last executing test programs:

2m48.863247165s ago: executing program 4 (id=309):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrusage(0xffffffffffffffff, &(0x7f0000000580))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52007607000010000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999f9d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c01300"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2m47.680140333s ago: executing program 4 (id=311):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x40000012})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f})

2m46.740006964s ago: executing program 4 (id=315):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r2 = dup(r1)
write$6lowpan_enable(r2, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2440, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m45.974412891s ago: executing program 4 (id=320):
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0xf5b, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000000, 0x7}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0)
r3 = dup3(r2, r0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x18000, 0x0)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])

2m44.916931248s ago: executing program 4 (id=324):
io_uring_setup(0x194e, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x2, 0x1}], 0x10, 0x80000000, @void, @value}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m44.570319362s ago: executing program 4 (id=327):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_IOCTL(r2, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x80, 0x4, 0x20800, 0xf3}}, 0x20)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)
chmod(&(0x7f0000000100)='./file0\x00', 0x180)

2m29.513588029s ago: executing program 32 (id=327):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_IOCTL(r2, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x80, 0x4, 0x20800, 0xf3}}, 0x20)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)
chmod(&(0x7f0000000100)='./file0\x00', 0x180)

26.460847266s ago: executing program 0 (id=594):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffff75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x0)
readv(r5, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0)
syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2}, &(0x7f00000002c0), &(0x7f0000000300))
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0)

22.858109096s ago: executing program 0 (id=599):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
dup(0xffffffffffffffff)
r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e22, @remote}}}, 0xa0)
fsmount(r3, 0x0, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x8, 0x2}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x4, {0x0, 0x0, 0x0, r7, {0xe, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0)

19.839243777s ago: executing program 0 (id=605):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000020601010000000000000000000000ffffffff000a0000000900020073797a3000000000050001"], 0x30}}, 0x40)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
fsopen(0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
shutdown(r2, 0x1)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x4a, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000004900831c3ebd7000fedbdf250a000000", @ANYRES32, @ANYBLOB="0380000014000100fe880000000000000000000000000101080002"], 0x38}, 0x1, 0x0, 0x0, 0x10000}, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x17c1, 0x2000, [0x2], [0x3, 0x7]}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0)

18.306141053s ago: executing program 0 (id=610):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r0=>0x0})
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000dce0c6c8529f0a9ed0000000ffad4348301070b2a30709f2a8edb03748143a6ec631261d9900c222fd734ed7a1f7db0a297ff633d789366184012be93f127d6caa2f69964f1fd2c8289c242913e849e1018ebb22a4ce6190be6ab173b765f79be39568f7c7f3cbf7d12defdd372913d20647ec30416466f90062c071dfca7d9a19f52cac2b11097a3f2dbea144cadc611910", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00'/28], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180904000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10)
syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f010000000000000002000724140000000004241300052406000005240000000d240f"], 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r8, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x8126}})
io_uring_enter(r3, 0x2def, 0x2000000, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20)
r9 = gettid()
syz_open_procfs$namespace(r9, &(0x7f00000001c0)='ns/time_for_children\x00')
r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r10, &(0x7f00000002c0)=[{&(0x7f0000004c00)=""/4090, 0xffa}, {0x0}, {&(0x7f0000000040)=""/169, 0xa9}], 0x3)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7)
r12 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, &(0x7f0000000000)={0x2000})
ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, &(0x7f00000000c0))
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r13, 0x4010ae68, &(0x7f0000000040)={0xeeee0000})
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000009c0)={0x214, r11, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1d8, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x5}, @broadcast, @broadcast, @initial, {0xe, 0x3}}, 0x959e, @default, 0x1911, @void, @void, @val={0x3, 0x1, 0xae}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x2, 0x3}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x9, 0x27}}, @val={0x2d, 0x1a, {0x4000, 0x0, 0x2, 0x0, {0x8, 0x1d0b, 0x0, 0x103, 0x0, 0x1}, 0x1, 0xb2b60000, 0x2}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0xe, 0x89}}, @void, [{0xdd, 0xe7, "a186d8f9686baa63e0fd1e68e59dc754c6ad570c1a940d36e5f7c9a36e255eaac643f3d1a3418c29442aad64f8c18ab2acc0414d2c059e06dafcf1379a986c9f06bdcd671ae2445681f339775d65466cba789d2fbaff1e982d38c1b9c22f818c824ee67713e3babd58cd57e0079b80818771790cfefad7d5cd2a132164bdf1f719ed2d4fb44121e0f12ccb50d51fc9081ccf6d13a313121ac948b7d95023ea15d524da296d657e6148049cb994faa5df22a96c3a67e03df73e0a6168dec9070b28fd653ee644431a83f2b6b64fbc4e8a86c4484ab02f49e61802dec8b9137dc0613c5212a217ca"}, {0xdd, 0x8a, "33f601c9d66ee395531d83ede1cf042e73acc88fe9cea3f1a2dcad7add25f41590564500bba3baddd343f585d75272658d2128331daba8a55477c94d652303a0f196a7cc5256e36b8c29cb71bcd35e6d800c2fc91d596c4b9ffa63439c0209e5bbdbe150bded0a75b78fd3ec8398f437bbfdb983fbce55aed1555c2a17c3c3c60816242c09023a47ff5e"}]}}, @NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_a, @device_a, @from_mac, {0x3}}, 0x4, @void}}]}, 0x214}, 0x1, 0x0, 0x0, 0x24044010}, 0x8001)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20)

16.146308143s ago: executing program 3 (id=614):
r0 = socket$kcm(0xa, 0xd, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000004503"])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0)

13.124308506s ago: executing program 3 (id=617):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @void, @value}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'})
sendmsg$nl_route(r4, 0x0, 0x0)
ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0})
lseek(0xffffffffffffffff, 0x9, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010103}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)

13.106278722s ago: executing program 0 (id=619):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000007020020f8ffefffb703000008000000b70400000000000085000000030000009500"/71], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f00008c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000095c000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x4008800)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r6, 0x400455c8, 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r7, 0xa09, 0x70bd27, 0x25dfdc00, {{}, {}, {0x18, 0x17, {0x1b, 0x0, @l2={'ib', 0x3a, 'tunl0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x44871}, 0x20000840)

11.700613387s ago: executing program 1 (id=620):
socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
pipe(&(0x7f0000019480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open(0x0, 0x1a1142, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x690000, 0x0)
vmsplice(r1, &(0x7f0000000800)=[{&(0x7f0000000d80)}], 0x1, 0xc)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="11", 0x1}], 0x1}}], 0x1, 0x4008440)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xce)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000200000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40efa, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002180)={&(0x7f00000005c0)='sys_enter\x00', r7, 0x0, 0xfffffffb}, 0x18)

10.459305239s ago: executing program 5 (id=623):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_MSRS(r3, 0xc048aeca, &(0x7f0000000200))
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001940)={'wpan0\x00', <r7=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x48, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "19c471666f07f00b641e74d8b00abb5e"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0xffffffff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x46}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40011}, 0x44)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, 0x0, 0x800)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0))
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', 0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})

9.712019979s ago: executing program 5 (id=624):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x3, 0x2)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700))
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00'})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x24040000)
read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020)

9.663020498s ago: executing program 2 (id=625):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc})
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x5, &(0x7f00000001c0)=@framed={{}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r1, 0x0, 0x2}, 0x18)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socket$can_raw(0x1d, 0x3, 0x1)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0xa, 0x4004, @fd, 0x8001, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000680))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000000000000200000001000000000000e7ffff03000a000094000000000000000000000000000000000000000000000000ff00000001000000000000000000000039ffffff02000000000000000000000000000010000000000000000000004000"])
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340})
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)

9.517040796s ago: executing program 3 (id=626):
bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x17)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040), 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, [<r7=>0x0], [], [], [0xd]})
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0)

8.565107647s ago: executing program 1 (id=627):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgget$private(0x0, 0xcb)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
recvmmsg$unix(r8, &(0x7f0000003700), 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf25210000001c002d800800020003000000050001000500000005000400010000", @ANYRES32=r10, @ANYBLOB="8dcf5a708fe8bfa48b4322f167ffcb0f0e325b828509ed87f5347f0aed04100c14b588c97e6ac9b716d32a744bf4e6e73d35a6315b4be3b057aaba057974239b1c6b3da3dc6b36aafa93390f87e290c1fc34a4ff6cadad1fe74743429938a898f7"], 0x38}, 0x1, 0x0, 0x0, 0x4000c04}, 0x200488d4)

8.532026892s ago: executing program 5 (id=628):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00cb1b1414aa5a7eb75370b21b1592af9997c26816cb46a6553bb2f2294d57d0ca2f064bc4512f9ad00f0490c9df1a6feba83d4857916bbd307aeed22e5320afe6cdaac0c24556c845996d88cde1da7af727cb84ed638b02e0114fd9b47258f82d57506218f75711c1017ac125fcc394ce72c9537a0b3421b2e96dfb0369502d5e950f5a043aca5333a673", @ANYBLOB="a130ff92ffaf7bdb6d2f3feee882d9f49c396531b8b094efb23b8cc330e1c7bdfbd9bc98c7ba57b8ab54db6fa15a1bf8cd5ea94a66f5001cd6a5f793612455eeeff8141bef8ad4e5e6ac5d5d58649324ea27", @ANYRESHEX=r0], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x31, 0x800000000004, @tid=r1}, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
read$midi(0xffffffffffffffff, 0x0, 0x43)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000040)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0)
timer_settime(r5, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000040)={0x5, @raw_data="08dace1554cb5956ee662ba36f6485f6e3e5146bf27deddf43f8c909f548a10df62a5c8d486e9f6e3451bbaf70078aa35ae276c29c521584f39af6eeb5c000d7141fb70749b86775d8f1f1b5b1e3dc6073d66d9f4cf292355a36b04656a72a684df3b005a8871d52e56ce19df5afb08a8e3a05604903b365ad1f3c6e050aa44be370da53ee367be4b03a830e894521a48c99c02cb5445a6fd4be5900d0061543619f82821592a5e7ae7bb7ade47cfd73b1ed9d5e4433c3c9ed45292247359a7b6cfd356f872a488e"})
set_mempolicy(0x8006, 0x0, 0x5)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb)

7.414093484s ago: executing program 1 (id=629):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@host, 0x1})
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$smackfs_ipv6host(0xffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x9cb5, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$caif_stream(0x25, 0x1, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

7.353946173s ago: executing program 2 (id=630):
r0 = userfaultfd(0x800)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xdc243476ea0e8f5a}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, 0x3ed, 0x4, 0x70bd28, 0x25dfdbff, "37f39a781bbeb1432a37178c458b2dfcac6401dbedd6f53bf947946172ffb45c88cfa42504433511bc40476c8223a32c031ce8d32e08b038b61d9a90c86e74491d8cdf1e7665e246f4a5e014e0e1c410068b3f436981e4e0620a0c4f91fda68f2b49f9463d77631e020b57efa4c8bb8eaec0dd9c5571d4231e428627580fae7e0428d0efd5de4061b192f99cd4b7656ee945d635d44f372317b91b10d7f2d7364fbaa2785457e04e0e66b0337c6843995816122437fe81ff2684", ["", "", "", "", "", "", "", "", "", ""]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x48080)
r2 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001600)='ip6gretap0\x00', 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000002680), 0xffffffffffffffff)
pipe(&(0x7f00000026c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002700), 0x4c0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002740)={<r8=>0xffffffffffffffff})
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/meminfo\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000027c0)={<r10=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000002900)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002800)={0xa4, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xee16}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffe}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2400c810}, 0x4004011)
ioctl$BTRFS_IOC_BALANCE_V2(r9, 0xc4009420, &(0x7f0000002940)={0x3, 0x0, {0x1, @struct={0x0, 0x65}, 0x0, 0x81, 0xd, 0x8, 0x5, 0x1, 0x80, @usage=0x401, 0x1, 0x8, [0x289c, 0x5, 0xffffffffffffffff, 0x0, 0x2, 0x6]}, {0x4, @struct={0x1, 0x2}, 0x0, 0x9, 0x7ff, 0x2, 0xffffffffffff76b1, 0x4, 0x89b, @struct={0x3, 0xbcd9}, 0x3, 0x40, [0x4, 0xfffffffffffffffb, 0x6, 0x6, 0x7, 0x8]}, {0x841f, @usage=0x8, 0x0, 0xef23, 0x401, 0x7, 0xffff, 0x8, 0x4a0, @struct={0xfffffffe, 0xfffffffa}, 0xcb1d, 0x8, [0x4, 0x5, 0x8000000000000000, 0x5, 0x7, 0x10001]}, {0x3a4d, 0x5, 0x7ff}})
r11 = getpid()
syz_open_procfs(r11, &(0x7f0000002d40)='net/icmp\x00')
ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000002d80)={0x7, 0x1000, 0x7fff, 0x800, <r12=>0xffffffffffffffff})
fsetxattr$security_ima(r12, &(0x7f0000002dc0), &(0x7f0000002e00)=@v2={0x5, 0x1, 0x7, 0x48, 0xe3, "d98d7f34732e8ef9c4fcd55c9418efd17559932e288536355b96087f1ab78c18089df6147c8471d55b8f71a6d2ed5e40ad68f0264a23c87eed57173c5f79d80ba32b9162d182da3c1243734de64695ac794bad03e5218026740a90190f0bd4d5b87e7ea9bccf294a92df2cf645d159e408e8dbe5b4e669b1dc169155dc83ecef072c061271e56e798e0a77dc121216c12e2bb6b6d7e8e9406223ec653a831400bd49253794aaf3f69dd857def385d8649bc546ff8b3eb30b5a37a3d93008bdd1772c24a862c4a7c234d8e47ba0bc3202020c74365b6331f8bfb604f9d254f2eb3bb816"}, 0xec, 0x3)
r13 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002f00), 0x20441, 0x0)
r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000002f40)={r14})
fcntl$F_GET_FILE_RW_HINT(r9, 0x40d, &(0x7f0000002f80))
sendmsg$nl_xfrm(r9, &(0x7f0000003080)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd28, 0x25dfdbff, 0xfffffffd, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4011)
sendto(r8, &(0x7f00000030c0)="d832cc9fae0aff58b33d7fbc9ff527e8ac51e1b536c9d8539d8b276a37d85db0a5a422c060be4406241bc1305d8d994ee041649b0d44fbb52156218e1618b032b2055558dd1d630df3c4c4f5d6eceeee420cd822d4843b6fa54f46e0497d75ae", 0x60, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8081)

6.834958629s ago: executing program 2 (id=631):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa2200000000000004aa001f4ee361170008ff4c169704bb9b27f1"], 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r4, 0x84, 0x7d, &(0x7f00000022c0)=""/4104, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7}, 0x50)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r6, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r8, &(0x7f00000063c0)=""/1024, 0x400)
syz_fuse_handle_req(r6, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x228, 0x0, 0x0, [{0x806, 0x5, 0xb, 0x2, '#,UK\x80j\x9bO\x8e,-'}, {0x2, 0x5, 0x1d8, 0x0, 'group\x1fidWtv\xf1@M\x13V\xb82\'\x1a\x00t\xae\x18&\xf8\x97\xbe4\xd5P\a\xf4I{\xea\xbf\x8c#\xad\xb9|\xd6\x01\x92a\xd5{\xde`U\xedxt\xd8\xdb\xeeS\xda\x81\xde\x83\xbf)\x8f,R_Hxj]&\xe7\x15\xfa\x02\x91\xa4\xa5\x971\n=\xc6%\xce{\xda\xd5\xd8\xf3\rTr\x8b\x95\xcc>\xaad\xb6\x9d\x13\x11<\xfb[\xd8\x01yG\xd4vt\x00\x02\xaej\x06\x12j&\x05\xb6W\x9b\xa7~2\'\xf2\xca\\\x94Q\"\xda\xfb\x1c\xba\xf7\xbc\v-\xbe[\x84\xfc\xbf*\xc4\x96\x93\xaaL^\xcf\xd6\xb3\\\xcd\x86\'\"fJ\x00j\xf3{\x02\xad\x14\xe2\xc6&\xe9\x18Y\xe8\fNO{\bV\x19\xdb<\x1f\x0e\x19\t\xe8\xed\xc7\xf6=\xa1\xe6Hj\xc2\x80@\to@|\xf9\xeb\x9b\xf4,\fl\x028\x9b\xe7\x05\x90\xb2\xe8N\x9cQ\x81\xf4r \xdd\xb4\xdaT\v\xcb\xbc\xa4\x88%\xb6~@\x1fkov\x9fr[\xca\xd8\x06)\x95\"ll\xd1\x9e\x8b\xf6]\x83b\xeatH \x04~G\xe5t\xe6\xfa\x81@\x8cB\xd6r\xdf\xf1\xd0\xb6Y1\xa2^#\xf6t\x93?\xa8S\x05\xb6J[\x9dJ~\xa4(t(\x80\x85\xc0\x00$\x16\xa0\xbc\xe7V\xc1\xc1\x17\xaeZ\xad\xdf,\xba\xd0\x11\xda\xe3c\x965\x0f\t5Z?\b\xaf\xc5\xc3M\x1e\x1bu\xf3\x06$\' u\xb9\x8f\xa9U\x8c\xd4\xe4\x02\x04\xa6\x83\x16\xea\x1ap<,\xd0\x00\xc7CP!\xe9$y\xde\xa4\x81q\xb6\x89%\xc4\xf9K\xc7&Z3\x84\\Q\xc7\xceo8\xe9\xaa\x89\xc5\x03\xde\xcdn\x7fl\x90\x1b\xec5\x12p&m\x8d\xd1\xce\x86$\xady\xe7-\xf2Q\xf2\x1e?\x8e\x83\xb9s\xea\x04j\xa8o\xe0L\xce5b\x94\x9d\x8b\xeaB\xe5\xb7\x02\x8b\xbd\xd9\x9cd\x13\xf5X\x0e\xda}*\xa0\\\x8d\xd5'}]}, 0x0, 0x0, 0x0, 0x0})
r9 = io_uring_setup(0x71b9, &(0x7f00000000c0)={0x0, 0xc63b})
io_uring_register$IORING_REGISTER_CLOCK(r9, 0x1d, &(0x7f0000000040)={0x7}, 0x0)

6.034305384s ago: executing program 3 (id=632):
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000008, 0x110, 0xffffffffffffffff, 0x8000000)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
mlock2(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r6, r5, 0x0, 0x7ffff000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x701, 0x10000, 0x0, {0x26}}, 0x14}}, 0x0)

5.812677493s ago: executing program 5 (id=633):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = dup2(r1, r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0}], 0x1, 0x100, 0x400005)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = msgget$private(0x0, 0xcb)
msgsnd(r7, &(0x7f0000000180)={0x3, "f53ffe0f4a80527c479da402d1c6da7f43e68d68"}, 0x1c, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)

5.018298413s ago: executing program 2 (id=634):
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair(0x23, 0x5, 0x0, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x200, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}}, 0x24}}, 0x44040)
recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
mknodat$loop(0xffffffffffffffff, 0x0, 0x40, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.960347366s ago: executing program 1 (id=635):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(r0, 0x6, &(0x7f0000000180)={0x4}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = gettid()
r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00')
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x600}}, 0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
pipe2(0x0, 0x4880)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x303100, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40086315}], 0x0, 0x0, 0x0})
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x803, 0x0)

2.809037488s ago: executing program 1 (id=636):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @void, @value}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'})
sendmsg$nl_route(r4, 0x0, 0x0)
ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0})
lseek(0xffffffffffffffff, 0x9, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010103}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)

2.806279706s ago: executing program 5 (id=637):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000000010000b30000007f0000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="3017d409000000bf02218f3a845500"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x13, &(0x7f0000001580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x38, 0x4)
socket(0x10, 0x3, 0x0)
add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r3, 0x101, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc091}, 0x24000001)
recvmmsg(r4, 0x0, 0x0, 0x40012002, 0x0)
recvmmsg(r4, &(0x7f0000000300), 0x0, 0x120, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
getrlimit(0x9, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.888723112s ago: executing program 0 (id=638):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x3, 0x2)
r4 = syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700))
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00'})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x24040000)
read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020)

1.887652643s ago: executing program 3 (id=639):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x1, 0x608, 0x6, 0xffff, 0x1, 0x4, 0x7, <r5=>0x0}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9c000000190a01020000000000000000000000000900010073797a30000000000c0006400000000000000002240005800800015a0000a23c08000140000000320800024000000007080001400000002f0900020073797a300000000020000740d07d45b2ea3eec53a10c6b79cc855cf3348d80c823b4913af25a90a908000a400000000208000a4000000000040005800900010073797a3000000000"], 0x9c}}, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5, 0x5}, &(0x7f0000000100)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
dup(0xffffffffffffffff)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c})

1.881091146s ago: executing program 2 (id=640):
socket$unix(0x1, 0x1, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000300)={0x3, 0x0, 0x3ff, 0x7, 0x0, 0x0, 0x3, 0x10000000}, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="66b81c018ed08fe800b63ffef30f300f20e2b922000040b800800000ba000000000f30400f0ff2970fc73300bf8811487cb9fa020000b8ac000000ba000000000f30c7442400be000000c74424020f000000ff1c24", 0x55}], 0x1, 0x20, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendfile(r7, r5, 0x0, 0x5)
write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8)
write(r6, &(0x7f00000003c0)="a07a75c2c6bcb0248ffce9912a33bb0ee09f1e56dc39a23fac9f6e027f9b2b48fe947cc2d87e75b99cc785c10bb6892374afa9795d362af1cdbd783c322f19a816cc8886a4d1602d65f484df4f790f6b278e44c5fe6451e59b0395a4e26287f6d68d1e07e266177346d53429dc5a211b503093ca200452bcf49b9867535bda58b3a55c7864951ad70447dc3cbf1f0bd571fe5106a6a6836f176f73a3d324d0795ce75a78a78e6a3ce4b53afc4e6c7f1236c1b1cb42563c1ddd08294b77c7bb75635ce8fead8074df4c9b13b0f15b1f54895037c2fd2a24e985b60ec73b84f0426e7836a11d83ca366ec2f1637f34d30750ec100b2b", 0xf5)
close_range(r1, r7, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
close(0xffffffffffffffff)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)

1.014357285s ago: executing program 1 (id=641):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r1, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
socket$packet(0x11, 0x3, 0x300)
keyctl$get_security(0x11, 0x0, 0x0, 0x0)
r2 = socket(0x25, 0x1, 0x0)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000040)={0x3, 0x9, 0x2, 0x5, 0x5, 0x3, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x3, 0x0, 0x6})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r5=>r4, {0x9, 0x3ff}}, './file0\x00'})
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x41)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000000)={0x0, 0xffffffffffffffcd, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, 0x0, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x2000c001)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000480), 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x46, 0x0, 0x0)

182.260793ms ago: executing program 2 (id=642):
r0 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r2 = fanotify_init(0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3)
sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={0x14, r4, 0x419, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040)
r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r7 = fcntl$dupfd(r6, 0x0, r6)
write$binfmt_script(r7, &(0x7f0000000100), 0xfffffd9d)
fanotify_mark(r2, 0x1, 0x48001023, r7, 0x0)
fanotify_mark(r2, 0x2, 0x4000103b, r5, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x9, 0x35315241, 0x6, 0x4, [{0x3ff, 0x2}, {0x7, 0x9}, {0x2, 0x2}, {0x3, 0x165}, {0xfffffffa, 0x40}, {0x80, 0x8}, {0xfffffffa, 0x8}, {0x2, 0x9}], 0x7, 0x40, 0x8, 0x1, 0x7}})
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x402280)
r8 = socket$inet(0x2, 0x2, 0x0)
brk(0xe22)
accept4(r8, &(0x7f0000000240)=@ethernet={0x0, @random}, &(0x7f00000002c0)=0x80, 0x81c00)
setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0x0)
writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r9, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206010006000006021c0000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000001c0007800c000280080001400000021c0c000180080001000000000005000500020000000500010006"], 0x64}}, 0x0)
setsockopt$inet_mreqsrc(r8, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

134.226797ms ago: executing program 3 (id=643):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044000}, 0x48015)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0xc0c00)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd2, 0xfffffffffffffffe})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
getitimer(0x1, &(0x7f0000000040))
shutdown(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r6, &(0x7f0000000100), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000100), &(0x7f0000000140)=@udp=r7, 0x1}, 0x20)
r8 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x100, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

0s ago: executing program 5 (id=644):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
io_setup(0x6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10)
socket(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   52.254531][ T5490] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.275825][ T5490] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts.
syzkaller login: [   72.038510][ T5812] cgroup: Unknown subsys name 'net'
[   72.158317][ T5812] cgroup: Unknown subsys name 'cpuset'
[   72.166916][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   73.605660][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.097502][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.106019][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.110270][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.120327][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.128381][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.136336][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.144064][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.151498][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.159295][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.168560][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.176418][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.177831][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.196539][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.204896][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.213011][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.245821][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.248774][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.253674][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.267623][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.267837][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.282082][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.283017][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.296855][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.315431][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.325422][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.834344][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   76.926042][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   77.012216][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   77.090386][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   77.164197][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   77.191393][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.198829][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.206399][ T5823] bridge_slave_0: entered allmulticast mode
[   77.214211][ T5823] bridge_slave_0: entered promiscuous mode
[   77.224218][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.231441][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.238588][ T5823] bridge_slave_1: entered allmulticast mode
[   77.245764][ T5823] bridge_slave_1: entered promiscuous mode
[   77.261721][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.269098][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.276494][ T5822] bridge_slave_0: entered allmulticast mode
[   77.283452][ T5822] bridge_slave_0: entered promiscuous mode
[   77.341128][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.348651][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.356522][ T5822] bridge_slave_1: entered allmulticast mode
[   77.363471][ T5822] bridge_slave_1: entered promiscuous mode
[   77.382565][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.450126][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.496963][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.504102][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.511507][ T5839] bridge_slave_0: entered allmulticast mode
[   77.520060][ T5839] bridge_slave_0: entered promiscuous mode
[   77.549671][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.559447][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.566992][ T5835] bridge_slave_0: entered allmulticast mode
[   77.574219][ T5835] bridge_slave_0: entered promiscuous mode
[   77.591315][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.603356][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.611074][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.618300][ T5839] bridge_slave_1: entered allmulticast mode
[   77.625492][ T5839] bridge_slave_1: entered promiscuous mode
[   77.636070][ T5823] team0: Port device team_slave_0 added
[   77.642047][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.649428][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.656714][ T5835] bridge_slave_1: entered allmulticast mode
[   77.664347][ T5835] bridge_slave_1: entered promiscuous mode
[   77.684315][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.706802][ T5823] team0: Port device team_slave_1 added
[   77.777127][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.800511][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.810086][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.817717][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.824838][ T5829] bridge_slave_0: entered allmulticast mode
[   77.832183][ T5829] bridge_slave_0: entered promiscuous mode
[   77.840438][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.847729][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.854834][ T5829] bridge_slave_1: entered allmulticast mode
[   77.862967][ T5829] bridge_slave_1: entered promiscuous mode
[   77.893792][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.916003][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.938798][ T5822] team0: Port device team_slave_0 added
[   77.959667][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.966691][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.993161][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.031484][ T5822] team0: Port device team_slave_1 added
[   78.039371][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.049877][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.057163][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.083116][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.096865][ T5839] team0: Port device team_slave_0 added
[   78.144250][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.169549][ T5839] team0: Port device team_slave_1 added
[   78.189891][ T5835] team0: Port device team_slave_0 added
[   78.196564][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.203515][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.230442][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.242717][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.250560][ T5824] Bluetooth: hci0: command tx timeout
[   78.251524][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.256454][ T5824] Bluetooth: hci2: command tx timeout
[   78.256572][ T5824] Bluetooth: hci1: command tx timeout
[   78.286333][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.325473][ T5824] Bluetooth: hci4: command tx timeout
[   78.332900][ T5823] hsr_slave_0: entered promiscuous mode
[   78.339368][ T5823] hsr_slave_1: entered promiscuous mode
[   78.359888][ T5835] team0: Port device team_slave_1 added
[   78.387405][ T5829] team0: Port device team_slave_0 added
[   78.394638][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.402135][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.428320][ T5824] Bluetooth: hci3: command tx timeout
[   78.428349][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.446651][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.453604][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.480015][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.516300][ T5829] team0: Port device team_slave_1 added
[   78.541099][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.548108][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.574125][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.641222][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.648422][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.674922][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.699138][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.706250][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.732409][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.753905][ T5822] hsr_slave_0: entered promiscuous mode
[   78.761452][ T5822] hsr_slave_1: entered promiscuous mode
[   78.767724][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.775626][ T5822] Cannot create hsr debugfs directory
[   78.796047][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.803076][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.829477][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.875676][ T5839] hsr_slave_0: entered promiscuous mode
[   78.882016][ T5839] hsr_slave_1: entered promiscuous mode
[   78.888394][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.896010][ T5839] Cannot create hsr debugfs directory
[   78.992779][ T5835] hsr_slave_0: entered promiscuous mode
[   78.999400][ T5835] hsr_slave_1: entered promiscuous mode
[   79.005673][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.013226][ T5835] Cannot create hsr debugfs directory
[   79.080089][ T5829] hsr_slave_0: entered promiscuous mode
[   79.087522][ T5829] hsr_slave_1: entered promiscuous mode
[   79.093503][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.101416][ T5829] Cannot create hsr debugfs directory
[   79.397924][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.433849][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.475467][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.503015][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.570438][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.593184][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.611058][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.631621][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.655323][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.666720][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.677380][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.698610][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.787087][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.807090][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.838885][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.860358][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.878708][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.961231][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   79.980677][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   80.003070][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   80.015228][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.022458][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.041820][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   80.052495][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   80.068084][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.075226][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.104655][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.149966][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   80.181129][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.206954][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.243216][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.250346][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.288805][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.295960][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.322297][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   80.329614][ T5828] Bluetooth: hci2: command tx timeout
[   80.335476][   T51] Bluetooth: hci0: command tx timeout
[   80.341032][ T5824] Bluetooth: hci1: command tx timeout
[   80.407569][ T5824] Bluetooth: hci4: command tx timeout
[   80.414999][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.422440][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.434862][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.442256][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.485858][ T5824] Bluetooth: hci3: command tx timeout
[   80.494351][ T5822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   80.506742][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.533172][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.610265][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.664285][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   80.699845][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.707057][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.728630][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.761825][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.768971][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.833773][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   80.852469][ T5823] veth0_vlan: entered promiscuous mode
[   80.874993][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.882148][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.904116][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.911323][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.934951][ T5823] veth1_vlan: entered promiscuous mode
[   80.964499][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.050631][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.096120][ T5823] veth0_macvtap: entered promiscuous mode
[   81.137814][ T5823] veth1_macvtap: entered promiscuous mode
[   81.194271][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.264409][ T5822] veth0_vlan: entered promiscuous mode
[   81.299252][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.323240][ T5822] veth1_vlan: entered promiscuous mode
[   81.342948][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.382477][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.397328][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.426574][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.435414][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.444114][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.551499][ T5822] veth0_macvtap: entered promiscuous mode
[   81.582186][ T5822] veth1_macvtap: entered promiscuous mode
[   81.652696][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.664481][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.711836][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.719493][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.733814][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.743969][ T5835] veth0_vlan: entered promiscuous mode
[   81.763455][ T5835] veth1_vlan: entered promiscuous mode
[   81.784768][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.794326][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.804105][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.813932][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.857929][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.869998][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.946478][ T5829] veth0_vlan: entered promiscuous mode
[   81.966124][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   81.979189][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.986451][ T5835] veth0_macvtap: entered promiscuous mode
[   82.017957][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.034065][ T5835] veth1_macvtap: entered promiscuous mode
[   82.049502][ T5839] veth0_vlan: entered promiscuous mode
[   82.059291][ T5829] veth1_vlan: entered promiscuous mode
[   82.118321][ T5839] veth1_vlan: entered promiscuous mode
[   82.143106][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.146645][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.159884][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.194740][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.206617][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.216183][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.224901][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.238329][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.323032][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.346294][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.405512][ T5828] Bluetooth: hci2: command tx timeout
[   82.409929][ T5824] Bluetooth: hci1: command tx timeout
[   82.411105][   T51] Bluetooth: hci0: command tx timeout
[   82.446820][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.455480][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.557389][   T51] Bluetooth: hci4: command tx timeout
[   82.626017][   T51] Bluetooth: hci3: command tx timeout
[   82.640545][ T5829] veth0_macvtap: entered promiscuous mode
[   82.921510][ T5829] veth1_macvtap: entered promiscuous mode
[   83.004448][ T5839] veth0_macvtap: entered promiscuous mode
[   83.018880][ T5839] veth1_macvtap: entered promiscuous mode
[   83.171196][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.230177][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.282761][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.297128][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.306059][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.314827][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.324103][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.478714][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.538660][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.688559][ T5920] netlink: 356 bytes leftover after parsing attributes in process `syz.3.6'.
[   83.698034][ T5920] openvswitch: netlink: Flow actions attr not present in new flow.
[   83.811193][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.035350][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.044084][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.885388][   T51] Bluetooth: hci2: command tx timeout
[   84.897154][   T51] Bluetooth: hci1: command tx timeout
[   84.903232][   T51] Bluetooth: hci0: command tx timeout
[   84.908970][   T51] Bluetooth: hci4: command tx timeout
[   84.922057][   T51] Bluetooth: hci3: command tx timeout
[   85.056696][ T5931] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   85.289471][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.308399][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.436198][ T5938] process 'syz.1.8' launched '/dev/fd/5' with NULL argv: empty string added
[   85.651950][ T5940] openvswitch: netlink: Actions may not be safe on all matching packets
[   86.311430][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.330136][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.443879][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.503109][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.334679][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.586492][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.075217][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   89.535475][    T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!!
[   89.544258][    T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!!
[   89.553175][    T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!!
[   89.562381][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   89.570898][    T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!!
[   89.580625][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   90.008094][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   90.315518][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[   90.724900][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   91.465132][   T24] IPVS: starting estimator thread 0...
[   91.688082][ T5978] IPVS: using max 26 ests per chain, 62400 per kthread
[   92.107210][    T9] cfg80211: failed to load regulatory.db
[   92.779212][ T5998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.21'.
[   93.989643][ T6006] capability: warning: `syz.0.24' uses deprecated v2 capabilities in a way that may be insecure
[   94.105212][ T6009] netlink: 'syz.4.25': attribute type 21 has an invalid length.
[   94.133392][ T6009] netlink: 'syz.4.25': attribute type 6 has an invalid length.
[   94.278245][ T6009] netlink: 132 bytes leftover after parsing attributes in process `syz.4.25'.
[   94.555472][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'.
[   94.799303][ T6021] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET)
[   97.563988][ T6044] Zero length message leads to an empty skb
[   99.320051][ T6061] netlink: 552 bytes leftover after parsing attributes in process `syz.1.51'.
[   99.417106][ T6066] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.426326][ T6061] bridge1: the hash_elasticity option has been deprecated and is always 16
[  100.343743][   T51] Bluetooth: hci4: command 0x0405 tx timeout
[  100.677397][ T6066] IPVS: Error connecting to the multicast addr
[  101.170579][ T6086] openvswitch: netlink: Actions may not be safe on all matching packets
[  102.266007][ T6097] netlink: 356 bytes leftover after parsing attributes in process `syz.1.50'.
[  102.274976][ T6097] openvswitch: netlink: Flow actions attr not present in new flow.
[  103.125749][ T6098] netlink: 'syz.0.54': attribute type 10 has an invalid length.
[  103.175485][ T6098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.54'.
[  103.241465][ T6070] netlink: 76 bytes leftover after parsing attributes in process `syz.2.43'.
[  103.767136][ T6098] team0: Port device geneve0 added
[  104.465301][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  104.678957][   T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  104.721782][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.790744][   T24] usb 2-1: Product: syz
[  104.823225][   T24] usb 2-1: Manufacturer: syz
[  104.854704][   T24] usb 2-1: SerialNumber: syz
[  104.926783][   T24] usb 2-1: config 0 descriptor??
[  104.934079][ T6137] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  105.182743][   T24] hso 2-1:0.0: Failed to find BULK IN ep
[  105.750599][ T6147] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  106.456206][   T24] usb-storage 2-1:0.0: USB Mass Storage device detected
[  106.489035][ T6145] netlink: 'syz.2.71': attribute type 10 has an invalid length.
[  106.565330][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.71'.
[  106.756668][   T24] usb 2-1: USB disconnect, device number 2
[  106.785011][ T6145] team0: Port device geneve0 added
[  107.192145][ T6164] openvswitch: netlink: Actions may not be safe on all matching packets
[  108.026111][ T6169] usb usb8: usbfs: process 6169 (syz.0.79) did not claim interface 0 before use
[  109.534638][ T6196] sp0: Synchronizing with TNC
[  109.597838][ T6200] program syz.1.91 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  109.895111][   T43] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  110.045769][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  110.085962][   T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.118822][   T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  110.156129][   T43] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  110.183574][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.218983][   T43] usb 4-1: config 0 descriptor??
[  110.225148][   T24] usb 3-1: Using ep0 maxpacket: 8
[  110.230365][ T5824] Bluetooth: hci0: Malformed LE Event: 0x1d
[  110.259203][   T43] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  110.285201][   T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  110.305341][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  110.322676][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[  110.336649][   T43] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  110.355193][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[  110.375542][   T43] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  110.382701][   T43] usb 4-1: media controller created
[  110.395109][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  110.418303][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  110.432099][   T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  110.466379][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  110.472275][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.480937][   T43] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  110.519612][   T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[  110.545305][   T24] usb 3-1: config 0 descriptor??
[  110.572342][   T43] dvb-usb: schedule remote query interval to 150 msecs.
[  110.615230][   T43] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  110.626922][   T43] usb 4-1: USB disconnect, device number 2
[  110.707117][   T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  111.021701][   T24] redragon 0003:0C45:760B.0001: unknown main item tag 0x6
[  111.055117][   T24] redragon 0003:0C45:760B.0001: item fetching failed at offset 7/133
[  111.084390][   T24] redragon 0003:0C45:760B.0001: probe with driver redragon failed with error -22
[  111.227517][   T24] usb 3-1: USB disconnect, device number 2
[  112.281701][ T6244] Bluetooth: MGMT ver 1.23
[  112.415132][ T5908] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  112.428868][ T6249] netlink: 10 bytes leftover after parsing attributes in process `syz.4.115'.
[  112.603566][ T5908] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  112.630313][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.687098][ T5908] usb 1-1: config 0 descriptor??
[  112.708794][ T5908] cp210x 1-1:0.0: cp210x converter detected
[  113.000563][ T6267] macvlan0: entered promiscuous mode
[  113.026825][ T6267] batadv0: entered promiscuous mode
[  113.129197][ T5908] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  113.198384][ T6270] netlink: 'syz.2.124': attribute type 7 has an invalid length.
[  113.216002][ T5908] usb 1-1: cp210x converter now attached to ttyUSB0
[  113.269639][ T6275] netlink: 'syz.2.124': attribute type 2 has an invalid length.
[  113.314407][ T6270] : entered promiscuous mode
[  113.346735][ T6271] syzkaller1: entered promiscuous mode
[  113.352367][ T6271] syzkaller1: entered allmulticast mode
[  113.394814][   T10] usb 1-1: USB disconnect, device number 2
[  113.431961][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  113.486117][   T10] cp210x 1-1:0.0: device disconnected
[  114.308868][   T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.468891][   T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.653577][   T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.762771][ T6296] dvmrp5: entered allmulticast mode
[  114.841641][   T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.921748][ T6296] pimreg: entered allmulticast mode
[  114.970212][ T6305] pimreg: left allmulticast mode
[  115.015320][ T6305] dvmrp5: left allmulticast mode
[  115.211694][ T6309] netlink: 132 bytes leftover after parsing attributes in process `syz.4.141'.
[  115.709364][   T59] bridge_slave_1: left allmulticast mode
[  115.748869][   T59] bridge_slave_1: left promiscuous mode
[  115.754889][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.864670][ T6326] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  115.904469][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  115.907162][   T59] bridge_slave_0: left allmulticast mode
[  115.919921][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  115.933543][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  115.949533][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  115.961972][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  115.982761][   T59] bridge_slave_0: left promiscuous mode
[  116.015329][ T5874] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  116.024179][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.185082][ T5874] usb 1-1: Using ep0 maxpacket: 8
[  116.207814][ T5874] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  116.225571][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.251180][ T5874] usb 1-1: Product: syz
[  116.268664][ T5874] usb 1-1: Manufacturer: syz
[  116.273300][ T5874] usb 1-1: SerialNumber: syz
[  116.326727][ T5874] usb 1-1: config 0 descriptor??
[  116.371713][ T5874] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  116.846032][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.872689][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.907052][   T59] bond0 (unregistering): Released all slaves
[  117.343876][ T5874] gspca_sonixj: reg_w1 err -71
[  117.385259][ T5874] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  117.426205][ T5874] usb 1-1: USB disconnect, device number 3
[  117.866345][   T30] audit: type=1326 audit(1748964917.242:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6367 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5478e969 code=0x7fc00000
[  117.970376][   T30] audit: type=1326 audit(1748964917.252:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6367 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5478e969 code=0x7fc00000
[  118.031571][ T5824] Bluetooth: hci3: command tx timeout
[  118.065605][   T30] audit: type=1326 audit(1748964917.252:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6367 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5478e969 code=0x7fc00000
[  118.107344][   T30] audit: type=1326 audit(1748964917.252:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6367 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5478e969 code=0x7fc00000
[  118.160202][   T30] audit: type=1326 audit(1748964917.252:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6367 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5478e969 code=0x7fc00000
[  118.194122][    T9] kernel write not supported for file /79/net/ip_vs_stats (pid: 9 comm: kworker/0:0)
[  118.282891][   T30] audit: type=1326 audit(1748964917.252:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6367 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5478e969 code=0x7fc00000
[  118.378093][   T59] hsr_slave_0: left promiscuous mode
[  118.402321][   T59] hsr_slave_1: left promiscuous mode
[  118.403624][   T30] audit: type=1326 audit(1748964917.252:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6367 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5478e969 code=0x7fc00000
[  118.426603][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.456958][ T6383] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  118.481138][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.486670][   T30] audit: type=1326 audit(1748964917.252:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6367 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5478e969 code=0x7fc00000
[  118.519956][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.535529][ T5874] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  118.547363][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.569017][   T30] audit: type=1326 audit(1748964917.252:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6367 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5478e969 code=0x7fc00000
[  118.646894][   T59] veth1_macvtap: left promiscuous mode
[  118.661093][   T30] audit: type=1326 audit(1748964917.252:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6367 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5478e969 code=0x7fc00000
[  118.686001][   T59] veth0_macvtap: left promiscuous mode
[  118.691672][   T59] veth1_vlan: left promiscuous mode
[  118.705145][ T5874] usb 4-1: Using ep0 maxpacket: 8
[  118.711218][   T59] veth0_vlan: left promiscuous mode
[  118.719735][ T5874] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  118.735251][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.743403][ T5874] usb 4-1: Product: syz
[  118.766392][ T5874] usb 4-1: Manufacturer: syz
[  118.779757][ T5874] usb 4-1: SerialNumber: syz
[  118.797686][ T5874] usb 4-1: config 0 descriptor??
[  118.818052][ T5874] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  119.656911][   T59] team0 (unregistering): Port device team_slave_1 removed
[  119.719193][   T59] team0 (unregistering): Port device team_slave_0 removed
[  119.841103][ T5874] gspca_sonixj: reg_w1 err -71
[  119.945441][ T5874] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  119.982587][ T5874] usb 4-1: USB disconnect, device number 3
[  120.097592][ T5824] Bluetooth: hci3: command tx timeout
[  120.735102][ T5874] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  120.905135][ T5874] usb 4-1: Using ep0 maxpacket: 32
[  120.912219][ T5874] usb 4-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.923659][ T5874] usb 4-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.952140][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0
[  120.989361][ T5874] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  121.037020][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.090751][ T5874] usb 4-1: config 0 descriptor??
[  121.105178][ T1212] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  121.381511][ T1212] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  121.383234][ T6328] chnl_net:caif_netlink_parms(): no params data found
[  121.529217][ T1212] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  121.613737][ T1212] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  121.691566][ T1212] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  121.703847][ T5874] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0
[  121.725106][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.741975][ T5874] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0
[  121.761326][ T1212] usb 3-1: Product: syz
[  121.768986][ T5874] petalynx 0003:18B1:0037.0002: item fetching failed at offset 2/3
[  121.787398][ T1212] usb 3-1: Manufacturer: syz
[  121.792005][ T1212] usb 3-1: SerialNumber: syz
[  121.827161][ T5874] petalynx 0003:18B1:0037.0002: parse failed
[  121.863761][ T5874] petalynx 0003:18B1:0037.0002: probe with driver petalynx failed with error -22
[  121.879335][ T6421] input: syz1 as /devices/virtual/input/input6
[  121.889368][ T6411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  121.947919][ T5874] usb 4-1: USB disconnect, device number 4
[  122.175279][ T5824] Bluetooth: hci3: command tx timeout
[  122.182908][ T6411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  122.379668][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.408109][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.434917][ T6328] bridge_slave_0: entered allmulticast mode
[  122.476995][ T6328] bridge_slave_0: entered promiscuous mode
[  122.513216][ T5908] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  122.522092][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.538342][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.569651][ T6328] bridge_slave_1: entered allmulticast mode
[  122.627590][ T6328] bridge_slave_1: entered promiscuous mode
[  122.689549][ T5908] usb 1-1: config 0 has an invalid interface number: 49 but max is 0
[  122.708193][ T5908] usb 1-1: config 0 has no interface number 0
[  122.731745][ T5908] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad
[  122.761324][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.796163][ T6328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.819432][ T5908] usb 1-1: config 0 descriptor??
[  122.838623][ T6328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.848568][ T6411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  122.855986][ T5874] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  123.006632][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  123.049242][ T6328] team0: Port device team_slave_0 added
[  123.067314][ T5874] usb 4-1: config 0 has no interfaces?
[  123.077572][ T5874] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  123.097171][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  123.104471][ T6328] team0: Port device team_slave_1 added
[  123.112137][ T1212] cdc_ncm 3-1:1.0: bind() failure
[  123.133933][ T1212] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[  123.146460][ T5874] usb 4-1: SerialNumber: syz
[  123.162521][ T5874] usb 4-1: config 0 descriptor??
[  123.168238][ T1212] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  123.189571][ T1212] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[  123.213544][ T1212] usb 3-1: USB disconnect, device number 3
[  123.215228][    T9] usb 5-1: config 0 has no interfaces?
[  123.292919][    T9] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  123.332847][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.360157][    T9] usb 5-1: Product: syz
[  123.368786][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.374964][    T9] usb 5-1: Manufacturer: syz
[  123.384625][    T9] usb 5-1: SerialNumber: syz
[  123.394003][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.416773][    T9] usb 5-1: config 0 descriptor??
[  123.470557][ T6328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.513154][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.531813][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.585157][ T6328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.634100][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.654431][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.689557][ T5874] usb 4-1: USB disconnect, device number 5
[  123.727492][ T6436] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.810209][ T5908] usb 5-1: USB disconnect, device number 2
[  123.882851][ T6328] hsr_slave_0: entered promiscuous mode
[  123.900078][ T6328] hsr_slave_1: entered promiscuous mode
[  123.914057][ T6328] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  123.930694][ T6328] Cannot create hsr debugfs directory
[  124.245312][ T5824] Bluetooth: hci3: command tx timeout
[  125.385170][ T5908] usb 1-1: USB disconnect, device number 4
[  125.557071][ T6476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.193'.
[  125.684859][ T6483] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  126.961160][ T6511] input: syz0 as /devices/virtual/input/input7
[  127.032208][ T6328] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  127.098756][ T6328] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  127.183724][ T6328] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  127.269766][ T6328] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  127.509433][ T6522] bridge0: port 3(erspan0) entered blocking state
[  127.535251][ T6522] bridge0: port 3(erspan0) entered disabled state
[  127.541991][ T6522] erspan0: entered allmulticast mode
[  127.585349][ T6522] erspan0: entered promiscuous mode
[  127.606031][ T6522] bridge0: port 3(erspan0) entered blocking state
[  127.612886][ T6522] bridge0: port 3(erspan0) entered forwarding state
[  127.737499][ T6526] erspan0: left allmulticast mode
[  127.765383][ T6526] erspan0: left promiscuous mode
[  127.783893][ T6526] bridge0: port 3(erspan0) entered disabled state
[  128.294400][ T6328] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.404648][ T6328] 8021q: adding VLAN 0 to HW filter on device team0
[  128.476772][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.483997][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.605587][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.612798][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.845206][ T5873] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  129.035260][ T5873] usb 5-1: Using ep0 maxpacket: 16
[  129.059343][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.094753][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.135260][ T5873] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  129.144343][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.224329][ T5873] usb 5-1: config 0 descriptor??
[  129.742063][ T5873] hid-picolcd 0003:04D8:F002.0003: unknown main item tag 0x0
[  129.783176][ T5873] hid-picolcd 0003:04D8:F002.0003: unknown main item tag 0x0
[  129.799550][ T6580] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61)
[  129.815467][ T5873] hid-picolcd 0003:04D8:F002.0003: unknown main item tag 0x0
[  129.859139][ T5873] hid-picolcd 0003:04D8:F002.0003: unknown main item tag 0x0
[  129.910888][ T5873] hid-picolcd 0003:04D8:F002.0003: unknown main item tag 0x0
[  129.984910][ T6328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.997342][ T5873] hid-picolcd 0003:04D8:F002.0003: No report with id 0xf3 found
[  130.076259][ T5873] hid-picolcd 0003:04D8:F002.0003: No report with id 0xf4 found
[  130.508820][ T6328] veth0_vlan: entered promiscuous mode
[  130.572061][ T6328] veth1_vlan: entered promiscuous mode
[  130.800023][ T6607] Bluetooth: MGMT ver 1.23
[  130.844824][ T6328] veth0_macvtap: entered promiscuous mode
[  130.914738][ T6328] veth1_macvtap: entered promiscuous mode
[  131.043874][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.125772][ T5874] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[  131.144970][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.176338][ T6328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.205306][ T6328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.228376][ T6328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.256702][ T6328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.923556][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.023375][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.262198][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.315537][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.328837][ T5873] usb 5-1: USB disconnect, device number 3
[  132.571207][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  133.368738][ T6657] fuse: Bad value for 'rootmode'
[  133.564514][ T6657] overlayfs: missing 'lowerdir'
[  133.778357][ T6670] Driver unsupported XDP return value 0 on prog  (id 39) dev N/A, expect packet loss!
[  134.055261][ T5908] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  134.215278][ T5908] usb 2-1: Using ep0 maxpacket: 16
[  134.232016][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.281144][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  134.309900][ T5908] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  134.375381][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.410323][ T5908] usb 2-1: config 0 descriptor??
[  134.674432][ T5908] usbhid 2-1:0.0: can't add hid device: -71
[  134.711611][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  134.771696][ T5908] usb 2-1: USB disconnect, device number 3
[  135.832730][ T6708] trusted_key: syz.0.251 sent an empty control message without MSG_MORE.
[  136.303710][ T5908] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  136.485838][ T5908] usb 3-1: Using ep0 maxpacket: 8
[  136.503011][ T5908] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  136.526532][ T5908] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  136.553070][ T5908] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  136.588279][ T5908] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  136.655107][ T5908] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  136.727607][ T5908] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  136.797021][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.225405][   T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  137.232487][ T5908] usb 3-1: GET_CAPABILITIES returned 0
[  137.395248][ T5908] usbtmc 3-1:16.0: can't read capabilities
[  137.486635][ T5908] usb 3-1: USB disconnect, device number 4
[  137.579820][   T43] usb 1-1: Using ep0 maxpacket: 8
[  137.596880][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.655066][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.681550][ T6734] fuse: Bad value for 'rootmode'
[  137.705115][   T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  137.754864][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.775531][ T6734] overlayfs: missing 'lowerdir'
[  137.796063][   T43] usb 1-1: config 0 descriptor??
[  138.115490][ T5908] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  138.212057][   T43] logitech 0003:046D:C24F.0004: unbalanced collection at end of report description
[  138.273123][   T43] logitech 0003:046D:C24F.0004: parse failed
[  138.286235][ T5908] usb 2-1: Using ep0 maxpacket: 32
[  138.295195][   T43] logitech 0003:046D:C24F.0004: probe with driver logitech failed with error -22
[  138.334627][ T5908] usb 2-1: config 0 has an invalid interface number: 231 but max is 0
[  138.353911][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.436234][   T43] usb 1-1: USB disconnect, device number 5
[  138.464875][ T5908] usb 2-1: config 0 has no interface number 0
[  138.499967][ T5908] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  138.551962][ T5908] usb 2-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  138.674231][ T5908] usb 2-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9
[  138.711477][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.749754][ T5908] usb 2-1: Product: syz
[  138.763975][ T5908] usb 2-1: Manufacturer: syz
[  138.795513][ T5908] usb 2-1: SerialNumber: syz
[  138.836709][ T5908] usb 2-1: config 0 descriptor??
[  138.845452][ T6736] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  138.896558][ T5908] usb-storage 2-1:0.231: USB Mass Storage device detected
[  139.183725][ T5908] usb 2-1: USB disconnect, device number 4
[  140.305712][ T6780] fuse: Bad value for 'rootmode'
[  140.442399][ T6780] overlayfs: missing 'lowerdir'
[  141.105421][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  141.187818][ T6802] syz_tun: entered promiscuous mode
[  141.193353][ T6802] vlan2: entered promiscuous mode
[  141.307141][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.366192][    T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  141.402121][    T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  141.448605][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.511729][    T9] usb 1-1: config 0 descriptor??
[  141.555803][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'.
[  142.985807][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  143.175144][   T10] usb 4-1: Using ep0 maxpacket: 16
[  143.201158][   T10] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  143.243401][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  143.301400][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  143.330872][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.364661][   T10] usb 4-1: Product: syz
[  143.383868][   T10] usb 4-1: Manufacturer: syz
[  143.405486][   T10] usb 4-1: SerialNumber: syz
[  143.638608][   T10] usb 4-1: 0:2 : does not exist
[  143.675940][   T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  143.813500][   T10] usb 4-1: USB disconnect, device number 6
[  143.966510][    T9] usb 1-1: USB disconnect, device number 6
[  144.061781][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  147.488492][ T6876] fuse: Unknown parameter 'use00000000000000000000'
[  147.707008][ T6876] overlayfs: missing 'lowerdir'
[  147.902397][ T6883] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967291 (274877906624 ns) > initial count (30400 ns). Using initial count to start timer.
[  147.919650][    C1] vkms_vblank_simulate: vblank timer overrun
[  148.455324][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'.
[  151.265424][ T6924] fuse: Unknown parameter 'use00000000000000000000'
[  151.368467][ T6924] overlayfs: missing 'lowerdir'
[  152.415171][ T5908] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  152.428517][ T6938] 9pnet_fd: Insufficient options for proto=fd
[  152.671653][ T5908] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.734609][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0
[  152.798066][ T5908] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[  152.856681][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.907886][ T5908] usb 4-1: config 0 descriptor??
[  153.055835][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'.
[  153.498776][ T6969] ptrace attach of "./syz-executor exec"[5822] was attempted by "                                                                                                                                                                                                                                                                                                                                eth0 #�u��u0*�i��Ƈ޿_���k�.\x22��#p�/��yL�a��~+>�����3�l{@!2�!��9k��\x0b8I$�Q�=r���\x09/�vӧ�J��#KT���_$A=z�/X�mOX)s�޾_�N���)��6m\x0a\x0b
�뻑z�|d\x1b��yx�\x1bLTrw�|0\x09���\x5c�[� �]V:�Þ\x07x��.TTϿ��a%�Q�CuT����
YZy�!��Ѧ7�vs�\x07��j*�I��{]���*�5Jt�sĪ�~��0�fۮG����:Q\x1b㣤}�`e�L��\x0d�y�g1�\x09i/!�,�u��~)�\x1b2����j�����N��Th�\x1bo:�\x0bq7S�H�L���B��q�(���[�aF����*q�� �v� AN�����Te��L��+u�^����\x07���sha 넙���LD�7�DQ�2!8,�%$��֜y�K������ƴ�����%:��0��d��LWՐ�l\x1b��\x0bh�=m�.�\x0bh��Q}�8/��P��+:�E\x5c�Ԭ��ט���լ�C�R�r^g�Q(�>⺨=\x0c04��*@v���Tځg�:hzW6s)x���\x
[  155.165636][ T5908] usbhid 4-1:0.0: can't add hid device: -71
[  155.353263][ T6981] netlink: 'syz.1.329': attribute type 10 has an invalid length.
[  155.362540][ T6981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.329'.
[  155.393718][ T6981] team0: Port device geneve0 added
[  155.539190][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  155.604170][ T5908] usb 4-1: USB disconnect, device number 7
[  157.353195][ T7011] binder: BINDER_SET_CONTEXT_MGR already set
[  157.392679][ T7011] binder: 7010:7011 ioctl 4018620d 200000000040 returned -16
[  157.425695][ T7011] binder: 7010:7011 ioctl c0306201 2000000003c0 returned -14
[  158.725174][ T5908] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  158.905085][ T5908] usb 3-1: Using ep0 maxpacket: 32
[  158.917277][ T5908] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  158.927129][ T5908] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  158.974669][ T5908] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  159.037288][ T7032] netlink: 'syz.3.342': attribute type 10 has an invalid length.
[  159.065933][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  159.096430][ T7032] netlink: 40 bytes leftover after parsing attributes in process `syz.3.342'.
[  159.135242][ T5908] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  159.177415][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  159.248776][ T7032] team0: Port device geneve0 added
[  159.294881][ T5908] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  159.386036][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.476472][ T5908] usb 3-1: config 0 descriptor??
[  159.698245][ T5908] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  159.794172][ T5908] usb 3-1: USB disconnect, device number 5
[  159.836292][ T5908] usblp0: removed
[  161.835164][ T5908] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  162.155816][ T7054] tipc: Started in network mode
[  162.189080][ T7054] tipc: Node identity ca0471814148, cluster identity 4711
[  162.221964][ T7054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.407159][ T7057] syzkaller0: entered promiscuous mode
[  162.425146][ T7057] syzkaller0: entered allmulticast mode
[  162.443323][ T7057] tipc: Resetting bearer <eth:syzkaller0>
[  162.553918][ T7053] tipc: Resetting bearer <eth:syzkaller0>
[  163.587141][   T43] tipc: Node number set to 2337042817
[  166.722521][ T7053] tipc: Disabling bearer <eth:syzkaller0>
[  170.340687][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  170.396309][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  170.423397][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  170.452555][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  170.500697][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  170.524498][ T7134] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  170.656170][ T7134] qnx6: wrong signature (magic) in superblock #1.
[  170.662725][ T7134] qnx6: unable to read the first superblock
[  171.366441][ T7139] syzkaller0: entered promiscuous mode
[  171.372055][ T7139] syzkaller0: entered allmulticast mode
[  171.787048][ T7144] 9pnet_fd: Insufficient options for proto=fd
[  172.056801][   T30] kauditd_printk_skb: 58 callbacks suppressed
[  172.056849][   T30] audit: type=1326 audit(1748964971.322:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7140 comm="syz.0.372" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2c598e969 code=0x0
[  172.665578][   T51] Bluetooth: hci5: command tx timeout
[  174.408282][ T7130] chnl_net:caif_netlink_parms(): no params data found
[  174.579739][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'.
[  174.635211][ T7178] ip6erspan0: entered promiscuous mode
[  174.725178][   T51] Bluetooth: hci5: command tx timeout
[  175.054877][ T7190] netlink: 'syz.1.384': attribute type 10 has an invalid length.
[  175.062747][ T7190] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'.
[  175.132837][   T30] audit: type=1400 audit(1748964974.512:71): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7155 comm="syz.0.376" netif=wpan0
[  175.206770][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.244401][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.264719][ T7130] bridge_slave_0: entered allmulticast mode
[  175.266479][ T7195] 9pnet_fd: Insufficient options for proto=fd
[  175.745704][ T7130] bridge_slave_0: entered promiscuous mode
[  175.905274][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.933111][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.959933][ T7130] bridge_slave_1: entered allmulticast mode
[  176.009706][ T7130] bridge_slave_1: entered promiscuous mode
[  176.805120][   T51] Bluetooth: hci5: command tx timeout
[  177.272952][ T7130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.420540][ T7130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.391106][ T7130] team0: Port device team_slave_0 added
[  178.552512][ T7130] team0: Port device team_slave_1 added
[  179.617835][   T51] Bluetooth: hci5: command tx timeout
[  179.692613][   T30] audit: type=1800 audit(1748964978.062:72): pid=7212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.390" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  180.066599][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.785175][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.176933][ T7130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.784453][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.846801][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.124260][ T7130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.229110][ T7230] 9pnet_fd: Insufficient options for proto=fd
[  183.772691][ T7227] netlink: 'syz.3.395': attribute type 10 has an invalid length.
[  183.780496][ T7227] netlink: 40 bytes leftover after parsing attributes in process `syz.3.395'.
[  183.870842][ T7130] hsr_slave_0: entered promiscuous mode
[  183.902125][ T7130] hsr_slave_1: entered promiscuous mode
[  183.959918][ T7130] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.036392][ T7130] Cannot create hsr debugfs directory
[  184.219949][ T5908] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  185.670372][ T5908] usb 3-1: unable to get BOS descriptor or descriptor too short
[  185.695701][ T5908] usb 3-1: unable to read config index 0 descriptor/start: -71
[  185.703290][ T5908] usb 3-1: can't read configurations, error -71
[  187.056847][ T7130] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  187.758375][ T7130] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  187.889730][ T7130] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  188.865677][ T7274] netlink: 'syz.2.405': attribute type 10 has an invalid length.
[  188.873665][ T7274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.405'.
[  188.937704][ T7130] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  189.440377][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  189.789166][   T10] usb 4-1: Using ep0 maxpacket: 16
[  189.893898][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.925062][   T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  189.965094][   T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  190.002281][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.058081][   T10] usb 4-1: config 0 descriptor??
[  191.275695][ T7130] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.303234][ T7130] 8021q: adding VLAN 0 to HW filter on device team0
[  191.336153][ T5908] usb 4-1: USB disconnect, device number 8
[  191.354116][ T7287] netlink: 'syz.0.409': attribute type 10 has an invalid length.
[  191.363383][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.370534][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.378414][ T7287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.409'.
[  192.568352][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.575590][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.681813][ T7303] ceph: No mds server is up or the cluster is laggy
[  194.285594][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  195.472598][ T7130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  198.327312][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  198.585539][   T10] usb 3-1: Using ep0 maxpacket: 8
[  198.683875][   T10] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  198.760935][   T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  198.790812][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.864208][ T7130] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.114605][ T5908] usb 3-1: USB disconnect, device number 9
[  201.208193][ T5832] Bluetooth: hci1: command 0x0406 tx timeout
[  201.217353][ T5145] Bluetooth: hci2: command 0x0406 tx timeout
[  201.223557][ T5145] Bluetooth: hci0: command 0x0406 tx timeout
[  201.230580][ T5145] Bluetooth: hci4: command 0x0405 tx timeout
[  209.730264][ T7130] veth0_vlan: entered promiscuous mode
[  209.849178][ T7130] veth1_vlan: entered promiscuous mode
[  210.228289][ T7130] veth0_macvtap: entered promiscuous mode
[  210.249924][ T5828] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  210.293557][ T7130] veth1_macvtap: entered promiscuous mode
[  210.637334][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.998186][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.347065][ T7130] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.375161][ T7130] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.825065][ T7130] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.833932][ T7130] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.839713][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.045055][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.979733][ T7435] netlink: 'syz.1.445': attribute type 10 has an invalid length.
[  214.987686][ T7435] netlink: 40 bytes leftover after parsing attributes in process `syz.1.445'.
[  215.079313][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.105533][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.276216][ T7463] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[7463]
[  217.535126][ T7374] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  218.342078][ T7374] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  218.360327][ T7374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.386641][ T7374] usb 6-1: Product: syz
[  218.390903][ T7374] usb 6-1: Manufacturer: syz
[  219.140171][ T7374] usb 6-1: SerialNumber: syz
[  219.195962][ T7374] usb 6-1: config 0 descriptor??
[  219.476237][ T7374] usb 6-1: can't set config #0, error -71
[  219.523221][ T7374] usb 6-1: USB disconnect, device number 2
[  220.590381][ T7480] fuse: Unknown parameter '0x0000000000000006'
[  221.069723][ T7484] overlayfs: missing 'lowerdir'
[  221.380968][ T7486] bond0: entered promiscuous mode
[  221.400318][ T7488] mmap: syz.0.459 (7488) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  221.455159][ T7486] bond_slave_0: entered promiscuous mode
[  222.413419][ T7486] bond_slave_1: entered promiscuous mode
[  222.851329][ T7488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.459'.
[  228.689672][ T7535] fuse: Unknown parameter '0x0000000000000006'
[  228.829851][ T7545] overlayfs: missing 'lowerdir'
[  232.767755][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'.
[  233.293129][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'.
[  236.158128][ T7589] fuse: Unknown parameter '0x0000000000000006'
[  236.266471][ T7593] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  236.278174][ T7593] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  236.857601][ T7589] overlayfs: missing 'lowerdir'
[  239.675953][ T7604] netlink: 'syz.0.489': attribute type 2 has an invalid length.
[  239.683632][ T7604] netlink: 'syz.0.489': attribute type 1 has an invalid length.
[  239.692058][ T7604] netlink: 152 bytes leftover after parsing attributes in process `syz.0.489'.
[  242.176577][ T7638] fuse: Unknown parameter 'fd0x0000000000000006'
[  242.302451][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  242.784960][ T7638] overlayfs: missing 'lowerdir'
[  244.302276][ T7655] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  244.319693][ T7655] netlink: 40 bytes leftover after parsing attributes in process `syz.2.505'.
[  245.215504][ T7658] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[7658]
[  247.236662][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'.
[  247.245797][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'.
[  248.448773][ T7682] 9pnet_fd: Insufficient options for proto=fd
[  249.522954][ T7686] netlink: 'syz.1.511': attribute type 10 has an invalid length.
[  249.531106][ T7686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.511'.
[  253.667336][ T7716] netlink: 84 bytes leftover after parsing attributes in process `syz.2.517'.
[  254.586729][ T7723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.518'.
[  255.452260][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  256.496135][ T7736] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  257.357481][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.526'.
[  261.394318][ T7786] binder: 7783:7786 ioctl c0306201 0 returned -14
[  261.409946][ T7786] binder: 7783:7786 ioctl 4018620d 0 returned -22
[  261.418949][ T7786] binder: 7783:7786 ioctl c0306201 0 returned -14
[  263.499949][ T7796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.537'.
[  265.276752][ T7814] JFS: discard option not supported on device
[  265.286227][ T7814] Mount JFS Failure: -22
[  265.290530][ T7814] jfs_mount failed w/return code = -22
[  267.937740][ T7822] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  267.947174][ T7822] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  267.956803][ T7822] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  268.192321][   T30] audit: type=1800 audit(1748965067.322:73): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.543" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  269.021938][ T7830] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  269.392084][ T7833] overlayfs: missing 'lowerdir'
[  271.747967][ T7847] netlink: 'syz.5.551': attribute type 1 has an invalid length.
[  271.784823][ T7847] netlink: 224 bytes leftover after parsing attributes in process `syz.5.551'.
[  272.027352][ T7847] netlink: 'syz.5.551': attribute type 1 has an invalid length.
[  276.397168][ T5908] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  276.886845][ T5908] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  277.011858][ T7895] overlayfs: missing 'lowerdir'
[  277.075024][ T5908] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  277.084892][ T5908] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  277.695291][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.870151][ T5908] usb 1-1: can't set config #17, error -71
[  277.925450][ T5908] usb 1-1: USB disconnect, device number 7
[  280.916344][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'.
[  281.505140][   T10] IPVS: starting estimator thread 0...
[  281.605244][ T7929] IPVS: using max 34 ests per chain, 81600 per kthread
[  282.433069][ T7943] bridge_slave_0: left allmulticast mode
[  282.438818][ T7943] bridge_slave_0: left promiscuous mode
[  282.445801][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.486631][   T43] IPVS: starting estimator thread 0...
[  282.518266][ T7943] bridge_slave_1: left allmulticast mode
[  282.525038][ T7943] bridge_slave_1: left promiscuous mode
[  282.530717][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.563547][ T7943] bond0: (slave bond_slave_0): Releasing backup interface
[  282.605219][ T7945] IPVS: using max 43 ests per chain, 103200 per kthread
[  282.627761][ T7943] bond0: (slave bond_slave_1): Releasing backup interface
[  282.680134][ T7943] team0: Port device team_slave_0 removed
[  282.709749][ T7943] team0: Port device team_slave_1 removed
[  282.717100][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.725765][ T7943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.844534][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.852559][ T7943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.949039][ T7943] team0: Port device geneve0 removed
[  282.982162][ T7947] netlink: 20 bytes leftover after parsing attributes in process `syz.5.577'.
[  283.000216][ T7947] netlink: 84 bytes leftover after parsing attributes in process `syz.5.577'.
[  284.828332][ T5908] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  285.037006][ T5908] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  285.307987][ T7972] [U] �
[  286.115366][ T7954] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  286.168348][ T5908] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  286.255040][ T5908] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  286.297072][ T5908] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  286.620837][ T7982] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  287.288848][ T5908] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  287.315022][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.586265][ T5908] usb 6-1: can't set config #4, error -71
[  287.598494][ T5908] usb 6-1: USB disconnect, device number 3
[  292.523254][ T8015] syz.3.593: attempt to access beyond end of device
[  292.523254][ T8015] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  292.536323][ T8015] hpfs: hpfs_map_sector(): read error
[  293.368856][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  294.752845][ T8029] input: syz1 as /devices/virtual/input/input8
[  295.169282][ T8033] xt_TCPMSS: Only works on TCP SYN packets
[  295.466666][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'.
[  296.818234][ T8043] mkiss: ax0: crc mode is auto.
[  296.892559][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'.
[  296.901626][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'.
[  299.342121][ T8068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.605'.
[  299.788109][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  301.487781][ T7374] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  301.749732][ T8084] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  302.495032][ T7374] usb 1-1: Using ep0 maxpacket: 32
[  302.509569][ T7374] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  302.525036][ T7374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.533050][ T7374] usb 1-1: Product: syz
[  302.581014][ T7374] usb 1-1: Manufacturer: syz
[  302.605198][ T7374] usb 1-1: SerialNumber: syz
[  302.629535][ T7374] usb 1-1: config 0 descriptor??
[  302.657967][ T7374] cdc_ether 1-1:0.0: More than one union descriptor, skipping ...
[  303.370839][ T8091] netlink: 'syz.5.613': attribute type 3 has an invalid length.
[  303.378570][ T8091] netlink: 132 bytes leftover after parsing attributes in process `syz.5.613'.
[  304.455059][ T7374] usb 1-1: bad CDC descriptors
[  304.546682][ T7374] usb 1-1: unsupported MDLM descriptors
[  304.739502][ T7374] usb 1-1: USB disconnect, device number 8
[  306.378173][ T8109] tipc: Enabled bearer <ib:tunl0>, priority 27
[  312.800172][ T8156] ceph: No mds server is up or the cluster is laggy
[  317.003432][ T8212] sctp: [Deprecated]: syz.3.639 (pid 8212) Use of struct sctp_assoc_value in delayed_ack socket option.
[  317.003432][ T8212] Use struct sctp_sack_info instead
[  317.377246][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  317.695855][ T8198] syz.5.637 (8198) used greatest stack depth: 17768 bytes left
[  317.767084][   T31] INFO: task syz.4.327:6966 blocked for more than 143 seconds.
[  317.774651][   T31]       Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0
[  317.838473][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  317.892268][   T31] task:syz.4.327       state:D stack:25800 pid:6966  tgid:6964  ppid:5839   task_flags:0x400140 flags:0x00004006
[  317.958335][   T31] Call Trace:
[  317.959581][ T8214] netlink: 'syz.2.642': attribute type 4 has an invalid length.
[  317.965870][   T31]  <TASK>
[  318.000750][   T31]  __schedule+0x16a2/0x4cb0
[  318.194475][ T8223] netlink: 'syz.2.642': attribute type 4 has an invalid length.
[  319.165125][   T31]  ? schedule+0x165/0x360
[  319.169531][   T31]  ? __pfx___schedule+0x10/0x10
[  319.186996][   T31]  ? schedule+0x91/0x360
[  319.219472][   T31]  schedule+0x165/0x360
[  319.966434][   T31]  netfs_wait_for_request+0x1f0/0x600
[  320.073812][ T8218] caif:caif_disconnect_client(): nothing to disconnect
[  320.093899][   T31]  ? __pfx_netfs_write_collection+0x10/0x10
[  320.217529][   T31]  ? __pfx_netfs_wait_for_request+0x10/0x10
[  320.250066][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  320.269070][   T31]  netfs_unbuffered_write_iter_locked+0x52a/0x910
[  320.298830][   T31]  netfs_unbuffered_write_iter+0x4c4/0x660
[  320.324036][   T31]  do_iter_readv_writev+0x56b/0x7f0
[  320.364942][   T31]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  320.394422][   T31]  ? rcu_read_lock_any_held+0xb3/0x120
[  320.438509][   T31]  vfs_writev+0x31a/0x960
[  320.453203][   T31]  ? __lock_acquire+0xab9/0xd20
[  320.473923][   T31]  ? __pfx_vfs_writev+0x10/0x10
[  320.478937][   T31]  ? __fget_files+0x2a/0x420
[  320.502597][   T31]  ? __fget_files+0x3a0/0x420
[  320.516606][   T31]  ? __fget_files+0x2a/0x420
[  320.533178][   T31]  do_writev+0x14d/0x2d0
[  320.548688][   T31]  ? __pfx_do_writev+0x10/0x10
[  320.566447][   T31]  do_syscall_64+0xfa/0x3b0
[  320.580873][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.627416][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.652870][   T31]  ? clear_bhb_loop+0x60/0xb0
[  320.672305][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.700677][   T31] RIP: 0033:0x7f48d4f8e969
[  320.720997][   T31] RSP: 002b:00007f48d5e1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  320.747840][   T31] RAX: ffffffffffffffda RBX: 00007f48d51b5fa0 RCX: 00007f48d4f8e969
[  320.782311][   T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000006
[  320.810508][   T31] RBP: 00007f48d5010ab1 R08: 0000000000000000 R09: 0000000000000000
[  320.847451][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.875743][   T31] R13: 0000000000000000 R14: 00007f48d51b5fa0 R15: 00007ffd160836e8
[  320.913655][   T31]  </TASK>
[  320.926967][   T31] 
[  320.926967][   T31] Showing all locks held in the system:
[  320.990781][   T31] 1 lock held by khungtaskd/31:
[  321.014242][   T31]  #0: ffffffff8e13f140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  321.048950][   T31] 4 locks held by kworker/1:2/1212:
[  321.080422][   T31] 2 locks held by getty/5585:
[  321.098026][   T31]  #0: ffff888030dd10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  321.151204][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  321.186863][   T31] 2 locks held by kworker/0:3/5826:
[  321.205741][   T31] 3 locks held by syz.4.327/6966:
[  321.234323][   T31]  #0: ffff88802a5ba638 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320
[  321.290769][   T31]  #1: ffff888029f88428 (sb_writers#17){.+.+}-{0:0}, at: vfs_writev+0x288/0x960
[  321.299987][   T31]  #2: ffff888057ac8148 (&sb->s_type->i_mutex_key#23){++++}-{4:4}, at: netfs_start_io_direct+0x1ef/0x230
[  321.364288][   T31] 2 locks held by syz.3.617/8118:
[  321.370273][   T31] 2 locks held by syz.1.636/8197:
[  321.392158][   T31] 
[  321.394671][   T31] =============================================
[  321.394671][   T31] 
[  321.437655][   T31] NMI backtrace for cpu 0
[  321.437681][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[  321.437702][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  321.437713][   T31] Call Trace:
[  321.437721][   T31]  <TASK>
[  321.437728][   T31]  dump_stack_lvl+0x189/0x250
[  321.437762][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  321.437790][   T31]  ? __pfx__printk+0x10/0x10
[  321.437820][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  321.437847][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  321.437867][   T31]  ? irqentry_exit+0x74/0x90
[  321.437894][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  321.437930][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  321.437955][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  321.437981][   T31]  watchdog+0xfee/0x1030
[  321.438007][   T31]  ? watchdog+0x1de/0x1030
[  321.438038][   T31]  kthread+0x711/0x8a0
[  321.438061][   T31]  ? __pfx_watchdog+0x10/0x10
[  321.438083][   T31]  ? __pfx_kthread+0x10/0x10
[  321.438105][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  321.438129][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  321.438153][   T31]  ? __pfx_kthread+0x10/0x10
[  321.438174][   T31]  ret_from_fork+0x3f9/0x770
[  321.438201][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  321.438231][   T31]  ? __switch_to_asm+0x39/0x70
[  321.438247][   T31]  ? __switch_to_asm+0x33/0x70
[  321.438267][   T31]  ? __pfx_kthread+0x10/0x10
[  321.438287][   T31]  ret_from_fork_asm+0x1a/0x30
[  321.438319][   T31]  </TASK>
[  321.438388][   T31] Sending NMI from CPU 0 to CPUs 1:
[  321.601790][    C1] NMI backtrace for cpu 1
[  321.601806][    C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[  321.601832][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  321.601844][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  321.601876][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  321.601901][    C1] Code: 89 fb e8 23 00 00 00 48 8b 3d b4 c7 f7 0b 48 89 de 5b e9 f3 8e 56 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 d0 98 92 65 8b 15 98 83
[  321.601922][    C1] RSP: 0018:ffffc90000117930 EFLAGS: 00000246
[  321.601936][    C1] RAX: ffffffff893d4b53 RBX: ffff88802abe6b40 RCX: ffff88801d29da00
[  321.601950][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  321.601961][    C1] RBP: 0000000000000001 R08: ffffffff8f9fb8f7 R09: 1ffffffff1f3f71e
[  321.601974][    C1] R10: dffffc0000000000 R11: fffffbfff1f3f71f R12: dffffc0000000000
[  321.601987][    C1] R13: 1ffff1100557cd73 R14: 0000000000000000 R15: 1ffff1100557cd74
[  321.602000][    C1] FS:  0000000000000000(0000) GS:ffff888125d93000(0000) knlGS:0000000000000000
[  321.602014][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  321.602027][    C1] CR2: 0000200000030000 CR3: 00000000354e8000 CR4: 00000000003526f0
[  321.602042][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  321.602052][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  321.602063][    C1] Call Trace:
[  321.602070][    C1]  <TASK>
[  321.602076][    C1]  skb_release_head_state+0x175/0x250
[  321.602103][    C1]  consume_skb+0x60/0xf0
[  321.602123][    C1]  nsim_dev_trap_report_work+0x7cf/0xb80
[  321.602160][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  321.602200][    C1]  process_scheduled_works+0xae1/0x17b0
[  321.602240][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  321.602274][    C1]  worker_thread+0x8a0/0xda0
[  321.602313][    C1]  kthread+0x711/0x8a0
[  321.602332][    C1]  ? __pfx_worker_thread+0x10/0x10
[  321.602357][    C1]  ? __pfx_kthread+0x10/0x10
[  321.602376][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  321.602399][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  321.602422][    C1]  ? __pfx_kthread+0x10/0x10
[  321.602441][    C1]  ret_from_fork+0x3f9/0x770
[  321.602465][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  321.602491][    C1]  ? __switch_to_asm+0x39/0x70
[  321.602507][    C1]  ? __switch_to_asm+0x33/0x70
[  321.602522][    C1]  ? __pfx_kthread+0x10/0x10
[  321.602540][    C1]  ret_from_fork_asm+0x1a/0x30
[  321.602565][    C1]  </TASK>
[  322.279718][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  322.286626][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[  322.298102][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  322.308177][   T31] Call Trace:
[  322.311471][   T31]  <TASK>
[  322.314422][   T31]  dump_stack_lvl+0x99/0x250
[  322.319048][   T31]  ? __asan_memcpy+0x40/0x70
[  322.323681][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  322.328911][   T31]  ? __pfx__printk+0x10/0x10
[  322.333552][   T31]  panic+0x2db/0x790
[  322.337481][   T31]  ? __pfx_panic+0x10/0x10
[  322.341933][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  322.347782][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  322.353205][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  322.359390][   T31]  watchdog+0x102d/0x1030
[  322.363752][   T31]  ? watchdog+0x1de/0x1030
[  322.368204][   T31]  kthread+0x711/0x8a0
[  322.372301][   T31]  ? __pfx_watchdog+0x10/0x10
[  322.377003][   T31]  ? __pfx_kthread+0x10/0x10
[  322.381642][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  322.386876][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  322.392101][   T31]  ? __pfx_kthread+0x10/0x10
[  322.396718][   T31]  ret_from_fork+0x3f9/0x770
[  322.401341][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  322.406488][   T31]  ? __switch_to_asm+0x39/0x70
[  322.411278][   T31]  ? __switch_to_asm+0x33/0x70
[  322.416059][   T31]  ? __pfx_kthread+0x10/0x10
[  322.420681][   T31]  ret_from_fork_asm+0x1a/0x30
[  322.425485][   T31]  </TASK>
[  322.428859][   T31] Kernel Offset: disabled
[  322.433189][   T31] Rebooting in 86400 seconds..