last executing test programs:

2m24.957859292s ago: executing program 1 (id=147):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x90000, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x1000)
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x3, 0xffffffffffffffff})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0x3}, {0xf, 0xffff}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000)
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)

2m22.122823736s ago: executing program 1 (id=152):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf6, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2m19.403303749s ago: executing program 1 (id=156):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)}}], 0x2, 0x40002023, 0x0)

2m18.332893427s ago: executing program 1 (id=161):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x48}}, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0})
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200, 0x0)
mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0)

2m14.626091595s ago: executing program 1 (id=165):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xc000000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e20, 0x3, 'lc\x00', 0x2, 0x3, 0x4e}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0)
ioctl$sock_SIOCOUTQ(r5, 0x5411, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)

2m12.598403427s ago: executing program 1 (id=169):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

1m56.305035005s ago: executing program 32 (id=169):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

27.9792746s ago: executing program 2 (id=373):
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0xd2, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "184194", 0x9c, 0x6, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x5e, 0xa, 0x4, 0x5, 0x4a, 0x48, 0xd6b, [@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty]}, @dstopts={0x1, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x7, 0x0, 0x3, 0x9, 0x3, 0x1, 0x3, 0x9, 0x3, 0x4e20, 0x4e20}, 0x3, 0x4}, 0x2}, 0x4}}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4001)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x6}, [@jmp={0x5, 0x0, 0xd, 0x1, 0x90a3abbff9043444, 0x0, 0xffffffffffffffff}, @alu={0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, 0x0}, 0x240048c5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}]}]}]}, 0x2c}}, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c)
migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0)
write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, 0x0)
set_mempolicy(0x6, &(0x7f0000000040)=0x2003c, 0x5)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480))
socket$inet6(0xa, 0x3, 0x8000000003c)

23.697892567s ago: executing program 2 (id=382):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x28880, 0x8c)
lseek(r0, 0x101, 0x1)

22.88601602s ago: executing program 2 (id=383):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36)
lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0)
ustat(0x801, &(0x7f0000000300))
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

20.876848991s ago: executing program 0 (id=389):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x27f8e39913961d64, 0x0)
read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="5cd2672a72d0ae799725ca0860aa1800000001"], &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101c00)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5})

15.646209144s ago: executing program 4 (id=398):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000240)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000003c0)='(\x00', &(0x7f0000000440)='\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1)
close(r4)
getpid()
r5 = syz_usb_connect$hid(0x5, 0x62, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "be181d82"}]}}, 0x0}, 0x0)

15.614522594s ago: executing program 0 (id=399):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf6, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

11.804849984s ago: executing program 4 (id=400):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x29, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
userfaultfd(0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x24044004)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="12f0dda7f17f60", 0x7, 0x800, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00')
ioctl$TIOCSETD(r1, 0x5423, 0x0)

11.804502694s ago: executing program 3 (id=401):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
rmdir(&(0x7f0000000180)='./file1\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

10.694771592s ago: executing program 3 (id=403):
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x7, 0x5, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x5, 0x5, 0x258d, 0xa, 0x9, 0x6, 0x1, 0xe, 0x40, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0xbb], 0x80000000}})
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0)
r1 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x4000032f}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

10.576878323s ago: executing program 0 (id=404):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

10.571209534s ago: executing program 2 (id=405):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70000000000e61da8445300000000c600"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000300)="c4e26d9afac4e17e7fbe009000000fc718ea003800008a0066baf80cb88cbd6588ef66bafc0c66ed0f015d0b260f01c40f01c5f30fc774c0000ff4c0", 0x3c}], 0x1, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r8, 0x89e4, &(0x7f0000000bc0)={0x59, "9984a69e26edfd9b3b04a4b7f57dd89f93c08ecf40e086a2bf6d3070470ec2175bff03ba91f6a27a0603c6de995ae34b81fb4dec3d44ad144088e68b88dbaea386f1283b716c35f680777326309719e45e5b36835640fdd1dd6c7876cfcd7671beb8d03de6dfcfdaecb9d67593e890bc9dd646e82aa45ec7316449b176c73ecf"})
preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/66, 0x42}, {0x0}], 0x2, 0x0, 0x3)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x403, 0x100003, 0x3, 0xe51, 0x5, 0x3, 0x1043, 0xd, 0x3, 0x32a, 0x1, 0x1000ffffffff, 0x6, 0x3, 0x7, 0xa], 0x1, 0x102cd2})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000200)=<r9=>0x0)
syz_open_procfs$namespace(r9, &(0x7f0000000280)='ns/mnt\x00')

10.507002664s ago: executing program 4 (id=406):
mkdir(0x0, 0x54)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x315b83, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc)
fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_usb_connect(0x3, 0x0, 0x0, &(0x7f00000009c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xa2, 0x1, 0x9, 0xff, 0xbe}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x480a}}]})

10.205468159s ago: executing program 5 (id=407):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0x2c020400)
mkdir(&(0x7f0000000040)='./file1\x00', 0x86)
mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
rmdir(&(0x7f0000000180)='./file1\x00')
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r4, 0x227f, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
futimesat(0xffffffffffffffff, 0x0, 0x0)

10.1702345s ago: executing program 3 (id=408):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
syz_io_uring_setup(0x9c, 0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}})
ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}})
mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x880, &(0x7f0000000800))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12})
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000280)={0xf0f022})
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0xc, 0x40, 0xe0fd}, 0x9, 0x1, 0x0, 0xc, 0x0, 0x6}})

10.008833752s ago: executing program 0 (id=409):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0x101, 0x7, "ea71061d0000000001000200", 0x0, 0x80})
writev(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)

8.666164233s ago: executing program 5 (id=410):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10)
setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=<r4=>0x0)
ptrace(0x11, r4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffd75, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0)

8.030178253s ago: executing program 0 (id=411):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000240)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000003c0)='(\x00', &(0x7f0000000440)='\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1)
close(r4)
getpid()
r5 = syz_usb_connect$hid(0x5, 0x62, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "be181d82"}]}}, 0x0}, 0x0)

7.254178476s ago: executing program 3 (id=412):
r0 = socket(0x18, 0x6, 0x200000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newchain={0x74, 0x64, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0x4}, {0xffe0}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xffffff00, 0xffffff00]}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x9}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xff, 0x0, 0xffffffff]}]}}, @TCA_RATE={0x6, 0x5, {0x1c, 0x5}}]}, 0x74}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x4000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000)
creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d5304961)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x410)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = accept4(r2, &(0x7f00000003c0)=@can, &(0x7f0000000440)=0x80, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20010}, 0x0)
read$msr(r2, &(0x7f00000016c0)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
open$dir(0x0, 0x20000, 0x41)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}, 0x6000)
mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYBLOB="040005000000000008000500", @ANYRES32=r5, @ANYBLOB="080005", @ANYBLOB="100004000000000020000100"], 0x3c, 0x1)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0", 0xbd}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$kcm(0x10, 0x2, 0x0)

5.893736617s ago: executing program 3 (id=413):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sysfs$2(0x2, 0x100000000, &(0x7f0000000200)=""/4096)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x24, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)
socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x64, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x40c89}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x32}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xe3}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xc334}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

5.0334075s ago: executing program 5 (id=414):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf6, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5.02376036s ago: executing program 4 (id=415):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
rmdir(&(0x7f0000000180)='./file1\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.942479502s ago: executing program 3 (id=416):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36)
lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0)
ustat(0x801, &(0x7f0000000300))
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

3.907927618s ago: executing program 4 (id=417):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x20002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r6)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r8, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x3, [<r10=>0x0, 0x0, 0x0, <r11=>0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r10, 0x0, 0x0, r11], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, 0x0)

3.725399381s ago: executing program 5 (id=418):
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0xd2, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "184194", 0x9c, 0x6, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x5e, 0xa, 0x4, 0x5, 0x4a, 0x48, 0xd6b, [@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty]}, @dstopts={0x1, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x7, 0x0, 0x3, 0x9, 0x3, 0x1, 0x3, 0x9, 0x3, 0x4e20, 0x4e20}, 0x3, 0x4}, 0x2}, 0x4}}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4001)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x6}, [@jmp={0x5, 0x0, 0xd, 0x1, 0x90a3abbff9043444, 0x0, 0xffffffffffffffff}, @alu={0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, &(0x7f0000000500)={0x0}}, 0x240048c5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}]}]}]}, 0x2c}}, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c)
migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0)
write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, 0x0)
set_mempolicy(0x6, &(0x7f0000000040)=0x2003c, 0x5)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480))
socket$inet6(0xa, 0x3, 0x8000000003c)

3.685613042s ago: executing program 0 (id=419):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = dup(r2)
bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x7}, 0xe)
listen(r2, 0x9)
accept4$vsock_stream(r3, 0x0, 0x58, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004340)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0x2020)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)

2.52794302s ago: executing program 4 (id=420):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r2, 0x5b02, 0x0)
read$char_usb(r1, 0x0, 0x0)
syz_io_uring_setup(0xbd6, &(0x7f0000000640)={0x0, 0xf20b, 0x200, 0x1, 0x400003b3}, &(0x7f00000004c0)=<r3=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
write$char_usb(r1, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x4000884)
syz_usb_disconnect(r0)

1.626277854s ago: executing program 5 (id=421):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000080)={[{@quota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]})
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, 0x0, 0x0)
write(r6, &(0x7f0000000000)="3b000000010006", 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))

1.531637006s ago: executing program 2 (id=422):
r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0x101, 0x7, "ea71061d0000000001000200", 0x0, 0x80})
writev(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)

247.927896ms ago: executing program 5 (id=423):
r0 = socket(0x18, 0x6, 0x200000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newchain={0x74, 0x64, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0x4}, {0xffe0}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xffffff00, 0xffffff00]}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x9}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xff, 0x0, 0xffffffff]}]}}, @TCA_RATE={0x6, 0x5, {0x1c, 0x5}}]}, 0x74}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x4000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000)
creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d5304961)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x410)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = accept4(r2, &(0x7f00000003c0)=@can, &(0x7f0000000440)=0x80, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20010}, 0x0)
read$msr(r2, &(0x7f00000016c0)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
open$dir(0x0, 0x20000, 0x41)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}, 0x6000)
mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYBLOB="040005000000000008000500", @ANYRES32=r5, @ANYBLOB="080005", @ANYBLOB="100004000000000020000100"], 0x3c, 0x1)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0", 0xbd}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$kcm(0x10, 0x2, 0x0)

0s ago: executing program 2 (id=424):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts.
[   73.436071][ T4254] cgroup: Unknown subsys name 'net'
[   73.546099][ T4254] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   75.064433][ T4254] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   76.644250][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.645295][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.653218][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.667004][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.669220][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.675452][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.682329][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.689626][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.695834][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.703484][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.710277][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.717091][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.723408][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.730914][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.738876][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.744841][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.752167][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   76.760767][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.765688][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.772956][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.779653][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.786836][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.801618][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   76.802797][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   76.809200][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.817348][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.832173][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   76.840010][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.865238][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   76.877365][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   77.299083][ T4266] chnl_net:caif_netlink_parms(): no params data found
[   77.447653][ T4264] chnl_net:caif_netlink_parms(): no params data found
[   77.466797][ T4271] chnl_net:caif_netlink_parms(): no params data found
[   77.490494][ T4265] chnl_net:caif_netlink_parms(): no params data found
[   77.508901][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.516029][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.524620][ T4266] device bridge_slave_0 entered promiscuous mode
[   77.533843][ T4272] chnl_net:caif_netlink_parms(): no params data found
[   77.573126][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.580792][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.588769][ T4266] device bridge_slave_1 entered promiscuous mode
[   77.665390][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.695037][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.729402][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.736593][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.745212][ T4264] device bridge_slave_0 entered promiscuous mode
[   77.794760][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.802036][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.810709][ T4264] device bridge_slave_1 entered promiscuous mode
[   77.824552][ T4266] team0: Port device team_slave_0 added
[   77.840340][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.847571][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.855391][ T4271] device bridge_slave_0 entered promiscuous mode
[   77.882176][ T4266] team0: Port device team_slave_1 added
[   77.897265][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.904404][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.912379][ T4265] device bridge_slave_0 entered promiscuous mode
[   77.920543][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.927835][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.935754][ T4271] device bridge_slave_1 entered promiscuous mode
[   77.969221][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.976224][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.002207][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.014257][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.022164][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.030155][ T4265] device bridge_slave_1 entered promiscuous mode
[   78.047577][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.065568][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.072776][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.080901][ T4272] device bridge_slave_0 entered promiscuous mode
[   78.090660][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.097724][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.123762][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.149920][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.160912][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.172974][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.182416][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.189754][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.197799][ T4272] device bridge_slave_1 entered promiscuous mode
[   78.245629][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.292107][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.303842][ T4264] team0: Port device team_slave_0 added
[   78.312611][ T4271] team0: Port device team_slave_0 added
[   78.320952][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.347321][ T4264] team0: Port device team_slave_1 added
[   78.364822][ T4271] team0: Port device team_slave_1 added
[   78.381041][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.393080][ T4266] device hsr_slave_0 entered promiscuous mode
[   78.403986][ T4266] device hsr_slave_1 entered promiscuous mode
[   78.413744][ T4265] team0: Port device team_slave_0 added
[   78.459121][ T4265] team0: Port device team_slave_1 added
[   78.467208][ T4272] team0: Port device team_slave_0 added
[   78.473544][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.481693][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.507823][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.543497][ T4272] team0: Port device team_slave_1 added
[   78.550227][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.557326][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.583409][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.595056][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.602484][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.628592][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.644744][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.652020][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.678187][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.721444][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.728524][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.754513][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.768140][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.775301][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.801258][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.839309][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.846303][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.873447][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.900165][ T4264] device hsr_slave_0 entered promiscuous mode
[   78.907496][ T4264] device hsr_slave_1 entered promiscuous mode
[   78.914170][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.923295][ T4264] Cannot create hsr debugfs directory
[   78.923312][ T4279] Bluetooth: hci1: command 0x0409 tx timeout
[   78.935092][ T4279] Bluetooth: hci0: command 0x0409 tx timeout
[   78.935910][ T4267] Bluetooth: hci4: command 0x0409 tx timeout
[   78.941302][ T4278] Bluetooth: hci3: command 0x0409 tx timeout
[   78.941439][ T4278] Bluetooth: hci2: command 0x0409 tx timeout
[   78.961040][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.968210][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.994175][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.064861][ T4271] device hsr_slave_0 entered promiscuous mode
[   79.072123][ T4271] device hsr_slave_1 entered promiscuous mode
[   79.079896][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.087590][ T4271] Cannot create hsr debugfs directory
[   79.134738][ T4265] device hsr_slave_0 entered promiscuous mode
[   79.142104][ T4265] device hsr_slave_1 entered promiscuous mode
[   79.149255][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.156833][ T4265] Cannot create hsr debugfs directory
[   79.226619][ T4272] device hsr_slave_0 entered promiscuous mode
[   79.233785][ T4272] device hsr_slave_1 entered promiscuous mode
[   79.240877][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.249509][ T4272] Cannot create hsr debugfs directory
[   79.523132][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.540507][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.554816][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.565599][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.621572][ T4271] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.643506][ T4271] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.662143][ T4271] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.673412][ T4271] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.733396][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.749376][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.771550][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.805939][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.834018][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.859816][ T4264] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.872801][ T4264] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.911038][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.921797][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.931044][ T4264] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.943329][ T4264] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.972601][ T4266] 8021q: adding VLAN 0 to HW filter on device team0
[   80.030565][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.041017][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.051501][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.059470][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.081565][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.100455][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.109597][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.120294][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.129280][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.136414][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.165680][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.178051][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.188903][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.198145][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.208863][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.218342][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.243453][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   80.252204][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.262172][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.271183][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.280359][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.289748][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.298208][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.305988][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.315306][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.325170][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.334892][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.349074][ T4265] 8021q: adding VLAN 0 to HW filter on device team0
[   80.368080][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.382992][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.403297][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.421334][ T4271] 8021q: adding VLAN 0 to HW filter on device team0
[   80.451438][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.462102][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.473442][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.480666][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.489654][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.498652][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.507372][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.514501][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.522896][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.562292][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.571721][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.581636][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.590249][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.597423][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.605848][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.638070][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.654455][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.668416][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.685522][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   80.713977][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.729340][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.744730][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.755912][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.774534][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.781746][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.795610][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.804685][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.814480][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.824035][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.840126][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.852703][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.862507][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.875357][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   80.894099][ T4264] 8021q: adding VLAN 0 to HW filter on device team0
[   80.908124][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.921691][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.930756][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.938920][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.976002][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.997189][ T4279] Bluetooth: hci0: command 0x041b tx timeout
[   80.997236][ T4278] Bluetooth: hci4: command 0x041b tx timeout
[   81.003231][ T4279] Bluetooth: hci3: command 0x041b tx timeout
[   81.015895][ T4279] Bluetooth: hci1: command 0x041b tx timeout
[   81.016124][ T4267] Bluetooth: hci2: command 0x041b tx timeout
[   81.052353][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.065567][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.079355][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.100469][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.117954][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.133109][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.142390][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.159360][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.168749][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.177717][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.184805][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.192892][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.201596][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.209576][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.219882][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.228656][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.235790][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.243761][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   81.252689][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.261764][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.270261][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.278862][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.286653][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.316633][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.333283][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.394619][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.415767][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.428488][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.453218][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.478806][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.532990][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.545327][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.560904][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.586608][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.597117][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.605840][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.621459][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.631736][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.649346][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.661274][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.683989][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.692956][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.703479][ T4266] device veth0_vlan entered promiscuous mode
[   81.722133][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.747103][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.754680][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.764622][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.775588][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.798663][ T4272] 8021q: adding VLAN 0 to HW filter on device team0
[   81.819013][ T4266] device veth1_vlan entered promiscuous mode
[   81.845588][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.861041][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.894112][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.905991][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.913241][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.994968][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   82.004865][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.019446][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.035837][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.051670][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.062410][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.076642][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.083883][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.100258][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.111798][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.142032][ T4266] device veth0_macvtap entered promiscuous mode
[   82.170713][ T4265] device veth0_vlan entered promiscuous mode
[   82.189281][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.206263][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.224244][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.233987][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.248810][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.263484][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.273822][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.290830][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   82.308253][ T4266] device veth1_macvtap entered promiscuous mode
[   82.322705][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   82.336527][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.356315][ T4265] device veth1_vlan entered promiscuous mode
[   82.366712][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   82.376036][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   82.386015][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   82.396502][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.406822][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.424231][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.436405][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   82.452933][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   82.462863][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   82.478132][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   82.560221][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   82.570809][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   82.588631][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.596156][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.617996][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.626465][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.659024][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.669103][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.682160][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.692427][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.703211][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.715405][ T4265] device veth0_macvtap entered promiscuous mode
[   82.724292][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   82.733577][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.745127][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.761710][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.789877][ T4265] device veth1_macvtap entered promiscuous mode
[   82.829601][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.839724][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.853184][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.863785][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.873658][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.890164][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.938105][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.957208][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.002039][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.020090][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.035290][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.067283][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.075747][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.083680][ T4267] Bluetooth: hci4: command 0x040f tx timeout
[   83.083698][ T4279] Bluetooth: hci1: command 0x040f tx timeout
[   83.089754][ T4267] Bluetooth: hci3: command 0x040f tx timeout
[   83.095952][ T4278] Bluetooth: hci0: command 0x040f tx timeout
[   83.103329][ T4281] Bluetooth: hci2: command 0x040f tx timeout
[   83.135634][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.160292][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.183827][ T4264] device veth0_vlan entered promiscuous mode
[   83.200594][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.217826][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.234501][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.256234][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.265938][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.280411][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.289957][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.301550][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.312640][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.322299][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.331359][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.346321][ T4264] device veth1_vlan entered promiscuous mode
[   83.401692][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.423660][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   83.438140][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   83.446601][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.459720][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   83.523764][ T4264] device veth0_macvtap entered promiscuous mode
[   83.541355][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.558850][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.568481][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.579213][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.598039][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.612886][ T4264] device veth1_macvtap entered promiscuous mode
[   83.644302][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.664696][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.673303][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.683295][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.712595][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.725971][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.737521][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.748411][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.759942][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.787245][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.800371][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.805998][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.808731][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.818646][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.833638][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.842470][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.850998][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.860099][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.875700][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.888251][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.898245][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.908943][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.921106][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.933455][ T4272] device veth0_vlan entered promiscuous mode
[   83.948433][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.958398][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.971912][ T4264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.981277][ T4264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.990245][ T4264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.999343][ T4264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.031448][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.036125][ T4272] device veth1_vlan entered promiscuous mode
[   84.049906][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.062115][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.071789][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.084810][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.094415][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.216831][ T4271] device veth0_vlan entered promiscuous mode
[   84.240591][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.243094][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   84.257432][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.263104][ T4382] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   84.272082][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.293757][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.303558][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.324737][ T4271] device veth1_vlan entered promiscuous mode
[   84.349386][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.361779][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.371768][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.392287][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   84.412520][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.436241][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.470084][ T4272] device veth0_macvtap entered promiscuous mode
[   84.515471][ T4272] device veth1_macvtap entered promiscuous mode
[   84.525988][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.539242][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.558680][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.569712][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.589009][ T4271] device veth0_macvtap entered promiscuous mode
[   84.617859][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.627347][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.702368][ T4271] device veth1_macvtap entered promiscuous mode
[   84.715720][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.734302][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.746489][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.758208][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.790645][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.802327][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.814388][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.823068][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.832295][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.847890][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.871468][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.881251][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.907838][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.919243][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.928053][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.964739][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.980313][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.005386][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.017363][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.029251][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.043581][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.054027][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.066035][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.076590][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.102791][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.117340][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.128603][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.153975][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.167284][ T4280] Bluetooth: hci0: command 0x0419 tx timeout
[   85.173313][ T4280] Bluetooth: hci3: command 0x0419 tx timeout
[   85.179387][ T4267] Bluetooth: hci1: command 0x0419 tx timeout
[   85.185605][ T4278] Bluetooth: hci2: command 0x0419 tx timeout
[   85.191682][ T4281] Bluetooth: hci4: command 0x0419 tx timeout
[   85.200968][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.255556][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.286417][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.323730][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.353960][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.385930][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.416031][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.431876][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.441320][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.485438][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.499399][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.531426][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.561363][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.591950][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.614283][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.634240][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.646741][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.664255][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.683012][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.717774][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.775475][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.823790][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.894167][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.935446][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.946718][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.973489][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.763408][  T952] cfg80211: failed to load regulatory.db
[   86.769633][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[   86.893325][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.940751][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.035878][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.044254][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.089085][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.111810][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.117825][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.134922][ T4406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.180672][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.217086][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.239679][ T4406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.286102][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.769918][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   87.958284][ T4415] overlayfs: missing 'lowerdir'
[   87.978471][ T4415] overlayfs: missing 'lowerdir'
[   88.750962][    T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!!
[   88.759528][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   88.767821][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   88.776082][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   88.784364][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   88.792629][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   88.800898][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   88.809257][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   89.559148][   T41] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   89.559191][ T4428] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11'.
[   89.797244][   T41] usb 4-1: Using ep0 maxpacket: 32
[   90.001956][   T41] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[   90.027734][   T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.050383][   T41] usb 4-1: config 0 descriptor??
[   90.139338][   T41] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[   90.816951][  T127] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   91.287095][  T127] usb 5-1: Using ep0 maxpacket: 32
[   91.309421][  T127] usb 5-1: config 0 has an invalid interface number: 66 but max is 0
[   91.318285][  T127] usb 5-1: config 0 has no interface number 0
[   91.336725][  T127] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[   91.346399][  T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.355627][  T127] usb 5-1: Product: syz
[   91.486283][  T127] usb 5-1: Manufacturer: syz
[   91.511089][  T127] usb 5-1: SerialNumber: syz
[   92.055111][  T127] usb 5-1: config 0 descriptor??
[   92.148613][   T41] gspca_vc032x: reg_w err -71
[   92.154023][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.163581][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.171090][  T127] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[   92.180331][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.185665][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.191691][  T127] dvb-usb: bulk message failed: -22 (2/0)
[   92.201019][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.209677][  T127] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   92.219576][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.225083][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.230594][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.237935][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.243361][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.253120][  T127] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[   92.261519][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.267088][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.276126][  T127] usb 5-1: media controller created
[   92.282857][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.291739][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.313789][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.335344][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.357665][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.380834][   T41] gspca_vc032x: I2c Bus Busy Wait 00
[   92.386421][   T41] gspca_vc032x: Unknown sensor...
[   92.417979][   T41] vc032x: probe of 4-1:0.0 failed with error -22
[   92.451845][   T41] usb 4-1: USB disconnect, device number 2
[   92.511456][  T127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   92.617136][  T127] cxusb: set interface failed
[   92.622518][  T127] dvb-usb: bulk message failed: -22 (1/0)
[   93.802121][  T127] DVB: Unable to find symbol lgdt330x_attach()
[   93.808697][  T127] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[   95.207795][    C1] Illegal XDP return value 16128 on prog  (id 4) dev bond_slave_1, expect packet loss!
[   95.736983][  T127] rc_core: IR keymap rc-dvico-portable not found
[   95.743956][  T127] Registered IR keymap rc-empty
[   95.907902][  T127] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[   95.921255][  T127] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5
[   95.939709][  T127] dvb-usb: schedule remote query interval to 100 msecs.
[   95.946746][  T127] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[   96.063622][  T127] usb 5-1: USB disconnect, device number 2
[   97.055062][ T4491] netlink: 'syz.4.27': attribute type 20 has an invalid length.
[   98.006305][  T127] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[   98.054288][ T4504] Zero length message leads to an empty skb
[   98.605795][ T4504] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[   98.714409][ T4504] Bluetooth: MGMT ver 1.22
[   99.032302][ T4490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27'.
[   99.063330][ T4510] netlink: 'syz.2.31': attribute type 21 has an invalid length.
[   99.074662][ T4510] netlink: 'syz.2.31': attribute type 6 has an invalid length.
[   99.107011][ T4510] netlink: 132 bytes leftover after parsing attributes in process `syz.2.31'.
[   99.994740][ T4529] fuse: Bad value for 'fd'
[  100.018702][ T4529] batman_adv: batadv0: Adding interface: dummy0
[  100.025049][ T4529] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.050837][ T4529] batman_adv: batadv0: Interface activated: dummy0
[  102.360552][ T4536] netlink: 6 bytes leftover after parsing attributes in process `syz.0.37'.
[  102.388222][ T4539] tmpfs: Unknown parameter 'quota'
[  102.805079][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  102.893761][ T4536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  105.855465][ T4558] netlink: 'syz.1.44': attribute type 21 has an invalid length.
[  105.864167][ T4558] netlink: 'syz.1.44': attribute type 6 has an invalid length.
[  105.872465][ T4558] netlink: 132 bytes leftover after parsing attributes in process `syz.1.44'.
[  106.629519][ T4566] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  108.456356][ T4579] Device name cannot be null; rc = [-22]
[  109.427350][ T4583] tmpfs: Unknown parameter 'quota'
[  110.620672][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'.
[  112.899432][ T4612] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  113.976425][ T4629] Device name cannot be null; rc = [-22]
[  114.290033][ T4633] process 'syz.1.61' launched '/dev/fd/3' with NULL argv: empty string added
[  114.747673][ T4339] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  115.317208][ T4339] usb 2-1: Using ep0 maxpacket: 16
[  115.330963][ T4339] usb 2-1: config 6 has an invalid interface number: 28 but max is 3
[  115.344550][ T4339] usb 2-1: config 6 has an invalid interface number: 4 but max is 3
[  115.364575][ T4339] usb 2-1: config 6 has an invalid interface number: 86 but max is 3
[  115.374460][ T4339] usb 2-1: config 6 has an invalid interface number: 191 but max is 3
[  115.390377][ T4339] usb 2-1: config 6 has no interface number 0
[  115.437201][ T4339] usb 2-1: config 6 has no interface number 1
[  115.584444][ T4339] usb 2-1: config 6 has no interface number 2
[  115.623159][ T4339] usb 2-1: config 6 has no interface number 3
[  115.648021][ T4339] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  115.725878][ T4339] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  115.767283][ T4339] usb 2-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  115.891594][ T4339] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  116.071775][ T4339] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  116.112301][ T4659] tmpfs: Unknown parameter 'quota'
[  116.454290][ T4339] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  116.467100][ T4339] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7
[  116.479741][ T4339] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0
[  116.490523][ T4339] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  116.517093][ T4339] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0
[  116.584441][ T4339] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  116.627486][ T4339] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  116.899531][ T4664] Device name cannot be null; rc = [-22]
[  117.884736][ T4339] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  117.943502][ T4339] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  117.957875][ T4339] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  118.099386][ T4339] usb 2-1: config 6 interface 4 has no altsetting 0
[  118.106019][ T4339] usb 2-1: config 6 interface 86 has no altsetting 0
[  118.117801][ T4339] usb 2-1: config 6 interface 191 has no altsetting 0
[  118.137260][ T4339] usb 2-1: string descriptor 0 read error: -71
[  118.162103][ T4339] usb 2-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9
[  118.173741][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.250784][ T4339] usb 2-1: can't set config #6, error -71
[  118.316350][ T4339] usb 2-1: USB disconnect, device number 2
[  119.138597][ T4675] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  125.046215][ T4726] Device name cannot be null; rc = [-22]
[  126.452732][ T4741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.91'.
[  127.117201][ T4748] tmpfs: Unknown parameter 'quota'
[  130.353140][ T4772] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  132.928487][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  132.952022][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  135.016811][ T4808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'.
[  135.029496][ T4808] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.038486][ T4808] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.047215][ T4808] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.055924][ T4808] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.065755][ T4808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'.
[  136.805097][ T4821] netlink: 32 bytes leftover after parsing attributes in process `syz.3.113'.
[  139.592973][ T4838] tmpfs: Unknown parameter 'quota'
[  142.658324][  T127] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  143.027888][  T127] usb 3-1: Using ep0 maxpacket: 16
[  143.040892][  T127] usb 3-1: config 6 has an invalid interface number: 28 but max is 3
[  143.449413][  T127] usb 3-1: config 6 has an invalid interface number: 4 but max is 3
[  143.588138][  T127] usb 3-1: config 6 has an invalid interface number: 86 but max is 3
[  143.596368][  T127] usb 3-1: config 6 has an invalid interface number: 191 but max is 3
[  143.617401][  T127] usb 3-1: config 6 has no interface number 0
[  143.625861][  T127] usb 3-1: config 6 has no interface number 1
[  143.656981][  T127] usb 3-1: config 6 has no interface number 2
[  143.679718][  T127] usb 3-1: config 6 has no interface number 3
[  143.704630][  T127] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  143.756276][  T127] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  143.851505][  T127] usb 3-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  143.892020][  T127] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  143.946908][  T127] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  144.022276][  T127] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  144.034405][  T127] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7
[  144.046926][  T127] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0
[  144.058453][  T127] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  144.070726][  T127] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0
[  144.082098][  T127] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  144.099489][  T127] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  144.112064][  T127] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  144.125463][  T127] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  144.137892][  T127] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  144.149959][  T127] usb 3-1: config 6 interface 4 has no altsetting 0
[  144.157765][  T127] usb 3-1: config 6 interface 86 has no altsetting 0
[  144.164914][  T127] usb 3-1: config 6 interface 191 has no altsetting 0
[  144.181707][  T127] usb 3-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9
[  144.191404][  T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.227287][  T127] usb 3-1: Product: syz
[  144.248190][  T127] usb 3-1: Manufacturer: syz
[  144.272664][  T127] usb 3-1: SerialNumber: syz
[  144.496895][  T127] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware
[  144.553032][  T127] usb 3-1: Direct firmware load for dvb-usb-s630.fw failed with error -2
[  144.561661][  T127] usb 3-1: Falling back to sysfs fallback for: dvb-usb-s630.fw
[  146.648326][ T4893] netlink: 32 bytes leftover after parsing attributes in process `syz.0.131'.
[  147.352070][ T4899] tmpfs: Unknown parameter 'quota'
[  151.707063][ T4330] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  152.038357][ T4330] usb 5-1: Using ep0 maxpacket: 16
[  152.080868][ T4330] usb 5-1: config 6 has an invalid interface number: 28 but max is 3
[  152.092746][ T4330] usb 5-1: config 6 has an invalid interface number: 4 but max is 3
[  152.252622][ T4330] usb 5-1: config 6 has an invalid interface number: 86 but max is 3
[  152.261151][ T4330] usb 5-1: config 6 has an invalid interface number: 191 but max is 3
[  152.269504][ T4330] usb 5-1: config 6 has no interface number 0
[  152.275696][ T4330] usb 5-1: config 6 has no interface number 1
[  152.282578][ T4330] usb 5-1: config 6 has no interface number 2
[  152.288810][ T4330] usb 5-1: config 6 has no interface number 3
[  152.295359][ T4330] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  152.718020][ T4330] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  152.729299][ T4330] usb 5-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  152.740278][ T4330] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  152.886931][ T4330] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  152.932755][ T4330] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  153.139205][ T4330] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7
[  153.208375][ T4942] Device name cannot be null; rc = [-22]
[  153.955875][ T4330] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0
[  154.339748][ T4330] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  154.430658][ T4330] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0
[  154.444535][ T4330] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  154.455411][ T4330] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  154.466453][ T4330] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  154.957849][ T4330] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  154.968711][ T4330] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  154.979576][ T4330] usb 5-1: config 6 interface 4 has no altsetting 0
[  155.016626][ T4330] usb 5-1: config 6 interface 86 has no altsetting 0
[  155.058616][ T4330] usb 5-1: config 6 interface 191 has no altsetting 0
[  156.021098][ T4959] tmpfs: Unknown parameter 'quota'
[  156.478068][ T4330] usb 5-1: string descriptor 0 read error: -71
[  156.500257][ T4330] usb 5-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9
[  156.531786][ T4330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.602103][ T4330] usb 5-1: can't set config #6, error -71
[  156.690592][ T4330] usb 5-1: USB disconnect, device number 3
[  158.563701][ T4966] device syzkaller0 entered promiscuous mode
[  159.453517][ T4982] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  161.147440][ T4999] tmpfs: Unknown parameter 'quota'
[  164.414895][ T5016] fuse: Bad value for 'fd'
[  166.995588][ T5020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.299963][ T5021] netlink: 'syz.1.169': attribute type 10 has an invalid length.
[  167.348488][ T5021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.169'.
[  168.126183][ T5021] team0: Port device geneve0 added
[  168.682568][ T5045] tmpfs: Unknown parameter 'quota'
[  169.022937][ T5020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.305318][ T5020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.477485][ T5020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.506399][ T5055] netlink: 'syz.3.176': attribute type 20 has an invalid length.
[  170.838166][ T5055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.176'.
[  171.673474][ T5070] nvme_fabrics: missing parameter 'transport=%s'
[  171.680281][ T5070] nvme_fabrics: missing parameter 'nqn=%s'
[  176.472533][ T5116] Device name cannot be null; rc = [-22]
[  177.268779][ T5120] fuse: Unknown parameter 'f€	0xffffffffffffffff1844674407370955161500000000000000000000ÿÿÿÿ00000000000000000000'
[  177.284431][ T5120] fuse: Bad value for 'fd'
[  179.853187][ T5136] device syzkaller0 entered promiscuous mode
[  180.091596][ T5141] Device name cannot be null; rc = [-22]
[  180.895629][ T5144] fuse: Bad value for 'fd'
[  182.575786][ T5020] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.623232][ T5020] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.208233][ T5020] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.353980][ T5020] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.735232][ T5184] Device name cannot be null; rc = [-22]
[  187.736522][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  187.752835][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  187.762396][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  187.771159][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  187.783510][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  187.792284][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  188.864026][ T5193] device syzkaller0 entered promiscuous mode
[  188.959661][ T5197] Device name cannot be null; rc = [-22]
[  189.774847][ T5183] chnl_net:caif_netlink_parms(): no params data found
[  189.877021][ T4281] Bluetooth: hci2: command 0x0409 tx timeout
[  190.042762][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.050882][ T5183] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.059146][ T5183] device bridge_slave_0 entered promiscuous mode
[  190.810936][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.818187][ T5183] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.827581][ T5183] device bridge_slave_1 entered promiscuous mode
[  190.933209][ T5183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.958737][ T5183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.236649][ T5183] team0: Port device team_slave_0 added
[  191.280849][ T5183] team0: Port device team_slave_1 added
[  191.634637][ T5183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.671909][ T5183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.951543][ T5183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.957385][ T4281] Bluetooth: hci2: command 0x041b tx timeout
[  192.863648][ T5183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.884985][ T5183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.947955][ T5221] autofs4:pid:5221:autofs_fill_super: called with bogus options
[  192.976270][ T5183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.202715][ T4530] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.217536][ T5234] Device name cannot be null; rc = [-22]
[  194.290058][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  194.297008][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  194.318901][ T5183] device hsr_slave_0 entered promiscuous mode
[  194.334408][ T5183] device hsr_slave_1 entered promiscuous mode
[  194.599382][ T5183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.622232][ T5183] Cannot create hsr debugfs directory
[  194.835099][ T4281] Bluetooth: hci2: command 0x040f tx timeout
[  194.977716][ T4530] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.253525][ T4530] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.264196][ T5245] Device name cannot be null; rc = [-22]
[  195.555360][ T4530] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.795364][ T5256] netlink: 6 bytes leftover after parsing attributes in process `syz.3.227'.
[  196.804850][ T5256] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  196.820671][ T5256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  196.917231][ T4281] Bluetooth: hci2: command 0x0419 tx timeout
[  197.305557][ T5261] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  199.030113][ T5272] netlink: 'syz.3.230': attribute type 20 has an invalid length.
[  199.060158][ T5183] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  199.161781][ T5183] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  199.196188][ T5183] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  200.218353][ T5183] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  200.247368][ T5272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.230'.
[  200.883660][ T5183] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.914568][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  200.999131][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  201.032123][ T5299] Device name cannot be null; rc = [-22]
[  201.094764][ T5183] 8021q: adding VLAN 0 to HW filter on device team0
[  201.117717][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  201.141216][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  201.189992][ T4598] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.197180][ T4598] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.262898][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  201.328622][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  201.338663][ T4598] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.345821][ T4598] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.380884][ T5183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  201.392040][ T5183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  201.481951][ T4280] Bluetooth: hci3: command 0x0406 tx timeout
[  201.488198][ T4281] Bluetooth: hci4: command 0x0406 tx timeout
[  201.495070][ T4267] Bluetooth: hci1: command 0x0406 tx timeout
[  201.501138][ T4278] Bluetooth: hci0: command 0x0406 tx timeout
[  202.295267][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  202.337824][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  202.356288][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  202.374821][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  202.400562][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  202.571273][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  203.921277][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  203.967819][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  203.989994][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  204.023023][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  204.053748][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  204.081609][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  204.110947][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  204.197138][   T41] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  204.434479][   T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.476540][   T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.651773][   T41] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  204.706310][   T41] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  204.733526][   T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.786118][   T41] usb 1-1: config 0 descriptor??
[  206.128352][ T5335] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  206.670658][   T41] ryos 0003:1E7D:3232.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0
[  206.771807][   T41] usb 1-1: USB disconnect, device number 2
[  208.496841][ T5353] tmpfs: Unknown parameter 'quota'
[  209.328107][ T5360] Device name cannot be null; rc = [-22]
[  209.368995][ T5341] fido_id[5341]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  209.646112][  T127] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  209.753884][  T127] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware
[  209.763754][  T127] usb 3-1: Direct firmware load for dvb-usb-s630.fw failed with error -2
[  209.776609][  T127] usb 3-1: Falling back to sysfs fallback for: dvb-usb-s630.fw
[  209.878279][ T4530] device hsr_slave_0 left promiscuous mode
[  210.062766][ T4530] device hsr_slave_1 left promiscuous mode
[  210.229072][ T4530] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.283461][ T4530] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.460936][ T4530] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.905788][ T5372] netlink: 32 bytes leftover after parsing attributes in process `syz.3.248'.
[  211.090140][ T4530] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.408231][ T4530] device bridge_slave_1 left promiscuous mode
[  211.415476][ T4530] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.975081][ T4530] device bridge_slave_0 left promiscuous mode
[  211.989344][ T4530] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.100322][ T4530] device veth1_macvtap left promiscuous mode
[  212.112454][ T4530] device veth0_macvtap left promiscuous mode
[  212.128852][ T4530] device veth1_vlan left promiscuous mode
[  212.148975][ T4530] device veth0_vlan left promiscuous mode
[  212.569371][ T4530] team0 (unregistering): Port device geneve0 removed
[  216.030547][ T4403] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  216.446057][ T4403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.589605][ T4403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.610552][ T4403] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  216.626000][ T4403] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  216.641554][ T4403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.666931][ T4403] usb 4-1: config 0 descriptor??
[  216.692887][ T4403] usb 4-1: can't set config #0, error -71
[  216.693003][ T4530] team0 (unregistering): Port device team_slave_1 removed
[  216.736028][ T4403] usb 4-1: USB disconnect, device number 3
[  216.817846][ T5396] tmpfs: Unknown parameter 'quota'
[  217.006246][ T4530] team0 (unregistering): Port device team_slave_0 removed
[  217.110917][ T4530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.204916][ T4530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.755736][ T5404] Device name cannot be null; rc = [-22]
[  218.668929][ T4530] bond0 (unregistering): Released all slaves
[  218.803086][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  218.810968][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  218.828152][ T5377] netlink: 6 bytes leftover after parsing attributes in process `syz.4.249'.
[  218.879389][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  218.905025][ T5377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  218.971535][ T5183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.109197][ T5412] device syzkaller0 entered promiscuous mode
[  219.115565][ T5412] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  219.199752][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.228849][ T5422] device batadv_slave_1 entered promiscuous mode
[  219.296386][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.643186][ T5433] netlink: 56 bytes leftover after parsing attributes in process `syz.3.263'.
[  219.807523][ T5433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'.
[  220.881163][ T5444] Device name cannot be null; rc = [-22]
[  221.271850][ T5452] tmpfs: Unknown parameter 'quota'
[  222.380077][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'.
[  222.390841][ T5465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'.
[  222.448485][ T5465] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  222.457421][ T5465] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  222.466183][ T5465] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  222.475042][ T5465] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  223.220761][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  223.282254][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  223.570836][ T5183] device veth0_vlan entered promiscuous mode
[  223.589917][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  223.628102][ T5478] Device name cannot be null; rc = [-22]
[  223.710910][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  224.019949][ T5183] device veth1_vlan entered promiscuous mode
[  224.056957][ T5479] netlink: 6 bytes leftover after parsing attributes in process `syz.0.271'.
[  224.085195][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  224.129372][ T5479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.175314][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  224.198435][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  224.207795][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  224.333636][ T5183] device veth0_macvtap entered promiscuous mode
[  224.344064][ T5183] device veth1_macvtap entered promiscuous mode
[  224.357114][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  224.366306][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  224.430222][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  224.478117][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  224.503392][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  224.535725][ T5482] device syzkaller0 entered promiscuous mode
[  224.661727][ T5183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.724881][ T5183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.743084][ T5183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.756198][ T5183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.783319][ T5183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.794579][ T5183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.807881][ T5183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.819496][ T5183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.840544][ T5183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.865750][ T5183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.876536][ T5183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.895765][ T5183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.906745][ T5183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.928894][ T5183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.945054][ T5183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.966325][ T5183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.040049][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  225.073839][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  225.090133][ T5497] Device name cannot be null; rc = [-22]
[  225.103912][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  225.128449][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  225.169389][ T5183] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.186339][ T5183] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.222201][ T5183] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.231557][ T5183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.636155][ T5509] netlink: 'syz.2.280': attribute type 20 has an invalid length.
[  226.775089][ T5505] tmpfs: Unknown parameter 'quota'
[  227.012557][ T5511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'.
[  227.206051][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.232455][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.795193][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  227.833025][ T5355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.849450][ T5355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.891832][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  228.352480][ T5522] Device name cannot be null; rc = [-22]
[  229.664833][ T5545] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  229.735587][ T5545] netlink: 830 bytes leftover after parsing attributes in process `syz.0.288'.
[  230.702721][ T5563] Device name cannot be null; rc = [-22]
[  232.219797][ T5576] fuse: Bad value for 'fd'
[  234.022134][ T5584] netlink: 'syz.3.296': attribute type 20 has an invalid length.
[  234.095540][ T5585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.296'.
[  234.303077][ T5586] netlink: 44 bytes leftover after parsing attributes in process `syz.4.293'.
[  234.587229][ T4408] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  235.237959][ T5595] netlink: 32 bytes leftover after parsing attributes in process `syz.0.298'.
[  235.278032][ T4408] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25
[  235.528243][ T4408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.547153][ T4408] usb 5-1: Product: syz
[  235.551488][ T4408] usb 5-1: Manufacturer: syz
[  235.776286][ T4408] usb 5-1: SerialNumber: syz
[  235.857142][ T4408] usb 5-1: config 0 descriptor??
[  236.737906][ T5608] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  236.774068][ T5608] netlink: 830 bytes leftover after parsing attributes in process `syz.0.301'.
[  237.833714][ T5618] Device name cannot be null; rc = [-22]
[  238.059907][ T5615] usb usb8: usbfs: process 5615 (syz.2.303) did not claim interface 0 before use
[  238.474331][ T4330] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  238.682125][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.746882][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.781559][ T4330] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  238.864611][ T4330] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  238.902596][ T4330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.963022][ T4330] usb 1-1: config 0 descriptor??
[  239.302973][ T4408] usb 5-1: can't set config #0, error -71
[  239.315330][ T4408] usb 5-1: USB disconnect, device number 4
[  239.413651][ T4330] ryos 0003:1E7D:3232.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0
[  239.776458][ T5635] tmpfs: Unknown parameter 'quota'
[  241.009731][ T4471] usb 1-1: USB disconnect, device number 3
[  241.296368][ T5650] netlink: 32 bytes leftover after parsing attributes in process `syz.5.312'.
[  243.163854][ T5669] Device name cannot be null; rc = [-22]
[  243.928576][ T5672] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  243.962636][ T5672] netlink: 830 bytes leftover after parsing attributes in process `syz.3.315'.
[  247.448403][ T5712] netlink: 32 bytes leftover after parsing attributes in process `syz.5.328'.
[  247.840788][ T5716] syz.4.326 uses obsolete (PF_INET,SOCK_PACKET)
[  248.072697][ T5720] Device name cannot be null; rc = [-22]
[  248.151266][   T52] block nbd0: Attempted send on invalid socket
[  248.157862][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  250.567043][ T5741] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  251.080781][ T5741] netlink: 830 bytes leftover after parsing attributes in process `syz.3.332'.
[  254.134841][ T5777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.340'.
[  256.299564][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  256.305917][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  256.559324][ T5791] Device name cannot be null; rc = [-22]
[  258.735806][ T5813] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  258.951162][ T5817] netlink: 'syz.5.346': attribute type 21 has an invalid length.
[  258.959416][ T5817] netlink: 'syz.5.346': attribute type 6 has an invalid length.
[  258.967290][ T5817] netlink: 132 bytes leftover after parsing attributes in process `syz.5.346'.
[  259.144319][ T5823] device syzkaller0 entered promiscuous mode
[  260.356348][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'.
[  260.365562][ T5837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.355'.
[  261.809767][ T5832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.353'.
[  262.246355][ T5837] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  262.255598][ T5837] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  262.264400][ T5837] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  262.273267][ T5837] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  262.350862][ T5846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.356'.
[  263.066850][ T4367] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  263.292828][ T4367] usb 6-1: Using ep0 maxpacket: 16
[  263.519266][ T4367] usb 6-1: config 6 has an invalid interface number: 28 but max is 3
[  263.545422][ T4367] usb 6-1: config 6 has an invalid interface number: 4 but max is 3
[  263.555210][ T4367] usb 6-1: config 6 has an invalid interface number: 86 but max is 3
[  263.563972][ T4367] usb 6-1: config 6 has an invalid interface number: 191 but max is 3
[  263.583966][ T5860] netlink: 'syz.0.359': attribute type 20 has an invalid length.
[  263.657734][ T5864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.359'.
[  263.667751][ T4367] usb 6-1: config 6 has no interface number 0
[  263.673886][ T4367] usb 6-1: config 6 has no interface number 1
[  263.809275][ T4367] usb 6-1: config 6 has no interface number 2
[  263.815611][ T4367] usb 6-1: config 6 has no interface number 3
[  263.823661][ T5863] Device name cannot be null; rc = [-22]
[  264.048916][ T4367] usb 6-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  264.850833][ T4367] usb 6-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  264.882247][ T4367] usb 6-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  265.646223][ T4367] usb 6-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  265.734591][ T4367] usb 6-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  265.746627][ T4367] usb 6-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  265.779998][ T4367] usb 6-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7
[  265.836023][ T4367] usb 6-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0
[  265.885918][ T4367] usb 6-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  265.993619][ T5883] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  266.540466][ T4367] usb 6-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0
[  266.810340][ T4367] usb 6-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  266.888874][ T4367] usb 6-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  266.919271][ T4367] usb 6-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  266.942458][ T4367] usb 6-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  266.964339][ T4367] usb 6-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  266.977568][ T4367] usb 6-1: config 6 interface 4 has no altsetting 0
[  266.984232][ T4367] usb 6-1: config 6 interface 86 has no altsetting 0
[  266.993209][ T4367] usb 6-1: config 6 interface 191 has no altsetting 0
[  267.022006][ T4367] usb 6-1: string descriptor 0 read error: -71
[  267.037125][ T4367] usb 6-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9
[  267.053198][ T4367] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.129178][ T5883] netlink: 830 bytes leftover after parsing attributes in process `syz.5.364'.
[  267.187074][ T4367] usb 6-1: can't set config #6, error -71
[  267.194531][ T4367] usb 6-1: USB disconnect, device number 2
[  270.813787][ T3638] udevd[3638]: worker [4456] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time
[  270.994835][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.372'.
[  271.077958][  T127] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  271.101735][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.372'.
[  271.170457][  T127] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware
[  271.325331][ T5913] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  271.334166][ T5913] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  271.343000][ T5913] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  271.351779][ T5913] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  272.166624][  T127] usb 3-1: Direct firmware load for dvb-usb-s630.fw failed with error -2
[  272.175745][  T127] usb 3-1: Falling back to sysfs fallback for: dvb-usb-s630.fw
[  273.276933][ T4310] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  273.466920][ T4310] usb 4-1: Using ep0 maxpacket: 16
[  273.583561][ T4310] usb 4-1: config 6 has an invalid interface number: 28 but max is 3
[  273.978846][ T4310] usb 4-1: config 6 has an invalid interface number: 4 but max is 3
[  274.086725][ T4310] usb 4-1: config 6 has an invalid interface number: 86 but max is 3
[  274.474702][ T5944] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  274.515544][ T5944] netlink: 830 bytes leftover after parsing attributes in process `syz.4.379'.
[  274.886956][ T4310] usb 4-1: config 6 has an invalid interface number: 191 but max is 3
[  274.895200][ T4310] usb 4-1: config 6 has no interface number 0
[  274.901444][ T4310] usb 4-1: config 6 has no interface number 1
[  274.907606][ T4310] usb 4-1: config 6 has no interface number 2
[  274.917349][ T4310] usb 4-1: config 6 has no interface number 3
[  274.959098][ T4310] usb 4-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  274.997213][ T5946] netlink: 'syz.3.380': attribute type 20 has an invalid length.
[  275.066172][ T4310] usb 4-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  275.170217][ T4310] usb 4-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  275.223073][ T4310] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  275.257509][ T4310] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  275.298602][ T4310] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  275.339331][ T4310] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7
[  275.432068][ T4310] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0
[  275.446987][ T4310] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  275.458663][ T4310] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0
[  275.489875][ T4310] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  275.511384][ T4310] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  275.522896][ T4310] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  275.534157][ T4310] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  275.570485][ T4310] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  275.723594][ T4310] usb 4-1: config 6 interface 4 has no altsetting 0
[  275.733772][ T4310] usb 4-1: config 6 interface 86 has no altsetting 0
[  275.904269][ T4310] usb 4-1: config 6 interface 191 has no altsetting 0
[  275.945436][ T4310] usb 4-1: string descriptor 0 read error: -71
[  275.985330][ T4310] usb 4-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9
[  276.010889][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.035179][ T4310] usb 4-1: can't set config #6, error -71
[  276.055507][ T4310] usb 4-1: USB disconnect, device number 4
[  276.244741][ T5950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.380'.
[  277.227271][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'.
[  277.236279][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'.
[  277.247910][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'.
[  277.257439][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'.
[  279.357197][ T4367] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  279.848428][ T4367] usb 4-1: Using ep0 maxpacket: 16
[  279.883620][ T4367] usb 4-1: config 6 has an invalid interface number: 28 but max is 3
[  279.901018][ T4367] usb 4-1: config 6 has an invalid interface number: 4 but max is 3
[  279.920462][ T4367] usb 4-1: config 6 has an invalid interface number: 86 but max is 3
[  279.933005][ T4367] usb 4-1: config 6 has an invalid interface number: 191 but max is 3
[  279.994483][ T4367] usb 4-1: config 6 has no interface number 0
[  280.020368][ T4367] usb 4-1: config 6 has no interface number 1
[  280.044191][ T4367] usb 4-1: config 6 has no interface number 2
[  280.132273][ T6000] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  280.171843][ T6000] netlink: 830 bytes leftover after parsing attributes in process `syz.4.392'.
[  280.300662][ T4367] usb 4-1: config 6 has no interface number 3
[  280.537249][ T4367] usb 4-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  280.672326][ T4367] usb 4-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  280.750348][ T4367] usb 4-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  280.800893][ T4367] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  280.824543][ T4367] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  280.864525][ T4367] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  280.890989][ T4367] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7
[  280.987901][ T6005] netlink: 32 bytes leftover after parsing attributes in process `syz.5.393'.
[  281.410626][ T4367] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0
[  281.421448][ T4367] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  281.432768][ T4367] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0
[  281.443296][ T4367] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  281.456892][ T4367] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  281.468658][ T4367] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  282.080876][ T4367] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  282.091773][ T4367] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  282.105948][ T4367] usb 4-1: config 6 interface 4 has no altsetting 0
[  282.119575][ T4367] usb 4-1: config 6 interface 86 has no altsetting 0
[  282.127330][ T4367] usb 4-1: config 6 interface 191 has no altsetting 0
[  282.156718][ T4367] usb 4-1: string descriptor 0 read error: -71
[  282.188240][ T4367] usb 4-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9
[  282.340033][ T4367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.359731][ T4367] usb 4-1: can't set config #6, error -71
[  282.376208][ T4367] usb 4-1: USB disconnect, device number 5
[  283.977104][ T6023] device syzkaller0 entered promiscuous mode
[  291.385298][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.5.410'.
[  292.829583][ T4325] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  293.019655][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.054312][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.092715][ T4325] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  293.173291][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'.
[  293.182335][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'.
[  293.234811][ T6090] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  293.243897][ T6090] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  293.252775][ T6090] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  293.261592][ T6090] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  293.389525][ T4325] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  293.399289][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.432120][ T4325] usb 1-1: config 0 descriptor??
[  293.855716][ T4325] ryos 0003:1E7D:3232.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0
[  295.129957][ T2188] usb 1-1: USB disconnect, device number 4
[  296.381508][ T6099] fido_id[6099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  297.306880][ T4367] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  297.539421][ T6130] tmpfs: Unknown parameter 'quota'
[  297.580990][ T6129] netlink: 830 bytes leftover after parsing attributes in process `syz.5.421'.
[  297.986971][ T4367] usb 5-1: Using ep0 maxpacket: 8
[  297.994084][ T4367] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  298.511833][ T4367] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  298.586667][ T4367] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  298.674979][ T4367] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  298.735351][ T4367] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  298.792573][ T4367] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  298.846649][ T4367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.107919][ T4367] usb 5-1: GET_CAPABILITIES returned 0
[  299.113502][ T4367] usbtmc 5-1:16.0: can't read capabilities
[  299.460413][   T27] INFO: task udevd:4456 blocked for more than 143 seconds.
[  299.490507][   T27]       Not tainted 6.1.146-syzkaller #0
[  299.503593][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  299.541350][ T4367] usb 5-1: USB disconnect, device number 5
[  299.555432][   T27] task:udevd           state:D stack:25992 pid:4456  ppid:3638   flags:0x00004002
[  299.590392][   T27] Call Trace:
[  299.610842][   T27]  <TASK>
[  299.613902][   T27]  __schedule+0x10e9/0x40d0
[  299.619415][   T27]  ? release_firmware_map_entry+0x18a/0x18a
[  299.625597][   T27]  ? __mutex_trylock_common+0x80/0x250
[  299.631565][   T27]  ? trace_raw_output_contention_end+0xd0/0xd0
[  299.644932][   T27]  schedule+0xb9/0x180
[  299.658509][   T27]  schedule_preempt_disabled+0xf/0x20
[  299.668629][   T27]  __mutex_lock+0x555/0xaf0
[  299.673583][   T27]  ? __mutex_lock+0x3a5/0xaf0
[  299.688841][   T27]  ? uevent_show+0x16c/0x320
[  299.693721][   T27]  ? mutex_lock_nested+0x10/0x10
[  299.708513][   T27]  uevent_show+0x16c/0x320
[  299.748097][   T27]  dev_attr_show+0x50/0xb0
[  299.775857][   T27]  sysfs_kf_seq_show+0x349/0x4b0
[  299.781399][   T27]  ? device_get_ownership+0xa0/0xa0
[  299.791779][   T27]  seq_read_iter+0x49b/0xd50
[  299.849500][   T27]  ? common_file_perm+0x171/0x1c0
[  299.864623][   T27]  vfs_read+0x434/0x920
[  299.871024][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  299.890835][   T27]  ? kernel_read+0x1e0/0x1e0
[  299.912712][   T27]  ? __x64_sys_newfstat+0x171/0x1c0
[  299.924738][   T27]  ? __fdget_pos+0x2b5/0x360
[  299.932913][   T27]  ksys_read+0x143/0x240
[  299.952634][   T27]  ? vfs_write+0x960/0x960
[  299.964008][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  299.973475][   T27]  do_syscall_64+0x4c/0xa0
[  299.992327][   T27]  ? clear_bhb_loop+0x60/0xb0
[  300.003884][   T27]  ? clear_bhb_loop+0x60/0xb0
[  300.022602][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  300.034282][   T27] RIP: 0033:0x7ff5fdaa7407
[  300.054377][   T27] RSP: 002b:00007ffd3144d7f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  300.078594][   T27] RAX: ffffffffffffffda RBX: 00007ff5fe218880 RCX: 00007ff5fdaa7407
[  300.116706][   T27] RDX: 0000000000001000 RSI: 000056185038ad30 RDI: 0000000000000008
[  300.132643][   T27] RBP: 00007ff5fdbefff0 R08: 0000000000000000 R09: 0000000000000000
[  300.145961][   T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[  300.165782][   T27] R13: 00007ff5fdbefea0 R14: 0000000000000000 R15: 0000561850381100
[  300.176884][   T27]  </TASK>
[  300.197003][   T27] 
[  300.197003][   T27] Showing all locks held in the system:
[  300.253355][   T27] 1 lock held by rcu_tasks_kthre/12:
[  300.284950][   T27]  #0: ffffffff8cb2b7b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  300.301631][   T27] 1 lock held by rcu_tasks_trace/13:
[  300.314819][   T27]  #0: ffffffff8cb2bfd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  300.354003][   T27] 1 lock held by khungtaskd/27:
[  300.366337][   T27]  #0: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  300.381216][   T27] 6 locks held by kworker/1:2/127:
[  300.389056][   T27]  #0: ffff888018a5b138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  300.412986][   T27]  #1: ffffc90002db7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  300.441219][   T27]  #2: ffff888027217190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210
[  300.453627][   T27]  #3: ffff888074022190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  300.481190][   T27]  #4: ffff8880542ec118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  300.494709][   T27]  #5: ffffffff8c9d79b0 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0xec/0x2a0
[  300.506486][   T27] 2 locks held by dhcpcd/3932:
[  300.514431][   T27]  #0: ffffffff8dd260a8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x273/0x6e0
[  300.542334][   T27]  #1: ffffffff8dd3ff68 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0xd2/0x5f0
[  300.560437][   T27] 2 locks held by getty/4024:
[  300.569988][   T27]  #0: ffff88814d656098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  300.584058][   T27]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380
[  300.613576][   T27] 4 locks held by kworker/u4:5/4294:
[  300.619207][   T27] 1 lock held by udevd/4425:
[  300.624001][   T27] 4 locks held by udevd/4456:
[  300.629114][   T27]  #0: ffff88807e00b668 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50
[  300.638375][   T27]  #1: ffff8880296b5088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0
[  300.648037][   T27]  #2: ffff888057ec0830 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3b0
[  300.657675][   T27]  #3: ffff888074022190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320
[  300.667225][   T27] 2 locks held by kworker/1:10/4471:
[  300.672561][   T27]  #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  300.683104][   T27]  #1: ffffc9000534fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  300.694676][   T27] 3 locks held by kworker/u4:15/4560:
[  300.700233][   T27] 2 locks held by syz.5.423/6139:
[  300.705311][   T27]  #0: ffffffff8dd3ff68 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_release+0x75/0x490
[  300.715046][   T27]  #1: ffffffff8cb30af8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830
[  300.726029][   T27] 2 locks held by dhcpcd/6143:
[  300.730902][   T27]  #0: ffff888052984130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0
[  300.740702][   T27]  #1: ffffffff8cb30af8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830
[  300.753292][   T27] 
[  300.789048][   T27] =============================================
[  300.789048][   T27] 
[  300.804790][   T27] NMI backtrace for cpu 0
[  300.809217][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0
[  300.817153][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  300.827250][   T27] Call Trace:
[  300.830570][   T27]  <TASK>
[  300.833541][   T27]  dump_stack_lvl+0x168/0x22e
[  300.838268][   T27]  ? irq_work_queue+0xb8/0x140
[  300.843211][   T27]  ? show_regs_print_info+0x12/0x12
[  300.848454][   T27]  ? load_image+0x3b0/0x3b0
[  300.853020][   T27]  ? vprintk_emit+0x571/0x680
[  300.857756][   T27]  ? printk_sprint+0x460/0x460
[  300.862577][   T27]  nmi_cpu_backtrace+0x3f4/0x470
[  300.867562][   T27]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  300.873756][   T27]  ? _printk+0xcc/0x110
[  300.877960][   T27]  ? load_image+0x3b0/0x3b0
[  300.882521][   T27]  ? load_image+0x3b0/0x3b0
[  300.887088][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  300.893204][   T27]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  300.899231][   T27]  watchdog+0xeee/0xf30
[  300.903441][   T27]  ? watchdog+0x1ed/0xf30
[  300.907825][   T27]  kthread+0x29d/0x330
[  300.911944][   T27]  ? hungtask_pm_notify+0x40/0x40
[  300.917010][   T27]  ? kthread_blkcg+0xd0/0xd0
[  300.921649][   T27]  ret_from_fork+0x1f/0x30
[  300.926120][   T27]  </TASK>
[  300.929248][    C0] vkms_vblank_simulate: vblank timer overrun
[  300.936381][   T27] Sending NMI from CPU 0 to CPUs 1:
[  300.942017][    C1] NMI backtrace for cpu 1
[  300.942028][    C1] CPU: 1 PID: 6147 Comm: dhcpcd-run-hook Not tainted 6.1.146-syzkaller #0
[  300.942046][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  300.942055][    C1] RIP: 0010:__lock_acquire+0xe8a/0x7c50
[  300.942085][    C1] Code: 48 c1 e8 03 42 80 3c 00 00 74 12 4c 89 f7 e8 bd e5 6d 00 49 b8 00 00 00 00 00 fc ff df 4d 89 2e 48 8b 44 24 70 42 0f b6 04 00 <84> c0 0f 85 dd 5a 00 00 4d 8d b7 e0 0a 00 00 48 8b 44 24 40 8b 18
[  300.942117][    C1] RSP: 0018:ffffc9000501f300 EFLAGS: 00000046
[  300.942132][    C1] RAX: 0000000000000000 RBX: ffff88802ec3e410 RCX: ffffffff8162fd66
[  300.942145][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90add240
[  300.942156][    C1] RBP: ffffc9000501f550 R08: dffffc0000000000 R09: fffffbfff215ba49
[  300.942169][    C1] R10: fffffbfff215ba49 R11: 1ffffffff215ba48 R12: ffff88802ec3d940
[  300.942181][    C1] R13: e3869afb91c47492 R14: ffff88802ec3e498 R15: ffff88802ec3d940
[  300.942194][    C1] FS:  00007fbe19fa5c80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  300.942209][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  300.942221][    C1] CR2: 00007fbe1a2097e8 CR3: 0000000027942000 CR4: 00000000003506e0
[  300.942236][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  300.942246][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  300.942256][    C1] Call Trace:
[  300.942261][    C1]  <TASK>
[  300.942268][    C1]  ? is_bpf_text_address+0x28b/0x2a0
[  300.942303][    C1]  ? is_bpf_text_address+0x22/0x2a0
[  300.942330][    C1]  ? unwind_get_return_address+0x49/0x80
[  300.942349][    C1]  ? stack_trace_save+0xe0/0xe0
[  300.942373][    C1]  ? verify_lock_unused+0x140/0x140
[  300.942395][    C1]  ? stack_trace_save+0x98/0xe0
[  300.942415][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  300.942435][    C1]  ? __stack_depot_save+0x35/0x460
[  300.942460][    C1]  ? kasan_set_track+0x60/0x70
[  300.942481][    C1]  ? kasan_set_track+0x4b/0x70
[  300.942500][    C1]  ? __kasan_slab_alloc+0x6b/0x80
[  300.942521][    C1]  ? slab_post_alloc_hook+0x4b/0x480
[  300.942540][    C1]  lock_acquire+0x1b4/0x490
[  300.942561][    C1]  ? get_obj_cgroup_from_current+0xd0/0x280
[  300.942586][    C1]  ? read_lock_is_recursive+0x10/0x10
[  300.942612][    C1]  ? get_obj_cgroup_from_current+0xd0/0x280
[  300.942633][    C1]  get_obj_cgroup_from_current+0xec/0x280
[  300.942652][    C1]  ? get_obj_cgroup_from_current+0xd0/0x280
[  300.942672][    C1]  slab_pre_alloc_hook+0x91/0x310
[  300.942691][    C1]  kmem_cache_alloc+0x56/0x2f0
[  300.942705][    C1]  ? anon_vma_clone+0xb4/0x4e0
[  300.942733][    C1]  anon_vma_clone+0xb4/0x4e0
[  300.942762][    C1]  anon_vma_fork+0x75/0x4f0
[  300.942788][    C1]  ? vm_area_dup+0x11f/0x1a0
[  300.942814][    C1]  copy_mm+0xb44/0x15c0
[  300.942837][    C1]  ? copy_signal+0x680/0x680
[  300.942853][    C1]  ? lockdep_init_map_type+0x9d/0x880
[  300.942883][    C1]  ? __init_rwsem+0x11e/0x160
[  300.942901][    C1]  ? copy_signal+0x556/0x680
[  300.942919][    C1]  copy_process+0x1953/0x4020
[  300.942941][    C1]  ? copy_process+0x91f/0x4020
[  300.942962][    C1]  ? idle_dummy+0x10/0x10
[  300.942982][    C1]  kernel_clone+0x225/0x8b0
[  300.943000][    C1]  ? create_io_thread+0x120/0x120
[  300.943020][    C1]  ? __lock_acquire+0x7c50/0x7c50
[  300.943041][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  300.943067][    C1]  __x64_sys_clone+0x17c/0x1d0
[  300.943083][    C1]  ? __might_fault+0xc2/0x120
[  300.943110][    C1]  ? __ia32_sys_vfork+0x100/0x100
[  300.943131][    C1]  ? lock_chain_count+0x20/0x20
[  300.943155][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  300.943178][    C1]  do_syscall_64+0x4c/0xa0
[  300.943194][    C1]  ? clear_bhb_loop+0x60/0xb0
[  300.943209][    C1]  ? clear_bhb_loop+0x60/0xb0
[  300.943225][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  300.943251][    C1] RIP: 0033:0x7fbe1a13f636
[  300.943264][    C1] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00
[  300.943284][    C1] RSP: 002b:00007ffdc2372650 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  300.943300][    C1] RAX: ffffffffffffffda RBX: 00007ffdc2372658 RCX: 00007fbe1a13f636
[  300.943312][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  300.943323][    C1] RBP: 0000560f56039e60 R08: 0000000000000000 R09: 0000000000000000
[  300.943333][    C1] R10: 00007fbe19fa5f50 R11: 0000000000000246 R12: 0000560f5603bf70
[  300.943344][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  300.943360][    C1]  </TASK>
[  300.975571][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  300.975590][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0
[  300.975614][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  300.975627][   T27] Call Trace:
[  300.975635][   T27]  <TASK>
[  300.975644][   T27]  dump_stack_lvl+0x168/0x22e
[  300.975673][   T27]  ? memcpy+0x3c/0x60
[  300.975710][   T27]  ? show_regs_print_info+0x12/0x12
[  300.975735][   T27]  ? load_image+0x3b0/0x3b0
[  300.975780][   T27]  panic+0x2c9/0x710
[  300.975808][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  300.975838][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  300.975870][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  300.975909][   T27]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  300.975936][   T27]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  300.975964][   T27]  watchdog+0xf2d/0xf30
[  300.975996][   T27]  ? watchdog+0x1ed/0xf30
[  300.976027][   T27]  kthread+0x29d/0x330
[  300.976060][   T27]  ? hungtask_pm_notify+0x40/0x40
[  300.976085][   T27]  ? kthread_blkcg+0xd0/0xd0
[  300.976122][   T27]  ret_from_fork+0x1f/0x30
[  300.976167][   T27]  </TASK>
[  300.995173][   T27] Kernel Offset: disabled
[  301.500869][   T27] Rebooting in 86400 seconds..