last executing test programs:

40m43.148971863s ago: executing program 32 (id=8):
landlock_create_ruleset(0x0, 0x0, 0x2)
sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="5f0ac1d5224a27b90fc6a2f96d7c8c472fbcb3d06432c605a2e89d0856edb1566db84813e85deff27611b88cb471c84fa92831b88a0660c82c7aa608b336065a8b6556bdcd6fb992642e175f37d869c292133b0489fa9b44ce587dc51c5fa39b6efa5875138a1067452c92bd40b7e73f51683d4154b0d4a1", 0x78}], 0x1, 0x0, 0x0, 0x4008085}, 0x38)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000280)={0x3, 0x2})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

40m37.493603227s ago: executing program 33 (id=17):
syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0xa, 0x5}, @timestamp, @timestamp, @window={0x3, 0x7, 0x5}], 0x200000000000035b)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x32b452f2d715385, 0x700, 0x0, 0xfffffffffffffd25)
r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r1, 0x0)

40m32.585514215s ago: executing program 34 (id=24):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48)

36m37.64746149s ago: executing program 35 (id=280):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004)

29m2.255373683s ago: executing program 36 (id=966):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0xc114)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/48, 0x30}, 0x400000}], 0x1, 0x20010060, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='9p_client_res\x00'}, 0x18)
r4 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r4, r3, 0x0, 0x0, 0xfffffffffffffffe}, 0x30)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r2, 0x0, 0x3b55, 0xffffffffffffff80})
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54", 0xe)
accept4(r5, 0x0, 0x0, 0x800)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004510002000020000ff06907864010101ffffffff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cd530f4353cff9ccc02000000c3d9000048990cd4bc339589b7d7331e942e3474c8f35b05dbf9bd81ce78db24d983283608000000e04dab20abaa510527abb01d0d7d7e08c5689550b22007e43c8af532360a8ed0856b51ad0e87ab0535fb664024bcb8bd7d85bf1daf25cb59de3f41e35544e85d746467640e6b26b89d53783414"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069111c00000000008510000002000000850000000500000095000000000000009500b50500000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r6=>0x0})
r7 = gettid()
r8 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r6, @ANYBLOB="049c01000750050008001300", @ANYRES32=r7, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)

27m1.412318321s ago: executing program 37 (id=1076):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x18)
r2 = syz_io_uring_setup(0x2f8d, &(0x7f0000000340)={0x0, 0x4dd8, 0x1, 0x6, 0x200004}, &(0x7f00000001c0), &(0x7f0000000140))
r3 = epoll_create(0xaf2)
epoll_pwait2(r3, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000200f})
socket(0x1d, 0x1000, 0x7f)
unshare(0x68040200)
r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
r5 = fsmount(r4, 0x0, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8)
sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000080a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x5}, 0x18)
symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00')

22m6.428575498s ago: executing program 38 (id=1784):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a31000000000800410072786500140033007663616e300000000000000031430000"], 0x38}}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000d1413043dbd7000fddbdf2508003e00020900000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x1}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r3, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000440)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x9, 0x2, 0x0, @broadcast, @broadcast}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x98, 0x0, {0x5, 0x4, 0x2, 0x2a, 0x1, 0x68, 0xa, 0x64, 0x1, 0x3, @multicast1, @rand_addr=0x64010100}}}}}}, 0x0)

20m23.563110012s ago: executing program 39 (id=2101):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c00"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac141421000000000000000000000000200100000000000000ffffffffffffffe50000000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0)

20m23.405947735s ago: executing program 40 (id=2100):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b"], 0x122}}, 0x8010)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d2b000000f9b718810007"], 0x58}}, 0x0)

19m4.785534772s ago: executing program 41 (id=2402):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f000000040000000400c7e06ee500001200000030b93d28f13835c1b6c440bb08ef16e673f83baf54c63eb6bdeaf3b71ef486aa741b71c2230b9c080acfce2414c948a058dce0fba5ce82b326254df317eb7ea1", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETA(r8, 0x5406, &(0x7f0000000200)={0x40, 0x0, 0x0, 0x8006, 0x3, "5f7300fbffffff00"})
ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x5412, &(0x7f00000006c0)=0x16)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000580), 0x2, &(0x7f00000005c0)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '\'^])'}}]})
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0)
close_range(r10, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r11=>r0}, './file0\x00'})
ioctl$SOUND_PCM_READ_BITS(r11, 0x80045005, &(0x7f0000000180))
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r9, @ANYBLOB="0500"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)

18m58.351050748s ago: executing program 42 (id=2421):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

18m48.327577516s ago: executing program 43 (id=2434):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000600)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x38, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x4000)

14m58.766173899s ago: executing program 44 (id=2465):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r3, &(0x7f0000000040), 0x8)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

13m26.469266646s ago: executing program 45 (id=2478):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000004c0)=[@rdmsr={0x66, 0x18, {0x4000009e}}], 0x18})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1})
r4 = socket$rxrpc(0x21, 0x2, 0xa)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[@out_dx={0x6a, 0x28, {0xad60, 0x0, 0x8}}, @wrmsr={0x65, 0x20, {0xbae, 0xfffffffffffffffe}}], 0x48})
r6 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000001c0)={0x1000000, 0xd, 0x2, "134604cea4ddbf704c17bc74772190f50700000000000000ffe79300", 0x41415270})
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85edaca83"], 0x0}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r7, 0x4004480f, &(0x7f0000000000)=0x3)
read$hiddev(r7, &(0x7f0000000140)=""/234, 0xea)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r7, 0xc018480b, 0x0)
connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
recvfrom$rxrpc(r4, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)

10m1.081935231s ago: executing program 46 (id=2569):
syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYRES16=r0], 0x0)

8m47.704050379s ago: executing program 6 (id=2714):
r0 = syz_io_uring_setup(0x70ca, 0x0, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000007c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x38}, {0x0}], 0x2})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r4, r3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r3, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
pipe2(&(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x1f, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0xff, 0x4, 0x5}, {0xeeee0000, 0xeeee1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x0, 0x3}, {0x1, 0xffff1000, 0xe, 0x0, 0x1, 0x0, 0x9, 0x5, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x1000, 0x0, 0x0, 0x74, 0x5, 0x5, 0x2, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x3, 0xa1, 0x20, 0x0, 0x9}, {0x0, 0xdddd1000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x5}, {0xeeef0000, 0x3}, {0xdddd1000, 0x400}, 0xddf8ffdb, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
io_uring_enter(r0, 0x5976, 0x9765, 0x2, 0x0, 0x0)

8m47.023956932s ago: executing program 6 (id=2716):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x200402)
writev(r0, &(0x7f00000000c0), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000600)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x2, 0x1})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

8m42.227450535s ago: executing program 6 (id=2723):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000500)=[{0x18, 0x4000, 0x2000, &(0x7f00000001c0)='\x00'}], 0x1})

8m39.499559389s ago: executing program 6 (id=2730):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x6, 0xeb, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x2, 0x1, 0x5, 0x80, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x379, 0x8, 0x0, 0x8}, {0x6, 0x24, 0x1a, 0xfff4}, [@country_functional={0x6, 0x24, 0x7, 0xe4}, @mdlm_detail={0x77, 0x24, 0x13, 0x2, "35150a0655013556810d2eee9022de4e96bcb4df548f7b57048756226be816ebf9b5a014e74d5ab4dafbc51553142fe6135564e962b9df4d057bc0da740a3eda1f8093317e47d83c28a567e468d26321b20b3643255aa328ad9ff97a94f6d90f5f561cacbb889b3a0ecf4731d47a9d4f36be03"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0xff, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x4, 0x50}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x80, 0xc4}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}})
syz_usb_disconnect(r0)
openat(0xffffffffffffff9c, 0x0, 0x842, 0x0)
syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)

8m36.536536547s ago: executing program 6 (id=2735):
mount$9p_fd(0x0, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000240), 0xa00000, &(0x7f0000000180)=ANY=[@ANYRES64])
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0x0, 0x4048800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}]}, 0x1c}}, 0x0)

8m36.175842185s ago: executing program 6 (id=2736):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x28}, 0x40e0)

8m20.958093067s ago: executing program 47 (id=2736):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x28}, 0x40e0)

7m47.405458696s ago: executing program 0 (id=2873):
ioperm(0x0, 0x10, 0x9adc)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x8000000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60cf, 0x85})
fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x200000000007, 0x73e9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)

7m46.356748296s ago: executing program 0 (id=2877):
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0)

7m45.004055094s ago: executing program 0 (id=2881):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, 0x0})

7m44.410728843s ago: executing program 0 (id=2884):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)

7m43.966773117s ago: executing program 0 (id=2887):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r1 = fanotify_init(0x20, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10)
fanotify_mark(r1, 0x201, 0x20, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7m39.648741484s ago: executing program 0 (id=2891):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000540)="ff0f000000000000b47380c9", 0xc}, {&(0x7f0000000100)="448b7c", 0x3}], 0x2)

7m24.373952677s ago: executing program 48 (id=2891):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000540)="ff0f000000000000b47380c9", 0xc}, {&(0x7f0000000100)="448b7c", 0x3}], 0x2)

7m23.919905483s ago: executing program 49 (id=2893):
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff0f614b"], 0xd)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00')
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000200)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0)
syz_open_dev$video(&(0x7f0000000380), 0xfc, 0x26444)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

7m22.38568302s ago: executing program 50 (id=2897):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x4000000)

7m18.929905244s ago: executing program 51 (id=2903):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="01025673f188"})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0)
futex(0x0, 0x80, 0x1, 0x0, 0x0, 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
readv(r3, &(0x7f0000000200), 0x10000000000000d2)
keyctl$get_security(0x11, 0x0, &(0x7f0000000880)=""/4096, 0x1000)
setsockopt$sock_int(0xffffffffffffffff, 0x28, 0x7, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x36, 0x2, 0x0, "d569e8000000fa44966262631e8ac11e00"})
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x10001}}, 0x18)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

5m19.49593978s ago: executing program 9 (id=2977):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccce"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x93, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3", 0x0, 0x31, 0x6000000000000000}, 0x50)

5m18.746005851s ago: executing program 9 (id=2981):
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=3'])
chdir(&(0x7f0000000100)='./file0\x00')

5m18.611612998s ago: executing program 9 (id=2984):
io_uring_setup(0x664, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x29d})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix={0x0, 0x0, 0x59455247}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
unshare(0x6a040000)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)

5m18.333060718s ago: executing program 3 (id=2985):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)

5m18.277663836s ago: executing program 7 (id=2987):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6)

5m18.080700339s ago: executing program 3 (id=2988):
syz_open_dev$vcsu(0x0, 0x9, 0x0)
semctl$IPC_INFO(0x0, 0x2, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x20000080)
shutdown(0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1}, 0x6)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000006c0)={0x9, 0x0, '\x00', 0x0, 0x0})
ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000240))

5m16.438111705s ago: executing program 7 (id=2989):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000008c0))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

5m16.437085068s ago: executing program 3 (id=2990):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

5m15.647150778s ago: executing program 3 (id=2992):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000004c0)='./file0\x00')
chdir(0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r0, 0x101, 0x0)

5m15.633975146s ago: executing program 7 (id=2993):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014)

5m15.445303081s ago: executing program 3 (id=2995):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x14)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r6, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

5m15.423089984s ago: executing program 7 (id=2996):
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=3'])
chdir(&(0x7f0000000100)='./file0\x00')

5m15.218041911s ago: executing program 7 (id=2999):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000095}, 0x8000)

5m13.024288504s ago: executing program 9 (id=3005):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccce"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x93, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3", 0x0, 0x31, 0x6000000000000000}, 0x50)

5m10.774577671s ago: executing program 9 (id=3008):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})

5m10.650458623s ago: executing program 7 (id=3010):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5e0}], 0x1}, 0x4)

5m10.545095126s ago: executing program 9 (id=3012):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

5m9.185338429s ago: executing program 3 (id=3014):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ptrace(0x10, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x61201, 0x1103}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x5a3}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}]}}}]}, 0x4c}}, 0x4048084)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)

5m8.782902902s ago: executing program 4 (id=3018):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccce"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xdd, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9", 0x0, 0x31, 0x6000000000000000}, 0x50)

5m8.544858583s ago: executing program 4 (id=3020):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x141102)
io_setup(0x3, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

5m8.311307279s ago: executing program 4 (id=3021):
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)

5m8.184393249s ago: executing program 4 (id=3022):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0x15ac0000)

5m7.724938464s ago: executing program 4 (id=3023):
io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x4, 0x3})
r0 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103)
mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x20000, &(0x7f0000000b00)=ANY=[])
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
getsockname$netrom(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x669db774}, {{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xc316}], 0x2, 0x1832b, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
readv(0xffffffffffffffff, &(0x7f0000000f80)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/16, 0x10}], 0x1)

5m6.383599727s ago: executing program 4 (id=3025):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x14)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r6, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

4m54.635684331s ago: executing program 52 (id=3010):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5e0}], 0x1}, 0x4)

4m54.44244355s ago: executing program 53 (id=3012):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

4m54.074700945s ago: executing program 54 (id=3014):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ptrace(0x10, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x61201, 0x1103}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x5a3}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}]}}}]}, 0x4c}}, 0x4048084)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)

4m50.642881174s ago: executing program 55 (id=3025):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x14)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r6, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

4m0.81529508s ago: executing program 8 (id=3117):
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e08e40d0c"], 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

4m0.750907635s ago: executing program 8 (id=3118):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
socket$kcm(0x10, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000380)={0xf0f015, 0x2})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$get_security(0x11, r3, &(0x7f0000000880)=""/4096, 0x1000)
socket(0x10, 0x803, 0x0)

3m59.776952008s ago: executing program 8 (id=3119):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x2, "d2c4924d08b1e00000000000000000f3f70000000400000000fcff00", <r1=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000200)=0x7fff)
ioctl$SYNC_IOC_FILE_INFO(r1, 0x40103e05, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})

3m59.776616665s ago: executing program 8 (id=3120):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x9b}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900)
syz_usbip_server_init(0x1)
sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_buf(r3, 0x29, 0x45, 0x0, &(0x7f0000000000)=0x1e)
recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000)
sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0xc010)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004)

3m58.359560364s ago: executing program 8 (id=3121):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000)
socket(0x2, 0x3, 0xfffffffd)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r3 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r3, 0x0, 0xffffffdb)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

3m57.384903021s ago: executing program 8 (id=3122):
io_uring_setup(0x664, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x29d})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix={0x0, 0x0, 0x59455247}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
unshare(0x6a040000)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)

3m42.024718408s ago: executing program 56 (id=3122):
io_uring_setup(0x664, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x29d})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix={0x0, 0x0, 0x59455247}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
unshare(0x6a040000)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)

1m12.886913008s ago: executing program 5 (id=3393):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x24, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fd}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0x1)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x2, 0x4)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000280)=0x1)

1m12.793448125s ago: executing program 5 (id=3394):
syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)

1m10.691317878s ago: executing program 5 (id=3395):
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250c0000000c0099"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x2}, 0x14}}, 0x40)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

1m10.65970361s ago: executing program 5 (id=3396):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f"], 0x104}}, 0x0)
syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f019008000000000700080606"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r3, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
mount$cgroup(0x0, 0x0, &(0x7f0000000280), 0xb81004, &(0x7f0000000480)={[{@clone_children}, {@favordynmods}, {@name}], [{@fowner_gt={'fowner>', r4}}, {@fowner_gt={'fowner>', r5}}, {@context={'context', 0x3d, 'user_u'}}]})
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x400, 0x20000001, 0x1e9}, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40dcfffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31000000001400000011000100000000841c0000000100000a"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

1m7.109388932s ago: executing program 5 (id=3397):
socket$inet_sctp(0x2, 0x1, 0x84)
dup(0xffffffffffffffff)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020028"], 0x0)

1m7.069209261s ago: executing program 5 (id=3398):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)

1m5.848808731s ago: executing program 1 (id=3402):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x24, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fd}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0x1)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x2, 0x4)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000280)=0x1)

1m5.807336057s ago: executing program 1 (id=3403):
syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)

1m3.544819262s ago: executing program 1 (id=3407):
socket$inet_sctp(0x2, 0x1, 0x84)
syz_emit_ethernet(0x4ef, &(0x7f00000003c0)=ANY=[@ANYBLOB="e727dc071f80ffffffffffff86dd609907a604b92c03cb697a653e336f000000500000000000ff0200000000000000000000000000016204002e"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020028"], 0x0)

1m3.465923417s ago: executing program 1 (id=3408):
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4000, 0x0)

1m0.266183275s ago: executing program 1 (id=3409):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x7}, @my=0x1, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8})
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x54b041, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000580)={r3, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x12, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3ad87531f7071a74df2cfc06c89f3d9e234b30c50997d5bef409ff2176ff7bfe2f7b6aa54cc50a1fcaed1e831fa7c0a7be998e1b228400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x6, 0x9]}})
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r4)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x80000003)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
setsockopt$llc_int(r3, 0x10c, 0x9, 0x0, 0x0)
dup2(r5, r5)

55.27915639s ago: executing program 1 (id=3411):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x24, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fd}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0x1)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000280)=0x1)

51.167319471s ago: executing program 57 (id=3398):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)

39.750527797s ago: executing program 58 (id=3411):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x24, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fd}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0x1)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000280)=0x1)

2.797212313s ago: executing program 2 (id=3456):
syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)

494.970309ms ago: executing program 2 (id=3457):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x2)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0xff)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xfe)

327.63928ms ago: executing program 2 (id=3458):
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1)

238.339319ms ago: executing program 2 (id=3459):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r1, 0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x1, 0x3}, 0x8)

98.078399ms ago: executing program 2 (id=3460):
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x669db774}, {{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xc316}], 0x2, 0x1832b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0)

0s ago: executing program 2 (id=3461):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x100, 0x0, 0x4}, &(0x7f0000000100)=<r4=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r3, 0x3596, 0x0, 0x49, 0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
ioctl$FIOCLEX(r2, 0x5451)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800)

kernel console output (not intermixed with test programs):

im9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2205.058861][T16375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2205.058884][T16375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2205.238975][ T8912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2205.238992][ T8912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2205.546737][T16375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2205.546762][T16375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2205.825975][ T1213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2205.825999][ T1213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2206.082015][   T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2206.082039][   T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2207.768987][T16102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2207.769010][T16102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2207.797678][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2207.797700][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2208.218769][T17778] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2914'.
[ 2217.097087][T17846] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[ 2220.308559][T17878] IPv6: NLM_F_CREATE should be specified when creating new route
[ 2221.901985][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[ 2221.903421][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[ 2222.211889][ T9267] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 2222.572091][ T9267] usb 10-1: Using ep0 maxpacket: 32
[ 2222.780783][ T9267] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 2222.780977][ T9267] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 2222.781046][ T9267] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2222.781108][ T9267] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 2223.115360][ T9267] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 2223.115409][ T9267] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2223.115469][ T9267] usb 10-1: Product: syz
[ 2223.115602][ T9267] usb 10-1: Manufacturer: syz
[ 2223.115659][ T9267] usb 10-1: SerialNumber: syz
[ 2224.355672][ T9267] usb 10-1: can't set config #155, error -71
[ 2224.396354][ T9267] usb 10-1: USB disconnect, device number 7
[ 2225.031845][ T9267] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[ 2225.183811][ T9267] usb 5-1: config 8 has an invalid interface number: 177 but max is 0
[ 2225.183844][ T9267] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 2225.183863][ T9267] usb 5-1: config 8 has no interface number 0
[ 2225.183883][ T9267] usb 5-1: config 8 interface 177 has no altsetting 0
[ 2225.183904][ T9267] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[ 2225.183918][ T9267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2226.591127][T15392] usb 5-1: USB disconnect, device number 3
[ 2228.141923][   T37] kauditd_printk_skb: 13 callbacks suppressed
[ 2228.141946][   T37] audit: type=1326 audit(1766734676.085:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17921 comm="syz.8.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a88f749 code=0x7ffc0000
[ 2228.142002][   T37] audit: type=1326 audit(1766734676.085:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17921 comm="syz.8.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a88f749 code=0x7ffc0000
[ 2228.142044][   T37] audit: type=1326 audit(1766734676.085:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17921 comm="syz.8.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fac6a88f749 code=0x7ffc0000
[ 2228.142099][   T37] audit: type=1326 audit(1766734676.085:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17921 comm="syz.8.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a88f749 code=0x7ffc0000
[ 2228.142148][   T37] audit: type=1326 audit(1766734676.095:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17921 comm="syz.8.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac6a88df90 code=0x7ffc0000
[ 2228.142197][   T37] audit: type=1326 audit(1766734676.095:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17921 comm="syz.8.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a88f749 code=0x7ffc0000
[ 2228.142244][   T37] audit: type=1326 audit(1766734676.095:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17921 comm="syz.8.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac6a88f749 code=0x7ffc0000
[ 2228.142293][   T37] audit: type=1326 audit(1766734676.095:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17921 comm="syz.8.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a88f749 code=0x7ffc0000
[ 2228.142341][   T37] audit: type=1326 audit(1766734676.095:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17921 comm="syz.8.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a88f749 code=0x7ffc0000
[ 2228.142391][   T37] audit: type=1326 audit(1766734676.095:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17921 comm="syz.8.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fac6a88f749 code=0x7ffc0000
[ 2228.247669][T17930] pim6reg: entered allmulticast mode
[ 2228.679796][T17921] pim6reg: left allmulticast mode
[ 2228.995975][T17942] 9pnet_virtio: no channels available for device syz
[ 2229.502726][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2973'.
[ 2232.000673][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'.
[ 2234.182478][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3002'.
[ 2239.965950][T18044] syzkaller0: entered promiscuous mode
[ 2239.965984][T18044] syzkaller0: entered allmulticast mode
[ 2240.163842][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3014'.
[ 2240.490399][T18064] fuse: Bad value for 'fd'
[ 2240.931830][T16364] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 2241.091801][T16364] usb 9-1: Using ep0 maxpacket: 16
[ 2241.094198][T16364] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 2241.094262][T16364] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2241.094291][T16364] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2241.094314][T16364] usb 9-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2241.094342][T16364] usb 9-1: config 7 interface 0 has no altsetting 0
[ 2241.094378][T16364] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[ 2241.094402][T16364] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2241.610799][T16364] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.0/0003:0458:5010.000B/input/input22
[ 2241.717112][T16364] kye 0003:0458:5010.000B: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0
[ 2241.940718][ T5821] usb 9-1: USB disconnect, device number 5
[ 2242.838423][T18083] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3024'.
[ 2242.838444][T18083] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3024'.
[ 2254.998885][T15795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2255.049153][T15795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2255.124986][T15795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2255.129550][T15795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2255.144929][T15795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2255.271457][T15795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2255.350135][T15795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2255.354336][T15795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2255.356016][T15795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2255.356964][T15795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2255.489194][T10288] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2255.515258][T10288] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2255.566335][T10288] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2255.568165][T10288] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2255.568990][T10288] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2257.241953][T10288] Bluetooth: hci0: command tx timeout
[ 2257.473696][T10288] Bluetooth: hci2: command tx timeout
[ 2257.658234][T10288] Bluetooth: hci6: command tx timeout
[ 2258.691300][T15795] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2258.809867][T15795] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2258.822235][T15795] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2258.826424][T15795] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2258.827331][T15795] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2259.303349][T10288] Bluetooth: hci0: command tx timeout
[ 2259.542031][T10288] Bluetooth: hci2: command tx timeout
[ 2259.740592][T10288] Bluetooth: hci6: command tx timeout
[ 2260.903104][T10288] Bluetooth: hci7: command tx timeout
[ 2261.428593][T10288] Bluetooth: hci0: command tx timeout
[ 2261.631793][T10288] Bluetooth: hci2: command tx timeout
[ 2261.795280][T10288] Bluetooth: hci6: command tx timeout
[ 2262.705481][T18128] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3036'.
[ 2262.705500][T18128] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3036'.
[ 2262.991822][T10288] Bluetooth: hci7: command tx timeout
[ 2263.074594][T16951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2263.380538][T16951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2263.465834][T10288] Bluetooth: hci0: command tx timeout
[ 2263.653964][T16951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2263.701737][T10288] Bluetooth: hci2: command tx timeout
[ 2263.861818][T10288] Bluetooth: hci6: command tx timeout
[ 2263.996871][T16951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2264.017982][T18151] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3043'.
[ 2264.018004][T18151] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3043'.
[ 2264.139098][T18109] chnl_net:caif_netlink_parms(): no params data found
[ 2264.619561][T18104] chnl_net:caif_netlink_parms(): no params data found
[ 2264.694110][T18101] chnl_net:caif_netlink_parms(): no params data found
[ 2264.853732][T18106] chnl_net:caif_netlink_parms(): no params data found
[ 2265.085974][T10288] Bluetooth: hci7: command tx timeout
[ 2266.390354][T18109] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2266.390631][T18109] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2266.390782][T18109] bridge_slave_0: entered allmulticast mode
[ 2266.393223][T18109] bridge_slave_0: entered promiscuous mode
[ 2266.500439][T18109] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2266.500581][T18109] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2266.500793][T18109] bridge_slave_1: entered allmulticast mode
[ 2266.523837][T18109] bridge_slave_1: entered promiscuous mode
[ 2266.972845][T16951] bridge_slave_1: left allmulticast mode
[ 2266.972879][T16951] bridge_slave_1: left promiscuous mode
[ 2266.973165][T16951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2267.053836][T16951] bridge_slave_0: left allmulticast mode
[ 2267.053871][T16951] bridge_slave_0: left promiscuous mode
[ 2267.054143][T16951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2267.128712][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3050'.
[ 2267.128733][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3050'.
[ 2267.128759][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3050'.
[ 2267.141815][T10288] Bluetooth: hci7: command tx timeout
[ 2270.044401][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3057'.
[ 2270.044421][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3057'.
[ 2270.044445][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3057'.
[ 2270.395342][T18214] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3060'.
[ 2270.742771][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2270.852596][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2270.876760][T16951] bond0 (unregistering): Released all slaves
[ 2270.948929][T18109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2270.968164][T18104] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2270.968331][T18104] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2270.968600][T18104] bridge_slave_0: entered allmulticast mode
[ 2271.002216][T18104] bridge_slave_0: entered promiscuous mode
[ 2271.202036][T18101] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2271.202200][T18101] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2271.202477][T18101] bridge_slave_0: entered allmulticast mode
[ 2271.205493][T18101] bridge_slave_0: entered promiscuous mode
[ 2271.306743][T18109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2271.306976][T18104] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2271.320052][T18104] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2271.320543][T18104] bridge_slave_1: entered allmulticast mode
[ 2271.350196][T18104] bridge_slave_1: entered promiscuous mode
[ 2271.452780][T18101] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2271.452932][T18101] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2271.453160][T18101] bridge_slave_1: entered allmulticast mode
[ 2271.455946][T18101] bridge_slave_1: entered promiscuous mode
[ 2271.852993][T18106] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2271.853073][T18106] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2271.853212][T18106] bridge_slave_0: entered allmulticast mode
[ 2271.855013][T18106] bridge_slave_0: entered promiscuous mode
[ 2272.142938][T18106] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2272.143122][T18106] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2272.143350][T18106] bridge_slave_1: entered allmulticast mode
[ 2272.145579][T18106] bridge_slave_1: entered promiscuous mode
[ 2272.412678][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3064'.
[ 2272.412697][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3064'.
[ 2272.412723][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3064'.
[ 2272.647323][T18109] team0: Port device team_slave_0 added
[ 2272.651395][T18104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2272.746107][T18101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2272.854691][T18109] team0: Port device team_slave_1 added
[ 2272.857206][T18104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2272.996159][T18101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2273.126468][T18106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2273.326037][T18106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2273.409477][T18109] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2273.409498][T18109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2273.409528][T18109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2273.417702][T18104] team0: Port device team_slave_0 added
[ 2273.805085][T16951] hsr_slave_0: left promiscuous mode
[ 2273.844108][T16951] hsr_slave_1: left promiscuous mode
[ 2273.861898][T16951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2273.861920][T16951] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2273.888586][T16951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2273.888619][T16951] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2274.564588][T16951] veth1_macvtap: left promiscuous mode
[ 2274.564722][T16951] veth0_macvtap: left promiscuous mode
[ 2274.565010][T16951] veth1_vlan: left promiscuous mode
[ 2274.565211][T16951] veth0_vlan: left promiscuous mode
[ 2278.945355][T16951] team0 (unregistering): Port device team_slave_1 removed
[ 2279.243000][T16951] team0 (unregistering): Port device team_slave_0 removed
[ 2281.281093][T18241] Set syz1 is full, maxelem 65536 reached
[ 2283.268444][T18265] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3076'.
[ 2283.305933][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[ 2283.306040][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[ 2283.448056][T18101] team0: Port device team_slave_0 added
[ 2283.449180][T18109] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2283.449198][T18109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2283.449227][T18109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2283.453040][T18104] team0: Port device team_slave_1 added
[ 2283.676209][T18101] team0: Port device team_slave_1 added
[ 2283.777717][T18106] team0: Port device team_slave_0 added
[ 2283.968600][T18106] team0: Port device team_slave_1 added
[ 2284.289926][T18104] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2284.289941][T18104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2284.289958][T18104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2284.383353][T18101] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2284.383368][T18101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2284.383384][T18101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2284.509060][T18104] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2284.509073][T18104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2284.509089][T18104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2284.624368][T18101] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2284.624381][T18101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2284.624397][T18101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2284.818842][T18106] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2284.818857][T18106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2284.818876][T18106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2284.975802][T18109] hsr_slave_0: entered promiscuous mode
[ 2284.976883][T18109] hsr_slave_1: entered promiscuous mode
[ 2284.977460][T18109] debugfs: 'hsr0' already exists in 'hsr'
[ 2284.977477][T18109] Cannot create hsr debugfs directory
[ 2284.980304][T18106] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2284.980323][T18106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2284.980354][T18106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2285.771138][T18101] hsr_slave_0: entered promiscuous mode
[ 2285.778182][T18101] hsr_slave_1: entered promiscuous mode
[ 2285.778915][T18101] debugfs: 'hsr0' already exists in 'hsr'
[ 2285.778933][T18101] Cannot create hsr debugfs directory
[ 2285.788162][T18104] hsr_slave_0: entered promiscuous mode
[ 2285.789687][T18104] hsr_slave_1: entered promiscuous mode
[ 2285.790664][T18104] debugfs: 'hsr0' already exists in 'hsr'
[ 2285.790742][T18104] Cannot create hsr debugfs directory
[ 2286.201420][T18106] hsr_slave_0: entered promiscuous mode
[ 2286.227689][T18106] hsr_slave_1: entered promiscuous mode
[ 2286.228952][T18106] debugfs: 'hsr0' already exists in 'hsr'
[ 2286.228979][T18106] Cannot create hsr debugfs directory
[ 2286.312172][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3083'.
[ 2286.312199][T18285] netlink: 'syz.8.3083': attribute type 5 has an invalid length.
[ 2286.312207][T18285] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3083'.
[ 2286.442073][T18285] geneve2: entered promiscuous mode
[ 2286.442105][T18285] geneve2: entered allmulticast mode
[ 2287.820857][T18294] Bluetooth: MGMT ver 1.23
[ 2288.554625][T16951] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2289.237344][T16951] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2289.684119][T16951] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2289.987176][T16951] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2290.512084][T15795] Bluetooth: hci3: command 0x0406 tx timeout
[ 2290.830290][T16951] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2291.003741][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3095'.
[ 2291.176607][T16951] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2291.443922][T16951] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2291.521830][T17931] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 2291.702024][T17931] usb 9-1: Using ep0 maxpacket: 16
[ 2291.704294][T17931] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 2291.704353][T17931] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2291.704370][T17931] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2291.704383][T17931] usb 9-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2291.704399][T17931] usb 9-1: config 7 interface 0 has no altsetting 0
[ 2291.704419][T17931] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[ 2291.704491][T17931] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2291.791031][T16951] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2292.140109][T17931] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.0/0003:0458:5010.000C/input/input23
[ 2292.245267][T17931] kye 0003:0458:5010.000C: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0
[ 2292.320412][  T806] usb 9-1: USB disconnect, device number 6
[ 2292.621377][T16951] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2292.900236][T18321] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3097'.
[ 2292.914036][T16951] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2293.346346][T16951] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2293.870325][T16951] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2294.382014][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3102'.
[ 2294.422803][T16951] bridge_slave_1: left allmulticast mode
[ 2294.423241][T16951] bridge_slave_1: left promiscuous mode
[ 2294.423518][T16951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2294.514145][T16951] bridge_slave_0: left allmulticast mode
[ 2294.514169][T16951] bridge_slave_0: left promiscuous mode
[ 2294.514335][T16951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2294.594271][T16951] bridge_slave_1: left allmulticast mode
[ 2294.594294][T16951] bridge_slave_1: left promiscuous mode
[ 2294.594451][T16951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2294.662747][T16951] bridge_slave_0: left allmulticast mode
[ 2294.662771][T16951] bridge_slave_0: left promiscuous mode
[ 2294.662940][T16951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2294.691871][   T43] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 2294.735677][T16951] bridge_slave_1: left allmulticast mode
[ 2294.735700][T16951] bridge_slave_1: left promiscuous mode
[ 2294.735859][T16951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2294.812729][T16951] bridge_slave_0: left allmulticast mode
[ 2294.812754][T16951] bridge_slave_0: left promiscuous mode
[ 2294.813011][T16951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2294.853371][   T43] usb 9-1: Using ep0 maxpacket: 16
[ 2294.855335][   T43] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 2294.855393][   T43] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2294.855409][   T43] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2294.855422][   T43] usb 9-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2294.855438][   T43] usb 9-1: config 7 interface 0 has no altsetting 0
[ 2294.855458][   T43] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[ 2294.855472][   T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2295.281166][   T43] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.0/0003:0458:5010.000D/input/input24
[ 2295.291380][   T43] kye 0003:0458:5010.000D: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0
[ 2295.488376][   T43] usb 9-1: USB disconnect, device number 7
[ 2298.620727][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3109'.
[ 2299.033363][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2299.112462][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2299.136791][T16951] bond0 (unregistering): Released all slaves
[ 2301.162292][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2301.222912][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2301.244237][T16951] bond0 (unregistering): Released all slaves
[ 2303.382372][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2303.443365][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2303.465156][T16951] bond0 (unregistering): Released all slaves
[ 2303.830407][T18109] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2303.893812][T18109] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2303.941995][T16334] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 2303.965091][T18109] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2304.049772][T18109] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2304.101798][T16334] usb 9-1: Using ep0 maxpacket: 16
[ 2304.107586][T16334] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 2304.107667][T16334] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2304.107696][T16334] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2304.107719][T16334] usb 9-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2304.107747][T16334] usb 9-1: config 7 interface 0 has no altsetting 0
[ 2304.107784][T16334] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[ 2304.107809][T16334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2304.324671][T18101] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2304.636754][T16334] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.0/0003:0458:5010.000E/input/input25
[ 2304.761399][T16334] kye 0003:0458:5010.000E: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0
[ 2304.834049][ T9267] usb 9-1: USB disconnect, device number 8
[ 2304.874591][T18101] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2304.908771][T18101] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2305.003050][T18101] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2305.371373][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3111'.
[ 2305.371401][T18367] netlink: 'syz.8.3111': attribute type 5 has an invalid length.
[ 2305.371410][T18367] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3111'.
[ 2305.434183][T18367] geneve2: entered promiscuous mode
[ 2305.434202][T18367] geneve2: entered allmulticast mode
[ 2305.467827][T16102] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[ 2305.635471][T18373] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 2305.789511][T16102] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[ 2305.825302][T16102] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[ 2305.923481][T16102] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[ 2305.925867][T18104] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2306.412919][T18104] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2306.492872][T18104] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2306.614953][T18104] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2308.442170][T10288] Bluetooth: hci3: unexpected event for opcode 0x0c0d
[ 2308.498662][T18106] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2309.257102][T18106] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2309.393076][T18106] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2309.524212][T18402] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[ 2309.524233][T18402] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 2309.534723][T18402] vhci_hcd vhci_hcd.0: Device attached
[ 2309.551786][T16951] hsr_slave_0: left promiscuous mode
[ 2309.573257][T16951] hsr_slave_1: left promiscuous mode
[ 2309.574102][T16951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2309.574120][T16951] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2309.632774][T16951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2309.632802][T16951] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2309.781801][T16951] hsr_slave_0: left promiscuous mode
[ 2309.801838][T16328] usb 49-1: new low-speed USB device number 2 using vhci_hcd
[ 2309.827325][T16951] hsr_slave_1: left promiscuous mode
[ 2309.828274][T16951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2309.828293][T16951] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2309.872429][T16951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2309.872459][T16951] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2310.021880][T16951] hsr_slave_0: left promiscuous mode
[ 2310.041801][T16951] hsr_slave_1: left promiscuous mode
[ 2310.042467][T16951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2310.042485][T16951] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2310.082788][T16951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2310.082821][T16951] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2310.242629][T16951] veth1_macvtap: left promiscuous mode
[ 2310.242700][T16951] veth0_macvtap: left promiscuous mode
[ 2310.242861][T16951] veth1_vlan: left promiscuous mode
[ 2310.242974][T16951] veth0_vlan: left promiscuous mode
[ 2310.280898][T18403] vhci_hcd: connection reset by peer
[ 2310.301076][  T160] vhci_hcd vhci_hcd.8: stop threads
[ 2310.302456][  T160] vhci_hcd vhci_hcd.8: release socket
[ 2310.303007][  T160] vhci_hcd vhci_hcd.8: disconnect device
[ 2310.392994][T16951] veth1_macvtap: left promiscuous mode
[ 2310.393065][T16951] veth0_macvtap: left promiscuous mode
[ 2310.393218][T16951] veth1_vlan: left promiscuous mode
[ 2310.393324][T16951] veth0_vlan: left promiscuous mode
[ 2310.541984][T16951] veth1_macvtap: left promiscuous mode
[ 2310.542053][T16951] veth0_macvtap: left promiscuous mode
[ 2310.542210][T16951] veth1_vlan: left promiscuous mode
[ 2310.542315][T16951] veth0_vlan: left promiscuous mode
[ 2314.971948][T16328] vhci_hcd vhci_hcd.8: vhci_device speed not set
[ 2315.448109][T15795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2315.466341][T15795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2315.468070][T15795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2315.469853][T15795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2315.476734][T15795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2315.512915][T16951] team0 (unregistering): Port device team_slave_1 removed
[ 2315.636398][T10288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2315.697043][T10288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2315.698573][T10288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2315.699700][T10288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2315.700748][T10288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2315.842390][T16951] team0 (unregistering): Port device team_slave_0 removed
[ 2316.541459][T10288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2316.567484][T10288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2316.569133][T10288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2316.570295][T10288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2316.571489][T10288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2317.541896][T15795] Bluetooth: hci1: command tx timeout
[ 2317.805580][T15795] Bluetooth: hci4: command tx timeout
[ 2318.681674][T15795] Bluetooth: hci5: command tx timeout
[ 2318.820705][T10288] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 2318.837332][T10288] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 2318.839807][T10288] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 2318.841353][T10288] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 2318.895122][T10288] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 2319.621985][T10288] Bluetooth: hci1: command tx timeout
[ 2319.862091][T10288] Bluetooth: hci4: command tx timeout
[ 2320.769212][T10288] Bluetooth: hci5: command tx timeout
[ 2320.981853][T10288] Bluetooth: hci8: command tx timeout
[ 2320.997829][T16951] team0 (unregistering): Port device team_slave_1 removed
[ 2321.273277][T16951] team0 (unregistering): Port device team_slave_0 removed
[ 2321.713992][T10288] Bluetooth: hci1: command tx timeout
[ 2321.954168][T10288] Bluetooth: hci4: command tx timeout
[ 2322.842967][T10288] Bluetooth: hci5: command tx timeout
[ 2323.061764][T10288] Bluetooth: hci8: command tx timeout
[ 2323.781778][T10288] Bluetooth: hci1: command tx timeout
[ 2324.022058][T10288] Bluetooth: hci4: command tx timeout
[ 2324.901869][T10288] Bluetooth: hci5: command tx timeout
[ 2325.151877][T10288] Bluetooth: hci8: command tx timeout
[ 2326.202395][T16951] team0 (unregistering): Port device team_slave_1 removed
[ 2326.492395][T16951] team0 (unregistering): Port device team_slave_0 removed
[ 2327.231654][T10288] Bluetooth: hci8: command tx timeout
[ 2327.460966][T15795] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 2327.485381][T15795] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 2327.486874][T15795] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 2327.532551][T15795] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 2327.534213][T15795] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 2329.346087][T18106] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2329.622028][T10288] Bluetooth: hci9: command tx timeout
[ 2331.707098][T10288] Bluetooth: hci9: command tx timeout
[ 2332.900986][T18426] chnl_net:caif_netlink_parms(): no params data found
[ 2332.923032][T18423] chnl_net:caif_netlink_parms(): no params data found
[ 2333.096331][T18429] chnl_net:caif_netlink_parms(): no params data found
[ 2333.273008][T18418] chnl_net:caif_netlink_parms(): no params data found
[ 2333.696768][T18420] chnl_net:caif_netlink_parms(): no params data found
[ 2333.781726][T10288] Bluetooth: hci9: command tx timeout
[ 2334.103822][T18426] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2334.103999][T18426] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2334.104138][T18426] bridge_slave_0: entered allmulticast mode
[ 2334.105750][T18426] bridge_slave_0: entered promiscuous mode
[ 2334.202905][T18423] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2334.202986][T18423] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2334.203125][T18423] bridge_slave_0: entered allmulticast mode
[ 2334.204742][T18423] bridge_slave_0: entered promiscuous mode
[ 2334.322868][T18426] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2334.322993][T18426] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2334.323140][T18426] bridge_slave_1: entered allmulticast mode
[ 2334.324769][T18426] bridge_slave_1: entered promiscuous mode
[ 2334.553958][T18423] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2334.554098][T18423] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2334.554334][T18423] bridge_slave_1: entered allmulticast mode
[ 2334.556227][T18423] bridge_slave_1: entered promiscuous mode
[ 2334.782829][T18429] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2334.782930][T18429] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2334.783297][T18429] bridge_slave_0: entered allmulticast mode
[ 2334.784930][T18429] bridge_slave_0: entered promiscuous mode
[ 2334.916521][T18418] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2334.916696][T18418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2334.916961][T18418] bridge_slave_0: entered allmulticast mode
[ 2334.919259][T18418] bridge_slave_0: entered promiscuous mode
[ 2334.972167][T18429] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2334.972280][T18429] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2334.972523][T18429] bridge_slave_1: entered allmulticast mode
[ 2334.974172][T18429] bridge_slave_1: entered promiscuous mode
[ 2335.093276][T18426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2335.093501][T18418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2335.093618][T18418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2335.093825][T18418] bridge_slave_1: entered allmulticast mode
[ 2335.095756][T18418] bridge_slave_1: entered promiscuous mode
[ 2335.226979][T18423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2335.305042][T18426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2335.479422][T18423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2335.682744][T18429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2335.785479][T18420] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2335.785630][T18420] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2335.785782][T18420] bridge_slave_0: entered allmulticast mode
[ 2335.787387][T18420] bridge_slave_0: entered promiscuous mode
[ 2335.861759][T10288] Bluetooth: hci9: command tx timeout
[ 2335.886373][T18418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2335.889864][T18429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2336.137408][T18420] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2336.137549][T18420] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2336.137864][T18420] bridge_slave_1: entered allmulticast mode
[ 2336.139682][T18420] bridge_slave_1: entered promiscuous mode
[ 2336.173070][T18426] team0: Port device team_slave_0 added
[ 2336.176096][T18418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2336.269182][T18423] team0: Port device team_slave_0 added
[ 2336.364582][T18426] team0: Port device team_slave_1 added
[ 2336.497213][T18423] team0: Port device team_slave_1 added
[ 2336.674803][T18429] team0: Port device team_slave_0 added
[ 2336.740397][T18420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2336.815642][T18418] team0: Port device team_slave_0 added
[ 2336.817976][T18429] team0: Port device team_slave_1 added
[ 2336.895771][T18420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2336.896487][T18426] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2336.896498][T18426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2336.896514][T18426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2336.899086][T18418] team0: Port device team_slave_1 added
[ 2337.033803][T18423] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2337.033816][T18423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2337.033833][T18423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2337.133176][T18426] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2337.133190][T18426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2337.133207][T18426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2337.513767][T18423] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2337.513787][T18423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2337.513814][T18423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2337.714758][T18429] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2337.714773][T18429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2337.714788][T18429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2337.727948][T18420] team0: Port device team_slave_0 added
[ 2337.732780][T18418] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2337.732798][T18418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2337.732823][T18418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2337.735220][T18429] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2337.735234][T18429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2337.735259][T18429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2337.744118][T18420] team0: Port device team_slave_1 added
[ 2337.747053][T18418] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2337.747067][T18418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2337.747093][T18418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2338.464462][T18420] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2338.464476][T18420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2338.464492][T18420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2338.523306][T18426] hsr_slave_0: entered promiscuous mode
[ 2338.526953][T18426] hsr_slave_1: entered promiscuous mode
[ 2338.607835][T18423] hsr_slave_0: entered promiscuous mode
[ 2338.608741][T18423] hsr_slave_1: entered promiscuous mode
[ 2338.609358][T18423] debugfs: 'hsr0' already exists in 'hsr'
[ 2338.609376][T18423] Cannot create hsr debugfs directory
[ 2338.694463][T18420] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2338.694476][T18420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2338.694493][T18420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2339.009765][T18429] hsr_slave_0: entered promiscuous mode
[ 2339.010709][T18429] hsr_slave_1: entered promiscuous mode
[ 2339.011306][T18429] debugfs: 'hsr0' already exists in 'hsr'
[ 2339.011324][T18429] Cannot create hsr debugfs directory
[ 2339.338241][T18418] hsr_slave_0: entered promiscuous mode
[ 2339.339131][T18418] hsr_slave_1: entered promiscuous mode
[ 2339.339753][T18418] debugfs: 'hsr0' already exists in 'hsr'
[ 2339.339771][T18418] Cannot create hsr debugfs directory
[ 2340.278679][T18420] hsr_slave_0: entered promiscuous mode
[ 2340.279557][T18420] hsr_slave_1: entered promiscuous mode
[ 2340.280374][T18420] debugfs: 'hsr0' already exists in 'hsr'
[ 2340.280392][T18420] Cannot create hsr debugfs directory
[ 2344.746088][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.746184][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[ 2345.164948][T16951] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2345.164975][T16951] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2345.406198][T16951] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2345.406226][T16951] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2345.673748][T16951] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2345.673775][T16951] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2345.954312][T16951] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2345.954338][T16951] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2346.342066][T16951] bridge_slave_1: left allmulticast mode
[ 2346.342090][T16951] bridge_slave_1: left promiscuous mode
[ 2346.342275][T16951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2346.383809][T16951] bridge_slave_0: left allmulticast mode
[ 2346.383833][T16951] bridge_slave_0: left promiscuous mode
[ 2346.384036][T16951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2346.455186][T16951] bridge_slave_1: left allmulticast mode
[ 2346.455209][T16951] bridge_slave_1: left promiscuous mode
[ 2346.455370][T16951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2346.522883][T16951] bridge_slave_0: left allmulticast mode
[ 2346.522908][T16951] bridge_slave_0: left promiscuous mode
[ 2346.523102][T16951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2346.596680][T16951] bridge_slave_1: left allmulticast mode
[ 2346.596714][T16951] bridge_slave_1: left promiscuous mode
[ 2346.596980][T16951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2346.652674][T16951] bridge_slave_0: left allmulticast mode
[ 2346.652697][T16951] bridge_slave_0: left promiscuous mode
[ 2346.652886][T16951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2346.734396][T16951] bridge_slave_1: left allmulticast mode
[ 2346.734430][T16951] bridge_slave_1: left promiscuous mode
[ 2346.734587][T16951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2346.793190][T16951] bridge_slave_0: left allmulticast mode
[ 2346.793213][T16951] bridge_slave_0: left promiscuous mode
[ 2346.793396][T16951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2346.864875][T16951] bridge_slave_1: left allmulticast mode
[ 2346.864897][T16951] bridge_slave_1: left promiscuous mode
[ 2346.865054][T16951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2346.922727][T16951] bridge_slave_0: left allmulticast mode
[ 2346.922751][T16951] bridge_slave_0: left promiscuous mode
[ 2346.922933][T16951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2347.572520][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2347.682780][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2347.743680][T16951] bond0 (unregistering): Released all slaves
[ 2348.272416][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2348.352468][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2348.432005][T16951] bond0 (unregistering): Released all slaves
[ 2349.232539][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2349.312408][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2349.373993][T16951] bond0 (unregistering): Released all slaves
[ 2349.762560][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2349.853898][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2349.913946][T16951] bond0 (unregistering): Released all slaves
[ 2352.103073][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2352.162278][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2352.189142][T16951] bond0 (unregistering): Released all slaves
[ 2353.585874][T18426] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2353.883221][T18426] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2354.000111][T18426] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2354.058254][T18426] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2354.241842][T16951] hsr_slave_0: left promiscuous mode
[ 2354.271791][T16951] hsr_slave_1: left promiscuous mode
[ 2354.272480][T16951] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2354.312555][T16951] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2354.451792][T16951] hsr_slave_0: left promiscuous mode
[ 2354.491770][T16951] hsr_slave_1: left promiscuous mode
[ 2354.493000][T16951] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2354.515364][T16951] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2354.662740][T16951] hsr_slave_0: left promiscuous mode
[ 2354.701806][T16951] hsr_slave_1: left promiscuous mode
[ 2354.703316][T16951] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2354.724849][T16951] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2354.881858][T16951] hsr_slave_0: left promiscuous mode
[ 2354.902353][T16951] hsr_slave_1: left promiscuous mode
[ 2354.903071][T16951] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2354.942370][T16951] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2355.101792][T16951] hsr_slave_0: left promiscuous mode
[ 2355.121812][T16951] hsr_slave_1: left promiscuous mode
[ 2355.122521][T16951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2355.122542][T16951] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2355.182866][T16951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2355.182899][T16951] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2355.270842][T16951] veth1_macvtap: left promiscuous mode
[ 2355.270930][T16951] veth0_macvtap: left promiscuous mode
[ 2355.271085][T16951] veth1_vlan: left promiscuous mode
[ 2355.271191][T16951] veth0_vlan: left promiscuous mode
[ 2356.142316][T16951] team0 (unregistering): Port device team_slave_1 removed
[ 2356.292313][T16951] team0 (unregistering): Port device team_slave_0 removed
[ 2357.532554][T16951] team0 (unregistering): Port device team_slave_1 removed
[ 2357.702963][T16951] team0 (unregistering): Port device team_slave_0 removed
[ 2359.033110][T16951] team0 (unregistering): Port device team_slave_1 removed
[ 2359.212646][T16951] team0 (unregistering): Port device team_slave_0 removed
[ 2360.582394][T16951] team0 (unregistering): Port device team_slave_1 removed
[ 2360.742953][T16951] team0 (unregistering): Port device team_slave_0 removed
[ 2363.982666][T16951] team0 (unregistering): Port device team_slave_1 removed
[ 2364.272372][T16951] team0 (unregistering): Port device team_slave_0 removed
[ 2367.355111][T18423] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2367.404581][T18423] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2367.484824][T18423] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2367.594441][T18423] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2367.746968][T18429] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2367.812700][T18429] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2367.887168][T18429] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2367.986477][T18429] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2368.176273][T18418] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2368.223625][T18418] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2368.258813][T18418] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2368.411392][T18418] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2368.570739][T18426] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2368.601997][T18420] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2368.654631][T18420] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2368.716779][T18420] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2368.774111][T18420] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2368.849882][T18426] 8021q: adding VLAN 0 to HW filter on device team0
[ 2368.951073][  T160] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2368.962193][  T160] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2369.019172][  T160] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2369.019315][  T160] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2369.095822][T18423] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2369.179426][T18423] 8021q: adding VLAN 0 to HW filter on device team0
[ 2369.183959][T18429] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2369.223576][T16758] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2369.223713][T16758] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2369.260506][  T160] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2369.260645][  T160] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2369.325674][T18429] 8021q: adding VLAN 0 to HW filter on device team0
[ 2369.333498][T18418] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2369.389941][  T160] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2369.391041][  T160] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2369.418241][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2369.418939][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2369.528483][T18418] 8021q: adding VLAN 0 to HW filter on device team0
[ 2369.585861][T18420] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2369.597868][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2369.598075][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2369.673114][  T160] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2369.673200][  T160] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2369.833019][T18420] 8021q: adding VLAN 0 to HW filter on device team0
[ 2369.857673][  T160] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2369.857901][  T160] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2369.898036][  T160] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2369.898281][  T160] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2370.168292][T18426] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2370.405741][T18423] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2370.488230][T18426] veth0_vlan: entered promiscuous mode
[ 2370.539839][T18426] veth1_vlan: entered promiscuous mode
[ 2370.621908][T18429] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2370.871361][T18426] veth0_macvtap: entered promiscuous mode
[ 2370.914843][T18426] veth1_macvtap: entered promiscuous mode
[ 2371.030185][T18429] veth0_vlan: entered promiscuous mode
[ 2371.048377][T18420] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2371.130213][T18429] veth1_vlan: entered promiscuous mode
[ 2371.166267][T18426] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2371.242224][T18426] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2371.316885][T18418] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2371.399960][T16406] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2371.415275][T16406] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2371.416739][T16406] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2371.421268][T16406] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2371.532772][T18429] veth0_macvtap: entered promiscuous mode
[ 2371.640579][T18429] veth1_macvtap: entered promiscuous mode
[ 2371.656223][T18420] veth0_vlan: entered promiscuous mode
[ 2371.838398][T18423] veth0_vlan: entered promiscuous mode
[ 2371.839585][T16758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2371.839616][T16758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2371.903110][T18420] veth1_vlan: entered promiscuous mode
[ 2371.985861][T18429] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2371.987011][T18423] veth1_vlan: entered promiscuous mode
[ 2372.006277][ T1213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2372.006298][ T1213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2372.016543][T18429] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2372.091082][   T89] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2372.103415][   T89] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2372.115957][   T89] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2372.134901][   T89] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2372.248263][T18524] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3031'.
[ 2372.436222][T18420] veth0_macvtap: entered promiscuous mode
[ 2372.657793][T18423] veth0_macvtap: entered promiscuous mode
[ 2372.661005][T18420] veth1_macvtap: entered promiscuous mode
[ 2372.697702][T18418] veth0_vlan: entered promiscuous mode
[ 2372.729888][T18423] veth1_macvtap: entered promiscuous mode
[ 2372.782959][   T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2372.782984][   T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2372.873625][T18418] veth1_vlan: entered promiscuous mode
[ 2372.917629][T18420] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2373.000398][  T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2373.000422][  T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2373.010966][T18420] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2373.018533][T18423] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2373.083626][T18423] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2373.090627][   T89] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2373.091770][   T89] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2373.092188][   T89] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2373.092676][   T89] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2373.143711][ T1213] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2373.148521][ T1213] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2373.155778][ T1213] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2373.193835][ T1215] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2373.205602][T18418] veth0_macvtap: entered promiscuous mode
[ 2373.372342][T18534] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2)
[ 2373.374887][T18418] veth1_macvtap: entered promiscuous mode
[ 2375.237794][T18418] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2375.279575][T16533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2375.279598][T16533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2375.325934][T18418] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2375.573686][T18558] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3130'.
[ 2375.820682][T15795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2375.840531][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2375.840564][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2375.874454][T14973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2375.896597][T14973] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2375.898067][T14973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2375.900213][T14973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2375.904164][T18566] No control pipe specified
[ 2376.001193][T18564] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2376.029961][T18564] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2376.033996][T18564] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2376.035226][T18564] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2376.035985][T18564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2376.146311][T18572] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3133'.
[ 2377.414048][T18584] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3138'.
[ 2377.943522][T15795] Bluetooth: hci0: command tx timeout
[ 2378.951520][T15795] Bluetooth: hci2: command tx timeout
[ 2380.022035][T15795] Bluetooth: hci0: command tx timeout
[ 2380.995750][T15795] Bluetooth: hci2: command tx timeout
[ 2381.174146][T18607] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3143'.
[ 2381.419449][T18616] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3147'.
[ 2382.101714][T15795] Bluetooth: hci0: command tx timeout
[ 2382.170921][T18629] GUP no longer grows the stack in syz.2.3151 (18629): 200000004000-20000000a000 (200000002000)
[ 2382.170965][T18629] CPU: 0 UID: 0 PID: 18629 Comm: syz.2.3151 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2382.170998][T18629] Tainted: [L]=SOFTLOCKUP
[ 2382.171006][T18629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2382.171020][T18629] Call Trace:
[ 2382.171030][T18629]  <TASK>
[ 2382.171040][T18629]  dump_stack_lvl+0xe8/0x150
[ 2382.171077][T18629]  __get_user_pages+0x22c8/0x2830
[ 2382.171147][T18629]  get_user_pages_remote+0x2f1/0xac0
[ 2382.171179][T18629]  ? __pfx_mtree_load+0x10/0x10
[ 2382.171210][T18629]  ? __pfx_get_user_pages_remote+0x10/0x10
[ 2382.171241][T18629]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 2382.171264][T18629]  ? __access_remote_vm+0x367/0x7d0
[ 2382.171306][T18629]  __access_remote_vm+0x211/0x7d0
[ 2382.171352][T18629]  ? __pfx___access_remote_vm+0x10/0x10
[ 2382.171384][T18629]  ? set_page_refcounted+0xa0/0x1e0
[ 2382.171410][T18629]  ? alloc_pages_noprof+0xe4/0x1e0
[ 2382.171437][T18629]  proc_pid_cmdline_read+0x433/0x810
[ 2382.171468][T18629]  ? __asan_memset+0x22/0x50
[ 2382.171519][T18629]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[ 2382.171551][T18629]  ? rw_verify_area+0x2ac/0x4e0
[ 2382.171585][T18629]  vfs_readv+0x5b3/0x850
[ 2382.171608][T18629]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[ 2382.171640][T18629]  ? __pfx_vfs_readv+0x10/0x10
[ 2382.171679][T18629]  ? __fget_files+0x2a/0x420
[ 2382.171706][T18629]  ? __fget_files+0x3a6/0x420
[ 2382.171729][T18629]  ? __fget_files+0x2a/0x420
[ 2382.171761][T18629]  __x64_sys_preadv+0x19a/0x2a0
[ 2382.171793][T18629]  ? __pfx___se_sys_futex+0x10/0x10
[ 2382.171827][T18629]  ? __pfx___x64_sys_preadv+0x10/0x10
[ 2382.171874][T18629]  do_syscall_64+0xec/0xf80
[ 2382.171898][T18629]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2382.171919][T18629]  ? trace_irq_disable+0x37/0x100
[ 2382.171939][T18629]  ? clear_bhb_loop+0x60/0xb0
[ 2382.171969][T18629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2382.171991][T18629] RIP: 0033:0x7ffab9d2f749
[ 2382.172012][T18629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2382.172032][T18629] RSP: 002b:00007ffab7f75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 2382.172058][T18629] RAX: ffffffffffffffda RBX: 00007ffab9f86090 RCX: 00007ffab9d2f749
[ 2382.172075][T18629] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005
[ 2382.172090][T18629] RBP: 00007ffab9db3f91 R08: 0000000000000000 R09: 0000000000000000
[ 2382.172102][T18629] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[ 2382.172112][T18629] R13: 00007ffab9f86128 R14: 00007ffab9f86090 R15: 00007fffb38fb848
[ 2382.172140][T18629]  </TASK>
[ 2382.524841][T18630] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[ 2382.524873][T18630] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 2382.530733][T18630] vhci_hcd vhci_hcd.0: Device attached
[ 2382.689933][T18560] chnl_net:caif_netlink_parms(): no params data found
[ 2382.712562][T18631] vhci_hcd: connection closed
[ 2382.714291][T16758] vhci_hcd vhci_hcd.1: stop threads
[ 2382.714311][T16758] vhci_hcd vhci_hcd.1: release socket
[ 2382.728664][T16758] vhci_hcd vhci_hcd.1: disconnect device
[ 2382.849698][T18561] chnl_net:caif_netlink_parms(): no params data found
[ 2383.061897][T15795] Bluetooth: hci2: command tx timeout
[ 2383.339322][T15392] usb usb36-port1: attempt power cycle
[ 2384.271687][T15795] Bluetooth: hci0: command tx timeout
[ 2384.562826][T15392] usb usb36-port1: unable to enumerate USB device
[ 2385.090894][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'.
[ 2385.090934][T18662] netlink: 'syz.1.3160': attribute type 5 has an invalid length.
[ 2385.090949][T18662] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3160'.
[ 2385.141674][T15795] Bluetooth: hci2: command tx timeout
[ 2385.230119][T18662] geneve2: entered promiscuous mode
[ 2385.230153][T18662] geneve2: entered allmulticast mode
[ 2385.814468][ T1015] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[ 2385.866059][T18560] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2385.866546][T18560] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2385.866788][T18560] bridge_slave_0: entered allmulticast mode
[ 2385.907756][T18560] bridge_slave_0: entered promiscuous mode
[ 2385.950377][ T1015] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[ 2386.140233][ T1015] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[ 2386.140393][T18560] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2386.140474][T18560] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2386.140651][T18560] bridge_slave_1: entered allmulticast mode
[ 2386.198143][T18560] bridge_slave_1: entered promiscuous mode
[ 2386.312708][T16375] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[ 2386.395683][T18561] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2386.395829][T18561] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2386.396005][T18561] bridge_slave_0: entered allmulticast mode
[ 2386.439010][T18561] bridge_slave_0: entered promiscuous mode
[ 2386.613215][T18561] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2386.614523][T18561] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2386.614763][T18561] bridge_slave_1: entered allmulticast mode
[ 2386.617632][T18561] bridge_slave_1: entered promiscuous mode
[ 2386.673036][T18560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2386.808293][T18685] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[ 2386.808324][T18685] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 2386.808420][T18685] vhci_hcd vhci_hcd.0: Device attached
[ 2386.962786][T18560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2387.218577][T18686] vhci_hcd: connection closed
[ 2387.224103][ T1015] vhci_hcd vhci_hcd.5: stop threads
[ 2387.224122][ T1015] vhci_hcd vhci_hcd.5: release socket
[ 2387.224165][ T1015] vhci_hcd vhci_hcd.5: disconnect device
[ 2387.291718][T16262] usb 44-1: enqueue for inactive port 0
[ 2387.350002][T18561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2387.451848][T18692] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[ 2387.458012][T18692] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 2387.496145][T18692] vhci_hcd vhci_hcd.0: Device attached
[ 2387.513606][T18561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2387.593620][T18560] team0: Port device team_slave_0 added
[ 2387.784490][T18560] team0: Port device team_slave_1 added
[ 2387.805258][T16262] usb usb44-port1: attempt power cycle
[ 2387.831785][T10708] usb 36-1: SetAddress Request (6) to port 0
[ 2387.831850][T10708] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd
[ 2387.906221][T18693] vhci_hcd: connection reset by peer
[ 2387.906560][T16102] vhci_hcd vhci_hcd.1: stop threads
[ 2387.906577][T16102] vhci_hcd vhci_hcd.1: release socket
[ 2387.906740][T16102] vhci_hcd vhci_hcd.1: disconnect device
[ 2388.064847][T18561] team0: Port device team_slave_0 added
[ 2388.181685][T15392] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 2388.189544][T18561] team0: Port device team_slave_1 added
[ 2388.305039][T18560] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2388.305054][T18560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2388.305120][T18560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2388.370137][T16262] usb usb44-port1: unable to enumerate USB device
[ 2388.378875][T15392] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 2388.378896][T15392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2388.378909][T15392] usb 3-1: Product: syz
[ 2388.378917][T15392] usb 3-1: Manufacturer: syz
[ 2388.378926][T15392] usb 3-1: SerialNumber: syz
[ 2388.731862][T15392] usb 3-1: palm_os_4_probe - error -110 getting connection info
[ 2388.731947][T15392] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[ 2389.365371][T18560] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2389.365386][T18560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2389.365402][T18560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2389.390703][T15392] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 2389.400920][T15392] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 2389.616287][T16533] bridge_slave_1: left allmulticast mode
[ 2389.616309][T16533] bridge_slave_1: left promiscuous mode
[ 2389.620931][T16533] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2389.736532][T16533] bridge_slave_0: left allmulticast mode
[ 2389.736565][T16533] bridge_slave_0: left promiscuous mode
[ 2389.736833][T16533] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2389.871812][T17931] usb 3-1: USB disconnect, device number 10
[ 2389.900011][T17931] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 2389.923702][T17931] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 2389.924295][T17931] visor 3-1:1.0: device disconnected
[ 2390.745256][T16425] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 2390.951380][T16425] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2390.951430][T16425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2390.953121][T16425] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2390.953151][T16425] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2390.953173][T16425] usb 2-1: Manufacturer: syz
[ 2390.956646][T16425] usb 2-1: config 0 descriptor??
[ 2391.061827][T16425] rc_core: IR keymap rc-hauppauge not found
[ 2391.061853][T16425] Registered IR keymap rc-empty
[ 2391.063772][T16425] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 2391.067272][T16425] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26
[ 2392.135356][T16533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2392.192639][T16533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2392.222260][T16533] bond0 (unregistering): Released all slaves
[ 2392.274558][T18561] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2392.274579][T18561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2392.274608][T18561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2392.471913][T18561] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2392.471932][T18561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2392.471956][T18561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2392.902391][T10708] usb 36-1: device descriptor read/8, error -110
[ 2393.406221][T10708] usb usb36-port1: attempt power cycle
[ 2393.851700][T16533] hsr_slave_0: left promiscuous mode
[ 2393.964616][T10708] usb usb36-port1: unable to enumerate USB device
[ 2394.733514][T16533] hsr_slave_1: left promiscuous mode
[ 2394.737399][T16533] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2394.737431][T16533] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2394.793846][T16533] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2394.793877][T16533] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2395.021784][T16533] veth1_macvtap: left promiscuous mode
[ 2395.021863][T16533] veth0_macvtap: left promiscuous mode
[ 2395.022038][T16533] veth1_vlan: left promiscuous mode
[ 2395.022155][T16533] veth0_vlan: left promiscuous mode
[ 2395.048594][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3182'.
[ 2395.048627][T18740] netlink: 'syz.2.3182': attribute type 5 has an invalid length.
[ 2395.048853][T18740] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3182'.
[ 2398.783488][T16533] team0 (unregistering): Port device team_slave_1 removed
[ 2399.091605][T16533] team0 (unregistering): Port device team_slave_0 removed
[ 2402.222321][T18560] hsr_slave_0: entered promiscuous mode
[ 2402.223654][T18560] hsr_slave_1: entered promiscuous mode
[ 2402.225615][T18560] debugfs: 'hsr0' already exists in 'hsr'
[ 2402.225643][T18560] Cannot create hsr debugfs directory
[ 2402.236300][T18740] geneve2: entered promiscuous mode
[ 2402.236325][T18740] geneve2: entered allmulticast mode
[ 2402.690147][T16758] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[ 2403.212246][T16758] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[ 2403.595953][T18561] hsr_slave_0: entered promiscuous mode
[ 2403.598539][T18561] hsr_slave_1: entered promiscuous mode
[ 2403.616941][T18561] debugfs: 'hsr0' already exists in 'hsr'
[ 2403.617025][T18561] Cannot create hsr debugfs directory
[ 2403.762860][T16758] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[ 2403.770440][T16758] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[ 2404.658390][T10708] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[ 2404.866023][T16364] usb 2-1: USB disconnect, device number 10
[ 2404.962738][T18770] process 'syz.5.3189' launched './file1' with NULL argv: empty string added
[ 2405.545697][T10708] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 2405.548800][T10708] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[ 2405.548833][T10708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2405.548856][T10708] usb 3-1: Product: syz
[ 2405.548871][T10708] usb 3-1: Manufacturer: syz
[ 2405.548887][T10708] usb 3-1: SerialNumber: syz
[ 2406.470566][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[ 2406.470648][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[ 2406.565789][T10708] as10x_usb: device has been detected
[ 2406.566425][T10708] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[ 2406.796721][T10708] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[ 2407.193239][T18777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3193'.
[ 2407.276036][T10708] as10x_usb: error during firmware upload part1
[ 2407.276472][T10708] Registered device Elgato EyeTV DTT Deluxe
[ 2407.375620][T10708] usb 3-1: USB disconnect, device number 11
[ 2407.436690][T10708] Unregistered device Elgato EyeTV DTT Deluxe
[ 2407.445451][T10708] as10x_usb: device has been disconnected
[ 2407.739042][T18560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2408.511036][T18560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2409.009250][T18560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2409.667064][T18560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2410.270873][T16533] bridge_slave_1: left allmulticast mode
[ 2410.270912][T16533] bridge_slave_1: left promiscuous mode
[ 2410.271240][T16533] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2410.446385][T16533] bridge_slave_0: left allmulticast mode
[ 2410.446409][T16533] bridge_slave_0: left promiscuous mode
[ 2410.446574][T16533] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2410.707779][T18815] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[ 2410.707810][T18815] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 2410.710704][T18815] vhci_hcd vhci_hcd.0: Device attached
[ 2410.731759][T18817] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[ 2410.731791][T18817] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 2410.733538][T18817] vhci_hcd vhci_hcd.0: Device attached
[ 2411.091772][T15392] usb 38-1: SetAddress Request (2) to port 0
[ 2411.091866][T15392] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 2411.101795][T16328] usb 44-1: SetAddress Request (6) to port 0
[ 2411.101953][T16328] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd
[ 2411.203417][T18816] vhci_hcd: connection reset by peer
[ 2411.205141][  T160] vhci_hcd vhci_hcd.2: stop threads
[ 2411.205179][  T160] vhci_hcd vhci_hcd.2: release socket
[ 2411.206877][  T160] vhci_hcd vhci_hcd.2: disconnect device
[ 2411.774121][T18828] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3206'.
[ 2411.901443][T18819] vhci_hcd: connection reset by peer
[ 2411.914039][ T3509] vhci_hcd vhci_hcd.5: stop threads
[ 2411.914067][ T3509] vhci_hcd vhci_hcd.5: release socket
[ 2411.914234][ T3509] vhci_hcd vhci_hcd.5: disconnect device
[ 2414.423161][T16533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2414.520510][T16533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2414.563422][T16533] bond0 (unregistering): Released all slaves
[ 2416.181800][T16328] usb 44-1: device descriptor read/8, error -110
[ 2416.181883][T15392] usb 38-1: device descriptor read/8, error -110
[ 2416.263947][T18869] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3220'.
[ 2416.381710][T16533] hsr_slave_0: left promiscuous mode
[ 2416.402812][T16533] hsr_slave_1: left promiscuous mode
[ 2416.403936][T16533] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2416.403966][T16533] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2416.433602][   T37] kauditd_printk_skb: 32 callbacks suppressed
[ 2416.433622][   T37] audit: type=1326 audit(1766734864.415:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18875 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528e5ff749 code=0x7ffc0000
[ 2416.434088][   T37] audit: type=1326 audit(1766734864.415:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18875 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f528e5ff749 code=0x7ffc0000
[ 2416.434531][   T37] audit: type=1326 audit(1766734864.415:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18875 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528e5ff749 code=0x7ffc0000
[ 2416.434891][   T37] audit: type=1326 audit(1766734864.415:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18875 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f528e5ff749 code=0x7ffc0000
[ 2416.435030][   T37] audit: type=1326 audit(1766734864.415:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18875 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528e5ff749 code=0x7ffc0000
[ 2416.436207][   T37] audit: type=1326 audit(1766734864.415:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18875 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f528e5ff749 code=0x7ffc0000
[ 2416.436256][   T37] audit: type=1326 audit(1766734864.415:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18875 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528e5ff749 code=0x7ffc0000
[ 2416.436307][   T37] audit: type=1326 audit(1766734864.415:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18875 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f528e5ff749 code=0x7ffc0000
[ 2416.437103][   T37] audit: type=1326 audit(1766734864.415:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18875 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528e5ff749 code=0x7ffc0000
[ 2416.437149][   T37] audit: type=1326 audit(1766734864.415:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18875 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528e5ff749 code=0x7ffc0000
[ 2416.574963][T15392] usb usb38-port1: attempt power cycle
[ 2416.591415][T16328] usb usb44-port1: attempt power cycle
[ 2416.692874][T16533] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2416.692908][T16533] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2417.079539][T16533] veth1_macvtap: left promiscuous mode
[ 2417.079670][T16533] veth0_macvtap: left promiscuous mode
[ 2417.080700][T16533] veth1_vlan: left promiscuous mode
[ 2417.080903][T16533] veth0_vlan: left promiscuous mode
[ 2417.165266][T16328] usb usb44-port1: unable to enumerate USB device
[ 2417.263662][T15392] usb usb38-port1: unable to enumerate USB device
[ 2420.441641][ T5931] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 2420.653501][ T5931] usb 2-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 2420.653534][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2420.653547][ T5931] usb 2-1: Product: syz
[ 2420.653556][ T5931] usb 2-1: Manufacturer: syz
[ 2420.653564][ T5931] usb 2-1: SerialNumber: syz
[ 2420.920244][ T5931] usb 2-1: palm_os_4_probe - error -71 getting connection info
[ 2420.920316][ T5931] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[ 2420.931688][T16425] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 2420.982662][ T5931] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 2420.987808][ T5931] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 2420.989667][ T5931] usb 2-1: USB disconnect, device number 11
[ 2421.001947][ T5931] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 2421.004937][ T5931] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 2421.005235][ T5931] visor 2-1:1.0: device disconnected
[ 2421.093391][T16425] usb 3-1: Using ep0 maxpacket: 16
[ 2421.115318][T16425] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 2421.115348][T16425] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1
[ 2421.115385][T16425] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[ 2421.115399][T16425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2422.812392][T16533] team0 (unregistering): Port device team_slave_1 removed
[ 2423.173379][T16533] team0 (unregistering): Port device team_slave_0 removed
[ 2423.683302][ T5931] usb 3-1: USB disconnect, device number 12
[ 2424.482133][ T5931] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 2424.683158][ T5931] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 2424.683193][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2424.683216][ T5931] usb 3-1: Product: syz
[ 2424.683232][ T5931] usb 3-1: Manufacturer: syz
[ 2424.683248][ T5931] usb 3-1: SerialNumber: syz
[ 2424.984055][ T5931] usb 3-1: palm_os_4_probe - error -71 getting connection info
[ 2424.984152][ T5931] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[ 2424.989815][ T5931] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 2425.034878][ T5931] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 2425.059285][ T5931] usb 3-1: USB disconnect, device number 13
[ 2425.086505][ T5931] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 2425.122673][ T5931] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 2425.130273][ T5931] visor 3-1:1.0: device disconnected
[ 2425.873181][T18967] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3259'.
[ 2426.201077][ T5931] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 2426.381656][ T5931] usb 3-1: Using ep0 maxpacket: 16
[ 2426.387970][ T5931] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 2426.388043][ T5931] usb 3-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 2426.388069][ T5931] usb 3-1: config 7 interface 0 has no altsetting 0
[ 2426.388094][ T5931] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[ 2426.388123][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2426.396491][ T5931] usbhid 3-1:7.0: couldn't find an input interrupt endpoint
[ 2428.997130][T15392] usb 3-1: USB disconnect, device number 14
[ 2429.067148][T18560] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2429.243004][T18560] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2429.411238][T18560] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2429.532687][T15392] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[ 2429.616182][T18560] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2429.702673][T15392] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 2429.702705][T15392] usb 3-1: config 0 has no interface number 0
[ 2429.702757][T15392] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2429.702801][T15392] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2429.702827][T15392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2429.715384][T15392] usb 3-1: config 0 descriptor??
[ 2429.932017][T18991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2429.932521][T18991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2430.074280][T18561] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2430.080820][T15392] iowarrior 3-1:0.1: no interrupt-in endpoint found
[ 2430.102130][T15392] usb 3-1: USB disconnect, device number 15
[ 2430.161085][T18561] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2430.214639][T18561] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2430.257436][T18561] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2430.377344][T19013] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.3270'.
[ 2430.753910][T18560] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2432.157829][T19019] infiniband syz2: set down
[ 2432.157853][T19019] infiniband syz2: added ipvlan0
[ 2432.161111][T19019] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[ 2432.167020][T19019] infiniband syz2: Couldn't open port 1
[ 2432.221482][T19019] RDS/IB: syz2: added
[ 2432.221620][T19019] smc: adding ib device syz2 with port count 1
[ 2432.221986][T19019] smc:    ib device syz2 port 1 has pnetid SYZ (user defined)
[ 2432.229349][T18560] 8021q: adding VLAN 0 to HW filter on device team0
[ 2433.983892][T12995] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2433.986215][T12995] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2434.082322][T18561] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2434.109175][T12995] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2434.110603][T12995] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2434.269144][T18561] 8021q: adding VLAN 0 to HW filter on device team0
[ 2434.320334][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2434.323873][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2434.342787][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2434.342877][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2434.927720][T19039] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3279'.
[ 2435.297821][T19045] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.3280'.
[ 2435.445283][T18560] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2435.646209][T18561] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2435.749683][T18560] veth0_vlan: entered promiscuous mode
[ 2436.085718][T19060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3282'.
[ 2437.094143][T14973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2437.134680][T19071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2437.145576][T14973] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2437.160969][T14973] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2437.162857][T14973] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2437.164485][T14973] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2437.165332][T14973] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2437.211394][T18567] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2437.228642][T18567] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2437.229509][T18567] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2437.676477][T19080] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.3289'.
[ 2438.981946][T18564] Bluetooth: hci5: command 0x0406 tx timeout
[ 2439.301659][T15795] Bluetooth: hci3: command tx timeout
[ 2439.301677][T18564] Bluetooth: hci1: command tx timeout
[ 2439.741725][T17931] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 2439.901640][T17931] usb 6-1: Using ep0 maxpacket: 16
[ 2439.911236][T17931] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 2439.911294][T17931] usb 6-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 2439.911322][T17931] usb 6-1: config 7 interface 0 has no altsetting 0
[ 2439.911354][T17931] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[ 2439.911379][T17931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2439.964347][T17931] usbhid 6-1:7.0: couldn't find an input interrupt endpoint
[ 2440.331359][T19107] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.3299'.
[ 2441.382468][T15795] Bluetooth: hci3: command tx timeout
[ 2441.394132][T15795] Bluetooth: hci1: command tx timeout
[ 2442.055215][T19130] binder: 19129:19130 ioctl c0306201 200000000080 returned -14
[ 2442.496958][T17931] usb 6-1: USB disconnect, device number 28
[ 2443.062179][T19148] syz2: rxe_newlink: already configured on ipvlan0
[ 2443.471665][T18564] Bluetooth: hci1: command tx timeout
[ 2443.471703][T18564] Bluetooth: hci3: command tx timeout
[ 2443.585060][T19065] chnl_net:caif_netlink_parms(): no params data found
[ 2443.631923][T17931] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 2443.722131][T19068] chnl_net:caif_netlink_parms(): no params data found
[ 2443.781813][T17931] usb 2-1: Using ep0 maxpacket: 16
[ 2443.783987][T17931] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 2443.784045][T17931] usb 2-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 2443.784069][T17931] usb 2-1: config 7 interface 0 has no altsetting 0
[ 2443.784091][T17931] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[ 2443.784104][T17931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2443.847173][T17931] usbhid 2-1:7.0: couldn't find an input interrupt endpoint
[ 2444.107956][T18567] Bluetooth: hci8: command 0x0406 tx timeout
[ 2444.520212][T15945] bridge_slave_1: left allmulticast mode
[ 2444.520240][T15945] bridge_slave_1: left promiscuous mode
[ 2444.520450][T15945] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2444.585575][T15945] bridge_slave_0: left allmulticast mode
[ 2444.585611][T15945] bridge_slave_0: left promiscuous mode
[ 2444.585878][T15945] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2446.931675][T15795] Bluetooth: hci3: command tx timeout
[ 2446.931784][T15795] Bluetooth: hci1: command tx timeout
[ 2446.976093][  T806] usb 2-1: USB disconnect, device number 12
[ 2447.541728][  T806] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 2447.696364][  T806] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 2447.696399][  T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2447.696412][  T806] usb 3-1: Product: syz
[ 2447.696420][  T806] usb 3-1: Manufacturer: syz
[ 2447.696430][  T806] usb 3-1: SerialNumber: syz
[ 2448.058583][  T806] usb 3-1: palm_os_4_probe - error -110 getting connection info
[ 2448.058673][  T806] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[ 2448.103320][  T806] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 2448.276196][  T806] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 2448.665559][  T806] usb 3-1: USB disconnect, device number 16
[ 2448.682249][  T806] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 2448.703727][  T806] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 2448.704225][  T806] visor 3-1:1.0: device disconnected
[ 2449.082244][T15945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2449.142785][T15945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2449.186657][T15945] bond0 (unregistering): Released all slaves
[ 2449.535216][T19065] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2449.535366][T19065] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2449.535577][T19065] bridge_slave_0: entered allmulticast mode
[ 2449.538659][T19065] bridge_slave_0: entered promiscuous mode
[ 2450.110309][T19065] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2450.110640][T19065] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2450.110901][T19065] bridge_slave_1: entered allmulticast mode
[ 2450.204407][T19065] bridge_slave_1: entered promiscuous mode
[ 2450.410120][T19068] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2450.410201][T19068] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2450.410451][T19068] bridge_slave_0: entered allmulticast mode
[ 2450.429784][T19068] bridge_slave_0: entered promiscuous mode
[ 2450.578382][T19068] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2450.581743][T19068] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2450.582059][T19068] bridge_slave_1: entered allmulticast mode
[ 2450.584945][T19068] bridge_slave_1: entered promiscuous mode
[ 2450.721698][T15945] hsr_slave_0: left promiscuous mode
[ 2450.892136][T15945] hsr_slave_1: left promiscuous mode
[ 2450.893351][T15945] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2451.212247][T15945] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2454.341703][T18567] Bluetooth: hci9: command 0x0406 tx timeout
[ 2454.772723][T15945] team0 (unregistering): Port device team_slave_1 removed
[ 2455.312254][T15945] team0 (unregistering): Port device team_slave_0 removed
[ 2458.516590][T19065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2458.607786][T19065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2458.617299][T19068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2458.893896][T19259] netlink: 'syz.1.3352': attribute type 13 has an invalid length.
[ 2458.898734][T19068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2459.524344][T19259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2459.631092][T19065] team0: Port device team_slave_0 added
[ 2459.894719][T19065] team0: Port device team_slave_1 added
[ 2459.898599][T19068] team0: Port device team_slave_0 added
[ 2460.030622][T19068] team0: Port device team_slave_1 added
[ 2460.519266][T19065] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2460.519286][T19065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2460.519317][T19065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2460.643635][T19065] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2460.643656][T19065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2460.643686][T19065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2460.645451][T19068] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2460.645468][T19068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2460.645497][T19068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2460.738385][T19068] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2460.738404][T19068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2460.738430][T19068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2461.198526][T19065] hsr_slave_0: entered promiscuous mode
[ 2461.200445][T19065] hsr_slave_1: entered promiscuous mode
[ 2461.202090][T19065] debugfs: 'hsr0' already exists in 'hsr'
[ 2461.202116][T19065] Cannot create hsr debugfs directory
[ 2461.408089][T19068] hsr_slave_0: entered promiscuous mode
[ 2461.409035][T19068] hsr_slave_1: entered promiscuous mode
[ 2461.409773][T19068] debugfs: 'hsr0' already exists in 'hsr'
[ 2461.409793][T19068] Cannot create hsr debugfs directory
[ 2461.762828][  T806] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 2461.911703][  T806] usb 2-1: Using ep0 maxpacket: 16
[ 2461.913869][  T806] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 2461.913978][  T806] usb 2-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 2461.913996][  T806] usb 2-1: config 7 interface 0 has no altsetting 0
[ 2461.914017][  T806] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[ 2461.914032][  T806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2461.921295][  T806] usbhid 2-1:7.0: couldn't find an input interrupt endpoint
[ 2462.309347][T19288] input: syz0 as /devices/virtual/input/input27
[ 2464.817018][   T43] usb 2-1: USB disconnect, device number 13
[ 2467.163076][T15945] bridge_slave_1: left allmulticast mode
[ 2467.163111][T15945] bridge_slave_1: left promiscuous mode
[ 2467.163396][T15945] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2467.492333][T16334] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 2467.630102][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[ 2467.630188][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[ 2467.642272][T16334] usb 2-1: Using ep0 maxpacket: 16
[ 2467.659689][T16334] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 2467.659887][T16334] usb 2-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 2467.659952][T16334] usb 2-1: config 7 interface 0 has no altsetting 0
[ 2467.660106][T16334] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[ 2467.660186][T16334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2467.845809][T16334] usbhid 2-1:7.0: couldn't find an input interrupt endpoint
[ 2468.484574][T15945] bridge_slave_0: left allmulticast mode
[ 2468.484597][T15945] bridge_slave_0: left promiscuous mode
[ 2468.484763][T15945] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2470.167491][T15392] usb 2-1: USB disconnect, device number 14
[ 2470.882308][T15945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2470.942394][T15945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2470.964402][T15945] bond0 (unregistering): Released all slaves
[ 2471.732908][T19348] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 2474.588427][T19358] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3385'.
[ 2476.704821][T19382] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 2478.521269][T19384] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3395'.
[ 2482.201721][T15945] hsr_slave_0: left promiscuous mode
[ 2482.242315][T15945] hsr_slave_1: left promiscuous mode
[ 2482.243503][T15945] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2482.425518][T15945] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2483.350022][T19404] binder: 19403:19404 ioctl c0306201 200000000080 returned -14
[ 2483.458985][T15945] veth0_vlan: left promiscuous mode
[ 2483.835862][T19412] syz2: rxe_newlink: already configured on ipvlan0
[ 2484.981747][T16301] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[ 2485.743984][T16301] usb 3-1: config 150 has an invalid interface number: 204 but max is 2
[ 2485.744018][T16301] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[ 2485.744040][T16301] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3
[ 2485.744063][T16301] usb 3-1: config 150 has no interface number 0
[ 2485.744099][T16301] usb 3-1: config 150 interface 204 has no altsetting 0
[ 2485.747206][T16301] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[ 2485.747238][T16301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2485.747260][T16301] usb 3-1: Product: syz
[ 2485.747277][T16301] usb 3-1: Manufacturer: syz
[ 2485.747292][T16301] usb 3-1: SerialNumber: syz
[ 2491.830723][T16301] xr_serial 3-1:150.204: skipping garbage
[ 2491.962699][T16301] usb 3-1: USB disconnect, device number 17
[ 2493.966490][T19431] binder: 19430:19431 ioctl c0306201 200000000080 returned -14
[ 2495.722723][T19443] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 2497.745666][T18567] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2497.758612][T18567] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2497.760112][T18567] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2497.761235][T18567] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2497.763491][T18567] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2498.367696][T18567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2498.372857][T18567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2498.405175][T18567] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2498.407066][T18567] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2498.409729][T18567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2498.431364][T18567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2498.433027][T18567] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2498.435107][T18567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2498.440357][T18567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2498.441181][T18567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2499.632468][T15945] team0 (unregistering): Port device team_slave_1 removed
[ 2500.003306][T15945] team0 (unregistering): Port device team_slave_0 removed
[ 2500.052988][T18567] Bluetooth: hci0: command tx timeout
[ 2500.618563][T18567] Bluetooth: hci4: command tx timeout
[ 2500.618579][T18564] Bluetooth: hci2: command tx timeout
[ 2501.011709][ T9266] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[ 2501.195394][ T9266] usb 3-1: config 150 has an invalid interface number: 204 but max is 2
[ 2501.195426][ T9266] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[ 2501.195446][ T9266] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3
[ 2501.195462][ T9266] usb 3-1: config 150 has no interface number 0
[ 2501.195483][ T9266] usb 3-1: config 150 interface 204 has no altsetting 0
[ 2501.197774][ T9266] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[ 2501.197800][ T9266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2501.197813][ T9266] usb 3-1: Product: syz
[ 2501.197821][ T9266] usb 3-1: Manufacturer: syz
[ 2501.197830][ T9266] usb 3-1: SerialNumber: syz
[ 2502.665006][T18564] Bluetooth: hci2: command tx timeout
[ 2504.752799][T18564] Bluetooth: hci2: command tx timeout
[ 2505.656330][T18564] Bluetooth: hci0: command tx timeout
[ 2505.659980][T18564] Bluetooth: hci4: command tx timeout
[ 2505.777184][ T9266] xr_serial 3-1:150.204: skipping garbage
[ 2505.782619][ T9266] usb 3-1: USB disconnect, device number 18
[ 2506.629058][ T9266] kernel read not supported for file /comedi4 (pid: 9266 comm: kworker/0:1)
[ 2506.821690][T18564] Bluetooth: hci2: command tx timeout
[ 2507.921521][T18564] Bluetooth: hci4: command tx timeout
[ 2507.942063][T18564] Bluetooth: hci0: command tx timeout
[ 2509.647060][T18567] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2509.664015][T18567] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2509.665757][T18567] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2509.667837][T18567] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2509.668887][T18567] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2509.941899][T18564] Bluetooth: hci4: command tx timeout
[ 2510.022309][T18564] Bluetooth: hci0: command tx timeout
[ 2511.781693][T18564] Bluetooth: hci6: command tx timeout
[ 2513.995344][T18564] Bluetooth: hci6: command tx timeout
[ 2515.230150][T19453] chnl_net:caif_netlink_parms(): no params data found
[ 2516.021623][T18564] Bluetooth: hci6: command tx timeout
[ 2518.111613][T18564] Bluetooth: hci6: command tx timeout
[ 2518.340640][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3433'.
[ 2520.403651][T19520] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2)
[ 2523.600971][T15945] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2523.601014][T15945] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2523.758974][T19453] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2523.759119][T19453] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2523.759264][T19453] bridge_slave_0: entered allmulticast mode
[ 2523.760951][T19453] bridge_slave_0: entered promiscuous mode
[ 2524.038853][T15945] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2524.038893][T15945] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2524.092259][T19453] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2524.092497][T19453] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2524.092682][T19453] bridge_slave_1: entered allmulticast mode
[ 2524.094290][T19453] bridge_slave_1: entered promiscuous mode
[ 2525.156976][T15945] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2525.157004][T15945] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2525.195789][T19453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2525.315832][T19453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2525.585318][T15945] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2525.585344][T15945] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 2525.799286][T19453] team0: Port device team_slave_0 added
[ 2525.818972][T19453] team0: Port device team_slave_1 added
[ 2525.837548][T19445] chnl_net:caif_netlink_parms(): no params data found
[ 2526.189346][T19453] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2526.189360][T19453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2526.189377][T19453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2526.333710][T19453] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2526.333730][T19453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2526.333770][T19453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2527.014713][T19484] chnl_net:caif_netlink_parms(): no params data found
[ 2527.182497][T19453] hsr_slave_0: entered promiscuous mode
[ 2527.184115][T19453] hsr_slave_1: entered promiscuous mode
[ 2527.185222][T19453] debugfs: 'hsr0' already exists in 'hsr'
[ 2527.185249][T19453] Cannot create hsr debugfs directory
[ 2527.225257][T19451] chnl_net:caif_netlink_parms(): no params data found
[ 2527.242448][T19445] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2527.242674][T19445] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2527.242921][T19445] bridge_slave_0: entered allmulticast mode
[ 2527.245922][T19445] bridge_slave_0: entered promiscuous mode
[ 2527.343927][T19445] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2527.344066][T19445] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2527.344201][T19445] bridge_slave_1: entered allmulticast mode
[ 2527.345801][T19445] bridge_slave_1: entered promiscuous mode
[ 2528.220221][T15945] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2528.356996][T19445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2528.444684][T19445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2528.810431][T15945] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2529.075307][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[ 2529.075412][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[ 2529.273504][T19484] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2529.273729][T19484] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2529.273955][T19484] bridge_slave_0: entered allmulticast mode
[ 2529.278388][T19484] bridge_slave_0: entered promiscuous mode
[ 2529.436105][T19540] Set syz1 is full, maxelem 65536 reached
[ 2529.489383][T19557] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2)
[ 2529.617739][T15945] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2530.223105][T19445] team0: Port device team_slave_0 added
[ 2530.237708][T19484] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2530.238863][T19484] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2530.240092][T19484] bridge_slave_1: entered allmulticast mode
[ 2530.279500][T19484] bridge_slave_1: entered promiscuous mode
[ 2530.326669][T19451] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2530.327123][T19451] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2530.327992][T19451] bridge_slave_0: entered allmulticast mode
[ 2530.419947][T19451] bridge_slave_0: entered promiscuous mode
[ 2530.737292][T19445] team0: Port device team_slave_1 added
[ 2530.822845][T19451] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2530.823004][T19451] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2530.823221][T19451] bridge_slave_1: entered allmulticast mode
[ 2530.826834][T19451] bridge_slave_1: entered promiscuous mode
[ 2531.185298][T15945] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2531.514630][T19484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2531.605847][T19445] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2531.605862][T19445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2531.605886][T19445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2531.731281][T19484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2531.747885][T19451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2531.748805][T19445] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2531.748821][T19445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2531.748850][T19445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2531.977137][T19451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2532.474530][T19484] team0: Port device team_slave_0 added
[ 2532.596488][T19484] team0: Port device team_slave_1 added
[ 2532.864571][T19451] team0: Port device team_slave_0 added
[ 2533.077971][T19451] team0: Port device team_slave_1 added
[ 2533.377351][T19445] hsr_slave_0: entered promiscuous mode
[ 2533.378274][T19445] hsr_slave_1: entered promiscuous mode
[ 2533.378887][T19445] debugfs: 'hsr0' already exists in 'hsr'
[ 2533.378909][T19445] Cannot create hsr debugfs directory
[ 2533.379987][T19484] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2533.380003][T19484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2533.380033][T19484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2533.551656][T19484] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2533.551671][T19484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2533.551690][T19484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2533.632825][T19451] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2533.632846][T19451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2533.632878][T19451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2533.866864][T19451] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2533.866895][T19451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2533.866925][T19451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2534.260133][T19579] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 2536.033041][T15945] bridge_slave_1: left allmulticast mode
[ 2536.033074][T15945] bridge_slave_1: left promiscuous mode
[ 2536.033345][T15945] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2536.123447][T15945] bridge_slave_0: left allmulticast mode
[ 2536.123470][T15945] bridge_slave_0: left promiscuous mode
[ 2536.123652][T15945] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2536.165408][T15945] bridge_slave_1: left allmulticast mode
[ 2536.165433][T15945] bridge_slave_1: left promiscuous mode
[ 2536.165599][T15945] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2536.233573][T15945] bridge_slave_0: left allmulticast mode
[ 2536.233597][T15945] bridge_slave_0: left promiscuous mode
[ 2536.233778][T15945] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2539.963247][T15945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2540.032274][T15945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2540.054399][T15945] bond0 (unregistering): Released all slaves
[ 2542.002625][T15945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2542.042422][T15945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2542.064247][T15945] bond0 (unregistering): Released all slaves
[ 2542.775470][T19484] hsr_slave_0: entered promiscuous mode
[ 2542.777046][T19484] hsr_slave_1: entered promiscuous mode
[ 2542.778100][T19484] debugfs: 'hsr0' already exists in 'hsr'
[ 2542.778127][T19484] Cannot create hsr debugfs directory
[ 2543.314023][T19451] hsr_slave_0: entered promiscuous mode
[ 2543.315579][T19451] hsr_slave_1: entered promiscuous mode
[ 2543.316755][T19451] debugfs: 'hsr0' already exists in 'hsr'
[ 2543.316783][T19451] Cannot create hsr debugfs directory
[ 2546.928958][T19608] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 2548.130754][T19453] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2548.967418][T19453] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2549.181589][T15945] hsr_slave_0: left promiscuous mode
[ 2549.197084][T15945] hsr_slave_1: left promiscuous mode
[ 2549.198230][T15945] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2549.198257][T15945] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2549.256360][T15945] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2549.256391][T15945] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2549.426637][T15945] hsr_slave_0: left promiscuous mode
[ 2549.463118][T15945] hsr_slave_1: left promiscuous mode
[ 2549.464605][T15945] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2549.464625][T15945] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2549.512452][T15945] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2549.512484][T15945] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2549.611924][T15945] veth1_macvtap: left promiscuous mode
[ 2549.611997][T15945] veth0_macvtap: left promiscuous mode
[ 2549.612162][T15945] veth1_vlan: left promiscuous mode
[ 2549.612273][T15945] veth0_vlan: left promiscuous mode
[ 2549.722039][T15945] veth1_macvtap: left promiscuous mode
[ 2549.722114][T15945] veth0_macvtap: left promiscuous mode
[ 2549.722328][T15945] veth1_vlan: left promiscuous mode
[ 2549.722436][T15945] veth0_vlan: left promiscuous mode
[ 2550.444387][T16406] smc: removing ib device syz2
[ 2552.302324][T15945] team0 (unregistering): Port device team_slave_1 removed
[ 2552.582970][T15945] team0 (unregistering): Port device team_slave_0 removed
[ 2557.464885][T15945] team0 (unregistering): Port device team_slave_1 removed
[ 2557.692584][T15945] team0 (unregistering): Port device team_slave_0 removed
[ 2558.720555][T18567] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2558.777906][T18567] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2558.779438][T18567] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2558.781085][T18567] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2558.845829][T18567] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2559.353211][T18567] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2559.395281][T14973] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2559.459656][T18567] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2559.459708][T14973] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2559.472855][T14973] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2559.479108][T14973] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2559.479989][T14973] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2559.520075][T14973] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2559.573576][T18567] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2559.578694][T18567] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2560.899842][T19453] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2560.961994][ T5821] ==================================================================
[ 2560.962014][ T5821] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170
[ 2560.962059][ T5821] Read of size 8 at addr ffff88803dbc22e8 by task kworker/1:3/5821
[ 2560.962078][ T5821] 
[ 2560.962094][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: kworker/1:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2560.962125][ T5821] Tainted: [L]=SOFTLOCKUP
[ 2560.962134][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2560.962149][ T5821] Workqueue: events smc_ib_port_event_work
[ 2560.962181][ T5821] Call Trace:
[ 2560.962190][ T5821]  <TASK>
[ 2560.962199][ T5821]  dump_stack_lvl+0xe8/0x150
[ 2560.962231][ T5821]  print_report+0xca/0x240
[ 2560.962256][ T5821]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 2560.962289][ T5821]  kasan_report+0x118/0x150
[ 2560.962324][ T5821]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 2560.962362][ T5821]  __ethtool_get_link_ksettings+0x5e/0x170
[ 2560.962397][ T5821]  ib_get_eth_speed+0x15e/0x7b0
[ 2560.962428][ T5821]  ? lock_acquire+0x107/0x340
[ 2560.962458][ T5821]  ? __pfx_ib_get_eth_speed+0x10/0x10
[ 2560.962492][ T5821]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2560.962514][ T5821]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2560.962545][ T5821]  ? rxe_query_port+0x7e/0x3d0
[ 2560.962573][ T5821]  rxe_query_port+0x93/0x3d0
[ 2560.962601][ T5821]  ib_query_port+0x170/0x830
[ 2560.962635][ T5821]  smc_ib_port_event_work+0x16f/0x940
[ 2560.962663][ T5821]  ? process_scheduled_works+0x9ef/0x1770
[ 2560.962693][ T5821]  ? process_scheduled_works+0x9ef/0x1770
[ 2560.962718][ T5821]  process_scheduled_works+0xad1/0x1770
[ 2560.962757][ T5821]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2560.962780][ T5821]  ? do_raw_spin_lock+0x121/0x290
[ 2560.962810][ T5821]  worker_thread+0x8a0/0xda0
[ 2560.962842][ T5821]  ? __kthread_parkme+0x7b/0x200
[ 2560.962873][ T5821]  kthread+0x711/0x8a0
[ 2560.962904][ T5821]  ? __pfx_worker_thread+0x10/0x10
[ 2560.962929][ T5821]  ? __pfx_kthread+0x10/0x10
[ 2560.962956][ T5821]  ? rt_spin_unlock+0x150/0x200
[ 2560.962986][ T5821]  ? rt_spin_unlock+0x161/0x200
[ 2560.963013][ T5821]  ? __pfx_kthread+0x10/0x10
[ 2560.963042][ T5821]  ret_from_fork+0x510/0xa50
[ 2560.963066][ T5821]  ? __pfx_ret_from_fork+0x10/0x10
[ 2560.963088][ T5821]  ? __switch_to+0xc9e/0x1480
[ 2560.963121][ T5821]  ? __pfx_kthread+0x10/0x10
[ 2560.963151][ T5821]  ret_from_fork_asm+0x1a/0x30
[ 2560.963191][ T5821]  </TASK>
[ 2560.963200][ T5821] 
[ 2560.963206][ T5821] Allocated by task 18429:
[ 2560.963217][ T5821]  kasan_save_track+0x3e/0x80
[ 2560.963245][ T5821]  __kasan_kmalloc+0x93/0xb0
[ 2560.963272][ T5821]  __kvmalloc_node_noprof+0x408/0x940
[ 2560.963303][ T5821]  alloc_netdev_mqs+0xa6/0x11b0
[ 2560.963332][ T5821]  rtnl_create_link+0x31f/0xcf0
[ 2560.963361][ T5821]  rtnl_newlink_create+0x25c/0xb00
[ 2560.963386][ T5821]  rtnl_newlink+0x16e7/0x1c90
[ 2560.963406][ T5821]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 2560.963426][ T5821]  netlink_rcv_skb+0x208/0x470
[ 2560.963450][ T5821]  netlink_unicast+0x846/0xa10
[ 2560.963471][ T5821]  netlink_sendmsg+0x805/0xb30
[ 2560.963497][ T5821]  __sock_sendmsg+0x21c/0x270
[ 2560.963526][ T5821]  __sys_sendto+0x3c7/0x520
[ 2560.963555][ T5821]  __x64_sys_sendto+0xde/0x100
[ 2560.963576][ T5821]  do_syscall_64+0xec/0xf80
[ 2560.963595][ T5821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2560.963615][ T5821] 
[ 2560.963621][ T5821] Freed by task 15945:
[ 2560.963631][ T5821]  kasan_save_track+0x3e/0x80
[ 2560.963658][ T5821]  kasan_save_free_info+0x46/0x50
[ 2560.963680][ T5821]  __kasan_slab_free+0x5c/0x80
[ 2560.963708][ T5821]  kfree+0x1bd/0x900
[ 2560.963732][ T5821]  device_release+0x9e/0x1d0
[ 2560.963758][ T5821]  kobject_put+0x228/0x570
[ 2560.963778][ T5821]  netdev_run_todo+0xd2c/0xea0
[ 2560.963814][ T5821]  default_device_exit_batch+0x969/0x9e0
[ 2560.963836][ T5821]  ops_undo_list+0x525/0x990
[ 2560.963857][ T5821]  cleanup_net+0x4de/0x7b0
[ 2560.963878][ T5821]  process_scheduled_works+0xad1/0x1770
[ 2560.963900][ T5821]  worker_thread+0x8a0/0xda0
[ 2560.963921][ T5821]  kthread+0x711/0x8a0
[ 2560.963947][ T5821]  ret_from_fork+0x510/0xa50
[ 2560.963966][ T5821]  ret_from_fork_asm+0x1a/0x30
[ 2560.963996][ T5821] 
[ 2560.964002][ T5821] The buggy address belongs to the object at ffff88803dbc2000
[ 2560.964002][ T5821]  which belongs to the cache kmalloc-cg-4k of size 4096
[ 2560.964021][ T5821] The buggy address is located 744 bytes inside of
[ 2560.964021][ T5821]  freed 4096-byte region [ffff88803dbc2000, ffff88803dbc3000)
[ 2560.964044][ T5821] 
[ 2560.964050][ T5821] The buggy address belongs to the physical page:
[ 2560.964062][ T5821] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3dbc0
[ 2560.964091][ T5821] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 2560.964108][ T5821] memcg:ffff8880304055c1
[ 2560.964118][ T5821] flags: 0x80000000000040(head|node=0|zone=1)
[ 2560.964136][ T5821] page_type: f5(slab)
[ 2560.964156][ T5821] raw: 0080000000000040 ffff88813ff30500 dead000000000122 0000000000000000
[ 2560.964176][ T5821] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff8880304055c1
[ 2560.964196][ T5821] head: 0080000000000040 ffff88813ff30500 dead000000000122 0000000000000000
[ 2560.964216][ T5821] head: 0000000000000000 0000000000040004 00000000f5000000 ffff8880304055c1
[ 2560.964236][ T5821] head: 0080000000000003 ffffea0000f6f001 00000000ffffffff 00000000ffffffff
[ 2560.964254][ T5821] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 2560.964266][ T5821] page dumped because: kasan: bad access detected
[ 2560.964277][ T5821] page_owner tracks the page as allocated
[ 2560.964285][ T5821] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18426, tgid 18426 (syz-executor), ts 2340309394005, free_ts 2254566440054
[ 2560.964324][ T5821]  post_alloc_hook+0x234/0x290
[ 2560.964354][ T5821]  get_page_from_freelist+0x28c0/0x2960
[ 2560.964375][ T5821]  __alloc_frozen_pages_noprof+0x181/0x370
[ 2560.964395][ T5821]  alloc_pages_mpol+0xd1/0x380
[ 2560.964413][ T5821]  allocate_slab+0x86/0x3b0
[ 2560.964435][ T5821]  ___slab_alloc+0xb10/0x13e0
[ 2560.964455][ T5821]  __slab_alloc+0xc6/0x1f0
[ 2560.964474][ T5821]  __kmalloc_noprof+0x15f/0x7e0
[ 2560.964502][ T5821]  __register_sysctl_table+0x72/0x1340
[ 2560.964533][ T5821]  __addrconf_sysctl_register+0x328/0x4c0
[ 2560.964571][ T5821]  addrconf_sysctl_register+0x168/0x1c0
[ 2560.964602][ T5821]  ipv6_add_dev+0xd64/0x1400
[ 2560.964626][ T5821]  addrconf_notify+0x771/0x1050
[ 2560.964654][ T5821]  notifier_call_chain+0x19d/0x3a0
[ 2560.964680][ T5821]  register_netdevice+0x15d2/0x1a80
[ 2560.964707][ T5821]  register_vlan_dev+0x38b/0x800
[ 2560.964736][ T5821] page last free pid 5791 tgid 5791 stack trace:
[ 2560.964748][ T5821]  __free_frozen_pages+0xfe1/0x1170
[ 2560.964778][ T5821]  __put_partials+0x149/0x170
[ 2560.964796][ T5821]  __slab_free+0x2af/0x330
[ 2560.964818][ T5821]  qlist_free_all+0x97/0x100
[ 2560.964844][ T5821]  kasan_quarantine_reduce+0x148/0x160
[ 2560.964871][ T5821]  __kasan_slab_alloc+0x22/0x80
[ 2560.964900][ T5821]  kmem_cache_alloc_lru_noprof+0x193/0x6c0
[ 2560.964928][ T5821]  alloc_inode+0xb8/0x1b0
[ 2560.964945][ T5821]  create_pipe_files+0x51/0x7e0
[ 2560.964973][ T5821]  __do_pipe_flags+0x46/0x1f0
[ 2560.965002][ T5821]  do_pipe2+0x9c/0x170
[ 2560.965018][ T5821]  __x64_sys_pipe2+0x5a/0x70
[ 2560.965046][ T5821]  do_syscall_64+0xec/0xf80
[ 2560.965064][ T5821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2560.965084][ T5821] 
[ 2560.965089][ T5821] Memory state around the buggy address:
[ 2560.965102][ T5821]  ffff88803dbc2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2560.965117][ T5821]  ffff88803dbc2200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2560.965131][ T5821] >ffff88803dbc2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2560.965143][ T5821]                                                           ^
[ 2560.965155][ T5821]  ffff88803dbc2300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2560.965170][ T5821]  ffff88803dbc2380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2560.965182][ T5821] ==================================================================
[ 2560.965197][ T5821] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2560.965215][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: kworker/1:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2560.965244][ T5821] Tainted: [L]=SOFTLOCKUP
[ 2560.965253][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2560.965269][ T5821] Workqueue: events smc_ib_port_event_work
[ 2560.965296][ T5821] Call Trace:
[ 2560.965305][ T5821]  <TASK>
[ 2560.965314][ T5821]  vpanic+0x1e0/0x670
[ 2560.965346][ T5821]  panic+0xb9/0xc0
[ 2560.965374][ T5821]  ? __pfx_panic+0x10/0x10
[ 2560.965406][ T5821]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 2560.965438][ T5821]  ? rcu_is_watching+0x15/0xb0
[ 2560.965463][ T5821]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 2560.965496][ T5821]  check_panic_on_warn+0x89/0xb0
[ 2560.965528][ T5821]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 2560.965568][ T5821]  end_report+0x6f/0x140
[ 2560.965596][ T5821]  kasan_report+0x129/0x150
[ 2560.965630][ T5821]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 2560.965667][ T5821]  __ethtool_get_link_ksettings+0x5e/0x170
[ 2560.965702][ T5821]  ib_get_eth_speed+0x15e/0x7b0
[ 2560.965731][ T5821]  ? lock_acquire+0x107/0x340
[ 2560.965760][ T5821]  ? __pfx_ib_get_eth_speed+0x10/0x10
[ 2560.965793][ T5821]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2560.965814][ T5821]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2560.965837][ T5821]  ? rxe_query_port+0x7e/0x3d0
[ 2560.965864][ T5821]  rxe_query_port+0x93/0x3d0
[ 2560.965892][ T5821]  ib_query_port+0x170/0x830
[ 2560.965925][ T5821]  smc_ib_port_event_work+0x16f/0x940
[ 2560.965952][ T5821]  ? process_scheduled_works+0x9ef/0x1770
[ 2560.965981][ T5821]  ? process_scheduled_works+0x9ef/0x1770
[ 2560.966005][ T5821]  process_scheduled_works+0xad1/0x1770
[ 2560.966041][ T5821]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2560.966064][ T5821]  ? do_raw_spin_lock+0x121/0x290
[ 2560.966095][ T5821]  worker_thread+0x8a0/0xda0
[ 2560.966125][ T5821]  ? __kthread_parkme+0x7b/0x200
[ 2560.966156][ T5821]  kthread+0x711/0x8a0
[ 2560.966186][ T5821]  ? __pfx_worker_thread+0x10/0x10
[ 2560.966210][ T5821]  ? __pfx_kthread+0x10/0x10
[ 2560.966238][ T5821]  ? rt_spin_unlock+0x150/0x200
[ 2560.966268][ T5821]  ? rt_spin_unlock+0x161/0x200
[ 2560.966295][ T5821]  ? __pfx_kthread+0x10/0x10
[ 2560.966325][ T5821]  ret_from_fork+0x510/0xa50
[ 2560.966349][ T5821]  ? __pfx_ret_from_fork+0x10/0x10
[ 2560.966371][ T5821]  ? __switch_to+0xc9e/0x1480
[ 2560.966405][ T5821]  ? __pfx_kthread+0x10/0x10
[ 2560.966435][ T5821]  ret_from_fork_asm+0x1a/0x30
[ 2560.966474][ T5821]  </TASK>
[ 2560.966794][ T5821] Kernel Offset: disabled