last executing test programs:

40.101623724s ago: executing program 3 (id=4):
r0 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_read_part_table(0x1056, &(0x7f0000000000)="$eJzsz7EJwmAQBeD322gKwS3sdAWXSGPlEPbGSewdxB1cwsrCIhDRRNABRITvqx7H3YMLPzW6TruHlORQrbpBkrZL89oq2ad6uyqT5fyzZ5fFuE+XlJTbMG6adR9mOW+fod6ktDn1rfXxu98BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+4BwAA//89BRsQ")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000080)=""/37, 0x0, 0xdddd0000})
r5 = syz_open_dev$evdev(0x0, 0x0, 0x2002)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r5, @ANYBLOB='\x00'/25], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
sync_file_range(r6, 0x0, 0x0, 0x0)
eventfd(0x80200003)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)

35.910117247s ago: executing program 3 (id=8):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket(0x2, 0xa, 0x300)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x3, 0x3, 0x200, 0x1, 0x2, 0xffffffff, 0x2, 0x8000}, &(0x7f0000000300)=0x20)
socket$inet(0xa, 0x801, 0x84)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$usbfs(0x0, 0x73, 0x188341)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r6 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c)
listen(r6, 0x20000005)
r7 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)

23.259724257s ago: executing program 0 (id=17):
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="00000012", @ANYRES16=r9, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="0600cd000000000071003300802009000802110000010802110000005050505050505f00ffffffffffffffff6400001000060101010101010602fc0105030597052a01042d1a00041602000000000000007b004700110000000000000100000172060303030303037107690001ff010720760603002f000600000000"], 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f00000002c0)=0x65, 0x2)
prlimit64(r1, 0x8, &(0x7f00000001c0)={0x3ff}, &(0x7f0000000340))
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x47, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

20.156136762s ago: executing program 32 (id=8):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket(0x2, 0xa, 0x300)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x3, 0x3, 0x200, 0x1, 0x2, 0xffffffff, 0x2, 0x8000}, &(0x7f0000000300)=0x20)
socket$inet(0xa, 0x801, 0x84)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$usbfs(0x0, 0x73, 0x188341)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r6 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c)
listen(r6, 0x20000005)
r7 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)

12.843746961s ago: executing program 0 (id=24):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
setresgid(0xee00, 0xee01, 0x0)
setgroups(0x0, 0x0)
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xb1, 0x4}})
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0xc, &(0x7f0000000180)=0xa8b3, 0x4)
fcntl$setpipe(r7, 0x407, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r8, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r8, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r8, 0x0, r7, 0x0, 0xfea8, 0xa)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000100)={{0x2, 0x4e20, @rand_addr=0x64010101}, {0x1, @multicast}, 0x52, {0x2, 0x4e21, @multicast1}, 'vxcan1\x00'})

11.653667323s ago: executing program 0 (id=26):
r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008800c00014000000000000001ff0c000240000000000000ae6014000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
syz_mount_image$romfs(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x145, &(0x7f0000005980)="$eJzs2r9Kw1AUBvCjiNI+glOhAeuQ/1oHd0Fw8gkMbW4aTLwlEaSdii+gOFwfwdVNdPMRMru46hs4RW6aanOziUXF7zc0Hz2Xk9zlTEdPeGyzVCfanFwdviwnPG513Z0es5lHU/tE1JIhy/Nrg+asFr9HH/UsnxiVA1L7oXx2AnFwz8LId9QjAAAAAAAAAAAAAAAAAAAAAAD/Rvu1DM2B4DcsjHx7rpqOxsd5FPlJOvtHo3JHh5jgu/K8W+nXeSPSiv2dUOydy7pVqWuzThsDwZfU95mn8dBMR2M9jL3AD/wTx3G71pZlbTtm0ctUO2qX5TdRlt8Na+tCpN1+7hM9WfV9ImpOHyvrobg4U7vL+3vF/b8zPDcW1RkB4Y+EBhH9gs/4alDnB/XX3PajnB9Gj0f9hc6PaqhNNIAf8h4AAP//7j03tQ==")
setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r8}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r9}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000104050000000000000000000700000006000640000200000500010002"], 0x34}}, 0x2000004)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20)
syz_clone(0x93f0b91, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r10, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x200040c0)
sendmsg$kcm(r10, 0x0, 0x20040000)
r11 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r11, 0x0)

10.736914683s ago: executing program 2 (id=27):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0x174, 0xfffff800, 0x31384142, 0x31303453, [0x6, 0xa], [0x58e3, 0x741], 0x1}})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000000180)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x13}}, {@stripe}, {@nolazytime}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="06de490094f3b66156c1f2c04ccc0b1e958d5b73f837e6cbcd810f715587f42dc862678a90dca4aa63e19ec8d0589c35dd8ebd7d494682897ff14e36be2774afcb927232c9ef77e69a507a7ac0b1e12d73834462efafb27280b3464663b46eb73f75cb6ad5316f80252f87c9fd7efe9de214877d0c1bd96b6cc5ec1d657bbb8c7bf1efd425ce1fdb238865f5768d57be284194d3324754aac2c8f7714c251ed8b4944d9413c34ceb063d7b1ff19b4f0b0c89ead27fc25a08951f8c3c46a013efd20d396c25070d34eb685e99bedf6240100a9449d880e8e72c46eb82f7e030", @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@delchain={0x50, 0x64, 0xf31, 0x3, 0x4, {0x0, 0x0, 0x0, r8, {0x8, 0x95f1d513d0913219}, {0x10, 0xffff}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0xd, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}]}}]}, 0x50}}, 0x4008084)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000)=0x5, 0x4)
getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r9 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3], [0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x8c}}, 0x0)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002b00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

9.566882714s ago: executing program 1 (id=28):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e5e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885eea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82f7f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a07000000300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff4d04223bad4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a41865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b82f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6e8a71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc60700", 0x1000}}, 0x1006)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}})
io_uring_enter(r1, 0x3516, 0x0, 0x1f1e000000000000, 0x0, 0x0)

8.887630653s ago: executing program 1 (id=29):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
unshare(0x8000000)
r1 = semget$private(0x0, 0x4000, 0x383)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd8}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="8917ce1484f1fd203d3e996df91517fe6bcc431e56658bb6", 0x18}, {&(0x7f0000000340)="2bcc6607f02547df813c311c7aad67bf624e0c0dd656820259ebef17929757704f3f6e80c51de1110a4dbb2919e3", 0x2e}, {&(0x7f00000025c0)="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", 0x543}], 0x3}], 0x1, 0x84)
syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), 0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f00000036c0)={0x2020}, 0x2020)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x16, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x49a1ec6dd767328a, 0x0, 0x0, 0x1, 0x9, 0x4, 0x10}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000140)='syzkaller\x00', 0x2, 0xc, &(0x7f0000000200)=""/12, 0x40f00, 0x9198f118e5e6399f, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x4, 0x4, 0xf, 0x6}, {0x1, 0x4, 0x4, 0x9}, {0x3, 0x1, 0x6, 0xb}], 0x10, 0x65a}, 0x94)
semtimedop(r1, &(0x7f0000000440)=[{0x0, 0x7ff, 0x1000}], 0x1, 0x0)
unshare(0x2c040000)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x904597e7eee54823, &(0x7f0000000080)={0x0, 0x0})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f00000006c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\x00\x00\x00\x00\xb5\x83>\fG\\x00', 0x3a, '\xe5E\x10$\xf4}\x85\xd3/tsb/00#/00#\x00\xc1S3\xa0~\xc51H\xdcF)?\x8aV\xee', 0x3a, './file0'}, 0x60)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

7.877530798s ago: executing program 2 (id=30):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x100)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='xen_mc_callback\x00', r4, 0x0, 0x1}, 0x18)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
syz_usb_ep_read(r0, 0x1, 0x84, &(0x7f0000000180)=""/132)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x9}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80015}, 0x4000)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
bind$packet(r2, &(0x7f0000000300)={0x11, 0xf7, r5, 0x1, 0x5, 0x6, @broadcast}, 0x14)

7.863489978s ago: executing program 0 (id=31):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000040601020000000200fdffffffffff02050001000600"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814)

7.825517669s ago: executing program 1 (id=32):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
setresgid(0xee00, 0xee01, 0x0)
setgroups(0x0, 0x0)
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0)

7.608028799s ago: executing program 0 (id=33):
r0 = socket(0x400000000010, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r5=>0x0})
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto$inet(r6, &(0x7f0000000040)="8932ff0f6d7ff1cec405cc64b12e385dcf2a3cd06cd4aadea45cb2a5cd0ae16461de06c1fe362772371652bfa497bfdd83f17a215328ed11076f8577e8b3df96c38119a4740fa5b6cfa742028555d065e91cda2a8e874fdf4a8bb77cfd9cdc0da81d6a1d91de9ec8", 0x68, 0x6000c804, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r8, 0x8910, 0x0)
sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x28}], 0x1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}}, 0x4c840)

5.06280812s ago: executing program 1 (id=34):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0xfffffff5}}, 0x10)
shutdown(r3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

4.692577597s ago: executing program 0 (id=35):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket(0x2, 0xa, 0x300)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x3, 0x3, 0x200, 0x1, 0x2, 0xffffffff, 0x2, 0x8000}, &(0x7f0000000300)=0x20)
socket$inet(0xa, 0x801, 0x84)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$usbfs(0x0, 0x73, 0x188341)
r6 = getpgrp(0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5)
shutdown(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r7 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c)
listen(r7, 0x20000005)
r8 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)

3.943766119s ago: executing program 2 (id=36):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
setresgid(0xee00, 0xee01, 0x0)
setgroups(0x0, 0x0)
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0)

3.91226924s ago: executing program 1 (id=37):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket(0x2, 0xa, 0x300)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x3, 0x3, 0x200, 0x1, 0x2, 0xffffffff, 0x2, 0x8000}, &(0x7f0000000300)=0x20)
socket$inet(0xa, 0x801, 0x84)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c)
listen(r5, 0x20000005)
r6 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)

2.113844809s ago: executing program 2 (id=38):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37)
ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000001640))
syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r0, &(0x7f00000002c0)=ANY=[], 0x138)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
sendmmsg$sock(r0, &(0x7f0000001600)=[{{&(0x7f0000000040)=@ax25={{0x3, @bcast, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)="12efd738ce37e1d9dc1e63aa3f82ffe1d2829700f2e411ccc8a845001c396b398b96f5d162b61e45e251a8c7c0352ac97a8a1a15b799be38484011f75bbb6223cb7adb0e631c6fe091eced48", 0x4c}, {&(0x7f0000000140)="69a709306a0545c2b5ed8ea40dc3542c5d7606552b5eafa4b1c42c94714625ea4b5a369a6c551ccd8b17bdf6174d741eafc347804c56d060235315fa760e9f38a33debfd332b7344d0edf80479d4a318973017c8b83db916f15b78b3c717f050eba328e9e58d5d108c3f2f2356dd18fb5ebe47ada26993caa066c1d906a0cd74a0d1fd84", 0x84}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="4ac14fd64419d38e7bfeb938294e631913f90ec137c7f3752f49c7c3dc33db7161854ae3a67920e4de5035210008f8b17dd7eeb2461816c47ada18415070e0805b578dacaeb3b1ff493d565ae2501916d08861df0d40c51f0d046fbe8ecda6f5903eba89451926007f8c3c1a6beec8aec5353246d445997c2cc1085b0718d25e7583ae706c0a21ed90667d0da8870b7a4c29856922b4f87a60c2bcc480fb4f849885f4b732d1a9dc36258fdf446f87a89d211aa19f58d73ba2f7fbc93b57c0aa67cc27288edfec2e7b0b1509745a800d5d508f31d29f4dda80ffd2da073ac2d484be0bd3d13f763e8365b798351d71ea5fe0", 0xf2}, {&(0x7f0000000200)="964657e164f028df09f4d8ea46ef088811ca932dc8a2b5f69563bff164edb1", 0x1f}, {&(0x7f0000000240)="09c39f43b89a28550b109eb4b8055bdd18c8814785fec5a4657e846b5e180ce8254652df7e6c88e4faad9ea930a8e31aa374", 0x32}, {&(0x7f0000000280)="fef4286ea377b36b0eb632f41342ead19ec82a9eba1e27dcc203924a395dc660f0864a304e75", 0x26}, {&(0x7f0000001400)="3dde9949642c1669ef9fe1df09b3aa0f781e53229b10f2124ba9d6595122d54945a62f1796ce4819e28ee7c7795116f75ee9c7d780f5d3bf4f74c26424def4af49cf0b7aa96b1faac16070aebb3a91d34dd7aac82707d5e564c4b497305d375e168e09c21e", 0x65}, {&(0x7f0000001480)="6701747e81738179a65db8c94ce4b4238c2a7eadac20bf9115c8253414cb0272d93b", 0x22}], 0x9, &(0x7f0000001580)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xa44}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}}], 0x1, 0x800)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000017c0)={0x4, 0x0, 0x7000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f0000001840), 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="0400000000e1ffff1a0000000f080000000000005961428521bcea7e862c1e61a01cb9cec3263c982d3adc60000000002ee6fed088fa45f06c6ef1b19833f85e6f28595e56bd7ef7cb47040000004a4e97", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000016c0)={0xc884, 0x5})
r9 = fcntl$dupfd(r2, 0x406, r2)
ioctl$sock_inet_sctp_SIOCINQ(r9, 0x541b, 0x0)

2.015957943s ago: executing program 1 (id=39):
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)={0x50, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:file_context_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x800c881}, 0x80)
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0xc3072, 0xffffffffffffffff, 0x92bfd000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x2, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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")
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)

1.731093686s ago: executing program 2 (id=40):
r0 = socket(0x400000000010, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00'})
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto$inet(r5, &(0x7f0000000040)="8932ff0f6d7ff1cec405cc64b12e385dcf2a3cd06cd4aadea45cb2a5cd0ae16461de06c1fe362772371652bfa497bfdd83f17a215328ed11076f8577e8b3df96c38119a4740fa5b6cfa742028555d065e91cda2a8e874fdf4a8bb77cfd9cdc0da81d6a1d91de9ec8", 0x68, 0x6000c804, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r7, 0x8910, 0x0)
sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x28}], 0x1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840)

0s ago: executing program 2 (id=41):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
io_setup(0x2007, &(0x7f0000000200))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts.
[   80.517423][ T5754] cgroup: Unknown subsys name 'net'
[   80.655744][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   82.362327][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   84.613438][ T5765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.637704][ T5765] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.645830][ T5765] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.657897][ T5765] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.667904][ T5765] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   84.675684][ T5765] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.699898][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.709985][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.721364][ T5770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.729168][ T5770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.737390][ T5770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.744529][ T5770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.752600][ T5770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.762391][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.770307][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   84.777763][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.785215][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.794617][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.803023][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.810691][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.815055][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   84.818602][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   84.827143][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.832377][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.352880][ T5767] chnl_net:caif_netlink_parms(): no params data found
[   85.382190][ T5763] chnl_net:caif_netlink_parms(): no params data found
[   85.503041][ T5768] chnl_net:caif_netlink_parms(): no params data found
[   85.575021][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.582392][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.590275][ T5767] bridge_slave_0: entered allmulticast mode
[   85.597508][ T5767] bridge_slave_0: entered promiscuous mode
[   85.631731][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.638925][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.646124][ T5767] bridge_slave_1: entered allmulticast mode
[   85.654437][ T5767] bridge_slave_1: entered promiscuous mode
[   85.714870][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   85.751097][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.758688][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.766070][ T5763] bridge_slave_0: entered allmulticast mode
[   85.773524][ T5763] bridge_slave_0: entered promiscuous mode
[   85.786388][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.793635][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.802140][ T5763] bridge_slave_1: entered allmulticast mode
[   85.809599][ T5763] bridge_slave_1: entered promiscuous mode
[   85.830852][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.844078][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.872976][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.880920][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.888418][ T5768] bridge_slave_0: entered allmulticast mode
[   85.895529][ T5768] bridge_slave_0: entered promiscuous mode
[   85.956665][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.964235][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.972150][ T5768] bridge_slave_1: entered allmulticast mode
[   85.979784][ T5768] bridge_slave_1: entered promiscuous mode
[   86.003373][ T5767] team0: Port device team_slave_0 added
[   86.016724][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.043026][ T5767] team0: Port device team_slave_1 added
[   86.055546][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.082003][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.094952][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.175475][ T5763] team0: Port device team_slave_0 added
[   86.184789][ T5763] team0: Port device team_slave_1 added
[   86.204420][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.211471][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.237921][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.279286][ T5768] team0: Port device team_slave_0 added
[   86.295137][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.303647][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.329945][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.341608][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.349198][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.356398][ T5769] bridge_slave_0: entered allmulticast mode
[   86.363633][ T5769] bridge_slave_0: entered promiscuous mode
[   86.386954][ T5768] team0: Port device team_slave_1 added
[   86.426328][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.433849][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.441453][ T5769] bridge_slave_1: entered allmulticast mode
[   86.448940][ T5769] bridge_slave_1: entered promiscuous mode
[   86.455969][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.463461][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.490509][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.504260][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.511333][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.537592][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.570522][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.578272][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.604822][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.674891][ T5767] hsr_slave_0: entered promiscuous mode
[   86.681866][ T5767] hsr_slave_1: entered promiscuous mode
[   86.690970][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.698249][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.725508][   T51] Bluetooth: hci0: command tx timeout
[   86.731183][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.750377][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.776819][ T5763] hsr_slave_0: entered promiscuous mode
[   86.783575][ T5763] hsr_slave_1: entered promiscuous mode
[   86.790026][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.798242][ T5763] Cannot create hsr debugfs directory
[   86.813552][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.879448][   T51] Bluetooth: hci2: command tx timeout
[   86.879979][ T5769] team0: Port device team_slave_0 added
[   86.885352][   T51] Bluetooth: hci1: command tx timeout
[   86.898461][ T5769] team0: Port device team_slave_1 added
[   86.957350][   T51] Bluetooth: hci3: command tx timeout
[   86.990008][ T5768] hsr_slave_0: entered promiscuous mode
[   86.996836][ T5768] hsr_slave_1: entered promiscuous mode
[   87.003911][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.011736][ T5768] Cannot create hsr debugfs directory
[   87.019261][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.026251][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.052441][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.091650][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.098926][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.125068][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.303306][ T5769] hsr_slave_0: entered promiscuous mode
[   87.314910][ T5769] hsr_slave_1: entered promiscuous mode
[   87.323060][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.336100][ T5769] Cannot create hsr debugfs directory
[   87.782168][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.796175][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.815237][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.834058][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.890734][ T5763] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.901608][ T5763] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.918669][ T5763] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.931171][ T5763] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.010410][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.022432][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.051158][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.062825][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.167821][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.178643][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.189382][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.203527][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.274653][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.340430][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[   88.366857][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.377848][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.385218][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.396714][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.403939][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.522248][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.543670][ T5763] 8021q: adding VLAN 0 to HW filter on device team0
[   88.575033][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.582229][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.592134][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.599321][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.617054][ T5768] 8021q: adding VLAN 0 to HW filter on device team0
[   88.672502][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.679753][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.719999][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.727305][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.759538][ T5763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   88.770900][ T5763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.797815][   T51] Bluetooth: hci0: command tx timeout
[   88.860808][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.929396][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   88.957840][   T51] Bluetooth: hci2: command tx timeout
[   88.957848][ T5765] Bluetooth: hci1: command tx timeout
[   88.992136][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.999535][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.037485][   T51] Bluetooth: hci3: command tx timeout
[   89.046611][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.053792][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.069419][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.234004][ T5767] veth0_vlan: entered promiscuous mode
[   89.274256][ T5767] veth1_vlan: entered promiscuous mode
[   89.365305][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.423252][ T5767] veth0_macvtap: entered promiscuous mode
[   89.451075][ T5767] veth1_macvtap: entered promiscuous mode
[   89.509192][ T5763] veth0_vlan: entered promiscuous mode
[   89.529036][ T5763] veth1_vlan: entered promiscuous mode
[   89.548981][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.573165][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.591577][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.603725][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.621050][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.631215][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.651619][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.716950][ T5763] veth0_macvtap: entered promiscuous mode
[   89.738653][ T5763] veth1_macvtap: entered promiscuous mode
[   89.796742][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.812913][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.824857][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.841314][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.873084][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.883854][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.895388][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.920328][ T5768] veth0_vlan: entered promiscuous mode
[   89.940262][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.953931][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.969177][ T5768] veth1_vlan: entered promiscuous mode
[   89.994907][ T5763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.006066][ T5763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.014871][ T5763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.023741][ T5763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.052537][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.063596][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.217013][ T5768] veth0_macvtap: entered promiscuous mode
[   90.247946][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.255845][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.275284][ T5769] veth0_vlan: entered promiscuous mode
[   90.300810][ T5768] veth1_macvtap: entered promiscuous mode
[   90.380601][ T5769] veth1_vlan: entered promiscuous mode
[   90.405760][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.415258][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.445834][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.464778][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.477026][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.488752][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.500728][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.545354][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.556634][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.569334][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.581707][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.593968][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.607050][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.616191][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.625335][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.634398][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.660219][ T5769] veth0_macvtap: entered promiscuous mode
[   90.695165][ T5769] veth1_macvtap: entered promiscuous mode
[   90.737969][   T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   90.780344][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.790109][ T5859] syz.0.1[5859]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   90.793010][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.804692][ T5859] loop0: detected capacity change from 0 to 64
[   90.810813][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.827584][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.868855][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.878821][   T51] Bluetooth: hci0: command tx timeout
[   90.885306][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.904866][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.951536][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   90.953216][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.986482][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   90.996392][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.009074][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.013568][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   91.019670][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.019685][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.019701][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.062121][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[   91.072413][   T51] Bluetooth: hci2: command tx timeout
[   91.072783][ T5765] Bluetooth: hci1: command tx timeout
[   91.091465][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.102542][   T27] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[   91.115152][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.124415][ T5765] Bluetooth: hci3: command tx timeout
[   91.132752][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.137425][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.147139][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.158715][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.186581][   T27] usb 2-1: Product: syz
[   91.195897][   T27] usb 2-1: Manufacturer: syz
[   91.208369][   T27] usb 2-1: SerialNumber: syz
[   91.239313][   T27] usb 2-1: config 0 descriptor??
[   91.246985][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.268641][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.385576][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.397333][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.454289][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.470042][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.526050][   T27] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[   91.580128][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.605958][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.802128][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   92.096465][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   92.197603][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   92.615078][ T5857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.656696][ T5857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.668977][ T5866] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.717086][ T5853] usb 2-1: USB disconnect, device number 2
[   92.742168][ T5867] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   92.830498][    T9] cfg80211: failed to load regulatory.db
[   92.924294][ T5863] loop3: detected capacity change from 0 to 8192
[   92.957552][ T5765] Bluetooth: hci0: command tx timeout
[   93.118440][ T5765] Bluetooth: hci2: command tx timeout
[   93.124950][ T5765] Bluetooth: hci1: command tx timeout
[   93.215877][ T5765] Bluetooth: hci3: command tx timeout
[   93.324946][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   93.426362][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   93.529070][    T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!!
[   93.543929][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   93.597372][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   93.598741][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   93.607357][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  100.047650][ T5881] loop0: detected capacity change from 0 to 2048
[  100.055683][ T5881] =======================================================
[  100.055683][ T5881] WARNING: The mand mount option has been deprecated and
[  100.055683][ T5881]          and is ignored by this kernel. Remove the mand
[  100.055683][ T5881]          option from the mount to silence this warning.
[  100.055683][ T5881] =======================================================
[  100.107478][ T5881] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  100.666360][ T5887] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.670305][ T5881] syz.0.9: attempt to access beyond end of device
[  100.670305][ T5881] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  101.142930][ T5893] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[  101.151017][ T5893] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.7'.
[  101.733856][ T5891] loop1: detected capacity change from 0 to 4096
[  101.817813][ T5891] ntfs3: Unknown parameter 'ñ­~ÛmÄ’{œ©'
[  101.911322][ T5777] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  108.958305][   T23] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  109.179422][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.227235][   T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  109.243555][   T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  109.263075][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  109.301012][   T23] usb 2-1: SerialNumber: syz
[  109.366226][   T23] usb 2-1: 0:2 : does not exist
[  113.762607][  T968] usb 2-1: USB disconnect, device number 3
[  114.547125][ T5927] loop2: detected capacity change from 0 to 128
[  114.640598][ T5927] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  114.836951][ T5927] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  115.038205][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.047938][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.058401][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.066877][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.076023][   T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  115.087134][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.476639][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  115.570265][ T5930] fuse: blksize only supported for fuseblk
[  115.656225][   T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  115.810233][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.882087][ T5925] loop1: detected capacity change from 0 to 40427
[  117.008913][ T5925] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  117.032415][ T5925] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  117.134791][ T5925] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  117.197344][   T51] Bluetooth: hci4: command tx timeout
[  117.284864][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.419951][ T5925] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  117.429936][ T5925] F2FS-fs (loop1): Image doesn't support compression
[  117.524093][ T5925] F2FS-fs (loop1): invalid crc value
[  117.540685][ T5925] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4)
[  117.761967][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.023283][ T5946] loop2: detected capacity change from 0 to 512
[  118.546273][ T5946] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  118.744090][ T5946] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  118.935571][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.173125][ T5946] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  119.185928][ T5928] chnl_net:caif_netlink_parms(): no params data found
[  119.259965][ T5960] netlink: 'syz.0.24': attribute type 1 has an invalid length.
[  119.267718][ T5960] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.24'.
[  119.289845][   T51] Bluetooth: hci4: command tx timeout
[  119.879648][ T5946] EXT4-fs (loop2): 1 truncate cleaned up
[  119.918534][ T5946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.511143][ T5971] EXT4-fs error (device loop2): __ext4_iget:5067: inode #16: block 538: comm syz.2.22: invalid block
[  120.531060][ T5970] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1619: inode #18: comm syz.2.22: cleanup dec ref error -5
[  120.866677][ T5971] EXT4-fs (loop2): Remounting filesystem read-only
[  121.023344][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.084240][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.097038][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.105810][ T5928] bridge_slave_0: entered allmulticast mode
[  121.113527][ T5928] bridge_slave_0: entered promiscuous mode
[  121.153068][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.183909][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.191760][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'.
[  121.229939][ T5928] bridge_slave_1: entered allmulticast mode
[  121.251454][ T5928] bridge_slave_1: entered promiscuous mode
[  121.340255][ T5974] loop0: detected capacity change from 0 to 22
[  121.360096][ T5765] Bluetooth: hci4: command tx timeout
[  121.385426][ T5974] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  121.413702][ T5974] romfs: bad initial checksum on dev loop0.
[  121.447564][ T5974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26'.
[  121.491634][ T5878] udevd[5878]: incorrect romfs checksum on /dev/loop0
[  121.621602][ T5980] loop2: detected capacity change from 0 to 1024
[  121.655750][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.693563][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.735827][ T5980] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  121.841696][ T5980] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  121.852027][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'.
[  121.886271][ T5980] EXT4-fs (loop2): orphan cleanup on readonly fs
[  122.037125][ T5980] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.27: Invalid inode table block 0 in block_group 0
[  122.069517][   T51] block nbd0: Receive control failed (result -32)
[  122.149136][ T5980] EXT4-fs (loop2): Remounting filesystem read-only
[  122.197878][ T5980] Quota error (device loop2): write_blk: dquota write failed
[  122.205982][ T5980] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  122.254113][ T5928] team0: Port device team_slave_0 added
[  122.348855][ T5980] EXT4-fs (loop2): 1 truncate cleaned up
[  122.387641][ T5928] team0: Port device team_slave_1 added
[  122.390845][ T5980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  122.924990][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.980017][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.062919][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.199658][ T5980] netlink: 'syz.2.27': attribute type 1 has an invalid length.
[  123.244691][ T5980] netlink: 224 bytes leftover after parsing attributes in process `syz.2.27'.
[  123.277125][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.307547][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.363002][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.437473][   T51] Bluetooth: hci4: command tx timeout
[  123.864298][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.990965][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'.
[  124.287999][ T5928] hsr_slave_0: entered promiscuous mode
[  124.296515][ T5928] hsr_slave_1: entered promiscuous mode
[  124.311143][ T5928] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  124.403725][ T6016] netlink: 'syz.1.32': attribute type 1 has an invalid length.
[  124.411544][ T6016] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.32'.
[  125.783405][ T6017] ieee802154 phy1 wpan1: encryption failed: -22
[  126.227088][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'.
[  126.673027][ T5928] Cannot create hsr debugfs directory
[  126.679482][ T6010] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  128.469735][ T6035] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[  128.478634][ T6035] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.36'.
[  129.828879][ T6042] netlink: 5 bytes leftover after parsing attributes in process `syz.2.38'.
[  130.679827][ T6049] ieee802154 phy1 wpan1: encryption failed: -22
[  130.731301][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'.
[  130.763639][ T6049] Zero length message leads to an empty skb
[  132.360079][   T49] ------------[ cut here ]------------
[  132.366070][   T49] WARNING: CPU: 0 PID: 49 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  132.377070][   T49] Modules linked in:
[  132.381162][   T49] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0
[  132.388664][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  132.399132][   T49] Workqueue: phy5 ieee80211_csa_finalize_work
[  132.405270][   T49] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  132.413019][   T49] Code: 48 89 df e8 0a bf f0 f7 e9 dc fc ff ff e8 30 51 99 f7 eb 24 e8 29 51 99 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 18 51 99 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 0a 51 99 f7 48 8b 7c 24 08 4c 8b 7c
[  132.432813][   T49] RSP: 0018:ffffc90000ba79c0 EFLAGS: 00010293
[  132.439128][   T49] RAX: ffffffff89ec3bae RBX: 0000000000000001 RCX: ffff8880192f5a00
[  132.448469][    C0] ------------[ cut here ]------------
[  132.448575][    C0] WARNING: CPU: 0 PID: 49 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600
[  132.448625][    C0] Modules linked in:
[  132.448642][    C0] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0
[  132.448665][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  132.448680][    C0] Workqueue: phy5 ieee80211_csa_finalize_work
[  132.448714][    C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  132.448746][    C0] Code: 24 4c 89 e7 e8 0e 25 db f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 f6 9d f7 0f 0b e9 f6 f7 ff ff e8 4d f6 9d f7 <0f> 0b e9 48 fb ff ff e8 41 f6 9d f7 48 c7 c7 e0 96 23 8e 4c 89 e6
[  132.448766][    C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246
[  132.448789][    C0] RAX: ffffffff89e79a73 RBX: ffffffff89e78876 RCX: ffff8880192f5a00
[  132.448808][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  132.448824][    C0] RBP: 0000000000000000 R08: ffff8880192f5a00 R09: 0000000000000003
[  132.448840][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805f34a3c0
[  132.448856][    C0] R13: dffffc0000000000 R14: ffff88805f34a8b0 R15: ffff8880308d3c24
[  132.448873][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  132.448893][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.448910][    C0] CR2: 000055649302e950 CR3: 000000000cb30000 CR4: 00000000003506f0
[  132.448931][    C0] Call Trace:
[  132.448942][    C0]  <IRQ>
[  132.448967][    C0]  ? __ieee80211_beacon_get+0x36/0x1600
[  132.449008][    C0]  ieee80211_beacon_get_tim+0xb8/0x560
[  132.449044][    C0]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  132.449088][    C0]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[  132.449134][    C0]  __iterate_interfaces+0x243/0x500
[  132.449170][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  132.449200][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  132.449239][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  132.449269][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  132.449310][    C0]  mac80211_hwsim_beacon+0xbb/0x1b0
[  132.449341][    C0]  __hrtimer_run_queues+0x51e/0xc40
[  132.449375][    C0]  ? hw_scan_work+0xf40/0xf40
[  132.449411][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  132.449435][    C0]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  132.449474][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  132.449503][    C0]  handle_softirqs+0x280/0x820
[  132.449531][    C0]  ? __irq_exit_rcu+0xc7/0x190
[  132.449560][    C0]  ? do_softirq+0x180/0x180
[  132.449587][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  132.449621][    C0]  __irq_exit_rcu+0xc7/0x190
[  132.449643][    C0]  ? irq_exit_rcu+0x20/0x20
[  132.449675][    C0]  irq_exit_rcu+0x9/0x20
[  132.449695][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  132.449724][    C0]  </IRQ>
[  132.449733][    C0]  <TASK>
[  132.449743][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  132.449772][    C0] RIP: 0010:console_flush_all+0x889/0xd00
[  132.449801][    C0] Code: ed 01 00 00 e8 a8 32 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 99 32 1b 00 eb 06 e8 92 32 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 50 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f
[  132.449820][    C0] RSP: 0018:ffffc90000ba7340 EFLAGS: 00000293
[  132.449844][    C0] RAX: ffffffff816a5e2e RBX: ffffc90000ba74df RCX: ffff8880192f5a00
[  132.449862][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  132.449877][    C0] RBP: ffffc90000ba74b0 R08: ffffffff90d94507 R09: 1ffffffff21b28a0
[  132.449894][    C0] R10: dffffc0000000000 R11: fffffbfff21b28a1 R12: ffffffff8d4b52e0
[  132.449912][    C0] R13: 1ffffffff19792f8 R14: ffffffff8d4b5338 R15: dffffc0000000000
[  132.449938][    C0]  ? console_flush_all+0x87e/0xd00
[  132.449977][    C0]  ? console_flush_all+0x10f/0xd00
[  132.450019][    C0]  ? is_console_locked+0x20/0x20
[  132.450047][    C0]  ? lock_chain_count+0x20/0x20
[  132.450076][    C0]  ? __down_trylock_console_sem+0xef/0x1e0
[  132.450110][    C0]  console_unlock+0xae/0x340
[  132.450148][    C0]  ? other_cpu_in_panic+0xf0/0xf0
[  132.450172][    C0]  ? vprintk_emit+0x521/0x600
[  132.450200][    C0]  ? printk_sprint+0x460/0x460
[  132.450228][    C0]  ? __wake_up_klogd+0xd9/0x100
[  132.450259][    C0]  vprintk_emit+0x477/0x600
[  132.450287][    C0]  ? printk_sprint+0x460/0x460
[  132.450315][    C0]  ? _printk+0xd0/0x110
[  132.450345][    C0]  ? copy_from_kernel_nofault+0x1d2/0x320
[  132.450387][    C0]  _printk+0xd0/0x110
[  132.450417][    C0]  ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0
[  132.450446][    C0]  ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0
[  132.450477][    C0]  ? load_image+0x3b0/0x3b0
[  132.450520][    C0]  ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0
[  132.450548][    C0]  __show_regs+0xf3/0x610
[  132.450578][    C0]  ? dump_stack_print_info+0xf5/0x150
[  132.450617][    C0]  show_regs+0x44/0x90
[  132.450646][    C0]  __warn+0x160/0x470
[  132.450672][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  132.450703][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  132.450731][    C0]  report_bug+0x2be/0x4f0
[  132.450755][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  132.450785][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  132.450813][    C0]  ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0
[  132.450841][    C0]  handle_bug+0xcf/0x120
[  132.450865][    C0]  exc_invalid_op+0x1a/0x50
[  132.450888][    C0]  asm_exc_invalid_op+0x1a/0x20
[  132.450913][    C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  132.450944][    C0] Code: 48 89 df e8 0a bf f0 f7 e9 dc fc ff ff e8 30 51 99 f7 eb 24 e8 29 51 99 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 18 51 99 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 0a 51 99 f7 48 8b 7c 24 08 4c 8b 7c
[  132.450963][    C0] RSP: 0018:ffffc90000ba79c0 EFLAGS: 00010293
[  132.450987][    C0] RAX: ffffffff89ec3bae RBX: 0000000000000001 RCX: ffff8880192f5a00
[  132.451005][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  132.451020][    C0] RBP: dffffc0000000000 R08: ffff88805f3495af R09: 1ffff1100be692b5
[  132.451038][    C0] R10: dffffc0000000000 R11: ffffed100be692b6 R12: 0000000000000001
[  132.451054][    C0] R13: ffff88805f34a5d9 R14: ffff88807a402c70 R15: ffff88807a402ce8
[  132.451081][    C0]  ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0
[  132.451139][    C0]  ieee80211_link_use_reserved_context+0x383/0x5c0
[  132.451174][    C0]  ieee80211_csa_finalize+0x59a/0xf00
[  132.451206][    C0]  ? mutex_lock_nested+0x20/0x20
[  132.451231][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  132.451257][    C0]  ? ieee80211_csa_finalize_work+0x140/0x140
[  132.451289][    C0]  ? read_lock_is_recursive+0x20/0x20
[  132.451324][    C0]  ieee80211_csa_finalize_work+0xf6/0x140
[  132.451356][    C0]  ? process_scheduled_works+0x957/0x15b0
[  132.451385][    C0]  process_scheduled_works+0xa45/0x15b0
[  132.451443][    C0]  ? assign_work+0x400/0x400
[  132.451478][    C0]  ? assign_work+0x39e/0x400
[  132.451511][    C0]  worker_thread+0xa55/0xfc0
[  132.451540][    C0]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  132.451568][    C0]  ? _raw_spin_unlock+0x40/0x40
[  132.451592][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  132.451641][    C0]  kthread+0x2fa/0x390
[  132.451662][    C0]  ? pr_cont_work+0x560/0x560
[  132.451690][    C0]  ? kthread_blkcg+0xd0/0xd0
[  132.451712][    C0]  ret_from_fork+0x48/0x80
[  132.451738][    C0]  ? kthread_blkcg+0xd0/0xd0
[  132.451760][    C0]  ret_from_fork_asm+0x11/0x20
[  132.451807][    C0]  </TASK>
[  132.451820][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  132.451831][    C0] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0
[  132.451852][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  132.451865][    C0] Workqueue: phy5 ieee80211_csa_finalize_work
[  132.451895][    C0] Call Trace:
[  132.451903][    C0]  <IRQ>
[  132.451911][    C0]  dump_stack_lvl+0x16c/0x230
[  132.451947][    C0]  ? show_regs_print_info+0x20/0x20
[  132.451980][    C0]  ? load_image+0x3b0/0x3b0
[  132.452021][    C0]  panic+0x2c0/0x710
[  132.452053][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  132.452088][    C0]  ? ret_from_fork_asm+0x11/0x20
[  132.452128][    C0]  __warn+0x2e0/0x470
[  132.452152][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  132.452182][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  132.452210][    C0]  report_bug+0x2be/0x4f0
[  132.452230][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  132.452258][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  132.452285][    C0]  ? __ieee80211_beacon_get+0x1235/0x1600
[  132.452313][    C0]  handle_bug+0xcf/0x120
[  132.452334][    C0]  exc_invalid_op+0x1a/0x50
[  132.452354][    C0]  asm_exc_invalid_op+0x1a/0x20
[  132.452377][    C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  132.452406][    C0] Code: 24 4c 89 e7 e8 0e 25 db f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 f6 9d f7 0f 0b e9 f6 f7 ff ff e8 4d f6 9d f7 <0f> 0b e9 48 fb ff ff e8 41 f6 9d f7 48 c7 c7 e0 96 23 8e 4c 89 e6
[  132.452423][    C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246
[  132.452441][    C0] RAX: ffffffff89e79a73 RBX: ffffffff89e78876 RCX: ffff8880192f5a00
[  132.452457][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  132.452470][    C0] RBP: 0000000000000000 R08: ffff8880192f5a00 R09: 0000000000000003
[  132.452484][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805f34a3c0
[  132.452498][    C0] R13: dffffc0000000000 R14: ffff88805f34a8b0 R15: ffff8880308d3c24
[  132.452518][    C0]  ? __ieee80211_beacon_get+0x36/0x1600
[  132.452547][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  132.452582][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  132.452611][    C0]  ? __ieee80211_beacon_get+0x36/0x1600
[  132.452648][    C0]  ieee80211_beacon_get_tim+0xb8/0x560
[  132.452681][    C0]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  132.452721][    C0]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[  132.452758][    C0]  __iterate_interfaces+0x243/0x500
[  132.452791][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  132.452818][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  132.452853][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  132.452882][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  132.452920][    C0]  mac80211_hwsim_beacon+0xbb/0x1b0
[  132.452949][    C0]  __hrtimer_run_queues+0x51e/0xc40
[  132.452979][    C0]  ? hw_scan_work+0xf40/0xf40
[  132.453013][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  132.453034][    C0]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  132.453071][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  132.453099][    C0]  handle_softirqs+0x280/0x820
[  132.453131][    C0]  ? __irq_exit_rcu+0xc7/0x190
[  132.453158][    C0]  ? do_softirq+0x180/0x180
[  132.453183][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  132.453214][    C0]  __irq_exit_rcu+0xc7/0x190
[  132.453234][    C0]  ? irq_exit_rcu+0x20/0x20
[  132.453261][    C0]  irq_exit_rcu+0x9/0x20
[  132.453279][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  132.453305][    C0]  </IRQ>
[  132.453312][    C0]  <TASK>
[  132.453320][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  132.453345][    C0] RIP: 0010:console_flush_all+0x889/0xd00
[  132.453371][    C0] Code: ed 01 00 00 e8 a8 32 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 99 32 1b 00 eb 06 e8 92 32 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 50 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f
[  132.453388][    C0] RSP: 0018:ffffc90000ba7340 EFLAGS: 00000293
[  132.453407][    C0] RAX: ffffffff816a5e2e RBX: ffffc90000ba74df RCX: ffff8880192f5a00
[  132.453423][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  132.453436][    C0] RBP: ffffc90000ba74b0 R08: ffffffff90d94507 R09: 1ffffffff21b28a0
[  132.453452][    C0] R10: dffffc0000000000 R11: fffffbfff21b28a1 R12: ffffffff8d4b52e0
[  132.453467][    C0] R13: 1ffffffff19792f8 R14: ffffffff8d4b5338 R15: dffffc0000000000
[  132.453491][    C0]  ? console_flush_all+0x87e/0xd00
[  132.453528][    C0]  ? console_flush_all+0x10f/0xd00
[  132.453567][    C0]  ? is_console_locked+0x20/0x20
[  132.453593][    C0]  ? lock_chain_count+0x20/0x20
[  132.453620][    C0]  ? __down_trylock_console_sem+0xef/0x1e0
[  132.453650][    C0]  console_unlock+0xae/0x340
[  132.453678][    C0]  ? other_cpu_in_panic+0xf0/0xf0
[  132.453701][    C0]  ? vprintk_emit+0x521/0x600
[  132.453728][    C0]  ? printk_sprint+0x460/0x460
[  132.453754][    C0]  ? __wake_up_klogd+0xd9/0x100
[  132.453783][    C0]  vprintk_emit+0x477/0x600
[  132.453811][    C0]  ? printk_sprint+0x460/0x460
[  132.453836][    C0]  ? _printk+0xd0/0x110
[  132.453863][    C0]  ? copy_from_kernel_nofault+0x1d2/0x320
[  132.453903][    C0]  _printk+0xd0/0x110
[  132.453930][    C0]  ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0
[  132.453956][    C0]  ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0
[  132.453985][    C0]  ? load_image+0x3b0/0x3b0
[  132.454026][    C0]  ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0
[  132.454052][    C0]  __show_regs+0xf3/0x610
[  132.454079][    C0]  ? dump_stack_print_info+0xf5/0x150
[  132.454122][    C0]  show_regs+0x44/0x90
[  132.454149][    C0]  __warn+0x160/0x470
[  132.454172][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  132.454201][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  132.454228][    C0]  report_bug+0x2be/0x4f0
[  132.454248][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  132.454276][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  132.454302][    C0]  ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0
[  132.454329][    C0]  handle_bug+0xcf/0x120
[  132.454350][    C0]  exc_invalid_op+0x1a/0x50
[  132.454370][    C0]  asm_exc_invalid_op+0x1a/0x20
[  132.454393][    C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  132.454420][    C0] Code: 48 89 df e8 0a bf f0 f7 e9 dc fc ff ff e8 30 51 99 f7 eb 24 e8 29 51 99 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 18 51 99 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 0a 51 99 f7 48 8b 7c 24 08 4c 8b 7c
[  132.454437][    C0] RSP: 0018:ffffc90000ba79c0 EFLAGS: 00010293
[  132.454456][    C0] RAX: ffffffff89ec3bae RBX: 0000000000000001 RCX: ffff8880192f5a00
[  132.454472][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  132.454484][    C0] RBP: dffffc0000000000 R08: ffff88805f3495af R09: 1ffff1100be692b5
[  132.454499][    C0] R10: dffffc0000000000 R11: ffffed100be692b6 R12: 0000000000000001
[  132.454514][    C0] R13: ffff88805f34a5d9 R14: ffff88807a402c70 R15: ffff88807a402ce8
[  132.454537][    C0]  ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0
[  132.454587][    C0]  ieee80211_link_use_reserved_context+0x383/0x5c0
[  132.454619][    C0]  ieee80211_csa_finalize+0x59a/0xf00
[  132.454647][    C0]  ? mutex_lock_nested+0x20/0x20
[  132.454669][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  132.454693][    C0]  ? ieee80211_csa_finalize_work+0x140/0x140
[  132.454722][    C0]  ? read_lock_is_recursive+0x20/0x20
[  132.454754][    C0]  ieee80211_csa_finalize_work+0xf6/0x140
[  132.454785][    C0]  ? process_scheduled_works+0x957/0x15b0
[  132.454810][    C0]  process_scheduled_works+0xa45/0x15b0
[  132.454866][    C0]  ? assign_work+0x400/0x400
[  132.454899][    C0]  ? assign_work+0x39e/0x400
[  132.454930][    C0]  worker_thread+0xa55/0xfc0
[  132.454956][    C0]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  132.454982][    C0]  ? _raw_spin_unlock+0x40/0x40
[  132.455004][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  132.455050][    C0]  kthread+0x2fa/0x390
[  132.455068][    C0]  ? pr_cont_work+0x560/0x560
[  132.455094][    C0]  ? kthread_blkcg+0xd0/0xd0
[  132.455120][    C0]  ret_from_fork+0x48/0x80
[  132.455143][    C0]  ? kthread_blkcg+0xd0/0xd0
[  132.455164][    C0]  ret_from_fork_asm+0x11/0x20
[  132.455208][    C0]  </TASK>
[  132.455501][    C0] Kernel Offset: disabled