T5332] Bluetooth: hci0: command tx timeout
[  551.674156][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1599'.
[  556.332038][T14442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1606'.
[  558.565854][T14348] chnl_net:caif_netlink_parms(): no params data found
[  558.645710][T14348] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.648660][T14348] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.650927][T14348] bridge_slave_0: entered allmulticast mode
[  558.653573][T14348] bridge_slave_0: entered promiscuous mode
[  558.657618][T14348] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.659832][T14348] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.662071][T14348] bridge_slave_1: entered allmulticast mode
[  558.665785][T14348] bridge_slave_1: entered promiscuous mode
[  562.676692][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  562.678699][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  570.190450][ T5977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  570.196310][ T5977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  570.200395][ T5977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  570.203990][ T5977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  570.206817][ T5977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  570.220231][ T1252] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.273369][ T5977] Bluetooth: hci1: command tx timeout
[  574.353423][ T5977] Bluetooth: hci1: command tx timeout
[  576.433444][ T5977] Bluetooth: hci1: command tx timeout
[  578.513454][ T5977] Bluetooth: hci1: command tx timeout
[  578.541655][T14348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  578.548750][T14348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.567672][T14462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1610'.
[  578.647041][ T1252] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.692421][T14348] team0: Port device team_slave_0 added
[  578.700389][T14348] team0: Port device team_slave_1 added
[  578.748131][T14348] batman_adv: batadv0: Adding interface: batadv_slave_0
[  578.750345][T14348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  578.758594][T14348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  578.778540][T14348] batman_adv: batadv0: Adding interface: batadv_slave_1
[  578.780764][T14348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  578.789755][T14348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  578.890048][T14348] hsr_slave_0: entered promiscuous mode
[  578.892348][T14348] hsr_slave_1: entered promiscuous mode
[  578.894697][T14348] debugfs: 'hsr0' already exists in 'hsr'
[  578.896514][T14348] Cannot create hsr debugfs directory
[  579.029947][T14471] chnl_net:caif_netlink_parms(): no params data found
[  579.073711][T14324] chnl_net:caif_netlink_parms(): no params data found
[  579.085126][ T1252] bridge_slave_1: left allmulticast mode
[  579.086987][ T1252] bridge_slave_1: left promiscuous mode
[  579.088829][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.115703][ T1252] bridge_slave_0: left allmulticast mode
[  579.120618][ T1252] bridge_slave_0: left promiscuous mode
[  579.142263][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.506459][ T1252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  579.515140][ T1252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  579.520273][ T1252] bond0 (unregistering): Released all slaves
[  579.633113][T14471] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.638085][T14471] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.641409][T14471] bridge_slave_0: entered allmulticast mode
[  579.645299][T14471] bridge_slave_0: entered promiscuous mode
[  579.648336][T14471] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.650583][T14471] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.652858][T14471] bridge_slave_1: entered allmulticast mode
[  579.655681][T14471] bridge_slave_1: entered promiscuous mode
[  579.811375][T14471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  579.817095][T14471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  580.046001][T14471] team0: Port device team_slave_0 added
[  580.087223][T14324] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.089495][T14324] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.091792][T14324] bridge_slave_0: entered allmulticast mode
[  580.095393][T14324] bridge_slave_0: entered promiscuous mode
[  580.099025][T14471] team0: Port device team_slave_1 added
[  580.131765][T14324] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.138218][T14324] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.140531][T14324] bridge_slave_1: entered allmulticast mode
[  580.144155][T14324] bridge_slave_1: entered promiscuous mode
[  580.165452][T14471] batman_adv: batadv0: Adding interface: batadv_slave_0
[  580.167706][T14471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  580.176526][T14471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  580.196773][T14324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  580.206438][T14471] batman_adv: batadv0: Adding interface: batadv_slave_1
[  580.208692][T14471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  580.216734][T14471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  580.221738][T14324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  580.287072][ T1252] hsr_slave_0: left promiscuous mode
[  580.289824][ T1252] hsr_slave_1: left promiscuous mode
[  580.291841][ T1252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  580.294833][ T1252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  580.297846][ T1252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  580.300215][ T1252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  580.325264][ T1252] veth1_macvtap: left promiscuous mode
[  580.327077][ T1252] veth0_macvtap: left promiscuous mode
[  580.328889][ T1252] veth1_vlan: left promiscuous mode
[  580.330571][ T1252] veth0_vlan: left promiscuous mode
[  581.170163][ T1252] team0 (unregistering): Port device team_slave_1 removed
[  581.277690][ T1252] team0 (unregistering): Port device team_slave_0 removed
[  581.711161][T14508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1614'.
[  582.032489][T14324] team0: Port device team_slave_0 added
[  582.037465][T14324] team0: Port device team_slave_1 added
[  582.151668][T14471] hsr_slave_0: entered promiscuous mode
[  582.157840][T14471] hsr_slave_1: entered promiscuous mode
[  582.159977][T14471] debugfs: 'hsr0' already exists in 'hsr'
[  582.161803][T14471] Cannot create hsr debugfs directory
[  582.246545][T14324] batman_adv: batadv0: Adding interface: batadv_slave_0
[  582.248787][T14324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  582.257833][T14324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  582.383159][T14324] batman_adv: batadv0: Adding interface: batadv_slave_1
[  582.387858][T14324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  582.397317][T14324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  582.566262][T14324] hsr_slave_0: entered promiscuous mode
[  582.568619][T14324] hsr_slave_1: entered promiscuous mode
[  582.570742][T14324] debugfs: 'hsr0' already exists in 'hsr'
[  582.572556][T14324] Cannot create hsr debugfs directory
[  582.766642][T14348] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  582.789350][T14348] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  582.888400][T14348] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  582.983744][T14348] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  583.086640][T14348] 8021q: adding VLAN 0 to HW filter on device bond0
[  583.106506][T14348] 8021q: adding VLAN 0 to HW filter on device team0
[  583.188441][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.190710][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  583.199350][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.201746][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  583.398078][ T1252] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.540969][T14471] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  583.547958][T14471] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  583.572497][ T1252] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.652382][T14471] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  583.658064][T14471] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  583.685182][ T1252] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.843424][ T1252] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.855624][T14348] 8021q: adding VLAN 0 to HW filter on device batadv0
[  583.949467][T14471] 8021q: adding VLAN 0 to HW filter on device bond0
[  583.968292][T14471] 8021q: adding VLAN 0 to HW filter on device team0
[  583.991570][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.993928][ T6356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  584.011879][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.014204][ T6356] bridge0: port 2(bridge_slave_1) entered forwarding state
[  584.075941][ T1252] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.130061][T14348] veth0_vlan: entered promiscuous mode
[  584.132658][T14324] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  584.144031][T14324] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  584.154995][T14324] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  584.181020][ T1252] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.190766][T14324] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  584.198505][T14348] veth1_vlan: entered promiscuous mode
[  584.275254][ T1252] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.287050][T14348] veth0_macvtap: entered promiscuous mode
[  584.295723][T14348] veth1_macvtap: entered promiscuous mode
[  584.307500][T14348] batman_adv: batadv0: Interface activated: batadv_slave_0
[  584.317248][T14471] 8021q: adding VLAN 0 to HW filter on device batadv0
[  584.325201][T14348] batman_adv: batadv0: Interface activated: batadv_slave_1
[  584.330392][T14324] 8021q: adding VLAN 0 to HW filter on device bond0
[  584.341108][ T1187] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  584.347126][   T46] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  584.350096][   T46] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  584.354446][T14324] 8021q: adding VLAN 0 to HW filter on device team0
[  584.377443][ T1252] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.385970][   T46] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  584.396142][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.398421][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  584.409085][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.411341][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  584.446293][T14471] veth0_vlan: entered promiscuous mode
[  584.462323][T14324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  584.466238][T14324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  584.478518][ T6356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.480960][ T6356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.484414][T14471] veth1_vlan: entered promiscuous mode
[  584.539642][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.542139][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.548207][T14471] veth0_macvtap: entered promiscuous mode
[  584.561624][T14471] veth1_macvtap: entered promiscuous mode
[  584.596546][T14471] batman_adv: batadv0: Interface activated: batadv_slave_0
[  584.601119][T14471] batman_adv: batadv0: Interface activated: batadv_slave_1
[  584.637865][ T1252] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.664464][ T1150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  584.679630][ T1150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  584.701384][ T1150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  584.705655][ T1150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  584.710560][T14324] 8021q: adding VLAN 0 to HW filter on device batadv0
[  584.780623][ T1252] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.812042][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.829164][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.850976][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.857839][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.960637][T14324] veth0_vlan: entered promiscuous mode
[  584.970402][T14324] veth1_vlan: entered promiscuous mode
[  584.995685][T14324] veth0_macvtap: entered promiscuous mode
[  585.000116][T14324] veth1_macvtap: entered promiscuous mode
[  585.018410][T14324] batman_adv: batadv0: Interface activated: batadv_slave_0
[  585.026037][T14324] batman_adv: batadv0: Interface activated: batadv_slave_1
[  585.032620][ T1150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  585.043150][ T1150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  585.059716][ T1150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  585.062579][ T1150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  585.120252][ T1252] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.166784][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.169297][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.195140][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'.
[  585.202514][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.205099][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.326230][ T1252] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.868364][ T1252] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.276314][   T40] audit: type=1400 audit(1754580171.022:557): avc:  denied  { create } for  pid=14692 comm="syz.2.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  586.531024][ T1252] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.798787][T14724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'.
[  586.801769][T14724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'.
[  586.913331][   T34] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  587.040306][ T1252] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.063462][   T34] usb 11-1: Using ep0 maxpacket: 32
[  587.066498][   T34] usb 11-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  587.069339][   T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.169674][   T34] usb 11-1: config 0 descriptor??
[  587.177326][   T34] as10x_usb: device has been detected
[  587.181064][   T34] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  587.198720][   T34] usb 11-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  587.210233][   T34] as10x_usb: error during firmware upload part1
[  587.212772][   T34] Registered device nBox DVB-T Dongle
[  587.332986][ T1252] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.834785][ T1252] bridge_slave_1: left allmulticast mode
[  587.836881][ T1252] bridge_slave_1: left promiscuous mode
[  587.839150][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.853039][ T1252] bridge_slave_0: left allmulticast mode
[  587.855508][ T1252] bridge_slave_0: left promiscuous mode
[  587.858001][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.870739][ T1252] bridge_slave_1: left allmulticast mode
[  587.872670][ T1252] bridge_slave_1: left promiscuous mode
[  587.876955][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.889459][ T1252] bridge_slave_0: left allmulticast mode
[  587.892501][ T1252] bridge_slave_0: left promiscuous mode
[  587.929312][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.956828][ T1252] bridge_slave_1: left allmulticast mode
[  587.958798][ T1252] bridge_slave_1: left promiscuous mode
[  587.960744][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.976144][ T1252] bridge_slave_0: left allmulticast mode
[  587.978124][ T1252] bridge_slave_0: left promiscuous mode
[  588.055778][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.070638][ T1252] bridge_slave_1: left allmulticast mode
[  588.072610][ T1252] bridge_slave_1: left promiscuous mode
[  588.074899][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.083393][ T1252] bridge_slave_0: left allmulticast mode
[  588.085335][ T1252] bridge_slave_0: left promiscuous mode
[  588.087403][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.097689][ T1252] bridge_slave_1: left allmulticast mode
[  588.099545][ T1252] bridge_slave_1: left promiscuous mode
[  588.101583][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.317247][ T1252] bridge_slave_0: left allmulticast mode
[  588.319253][ T1252] bridge_slave_0: left promiscuous mode
[  588.321191][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.706903][   T40] audit: type=1400 audit(1754580429.459:558): avc:  denied  { write } for  pid=14752 comm="syz.2.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  588.762567][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'.
[  588.918482][ T1252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  588.925674][ T1252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  588.935118][ T1252] bond0 (unregistering): Released all slaves
[  589.319678][ T1252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  589.333524][ T1252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  589.344690][ T1252] bond0 (unregistering): Released all slaves
[  589.683039][ T1252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  589.691250][ T1252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  589.700275][ T1252] bond0 (unregistering): Released all slaves
[  589.707813][    T9] usb 11-1: USB disconnect, device number 7
[  589.719968][    T9] Unregistered device nBox DVB-T Dongle
[  589.725895][    T9] as10x_usb: device has been disconnected
[  590.154278][ T1252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  590.167215][ T1252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  590.172336][ T1252] bond0 (unregistering): Released all slaves
[  590.202272][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1643'.
[  590.228333][T14782] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  590.601574][ T1252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  590.610768][ T1252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  590.617381][ T1252] bond0 (unregistering): Released all slaves
[  590.782617][T14790] bond0: option ad_select: unable to set because the bond device is up
[  591.050733][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'.
[  591.341480][T14806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1653'.
[  591.344623][T14806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1653'.
[  591.347408][T14806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1653'.
[  591.350184][T14806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1653'.
[  591.362627][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1652'.
[  592.214081][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'.
[  592.254791][T14853] IPv6: Can't replace route, no match found
[  592.745468][ T1252] hsr_slave_0: left promiscuous mode
[  592.750959][ T1252] hsr_slave_1: left promiscuous mode
[  592.757843][ T1252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  592.768159][ T1252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  592.800306][ T1252] hsr_slave_0: left promiscuous mode
[  592.806560][ T1252] hsr_slave_1: left promiscuous mode
[  592.808563][ T1252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  592.810856][ T1252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  592.817009][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1667'.
[  592.852394][ T1252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  592.857664][ T1252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  592.897182][ T1252] hsr_slave_0: left promiscuous mode
[  592.901640][ T1252] hsr_slave_1: left promiscuous mode
[  592.903872][ T1252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  592.906564][ T1252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  592.911296][ T1252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  592.913960][ T1252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  592.946768][ T1252] hsr_slave_0: left promiscuous mode
[  592.952839][ T1252] hsr_slave_1: left promiscuous mode
[  592.963624][ T1252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  592.973696][ T1252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  592.996114][ T1252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  593.002299][ T1252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  593.035413][ T1252] hsr_slave_0: left promiscuous mode
[  593.041531][ T1252] hsr_slave_1: left promiscuous mode
[  593.043622][ T1252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  593.045947][ T1252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  593.063759][ T1252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  593.066100][ T1252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  593.197718][ T1252] veth1_macvtap: left promiscuous mode
[  593.199524][ T1252] veth0_macvtap: left promiscuous mode
[  593.201312][ T1252] veth1_vlan: left promiscuous mode
[  593.203008][ T1252] veth0_vlan: left promiscuous mode
[  593.220539][ T1252] veth1_macvtap: left promiscuous mode
[  593.222391][ T1252] veth0_macvtap: left promiscuous mode
[  593.231150][ T1252] veth1_vlan: left promiscuous mode
[  593.232965][ T1252] veth0_vlan: left promiscuous mode
[  593.253166][ T1252] veth1_macvtap: left promiscuous mode
[  593.255493][ T1252] veth0_macvtap: left promiscuous mode
[  593.257366][ T1252] veth1_vlan: left promiscuous mode
[  593.261127][ T1252] veth0_vlan: left promiscuous mode
[  593.277181][ T1252] veth1_macvtap: left promiscuous mode
[  593.279024][ T1252] veth0_macvtap: left promiscuous mode
[  593.280815][ T1252] veth1_vlan: left promiscuous mode
[  593.282587][ T1252] veth0_vlan: left promiscuous mode
[  593.415658][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'.
[  593.928755][ T1252] team0 (unregistering): Port device team_slave_1 removed
[  594.060534][ T1252] team0 (unregistering): Port device team_slave_0 removed
[  595.578776][ T1252] team0 (unregistering): Port device team_slave_1 removed
[  595.675914][ T1252] team0 (unregistering): Port device team_slave_0 removed
[  597.143103][T14918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'.
[  597.467989][ T1252] team0 (unregistering): Port device team_slave_1 removed
[  597.619845][ T1252] team0 (unregistering): Port device team_slave_0 removed
[  598.712669][T14929] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1687'.
[  599.721120][ T1252] team0 (unregistering): Port device team_slave_1 removed
[  599.819996][ T1252] team0 (unregistering): Port device team_slave_0 removed
[  601.312548][ T1252] team0 (unregistering): Port device team_slave_1 removed
[  601.425817][ T1252] team0 (unregistering): Port device team_slave_0 removed
[  602.198450][   T40] audit: type=1400 audit(1754580442.949:559): avc:  denied  { create } for  pid=14933 comm="syz.3.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  602.297186][   T40] audit: type=1400 audit(1754580443.049:560): avc:  denied  { create } for  pid=14933 comm="syz.3.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  602.326538][   T40] audit: type=1400 audit(1754580443.059:561): avc:  denied  { sys_admin } for  pid=14933 comm="syz.3.1689" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  602.387129][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1693'.
[  602.551880][T10351] libceph: connect (1)[c::]:6789 error -101
[  602.558213][T10351] libceph: mon0 (1)[c::]:6789 connect error
[  602.603484][T10351] libceph: connect (1)[c::]:6789 error -101
[  602.605473][T10351] libceph: mon0 (1)[c::]:6789 connect error
[  602.706748][ T6350] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  602.813699][   T24] libceph: connect (1)[c::]:6789 error -101
[  602.815726][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  602.855261][ T6350] usb 11-1: Using ep0 maxpacket: 16
[  602.859385][ T6350] usb 11-1: unable to get BOS descriptor or descriptor too short
[  602.864000][ T6350] usb 11-1: config 7 has an invalid interface number: 71 but max is 0
[  602.868394][ T6350] usb 11-1: config 7 has no interface number 0
[  602.873425][ T6350] usb 11-1: config 7 interface 71 altsetting 129 endpoint 0x87 has invalid maxpacket 1024, setting to 64
[  602.876910][ T6350] usb 11-1: config 7 interface 71 has no altsetting 0
[  602.890322][   T24] libceph: connect (1)[c::]:6789 error -101
[  602.892532][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  602.894855][ T6350] usb 11-1: New USB device found, idVendor=07d1, idProduct=3a08, bcdDevice= 2.97
[  602.897746][ T6350] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.900384][ T6350] usb 11-1: Product: syz
[  602.901749][ T6350] usb 11-1: Manufacturer: syz
[  602.903516][ T6350] usb 11-1: SerialNumber: syz
[  603.128058][ T6350] usb 11-1: Could not find all expected endpoints
[  603.133953][ T6350] usb 11-1: USB disconnect, device number 8
[  603.333538][ T6350] libceph: connect (1)[c::]:6789 error -101
[  603.335533][ T6350] libceph: mon0 (1)[c::]:6789 connect error
[  603.369756][T14969] ceph: No mds server is up or the cluster is laggy
[  603.372075][T14974] ceph: No mds server is up or the cluster is laggy
[  604.644776][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'.
[  606.154309][ T6058] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  606.679261][T15166] Failed to get privilege flags for destination (handle=0x2:0x0)
[  606.919843][T15171] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1713'.
[  607.235543][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1714'.
[  607.308369][ T6058] usb 7-1: unable to get BOS descriptor or descriptor too short
[  607.312131][ T6058] usb 7-1: unable to read config index 0 descriptor/start: -71
[  607.333270][ T6058] usb 7-1: can't read configurations, error -71
[  608.453441][ T6058] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  608.613390][ T6058] usb 7-1: Using ep0 maxpacket: 8
[  608.616778][ T6058] usb 7-1: unable to get BOS descriptor or descriptor too short
[  608.620807][ T6058] usb 7-1: config 4 interface 0 has no altsetting 0
[  608.626123][ T6058] usb 7-1: string descriptor 0 read error: -22
[  608.628248][ T6058] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  608.631114][ T6058] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  608.638055][ T6058] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  608.649636][ T6058] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  608.660661][ T6058] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  608.662989][ T6058] usb 7-1: media controller created
[  608.674629][ T6058] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  608.840563][ T6058] zl10353_read_register: readreg error (reg=127, ret==0)
[  608.877786][ T6058] usb 7-1: USB disconnect, device number 5
[  610.704642][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1724'.
[  611.756030][   T40] audit: type=1400 audit(1754580452.509:562): avc:  denied  { connect } for  pid=15378 comm="syz.3.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  614.202885][   T40] audit: type=1400 audit(1754580454.949:563): avc:  denied  { read } for  pid=15462 comm="syz.3.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  614.758194][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'.
[  614.927534][T15462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  616.361878][T15529] ALSA: mixer_oss: invalid OSS volume 'u'
[  618.154340][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'.
[  620.223383][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1753'.
[  620.291748][ T5332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  620.297957][ T5332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  620.301222][ T5332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  620.305892][ T5332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  620.308631][ T5332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  620.454351][T15651] chnl_net:caif_netlink_parms(): no params data found
[  620.735119][T15651] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.737382][T15651] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.739642][T15651] bridge_slave_0: entered allmulticast mode
[  620.742437][T15651] bridge_slave_0: entered promiscuous mode
[  620.746875][T15651] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.749152][T15651] bridge0: port 2(bridge_slave_1) entered disabled state
[  620.751403][T15651] bridge_slave_1: entered allmulticast mode
[  620.754889][T15651] bridge_slave_1: entered promiscuous mode
[  620.795579][T15651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  620.800282][T15651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  620.876584][T15651] team0: Port device team_slave_0 added
[  620.880623][T15651] team0: Port device team_slave_1 added
[  620.931503][T15651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  620.933924][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  620.941910][T15651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  620.946790][T15651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  620.949046][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  620.959846][T15651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  621.002373][T15651] hsr_slave_0: entered promiscuous mode
[  621.004758][T15651] hsr_slave_1: entered promiscuous mode
[  621.006886][T15651] debugfs: 'hsr0' already exists in 'hsr'
[  621.008700][T15651] Cannot create hsr debugfs directory
[  621.926831][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'.
[  622.324202][   T46] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.353389][ T5332] Bluetooth: hci0: command tx timeout
[  622.358581][T15651] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  622.370391][T15651] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  622.380539][T15651] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  622.391206][T15651] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  622.422281][   T46] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.479730][T15651] 8021q: adding VLAN 0 to HW filter on device bond0
[  622.489380][T15651] 8021q: adding VLAN 0 to HW filter on device team0
[  622.499687][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  622.502021][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  622.525875][   T46] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.540059][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  622.542405][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  622.668124][   T46] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.739852][T15651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  622.801025][   T46] bridge_slave_1: left allmulticast mode
[  622.805344][   T46] bridge_slave_1: left promiscuous mode
[  622.808743][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  622.818476][   T46] bridge_slave_0: left allmulticast mode
[  622.822484][   T46] bridge_slave_0: left promiscuous mode
[  622.825332][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.173641][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  623.181448][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  623.187002][   T46] bond0 (unregistering): Released all slaves
[  623.265935][T15651] veth0_vlan: entered promiscuous mode
[  623.271207][T15651] veth1_vlan: entered promiscuous mode
[  623.347901][T15651] veth0_macvtap: entered promiscuous mode
[  623.351793][T15651] veth1_macvtap: entered promiscuous mode
[  623.363681][T15651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  623.373045][T15651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  623.384129][ T6356] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  623.410039][ T6356] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  623.475516][ T6356] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  623.486194][ T6356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  623.540685][   T46] hsr_slave_0: left promiscuous mode
[  623.545961][   T46] hsr_slave_1: left promiscuous mode
[  623.548023][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  623.550362][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  623.556813][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  623.559126][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  623.585824][   T46] veth1_macvtap: left promiscuous mode
[  623.587698][   T46] veth0_macvtap: left promiscuous mode
[  623.589535][   T46] veth1_vlan: left promiscuous mode
[  623.591221][   T46] veth0_vlan: left promiscuous mode
[  624.127404][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  624.129429][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  624.433590][ T5332] Bluetooth: hci0: command tx timeout
[  624.950794][   T40] audit: type=1400 audit(1754580465.699:564): avc:  denied  { bind } for  pid=15797 comm="syz.2.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  624.984972][   T46] team0 (unregistering): Port device team_slave_1 removed
[  625.108470][   T46] team0 (unregistering): Port device team_slave_0 removed
[  625.956893][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.965801][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.981495][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.985724][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  626.513830][ T5332] Bluetooth: hci0: command tx timeout
[  626.732589][   T40] audit: type=1400 audit(1754580467.479:565): avc:  denied  { mount } for  pid=15832 comm="syz.7.1778" name="/" dev="autofs" ino=63285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  627.279528][   T40] audit: type=1400 audit(1754580468.029:566): avc:  denied  { unmount } for  pid=14348 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  627.365070][T15890] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1781'.
[  627.369262][T15890] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1781'.
[  627.608395][T15909] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1785'.
[  627.612014][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1785'.
[  628.162828][T15937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1788'.
[  628.593595][ T5332] Bluetooth: hci0: command tx timeout
[  629.643478][T14982] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  629.803334][T14982] usb 7-1: Using ep0 maxpacket: 16
[  629.808791][T14982] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  629.811669][T14982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.816440][T14982] usb 7-1: Product: syz
[  629.817806][T14982] usb 7-1: Manufacturer: syz
[  629.819266][T14982] usb 7-1: SerialNumber: syz
[  629.822760][T14982] usb 7-1: config 0 descriptor??
[  630.231270][T14982] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  630.235872][T14982] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  630.240025][T14982] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  630.242642][T14982] usb 7-1: media controller created
[  630.256133][T14982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  630.435568][T14982] zl10353_read_register: readreg error (reg=127, ret==0)
[  630.439649][T14982] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  630.442191][T14982] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  630.447351][T14982] usb 7-1: USB disconnect, device number 6
[  630.470871][T14982] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  630.913496][ T5977] Bluetooth: hci0: command 0x0405 tx timeout
[  632.993336][ T5977] Bluetooth: hci0: command 0x0405 tx timeout
[  635.539437][   T40] audit: type=1326 audit(1754580476.289:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16271 comm="syz.7.1818" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2762d8ebe9 code=0x0
[  637.353069][ T5977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  637.356857][ T5977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  637.359691][ T5977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  637.362873][ T5977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  637.366208][ T5977] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  637.463542][T16285] chnl_net:caif_netlink_parms(): no params data found
[  637.530905][T16285] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.534055][T16285] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.536418][T16285] bridge_slave_0: entered allmulticast mode
[  637.539144][T16285] bridge_slave_0: entered promiscuous mode
[  637.544200][T16285] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.546549][T16285] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.548911][T16285] bridge_slave_1: entered allmulticast mode
[  637.551562][T16285] bridge_slave_1: entered promiscuous mode
[  637.587263][T16285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  637.592506][T16285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  637.628854][T16285] team0: Port device team_slave_0 added
[  637.632083][T16285] team0: Port device team_slave_1 added
[  637.668408][T16285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  637.670462][T16285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  637.677666][T16285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  637.681574][T16285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  637.683718][T16285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  637.690816][T16285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  637.736419][T16285] hsr_slave_0: entered promiscuous mode
[  637.739038][T16285] hsr_slave_1: entered promiscuous mode
[  637.741124][T16285] debugfs: 'hsr0' already exists in 'hsr'
[  637.742887][T16285] Cannot create hsr debugfs directory
[  638.394576][T16285] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  638.401328][T16285] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  638.415207][T16285] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  638.423113][T16285] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  638.446053][T16285] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.448375][T16285] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.450732][T16285] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.452962][T16285] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.480895][T16285] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.490130][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.497823][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.518522][T16285] 8021q: adding VLAN 0 to HW filter on device team0
[  638.524534][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.526690][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.532446][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.534695][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.649160][T16285] 8021q: adding VLAN 0 to HW filter on device batadv0
[  638.781684][T16285] veth0_vlan: entered promiscuous mode
[  638.788333][T16285] veth1_vlan: entered promiscuous mode
[  638.806683][T16285] veth0_macvtap: entered promiscuous mode
[  638.810418][T16285] veth1_macvtap: entered promiscuous mode
[  638.819876][T16285] batman_adv: batadv0: Interface activated: batadv_slave_0
[  638.831442][T16285] batman_adv: batadv0: Interface activated: batadv_slave_1
[  638.842167][ T6357] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  638.847507][ T6357] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  638.856491][ T6357] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  638.859938][ T6357] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  638.899152][ T6357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.902277][ T6357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  638.919475][ T6357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.921786][ T6357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.394804][ T5977] Bluetooth: hci3: command tx timeout
[  641.418578][   T40] audit: type=1400 audit(1754580482.169:568): avc:  denied  { append } for  pid=16487 comm="syz.8.1835" name="pfkey" dev="proc" ino=4026534266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  641.473337][ T5977] Bluetooth: hci3: command tx timeout
[  643.553671][ T5977] Bluetooth: hci3: command tx timeout
[  645.466553][T16574] kvm: emulating exchange as write
[  645.633386][ T5977] Bluetooth: hci3: command tx timeout
[  648.184429][T16616] 9pnet_fd: Insufficient options for proto=fd
[  661.203843][T12177] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  661.208135][T12177] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  661.210942][T12177] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  661.219739][T12177] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  661.222624][T12177] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  661.580986][ T6356] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.660111][ T5332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  661.671058][ T5332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  661.681319][ T5332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  661.684848][ T5332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  661.689000][ T5332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  661.786719][ T6356] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.945408][T16644] chnl_net:caif_netlink_parms(): no params data found
[  662.035376][ T5332] Bluetooth: hci7: command 0x0406 tx timeout
[  662.050085][ T6356] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.088863][T16662] chnl_net:caif_netlink_parms(): no params data found
[  662.119719][T16644] bridge0: port 1(bridge_slave_0) entered blocking state
[  662.122046][T16644] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.124853][T16644] bridge_slave_0: entered allmulticast mode
[  662.127581][T16644] bridge_slave_0: entered promiscuous mode
[  662.131433][T16644] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.133834][T16644] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.136108][T16644] bridge_slave_1: entered allmulticast mode
[  662.142040][T16644] bridge_slave_1: entered promiscuous mode
[  662.246324][ T6356] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.295534][T16644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  662.302815][T16644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  662.366570][T16644] team0: Port device team_slave_0 added
[  662.386035][T16662] bridge0: port 1(bridge_slave_0) entered blocking state
[  662.388415][T16662] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.390660][T16662] bridge_slave_0: entered allmulticast mode
[  662.393430][T16662] bridge_slave_0: entered promiscuous mode
[  662.397031][T16644] team0: Port device team_slave_1 added
[  662.417734][T16662] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.420077][T16662] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.422330][T16662] bridge_slave_1: entered allmulticast mode
[  662.425216][T16662] bridge_slave_1: entered promiscuous mode
[  662.500922][T16644] batman_adv: batadv0: Adding interface: batadv_slave_0
[  662.503141][T16644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  662.511667][T16644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  662.529688][T16662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  662.534377][T16662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  662.537591][T16644] batman_adv: batadv0: Adding interface: batadv_slave_1
[  662.539770][T16644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  662.547863][T16644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  662.665296][T16644] hsr_slave_0: entered promiscuous mode
[  662.667656][T16644] hsr_slave_1: entered promiscuous mode
[  662.669814][T16644] debugfs: 'hsr0' already exists in 'hsr'
[  662.671629][T16644] Cannot create hsr debugfs directory
[  662.674457][T16662] team0: Port device team_slave_0 added
[  662.678400][T16662] team0: Port device team_slave_1 added
[  662.696572][ T6356] bridge_slave_1: left allmulticast mode
[  662.700785][ T6356] bridge_slave_1: left promiscuous mode
[  662.703675][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.716631][ T6356] bridge_slave_0: left allmulticast mode
[  662.718852][ T6356] bridge_slave_0: left promiscuous mode
[  662.721198][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.080990][ T6356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  663.092612][ T6356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  663.098920][ T6356] bond0 (unregistering): Released all slaves
[  663.215983][T16662] batman_adv: batadv0: Adding interface: batadv_slave_0
[  663.218244][T16662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  663.226261][T16662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  663.233591][ T5977] Bluetooth: hci2: command tx timeout
[  663.266538][T16662] batman_adv: batadv0: Adding interface: batadv_slave_1
[  663.268822][T16662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  663.277608][T16662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  663.432402][T16662] hsr_slave_0: entered promiscuous mode
[  663.434810][T16662] hsr_slave_1: entered promiscuous mode
[  663.436961][T16662] debugfs: 'hsr0' already exists in 'hsr'
[  663.438750][T16662] Cannot create hsr debugfs directory
[  663.715480][ T5977] Bluetooth: hci1: command tx timeout
[  665.261737][ T6356] hsr_slave_0: left promiscuous mode
[  665.264525][ T6356] hsr_slave_1: left promiscuous mode
[  665.266489][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  665.268817][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  665.275938][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  665.278246][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  665.306415][ T6356] veth1_macvtap: left promiscuous mode
[  665.308284][ T6356] veth0_macvtap: left promiscuous mode
[  665.310139][ T6356] veth1_vlan: left promiscuous mode
[  665.311892][ T6356] veth0_vlan: left promiscuous mode
[  665.313501][ T5977] Bluetooth: hci2: command tx timeout
[  665.793295][ T5977] Bluetooth: hci1: command tx timeout
[  666.148796][ T6356] team0 (unregistering): Port device team_slave_1 removed
[  666.248859][ T6356] team0 (unregistering): Port device team_slave_0 removed
[  667.248194][T16760] wg2: entered promiscuous mode
[  667.249771][T16760] wg2: entered allmulticast mode
[  667.394176][ T5977] Bluetooth: hci2: command tx timeout
[  667.462651][   T40] audit: type=1400 audit(1754580508.209:569): avc:  denied  { relabelfrom } for  pid=16772 comm="syz.4.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  667.474208][   T40] audit: type=1400 audit(1754580508.209:570): avc:  denied  { relabelto } for  pid=16772 comm="syz.4.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  667.739702][T16644] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  667.859537][T16644] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  667.869962][T16644] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  667.873365][ T5977] Bluetooth: hci1: command tx timeout
[  667.876297][T16644] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  667.982801][T16644] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.992028][T16644] 8021q: adding VLAN 0 to HW filter on device team0
[  667.997309][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.999656][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.005759][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.008132][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.226741][ T6356] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.316802][T16662] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  668.329662][T16662] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  668.336012][T16662] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  668.378774][ T6356] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.399071][T16644] 8021q: adding VLAN 0 to HW filter on device batadv0
[  668.401783][T16662] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  668.454517][ T6356] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.476331][T16662] 8021q: adding VLAN 0 to HW filter on device bond0
[  668.489011][T16662] 8021q: adding VLAN 0 to HW filter on device team0
[  668.494809][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.497109][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.503060][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.505361][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.525339][ T6356] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.617365][T16644] veth0_vlan: entered promiscuous mode
[  668.660758][T16644] veth1_vlan: entered promiscuous mode
[  668.720092][ T6356] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.792443][T16662] 8021q: adding VLAN 0 to HW filter on device batadv0
[  668.800209][T16644] veth0_macvtap: entered promiscuous mode
[  668.833774][ T6356] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.847170][T16644] veth1_macvtap: entered promiscuous mode
[  668.984144][ T6356] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.997712][T16644] batman_adv: batadv0: Interface activated: batadv_slave_0
[  669.018834][T16644] batman_adv: batadv0: Interface activated: batadv_slave_1
[  669.026142][T16849] wg2: entered promiscuous mode
[  669.027798][T16849] wg2: entered allmulticast mode
[  669.068916][ T6356] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.075423][ T1187] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  669.081767][ T1187] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  669.086529][T16662] veth0_vlan: entered promiscuous mode
[  669.096485][ T1187] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  669.099311][ T1187] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  669.131927][T16662] veth1_vlan: entered promiscuous mode
[  669.209150][T16662] veth0_macvtap: entered promiscuous mode
[  669.212875][T16662] veth1_macvtap: entered promiscuous mode
[  669.232119][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.238350][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.286578][ T1252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.288575][T16662] batman_adv: batadv0: Interface activated: batadv_slave_0
[  669.289040][ T1252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.307611][T16662] batman_adv: batadv0: Interface activated: batadv_slave_1
[  669.327715][ T1252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  669.360228][T16872] 9pnet_fd: Insufficient options for proto=fd
[  669.397979][ T1252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  669.401525][ T6356] bridge_slave_1: left allmulticast mode
[  669.406429][ T6356] bridge_slave_1: left promiscuous mode
[  669.409432][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.416890][ T6356] bridge_slave_0: left allmulticast mode
[  669.420908][ T6356] bridge_slave_0: left promiscuous mode
[  669.425212][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.443503][ T6356] bridge_slave_1: left allmulticast mode
[  669.445525][ T6356] bridge_slave_1: left promiscuous mode
[  669.447432][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.471817][ T6356] bridge_slave_0: left allmulticast mode
[  669.473519][ T5977] Bluetooth: hci2: command tx timeout
[  669.489746][ T6356] bridge_slave_0: left promiscuous mode
[  669.491601][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.953378][ T5977] Bluetooth: hci1: command tx timeout
[  670.076720][ T6356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  670.083073][ T6356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  670.087431][ T6356] bond0 (unregistering): Released all slaves
[  670.347389][T16895] 9pnet_fd: Insufficient options for proto=fd
[  670.529844][ T6356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  670.542397][ T6356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  670.554361][ T6356] bond0 (unregistering): Released all slaves
[  670.577865][ T1252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.581374][ T1252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.698600][ T1252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.701083][ T1252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.731307][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.736122][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.812251][T16932] 9pnet_fd: Insufficient options for proto=fd
[  671.361418][T16969] 9pnet_fd: Insufficient options for proto=fd
[  671.755403][T16986] pim6reg1: entered promiscuous mode
[  671.757135][T16986] pim6reg1: entered allmulticast mode
[  671.837376][T16999] 9pnet_fd: Insufficient options for proto=fd
[  671.870380][ T6356] hsr_slave_0: left promiscuous mode
[  671.879148][ T6356] hsr_slave_1: left promiscuous mode
[  671.885425][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  671.887754][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  671.900069][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  671.904198][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  671.926779][ T6356] hsr_slave_0: left promiscuous mode
[  671.929593][ T6356] hsr_slave_1: left promiscuous mode
[  671.931710][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  671.936630][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  671.944862][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  671.947307][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  672.006025][ T6356] veth1_macvtap: left promiscuous mode
[  672.008450][ T6356] veth0_macvtap: left promiscuous mode
[  672.010850][ T6356] veth1_vlan: left promiscuous mode
[  672.012713][ T6356] veth0_vlan: left promiscuous mode
[  672.045581][ T6356] veth1_macvtap: left promiscuous mode
[  672.047468][ T6356] veth0_macvtap: left promiscuous mode
[  672.049344][ T6356] veth1_vlan: left promiscuous mode
[  672.051106][ T6356] veth0_vlan: left promiscuous mode
[  673.356158][ T6356] team0 (unregistering): Port device team_slave_1 removed
[  673.488540][ T6356] team0 (unregistering): Port device team_slave_0 removed
[  673.904660][T17024] 9pnet_fd: Insufficient options for proto=fd
[  675.303926][ T6356] team0 (unregistering): Port device team_slave_1 removed
[  675.406188][ T6356] team0 (unregistering): Port device team_slave_0 removed
[  676.136744][T17033] pim6reg1: entered promiscuous mode
[  676.138473][T17033] pim6reg1: entered allmulticast mode
[  676.191486][T17046] cgroup: fork rejected by pids controller in /syz7
[  676.330774][T17059] 9pnet_fd: Insufficient options for proto=fd
[  676.361699][T17062] veth0_vlan: entered allmulticast mode
[  676.780592][ T5332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  676.785108][ T5332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  676.789081][ T5332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  676.797953][ T5332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  676.806715][ T5332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  678.561970][T17094] chnl_net:caif_netlink_parms(): no params data found
[  678.576493][T17121] 9pnet_fd: Insufficient options for proto=fd
[  678.682777][ T6356] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.780978][T17094] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.783394][T17094] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.785702][T17094] bridge_slave_0: entered allmulticast mode
[  678.790192][T17094] bridge_slave_0: entered promiscuous mode
[  678.817071][ T6356] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.826848][T17094] bridge0: port 2(bridge_slave_1) entered blocking state
[  678.829115][T17094] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.831356][T17094] bridge_slave_1: entered allmulticast mode
[  678.833601][ T5977] Bluetooth: hci3: command tx timeout
[  678.834231][T17094] bridge_slave_1: entered promiscuous mode
[  678.925336][ T6356] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.944586][T17094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  678.948989][T17094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  679.087433][ T6356] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.100415][T17094] team0: Port device team_slave_0 added
[  679.113001][T17155] wg2: left promiscuous mode
[  679.115232][T17155] wg2: left allmulticast mode
[  679.118541][T17094] team0: Port device team_slave_1 added
[  679.152028][T17155] wg2: entered promiscuous mode
[  679.157442][T17155] wg2: entered allmulticast mode
[  679.206518][T17167] 9pnet_fd: Insufficient options for proto=fd
[  679.212198][T17094] batman_adv: batadv0: Adding interface: batadv_slave_0
[  679.217513][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  679.225682][T17094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  679.231021][T17094] batman_adv: batadv0: Adding interface: batadv_slave_1
[  679.241871][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  679.255317][T17094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  679.462630][T17094] hsr_slave_0: entered promiscuous mode
[  679.465017][T17094] hsr_slave_1: entered promiscuous mode
[  679.467128][T17094] debugfs: 'hsr0' already exists in 'hsr'
[  679.468935][T17094] Cannot create hsr debugfs directory
[  679.496124][ T6356] bridge_slave_1: left allmulticast mode
[  679.497933][ T6356] bridge_slave_1: left promiscuous mode
[  679.499773][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.509296][ T6356] bridge_slave_0: left allmulticast mode
[  679.511081][ T6356] bridge_slave_0: left promiscuous mode
[  679.516918][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.843789][ T6356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  679.851353][ T6356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  679.858344][ T6356] bond0 (unregistering): Released all slaves
[  680.102326][T17206] 9pnet_fd: Insufficient options for proto=fd
[  680.271131][ T6356] hsr_slave_0: left promiscuous mode
[  680.277616][ T6356] hsr_slave_1: left promiscuous mode
[  680.279659][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  680.281985][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  680.287328][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  680.289669][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  680.324343][ T6356] veth1_macvtap: left promiscuous mode
[  680.326193][ T6356] veth0_macvtap: left promiscuous mode
[  680.327982][ T6356] veth1_vlan: left promiscuous mode
[  680.333682][ T6356] veth0_vlan: left promiscuous mode
[  680.913365][ T5977] Bluetooth: hci3: command tx timeout
[  681.204807][ T6356] team0 (unregistering): Port device team_slave_1 removed
[  681.307551][ T6356] team0 (unregistering): Port device team_slave_0 removed
[  682.052566][T17233] pim6reg1: entered promiscuous mode
[  682.056639][T17233] pim6reg1: entered allmulticast mode
[  682.184517][T17241] 9pnet_fd: Insufficient options for proto=fd
[  682.298038][T17094] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  682.309363][T17094] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  682.316009][T17094] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  682.322980][T17094] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  682.332610][T17249] pim6reg1: entered promiscuous mode
[  682.334695][T17249] pim6reg1: entered allmulticast mode
[  682.406772][T17094] 8021q: adding VLAN 0 to HW filter on device bond0
[  682.416776][T17094] 8021q: adding VLAN 0 to HW filter on device team0
[  682.421526][ T1252] bridge0: port 1(bridge_slave_0) entered blocking state
[  682.423850][ T1252] bridge0: port 1(bridge_slave_0) entered forwarding state
[  682.436129][ T1252] bridge0: port 2(bridge_slave_1) entered blocking state
[  682.438361][ T1252] bridge0: port 2(bridge_slave_1) entered forwarding state
[  682.647692][T17094] 8021q: adding VLAN 0 to HW filter on device batadv0
[  682.689409][T17274] 9pnet_fd: Insufficient options for proto=fd
[  682.993699][ T5977] Bluetooth: hci3: command tx timeout
[  684.316201][T17094] veth0_vlan: entered promiscuous mode
[  684.320605][T17094] veth1_vlan: entered promiscuous mode
[  684.356911][T17094] veth0_macvtap: entered promiscuous mode
[  684.361457][T17094] veth1_macvtap: entered promiscuous mode
[  684.371558][T17094] batman_adv: batadv0: Interface activated: batadv_slave_0
[  684.377675][T17094] batman_adv: batadv0: Interface activated: batadv_slave_1
[  684.390095][ T1187] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  684.401190][ T1187] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  684.439060][ T1187] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  684.441875][ T1187] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  684.449507][T17319] 9pnet_fd: Insufficient options for proto=fd
[  684.675004][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  684.679838][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  684.682553][ T6356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  684.710949][ T6356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  685.074675][ T5977] Bluetooth: hci3: command tx timeout
[  685.132661][T17373] 9pnet_fd: Insufficient options for proto=fd
[  685.473027][T17402] syzkaller0: entered promiscuous mode
[  685.481380][T17402] syzkaller0: entered allmulticast mode
[  685.509437][T17409] 9pnet_fd: Insufficient options for proto=fd
[  685.556789][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  685.558807][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  685.946002][T17430] 9pnet_fd: Insufficient options for proto=fd
[  687.458265][T17454] 9pnet_fd: Insufficient options for proto=fd
[  687.872948][T17482] syzkaller0: entered promiscuous mode
[  687.888263][T17482] syzkaller0: entered allmulticast mode
[  694.216539][T17702] 9pnet: Could not find request transport: fd0x0000000000000003
[  694.289744][T17708] pim6reg1: entered promiscuous mode
[  694.292620][T17708] pim6reg1: entered allmulticast mode
[  694.961836][T17768] 9pnet: Could not find request transport: fd0x0000000000000003
[  695.338374][T17804] 9pnet: Could not find request transport: fd0x0000000000000003
[  695.596527][T17832] 9pnet_fd: Insufficient options for proto=fd
[  695.915066][T17862] 9pnet_fd: Insufficient options for proto=fd
[  695.984429][   T40] audit: type=1400 audit(1754580536.739:571): avc:  denied  { create } for  pid=17873 comm="syz.9.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[  696.067254][T17881] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2181'.
[  696.630965][T17916] 9pnet_fd: Insufficient options for proto=fd
[  696.671754][   T40] audit: type=1400 audit(1754580537.419:572): avc:  denied  { read } for  pid=17920 comm="syz.1.2189" name="file0" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  696.851014][T17947] 9pnet_fd: Insufficient options for proto=fd
[  697.638529][T18004] 9pnet_fd: Insufficient options for proto=fd
[  697.666026][   T40] audit: type=1400 audit(1754580538.419:573): avc:  denied  { map } for  pid=18006 comm="syz.4.2211" path="socket:[72805]" dev="sockfs" ino=72805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  698.016290][T18036] 9pnet_fd: Insufficient options for proto=fd
[  698.052639][T18038] input: syz0 as /devices/virtual/input/input23
[  699.449238][T18122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18122 comm=syz.9.2255
[  700.950884][T18204] cgroup: Invalid name
[  701.254373][   T40] audit: type=1400 audit(1754580542.009:574): avc:  denied  { bind } for  pid=18243 comm="syz.9.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  701.260397][   T40] audit: type=1400 audit(1754580542.009:575): avc:  denied  { name_bind } for  pid=18243 comm="syz.9.2299" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  701.268511][   T40] audit: type=1400 audit(1754580542.009:576): avc:  denied  { node_bind } for  pid=18243 comm="syz.9.2299" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  701.747390][T18278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  701.749715][T18278] IPv6: NLM_F_CREATE should be set when creating new route
[  701.834678][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  701.837137][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  701.917678][T18301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  701.920058][T18301] IPv6: NLM_F_CREATE should be set when creating new route
[  702.192907][T18314] ./file0: Can't lookup blockdev
[  702.376306][T18318] sit0: entered promiscuous mode
[  702.396373][T18318] netlink: 'syz.1.2330': attribute type 1 has an invalid length.
[  702.399394][T18318] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2330'.
[  702.530438][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  702.533116][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  702.822217][   T40] audit: type=1400 audit(1754580543.569:577): avc:  denied  { setattr } for  pid=18338 comm="syz.1.2336" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  703.028807][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  703.031293][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  704.392905][   T40] audit: type=1400 audit(1754580545.139:578): avc:  denied  { nlmsg_write } for  pid=18449 comm="syz.4.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  704.475738][T18464] syz_tun: entered promiscuous mode
[  704.484029][T18464] batadv_slave_0: entered promiscuous mode
[  704.675950][T18488] sch_tbf: burst 4393 is lower than device lo mtu (65550) !
[  704.973441][ T5782] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  705.163385][ T5782] usb 6-1: Using ep0 maxpacket: 8
[  705.166261][ T5782] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  705.168900][ T5782] usb 6-1: config 0 has no interface number 0
[  705.170809][ T5782] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  705.213360][ T5782] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  705.217077][ T5782] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  705.220470][ T5782] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  705.223404][ T6058] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  705.224629][ T5782] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  705.229591][ T5782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.233733][ T5782] usb 6-1: config 0 descriptor??
[  705.238582][ T5782] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  705.393290][ T6058] usb 9-1: Using ep0 maxpacket: 32
[  705.396660][ T6058] usb 9-1: config 150 has too many interfaces: 178, using maximum allowed: 32
[  705.399561][ T6058] usb 9-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  705.402826][ T6058] usb 9-1: config 150 has 0 interfaces, different from the descriptor's value: 178
[  705.408821][ T6058] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  705.412611][ T6058] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.416095][ T6058] usb 9-1: Product: syz
[  705.417661][ T6058] usb 9-1: Manufacturer: syz
[  705.419215][ T6058] usb 9-1: SerialNumber: syz
[  705.499080][T10351] usb 6-1: USB disconnect, device number 2
[  705.501013][    C2] ldusb 6-1:0.55: usb_submit_urb failed (-19)
[  705.503739][T18493] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -19
[  705.509698][T10351] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  705.713153][T18484] Set syz1 is full, maxelem 65536 reached
[  706.131381][ T1187] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  706.150373][T18537] sch_tbf: burst 4393 is lower than device lo mtu (65550) !
[  706.448708][   T40] audit: type=1400 audit(1754580547.199:579): avc:  denied  { create } for  pid=18548 comm="syz.1.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  706.554090][T10351] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  706.703267][T10351] usb 12-1: Using ep0 maxpacket: 8
[  706.706233][T10351] usb 12-1: config 0 has an invalid interface number: 55 but max is 0
[  706.708786][T10351] usb 12-1: config 0 has no interface number 0
[  706.710721][T10351] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  706.714204][T10351] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  706.717795][T10351] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  706.721368][T10351] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  706.725584][T10351] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  706.728431][T10351] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.732078][T10351] usb 12-1: config 0 descriptor??
[  706.736657][T10351] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  706.992215][T10351] usb 12-1: USB disconnect, device number 4
[  706.996552][T10351] ldusb 12-1:0.55: LD USB Device #0 now disconnected
[  707.155272][ T1150] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  707.325586][T18572] netlink: 'syz.9.2406': attribute type 33 has an invalid length.
[  707.329086][T18572] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2406'.
[  707.339725][T18572] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2406'.
[  707.663367][T18580] sch_tbf: burst 4393 is lower than device lo mtu (65550) !
[  707.713744][   T40] audit: type=1400 audit(1754580548.469:580): avc:  denied  { listen } for  pid=18581 comm="syz.7.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  707.720256][   T40] audit: type=1400 audit(1754580548.469:581): avc:  denied  { accept } for  pid=18581 comm="syz.7.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  708.030326][ T5782] usb 9-1: USB disconnect, device number 3
[  708.226191][ T6357] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  708.320774][T18609] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.323316][T18609] bridge0: port 1(bridge_slave_0) entered disabled state
[  708.370984][T18609] wg2: left promiscuous mode
[  708.394328][T18609] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  708.401339][T18609] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  708.517338][   T46] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  708.520705][   T46] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  708.525328][   T46] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  708.528153][   T46] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.174537][ T6350] usb 14-1: new high-speed USB device number 6 using dummy_hcd
[  709.333393][ T6350] usb 14-1: Using ep0 maxpacket: 8
[  709.345106][ T6350] usb 14-1: config 0 has an invalid interface number: 55 but max is 0
[  709.353344][ T6350] usb 14-1: config 0 has no interface number 0
[  709.359350][ T6350] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  709.368597][ T6350] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  709.378458][ T6350] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  709.388292][ T6350] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  709.399861][ T6350] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  709.407093][ T6350] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.422605][ T6350] usb 14-1: config 0 descriptor??
[  709.455511][ T6350] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  709.639599][T18667] bridge0: port 3(syz_tun) entered blocking state
[  709.642222][T18667] bridge0: port 3(syz_tun) entered disabled state
[  709.652017][T18667] syz_tun: entered allmulticast mode
[  709.669602][T18667] syz_tun: left allmulticast mode
[  709.708264][   T10] usb 14-1: USB disconnect, device number 6
[  709.708437][    C2] ldusb 14-1:0.55: usb_submit_urb failed (-19)
[  709.712260][T18635] ldusb 14-1:0.55: Couldn't submit interrupt_out_urb -19
[  709.726909][   T10] ldusb 14-1:0.55: LD USB Device #0 now disconnected
[  709.870141][ T6356] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  710.117539][T18676] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.121102][T18676] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.225127][T18676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  710.232148][T18676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  710.378161][ T1150] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  710.389119][ T1150] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  710.391893][ T1150] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  710.398782][ T1150] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  711.191880][ T6356] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  711.502036][   T40] audit: type=1400 audit(1754580552.249:582): avc:  denied  { read } for  pid=18773 comm="syz.1.2442" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  711.511641][   T40] audit: type=1400 audit(1754580552.249:583): avc:  denied  { open } for  pid=18773 comm="syz.1.2442" path="/128/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  711.516928][T18782] block device autoloading is deprecated and will be removed.
[  711.522450][   T40] audit: type=1400 audit(1754580552.279:584): avc:  denied  { ioctl } for  pid=18773 comm="syz.1.2442" path="/128/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  711.534802][ T1252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  711.537232][ T1252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  711.563308][ T5974] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  711.713774][ T5974] usb 9-1: Using ep0 maxpacket: 8
[  711.721186][ T5974] usb 9-1: config 0 has an invalid interface number: 55 but max is 0
[  711.725284][ T5974] usb 9-1: config 0 has no interface number 0
[  711.727499][ T5974] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  711.730840][ T5974] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  711.734594][ T5974] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  711.738905][ T5974] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  711.742981][ T5974] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  711.745934][ T5974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.769052][ T5974] usb 9-1: config 0 descriptor??
[  711.803578][ T5974] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  712.043856][ T6023] usb 9-1: USB disconnect, device number 4
[  712.044357][    C0] ldusb 9-1:0.55: usb_submit_urb failed (-19)
[  712.051831][T18765] ldusb 9-1:0.55: Couldn't submit interrupt_out_urb -19
[  712.083969][ T6023] ldusb 9-1:0.55: LD USB Device #0 now disconnected
[  712.297656][T18801] sch_tbf: burst 4393 is lower than device lo mtu (65550) !
[  712.631744][ T1150] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  712.717719][T18825] sch_tbf: burst 4393 is lower than device lo mtu (65550) !
[  713.023634][ T5782] usb 14-1: new high-speed USB device number 7 using dummy_hcd
[  713.026068][T18841] sit0: left promiscuous mode
[  713.050857][T18841] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.053856][T18841] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.193391][ T5782] usb 14-1: Using ep0 maxpacket: 8
[  713.200692][ T5782] usb 14-1: config 0 has an invalid interface number: 55 but max is 0
[  713.204045][ T5782] usb 14-1: config 0 has no interface number 0
[  713.207197][ T5782] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  713.210662][ T5782] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  713.214852][ T5782] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  713.218358][ T5782] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  713.222415][ T5782] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  713.226129][ T5782] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.226510][T18841] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  713.238645][ T5782] usb 14-1: config 0 descriptor??
[  713.253367][ T5782] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  713.257773][T18841] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  713.489842][ T1252] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  713.492835][ T1252] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  713.496358][ T1252] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  713.499170][ T1252] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  713.752305][   T77] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  713.839277][T18855] sch_tbf: burst 4393 is lower than device lo mtu (65550) !
[  714.630894][ T6356] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  715.438999][   T12] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  715.534248][T18896] sch_tbf: burst 4393 is lower than device lo mtu (65550) !
[  715.757102][   T77] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  715.783293][ T6360] usb 14-1: USB disconnect, device number 7
[  715.791182][ T6360] ldusb 14-1:0.55: LD USB Device #0 now disconnected
[  715.843392][T18917] sch_tbf: burst 4393 is lower than device lo mtu (65550) !
[  716.879721][   T13] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  716.976736][T18943] sch_tbf: burst 4393 is lower than device lo mtu (65550) !
[  717.067055][T18951] ------------[ cut here ]------------
[  717.069058][T18951] WARNING: CPU: 2 PID: 18951 at net/mac80211/rate.c:53 rate_control_rate_init+0x5c0/0x720
[  717.072151][T18951] Modules linked in:
[  717.073794][T18951] CPU: 2 UID: 0 PID: 18951 Comm: syz.9.2522 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  717.078580][T18951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  717.081991][T18951] RIP: 0010:rate_control_rate_init+0x5c0/0x720
[  717.084232][T18951] Code: 48 8d 35 00 00 00 00 e8 9e 33 8f f6 e8 99 5a 99 f6 e9 25 fe ff ff e8 7f 04 b3 f6 90 0f 0b 90 e9 17 fe ff ff e8 71 04 b3 f6 90 <0f> 0b 90 eb b1 e8 66 04 b3 f6 e8 71 24 98 f6 31 ff 89 c3 89 c6 e8
[  717.090282][T18951] RSP: 0018:ffffc90006a67218 EFLAGS: 00010287
[  717.092188][T18951] RAX: 00000000000006ee RBX: ffff888030884000 RCX: ffffc90027331000
[  717.094800][T18951] RDX: 0000000000080000 RSI: ffffffff8b088eaf RDI: 0000000000000005
[  717.097625][T18951] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[  717.100444][T18951] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805438b020
[  717.102916][T18951] R13: ffff888065358e40 R14: ffff888052ec0000 R15: 0000000000000000
[  717.105540][T18951] FS:  00007fa8f361b6c0(0000) GS:ffff8880d68c4000(0000) knlGS:0000000000000000
[  717.108341][T18951] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  717.110420][T18951] CR2: 0000200000001080 CR3: 000000005b089000 CR4: 0000000000352ef0
[  717.112908][T18951] Call Trace:
[  717.114181][T18951]  <TASK>
[  717.115138][T18951]  rate_control_rate_init_all_links+0x76/0x1e0
[  717.117139][T18951]  sta_apply_auth_flags.constprop.0+0x4bb/0x510
[  717.119102][T18951]  sta_apply_parameters+0xc37/0x18b0
[  717.120780][T18951]  ieee80211_add_station+0x3fa/0x6c0
[  717.122434][T18951]  nl80211_new_station+0x14ff/0x1c90
[  717.124138][T18951]  ? __pfx_nl80211_new_station+0x10/0x10
[  717.126009][T18951]  ? nl80211_pre_doit+0x1b0/0xb10
[  717.127627][T18951]  genl_family_rcv_msg_doit+0x209/0x2f0
[  717.129354][T18951]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  717.131249][T18951]  ? bpf_lsm_capable+0x9/0x10
[  717.132778][T18951]  ? security_capable+0x7e/0x260
[  717.134434][T18951]  ? ns_capable+0xd7/0x110
[  717.135865][T18951]  genl_rcv_msg+0x55c/0x800
[  717.137314][T18951]  ? __pfx_genl_rcv_msg+0x10/0x10
[  717.138898][T18951]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  717.140595][T18951]  ? __pfx_nl80211_new_station+0x10/0x10
[  717.142357][T18951]  ? __pfx_nl80211_post_doit+0x10/0x10
[  717.144138][T18951]  netlink_rcv_skb+0x158/0x420
[  717.145683][T18951]  ? __pfx_genl_rcv_msg+0x10/0x10
[  717.147296][T18951]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  717.149010][T18951]  ? netlink_deliver_tap+0x1ae/0xd30
[  717.150769][T18951]  genl_rcv+0x28/0x40
[  717.152056][T18951]  netlink_unicast+0x5a7/0x870
[  717.153658][T18951]  ? __pfx_netlink_unicast+0x10/0x10
[  717.155330][T18951]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  717.157247][T18951]  netlink_sendmsg+0x8d1/0xdd0
[  717.158763][T18951]  ? __pfx_netlink_sendmsg+0x10/0x10
[  717.160440][T18951]  ____sys_sendmsg+0xa98/0xc70
[  717.161955][T18951]  ? copy_msghdr_from_user+0x10a/0x160
[  717.163811][T18951]  ? __pfx_____sys_sendmsg+0x10/0x10
[  717.165532][T18951]  ___sys_sendmsg+0x134/0x1d0
[  717.167040][T18951]  ? __pfx____sys_sendmsg+0x10/0x10
[  717.168708][T18951]  __sys_sendmsg+0x16d/0x220
[  717.170176][T18951]  ? __pfx___sys_sendmsg+0x10/0x10
[  717.171814][T18951]  ? __x64_sys_futex+0x1e0/0x4c0
[  717.173272][ T5782] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  717.173469][T18951]  do_syscall_64+0xcd/0x4c0
[  717.177209][T18951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.179084][T18951] RIP: 0033:0x7fa8f278ebe9
[  717.180524][T18951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  717.186523][T18951] RSP: 002b:00007fa8f361b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  717.189125][T18951] RAX: ffffffffffffffda RBX: 00007fa8f29b5fa0 RCX: 00007fa8f278ebe9
[  717.191601][T18951] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007
[  717.194123][T18951] RBP: 00007fa8f2811e19 R08: 0000000000000000 R09: 0000000000000000
[  717.196615][T18951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  717.199120][T18951] R13: 00007fa8f29b6038 R14: 00007fa8f29b5fa0 R15: 00007ffebfff6138
[  717.201616][T18951]  </TASK>
[  717.202610][T18951] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  717.204891][T18951] CPU: 2 UID: 0 PID: 18951 Comm: syz.9.2522 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) 
[  717.208501][T18951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  717.211811][T18951] Call Trace:
[  717.212876][T18951]  <TASK>
[  717.213822][T18951]  dump_stack_lvl+0x3d/0x1f0
[  717.215291][T18951]  vpanic+0x6e8/0x7a0
[  717.216578][T18951]  ? __pfx_vpanic+0x10/0x10
[  717.218040][T18951]  ? rate_control_rate_init+0x5c0/0x720
[  717.219781][T18951]  panic+0xca/0xd0
[  717.220985][T18951]  ? __pfx_panic+0x10/0x10
[  717.222400][T18951]  check_panic_on_warn+0xab/0xb0
[  717.223973][T18951]  __warn+0xf6/0x3c0
[  717.225351][T18951]  ? rate_control_rate_init+0x5c0/0x720
[  717.227109][T18951]  report_bug+0x3c3/0x580
[  717.228494][T18951]  ? rate_control_rate_init+0x5c0/0x720
[  717.230223][T18951]  handle_bug+0x184/0x210
[  717.231603][T18951]  exc_invalid_op+0x17/0x50
[  717.233034][T18951]  asm_exc_invalid_op+0x1a/0x20
[  717.234568][T18951] RIP: 0010:rate_control_rate_init+0x5c0/0x720
[  717.236496][T18951] Code: 48 8d 35 00 00 00 00 e8 9e 33 8f f6 e8 99 5a 99 f6 e9 25 fe ff ff e8 7f 04 b3 f6 90 0f 0b 90 e9 17 fe ff ff e8 71 04 b3 f6 90 <0f> 0b 90 eb b1 e8 66 04 b3 f6 e8 71 24 98 f6 31 ff 89 c3 89 c6 e8
[  717.242434][T18951] RSP: 0018:ffffc90006a67218 EFLAGS: 00010287
[  717.244335][T18951] RAX: 00000000000006ee RBX: ffff888030884000 RCX: ffffc90027331000
[  717.246810][T18951] RDX: 0000000000080000 RSI: ffffffff8b088eaf RDI: 0000000000000005
[  717.249284][T18951] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[  717.251738][T18951] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805438b020
[  717.254183][T18951] R13: ffff888065358e40 R14: ffff888052ec0000 R15: 0000000000000000
[  717.256644][T18951]  ? rate_control_rate_init+0x5bf/0x720
[  717.258390][T18951]  ? rate_control_rate_init+0x5bf/0x720
[  717.260148][T18951]  rate_control_rate_init_all_links+0x76/0x1e0
[  717.262084][T18951]  sta_apply_auth_flags.constprop.0+0x4bb/0x510
[  717.264046][T18951]  sta_apply_parameters+0xc37/0x18b0
[  717.265710][T18951]  ieee80211_add_station+0x3fa/0x6c0
[  717.267382][T18951]  nl80211_new_station+0x14ff/0x1c90
[  717.269041][T18951]  ? __pfx_nl80211_new_station+0x10/0x10
[  717.270802][T18951]  ? nl80211_pre_doit+0x1b0/0xb10
[  717.272392][T18951]  genl_family_rcv_msg_doit+0x209/0x2f0
[  717.274121][T18951]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  717.276040][T18951]  ? bpf_lsm_capable+0x9/0x10
[  717.277545][T18951]  ? security_capable+0x7e/0x260
[  717.279247][T18951]  ? ns_capable+0xd7/0x110
[  717.280693][T18951]  genl_rcv_msg+0x55c/0x800
[  717.282150][T18951]  ? __pfx_genl_rcv_msg+0x10/0x10
[  717.283755][T18951]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  717.285450][T18951]  ? __pfx_nl80211_new_station+0x10/0x10
[  717.287241][T18951]  ? __pfx_nl80211_post_doit+0x10/0x10
[  717.288947][T18951]  netlink_rcv_skb+0x158/0x420
[  717.290458][T18951]  ? __pfx_genl_rcv_msg+0x10/0x10
[  717.292049][T18951]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  717.293711][T18951]  ? netlink_deliver_tap+0x1ae/0xd30
[  717.295378][T18951]  genl_rcv+0x28/0x40
[  717.296645][T18951]  netlink_unicast+0x5a7/0x870
[  717.298160][T18951]  ? __pfx_netlink_unicast+0x10/0x10
[  717.299818][T18951]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  717.301707][T18951]  netlink_sendmsg+0x8d1/0xdd0
[  717.303209][T18951]  ? __pfx_netlink_sendmsg+0x10/0x10
[  717.304873][T18951]  ____sys_sendmsg+0xa98/0xc70
[  717.306384][T18951]  ? copy_msghdr_from_user+0x10a/0x160
[  717.308111][T18951]  ? __pfx_____sys_sendmsg+0x10/0x10
[  717.309770][T18951]  ___sys_sendmsg+0x134/0x1d0
[  717.311253][T18951]  ? __pfx____sys_sendmsg+0x10/0x10
[  717.312908][T18951]  __sys_sendmsg+0x16d/0x220
[  717.314372][T18951]  ? __pfx___sys_sendmsg+0x10/0x10
[  717.316001][T18951]  ? __x64_sys_futex+0x1e0/0x4c0
[  717.317575][T18951]  do_syscall_64+0xcd/0x4c0
[  717.319011][T18951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.320874][T18951] RIP: 0033:0x7fa8f278ebe9
[  717.322282][T18951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  717.328234][T18951] RSP: 002b:00007fa8f361b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  717.330822][T18951] RAX: ffffffffffffffda RBX: 00007fa8f29b5fa0 RCX: 00007fa8f278ebe9
[  717.333281][T18951] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007
[  717.335752][T18951] RBP: 00007fa8f2811e19 R08: 0000000000000000 R09: 0000000000000000
[  717.338213][T18951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  717.340692][T18951] R13: 00007fa8f29b6038 R14: 00007fa8f29b5fa0 R15: 00007ffebfff6138
[  717.343153][T18951]  </TASK>
[  717.344684][T18951] Kernel Offset: disabled
[  717.346052][T18951] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:25:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8e6de100 RCX=0000000000000000 RDX=ffff888030732440
RSI=ffffffff81f05039 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90002787d88
R8 =0000000000000000 R9 =fffffbfff2155ff2 R10=ffffc90002787d88 R11=0000000000000000
R12=ffff88803c379380 R13=ffff88803c378ac0 R14=0000000000000000 R15=ffff888030712f40
RIP=ffffffff81f05040 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d66c4000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f14dace7d60 CR3=00000000323df000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14da1876c3 00007f14da1876c3
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb45f4490 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556761a387 000055556761a130
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556760d654 000055556760d650
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556762500a 0000555567624670
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555567610ee4 0000555567610ee0
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 42c00302100042b0 037810000b900302 04000ef003240400 0eec030c04000ee8
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100042800401 00000e080606015d ce048382080042e0 0300100042d00300
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100042c003021000 42b0037810000b90 030204000ef00324 04000eec030c0400
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ee803168004000e e0032004000edc03 0c04000ed8030202 000ed2030002000e
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0030002000ece03 2202000ecc030402 000eca031002000e c8030c04000ec403
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dffffc0000000000 RBX=ffffffff93d6f2a8 RCX=0000000000000000 RDX=1ffffffff1beb9cd
RSI=ffffffff8c161080 RDI=ffffffff8df5ce68 RBP=0000000000000001 RSP=ffffc900006770f8
R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff90aaff97 R11=0000000000000000
R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81a0b373 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d67c4000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fa8f35f9f98 CR3=000000000e380000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b2a2204cb5585e6d 6398a2c05d817625
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 61599c5ed035329f ca4c5af5c495a570
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 25d8fe98a0bbc86b b16103d70ffb69cd
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 32e8d0a3637bf778 09c1387ca4c07988
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004900
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a001b32522 acb80000c1740000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01b3245c01b32629 00000eaf01b32ea7
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000081fea80000 124a00004ea40000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d080000afde0000 01b326de5b630000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aaf0f1649e40e3e3 16a9c647f3b0c59f
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cce556cbd3c8f122 1f38d02b510cf2d8
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8f29874a8 00007fa8f29874a0 00007fa8f2987498 00007fa8f2987470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8f34ed100 00007fa8f2987460 00007fa8f2987478 00007fa8f29874c0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8f29874b8 00007fa8f29874b0 00007fa8f29874a8 00007fa8f29874a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff856366d5 RDI=ffffffff9b106160 RBP=ffffffff9b106120 RSP=ffffc90006a66b80
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=000000000000003a R14=ffffffff9b106120 R15=ffffffff85636670
RIP=ffffffff856366ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa8f361b6c0 ffffffff 00c00000
GS =0000 ffff8880d68c4000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000001080 CR3=000000005b089000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffffff80 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebfff6646
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebfff6646 00007ffebfff664c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8f2812e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8f2812e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8f2812e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8f2812e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8f2812ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8f2812fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8f29874a8 00007fa8f29874a0 00007fa8f2987498 00007fa8f2987470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8f34ed100 00007fa8f2987460 00007fa8f2987478 00007fa8f29874c0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8f29874b8 00007fa8f29874b0 00007fa8f29874a8 00007fa8f29874a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=bab230010b0e4a00 RBX=ffffffff8e5c1160 RCX=ffffc9000397f6f4 RDX=0000000000000001
RSI=ffffffff8de293b8 RDI=ffffffff8c161100 RBP=00007fe6a918e700 RSP=ffffc9000397f6e8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffffff81cca70a R13=0000000000000202 R14=ffff8880223b0000 R15=0000000000000002
RIP=ffffffff8197c3b3 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555b817500 ffffffff 00c00000
GS =0000 ffff8880d69c4000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffcf9c5adb8 CR3=0000000057d61000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf9c5c660 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf9c5c7e6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf9c5c7e6 00007ffcf9c5c7ec
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6a9212e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6a9212e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6a9212e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6a9212e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6a9212ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6a9212fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000