last executing test programs:

2m3.900809321s ago: executing program 4 (id=91):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000001040)=""/4086, 0xff6}, {&(0x7f0000002040)=""/122, 0x7a}, {&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f00000004c0)=""/254, 0xfe}, {&(0x7f0000000000)=""/102, 0x66}], 0x6}, 0x1000)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

2m3.506479541s ago: executing program 4 (id=95):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@end]}}, {{0x8000, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0xfffb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xffffffff}]}}}}}}}, 0x0)

2m2.022352359s ago: executing program 4 (id=100):
setitimer(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
read$midi(0xffffffffffffffff, 0x0, 0x43)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000004180), 0xff77)
recvmmsg(r2, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/153, 0x99}, {&(0x7f0000000480)=""/86, 0x56}], 0x2}, 0xffffffe9}], 0x1, 0x0, 0x0)

2m1.251573619s ago: executing program 4 (id=106):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f060f8300900f01cb0f71e6c9baa10066ed0f01f9f26e0f0966b9fd0300000f32f30f1a13", 0x25}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1m58.034858583s ago: executing program 4 (id=114):
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffead, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x3}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0)

1m53.914051265s ago: executing program 4 (id=132):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5)
recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0)

1m38.760406735s ago: executing program 32 (id=132):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5)
recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0)

19.69732471s ago: executing program 3 (id=361):
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0xd37, 0x2020000000000000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
pread64(r4, 0x0, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r8, 0x0, 0x2, 0x100006dd})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xfffffffffffffffa})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r8, 0x0, &(0x7f00005c6000/0x2000)=nil, 0x2000, 0x9})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r8})
r9 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
migrate_pages(r9, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272)

18.442960828s ago: executing program 3 (id=365):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, 0x0, 0x0)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000040), 0xc)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
writev(r5, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)

12.929460236s ago: executing program 1 (id=383):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000580)={0x1d, r5, 0x0, {0x0, 0xff, 0x2}, 0x1}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r2, {<r7=>0xffffffffffffffff}}, './file0\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0xfc, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x8, 0xe1, &(0x7f00000003c0)=""/225, 0x41100, 0x53, '\x00', r5, @fallback=0x35, r7, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x3}, 0x10, r9, r2, 0x3, 0x0, &(0x7f0000000840)=[{0x1, 0x4, 0xd, 0x7}, {0x0, 0x4, 0x0, 0x3}, {0x3, 0x4, 0xd, 0x5}], 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000940)={'ip_vti0\x00', r8, 0x700, 0x10, 0x7, 0x9, {{0x17, 0x4, 0x0, 0x3, 0x5c, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x44, 0xb5, 0x1, 0x1, [{@private=0xa010101, 0x6121}, {@local, 0xffffffff}, {@private=0xa010101, 0xc}, {@multicast2, 0x9}, {@multicast1, 0xc107}, {@private=0xa010100, 0xcb2}, {@broadcast, 0x1}, {@empty, 0x1}]}, @ssrr={0x89, 0x3, 0xb}]}}}}})
socket$kcm(0xa, 0x2, 0x0)
r10 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r11 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd375031ba5ae65e31f00e641832d29ed658b91f33595b033222944765cb6a50d859f754ed83eefd480be0e3100965f081190bbb39a5965ceaa76975b88885041ff4e66e618d6c37c787f014eadb6c", 0x137, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r10, r11}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})

10.855407774s ago: executing program 1 (id=386):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c)
socket(0x25, 0x1, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000380)={0x1ff, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1}, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000100)='M\t', 0x2, 0x0)

10.08953227s ago: executing program 3 (id=391):
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000003e000701e2ffff77fddbdff60336800c0001800600060008"], 0x24}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r6, 0x0, 0x0}, 0x20)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0xfc5e)
stat(&(0x7f0000000180)='./file0\x00', 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)

9.240707699s ago: executing program 2 (id=393):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000002040)=""/122, 0x7a}, {&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f00000004c0)=""/254, 0xfe}, {&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000000)=""/102, 0x66}], 0x6}, 0x1000)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

9.201822364s ago: executing program 1 (id=394):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r9, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x1, 0x8}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)

8.962497649s ago: executing program 0 (id=395):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
syz_emit_ethernet(0x7e, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0)
readv(r3, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000440)="1a", 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20)

6.579507239s ago: executing program 0 (id=396):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000580)={0x1d, r5, 0x0, {0x0, 0xff, 0x2}, 0x1}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r2, {<r7=>0xffffffffffffffff}}, './file0\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0xfc, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x8, 0xe1, &(0x7f00000003c0)=""/225, 0x41100, 0x53, '\x00', r5, @fallback=0x35, r7, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x3}, 0x10, r9, r2, 0x3, 0x0, &(0x7f0000000840)=[{0x1, 0x4, 0xd, 0x7}, {0x0, 0x4, 0x0, 0x3}, {0x3, 0x4, 0xd, 0x5}], 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000940)={'ip_vti0\x00', r8, 0x700, 0x10, 0x7, 0x9, {{0x17, 0x4, 0x0, 0x3, 0x5c, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x44, 0xb5, 0x1, 0x1, [{@private=0xa010101, 0x6121}, {@local, 0xffffffff}, {@private=0xa010101, 0xc}, {@multicast2, 0x9}, {@multicast1, 0xc107}, {@private=0xa010100, 0xcb2}, {@broadcast, 0x1}, {@empty, 0x1}]}, @ssrr={0x89, 0x3, 0xb}]}}}}})
socket$kcm(0xa, 0x2, 0x0)
r10 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r11 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="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", 0x137, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r10, r11}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})

6.518899583s ago: executing program 5 (id=397):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001440)=[{0x0}, {&(0x7f0000001140)=""/55, 0x37}, {&(0x7f0000004600)=""/4097, 0x1001}], 0x3}, 0x40012022)

6.518173196s ago: executing program 2 (id=398):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000001c0)={0xd5, 0x7, 0x1, 0x4, 0x1, "c2acb8d13de1ed8e9ab5ba72aa912707ebcf6c"})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$TCSETS(r0, 0x40204706, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x4)
r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='./cgroup\x00', 0x42, 0x20)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x430343, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r2, 0x8990, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2000000000000042, &(0x7f00000000c0)=[{0x37, 0x0, 0x7d, 0xfffff038}]}, 0xfffffffffffffe43)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4c881}, 0x4000080)
unlink(0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x4, 0xb, 0x5, 0x6}]})
r7 = socket(0x10, 0x800, 0xfffffffc)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[], 0x14}}, 0x0)

6.356194147s ago: executing program 5 (id=399):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ff85ff2a701f70dbdf250300"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000)

5.99815479s ago: executing program 1 (id=400):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="0426063d032bbb006965499a03b9", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

5.393602256s ago: executing program 0 (id=401):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, 0x0, 0x0)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000040), 0xc)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
writev(r5, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)

5.302159338s ago: executing program 5 (id=402):
socket$key(0xf, 0x3, 0x2)
r0 = socket$kcm(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, 0x0, 0x0)
setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

5.258655396s ago: executing program 2 (id=403):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

5.055380263s ago: executing program 1 (id=404):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c)
socket(0x25, 0x1, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000380)={0x1ff, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1}, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000100)='M\t', 0x2, 0x0)

3.954195081s ago: executing program 3 (id=405):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(&(0x7f00000003c0)='hfsplus\x00', 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r2, 0x400, 0x200000000000000)

3.858027472s ago: executing program 0 (id=406):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
syz_emit_ethernet(0x7e, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0)
readv(r3, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000440)="1a", 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20)

3.857503493s ago: executing program 5 (id=407):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r5 = dup(r4)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000000080007400000000008000840000800000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
sendfile(r7, r5, 0x0, 0x89ffc)

2.023850258s ago: executing program 2 (id=408):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x3, {0x0, 0x0, 0x2}, 0x1}, 0x18)
getpeername(r0, 0x0, 0x0)

1.869747995s ago: executing program 0 (id=409):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x81, 0x4)

1.320098127s ago: executing program 2 (id=410):
socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000440)=0x97f, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x42ea, 0x4)
sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.317519273s ago: executing program 5 (id=411):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000580)={0x1d, r5, 0x0, {0x0, 0xff, 0x2}, 0x1}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r2, {<r7=>0xffffffffffffffff}}, './file0\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0xfc, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x8, 0xe1, &(0x7f00000003c0)=""/225, 0x41100, 0x53, '\x00', r5, @fallback=0x35, r7, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x3}, 0x10, r9, r2, 0x3, 0x0, &(0x7f0000000840)=[{0x1, 0x4, 0xd, 0x7}, {0x0, 0x4, 0x0, 0x3}, {0x3, 0x4, 0xd, 0x5}], 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000940)={'ip_vti0\x00', r8, 0x700, 0x10, 0x7, 0x9, {{0x17, 0x4, 0x0, 0x3, 0x5c, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x44, 0xb5, 0x1, 0x1, [{@private=0xa010101, 0x6121}, {@local, 0xffffffff}, {@private=0xa010101, 0xc}, {@multicast2, 0x9}, {@multicast1, 0xc107}, {@private=0xa010100, 0xcb2}, {@broadcast, 0x1}, {@empty, 0x1}]}, @ssrr={0x89, 0x3, 0xb}]}}}}})
socket$kcm(0xa, 0x2, 0x0)
r10 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r11 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="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", 0x137, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r10, r11}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})

1.311026607s ago: executing program 3 (id=412):
socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x15, 0x5, 0x0)
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000440)={0x0, 0x4000, 0x800, 0x3}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

1.226218927s ago: executing program 0 (id=413):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000001c0)={0xd5, 0x7, 0x1, 0x4, 0x1, "c2acb8d13de1ed8e9ab5ba72aa912707ebcf6c"})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$TCSETS(r0, 0x40204706, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x4)
r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='./cgroup\x00', 0x42, 0x20)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x430343, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r2, 0x8990, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2000000000000042, &(0x7f00000000c0)=[{0x37, 0x0, 0x7d, 0xfffff038}]}, 0xfffffffffffffe43)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4c881}, 0x4000080)
unlink(0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x4, 0xb, 0x5, 0x6}]})
r7 = socket(0x10, 0x800, 0xfffffffc)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[], 0x14}}, 0x0)

1.147118433s ago: executing program 1 (id=414):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
setgid(0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x4023, 0xff, 0xc, 0x8, 0x0, 0x0, 0x40}, 0xc)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ad733642561534f1", 0x8)
listen(r2, 0x3)
accept(r2, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x8, 0x100}, 0x0)
accept4(r3, 0x0, 0x0, 0x800)

333.388076ms ago: executing program 3 (id=415):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0xcb3400892c35d4a}, 0x6)

186.113746ms ago: executing program 5 (id=416):
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000100))

0s ago: executing program 2 (id=417):
socket$key(0xf, 0x3, 0x2)
r0 = socket$kcm(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000240), 0x0)
setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts.
[   74.337472][ T5821] cgroup: Unknown subsys name 'net'
[   74.467450][ T5821] cgroup: Unknown subsys name 'cpuset'
[   74.476895][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   76.090521][ T5821] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   78.656473][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.667355][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.676197][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.684070][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.691573][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.699476][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.707465][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.714798][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.722328][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.729708][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.730542][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.737593][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.752685][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.760479][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.763897][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.770488][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.782518][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.784392][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.801143][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.808935][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.812698][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.821162][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.824436][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.838030][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.845691][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   79.473084][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   79.511859][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   79.558661][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   79.668126][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   79.726737][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   79.857999][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.868262][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.875711][ T5835] bridge_slave_0: entered allmulticast mode
[   79.882915][ T5835] bridge_slave_0: entered promiscuous mode
[   79.908798][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.916078][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.923223][ T5831] bridge_slave_0: entered allmulticast mode
[   79.930520][ T5831] bridge_slave_0: entered promiscuous mode
[   79.938824][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.946921][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.954339][ T5841] bridge_slave_0: entered allmulticast mode
[   79.961411][ T5841] bridge_slave_0: entered promiscuous mode
[   79.969417][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.977571][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.984969][ T5835] bridge_slave_1: entered allmulticast mode
[   79.992095][ T5835] bridge_slave_1: entered promiscuous mode
[   80.039292][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.046486][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.054336][ T5831] bridge_slave_1: entered allmulticast mode
[   80.061424][ T5831] bridge_slave_1: entered promiscuous mode
[   80.069055][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.076454][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.084078][ T5841] bridge_slave_1: entered allmulticast mode
[   80.091131][ T5841] bridge_slave_1: entered promiscuous mode
[   80.115732][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.122852][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.130239][ T5833] bridge_slave_0: entered allmulticast mode
[   80.137798][ T5833] bridge_slave_0: entered promiscuous mode
[   80.189211][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.196809][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.204710][ T5833] bridge_slave_1: entered allmulticast mode
[   80.211837][ T5833] bridge_slave_1: entered promiscuous mode
[   80.246092][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.258367][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.317015][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.330528][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.343794][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.366383][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.373946][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.381235][ T5832] bridge_slave_0: entered allmulticast mode
[   80.388981][ T5832] bridge_slave_0: entered promiscuous mode
[   80.399069][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.410480][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.442950][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.450721][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.458442][ T5832] bridge_slave_1: entered allmulticast mode
[   80.466046][ T5832] bridge_slave_1: entered promiscuous mode
[   80.474728][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.523323][ T5835] team0: Port device team_slave_0 added
[   80.557140][ T5833] team0: Port device team_slave_0 added
[   80.577714][ T5831] team0: Port device team_slave_0 added
[   80.587454][ T5841] team0: Port device team_slave_0 added
[   80.595859][ T5841] team0: Port device team_slave_1 added
[   80.603936][ T5835] team0: Port device team_slave_1 added
[   80.622834][ T5833] team0: Port device team_slave_1 added
[   80.631176][ T5831] team0: Port device team_slave_1 added
[   80.663866][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.747999][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.758457][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.766273][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.792484][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.805395][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.812358][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.838835][ T5842] Bluetooth: hci3: command tx timeout
[   80.841125][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.856863][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.864121][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.890143][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.901791][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.903286][ T5842] Bluetooth: hci2: command tx timeout
[   80.909940][ T5852] Bluetooth: hci0: command tx timeout
[   80.914288][ T5842] Bluetooth: hci4: command tx timeout
[   80.919590][ T5851] Bluetooth: hci1: command tx timeout
[   80.925332][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.957632][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.979999][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.987260][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.013302][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.024916][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.031860][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.057800][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.070049][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.077047][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.102937][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.114454][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.121395][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.147841][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.178711][ T5832] team0: Port device team_slave_0 added
[   81.193002][ T5832] team0: Port device team_slave_1 added
[   81.241773][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.249045][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.274993][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.351262][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.358269][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.384996][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.420761][ T5841] hsr_slave_0: entered promiscuous mode
[   81.428583][ T5841] hsr_slave_1: entered promiscuous mode
[   81.476194][ T5833] hsr_slave_0: entered promiscuous mode
[   81.482808][ T5833] hsr_slave_1: entered promiscuous mode
[   81.490179][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.497961][ T5833] Cannot create hsr debugfs directory
[   81.529495][ T5835] hsr_slave_0: entered promiscuous mode
[   81.536426][ T5835] hsr_slave_1: entered promiscuous mode
[   81.542668][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.551190][ T5835] Cannot create hsr debugfs directory
[   81.584259][ T5831] hsr_slave_0: entered promiscuous mode
[   81.590929][ T5831] hsr_slave_1: entered promiscuous mode
[   81.597362][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.605186][ T5831] Cannot create hsr debugfs directory
[   81.839375][ T5832] hsr_slave_0: entered promiscuous mode
[   81.847148][ T5832] hsr_slave_1: entered promiscuous mode
[   81.853856][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.861422][ T5832] Cannot create hsr debugfs directory
[   82.303290][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.322097][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.333022][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.355010][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.405761][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.416691][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.440430][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.452462][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.534986][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   82.553806][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.577580][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.609317][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.676607][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.690904][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.724146][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.742911][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.777526][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.839584][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.860407][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.871690][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.884414][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   82.897656][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.905168][ T5851] Bluetooth: hci3: command tx timeout
[   82.914829][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.951932][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.959174][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.972436][  T992] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.979579][  T992] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.991059][ T5852] Bluetooth: hci2: command tx timeout
[   82.997597][ T5143] Bluetooth: hci1: command tx timeout
[   82.997629][ T5842] Bluetooth: hci0: command tx timeout
[   83.003036][ T5851] Bluetooth: hci4: command tx timeout
[   83.035323][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   83.068821][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.088944][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.096078][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.110850][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.117982][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.172057][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   83.222958][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.264930][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.272058][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.301093][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.308274][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.442386][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.475270][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.530501][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   83.554528][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.574094][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   83.611341][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.618657][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.631828][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.638986][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.667173][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.674345][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.706292][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.713439][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.782962][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.899933][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.921172][ T5831] veth0_vlan: entered promiscuous mode
[   83.960398][ T5831] veth1_vlan: entered promiscuous mode
[   83.987290][ T5841] veth0_vlan: entered promiscuous mode
[   84.056104][ T5841] veth1_vlan: entered promiscuous mode
[   84.088957][ T5831] veth0_macvtap: entered promiscuous mode
[   84.126357][ T5831] veth1_macvtap: entered promiscuous mode
[   84.180859][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.199977][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.225480][ T5841] veth0_macvtap: entered promiscuous mode
[   84.252948][ T5841] veth1_macvtap: entered promiscuous mode
[   84.277878][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.320999][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.332835][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.346923][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.357424][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.368008][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.378183][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.387688][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.422074][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.438210][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.449548][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.461340][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.471089][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.481718][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.490610][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.527646][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.612298][ T5835] veth0_vlan: entered promiscuous mode
[   84.676305][ T5835] veth1_vlan: entered promiscuous mode
[   84.686776][ T5833] veth0_vlan: entered promiscuous mode
[   84.718271][  T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.728704][  T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.741553][ T5833] veth1_vlan: entered promiscuous mode
[   84.775904][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.784082][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.828029][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.831537][ T5832] veth0_vlan: entered promiscuous mode
[   84.844352][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.867517][ T5835] veth0_macvtap: entered promiscuous mode
[   84.890509][ T5832] veth1_vlan: entered promiscuous mode
[   84.900829][ T5835] veth1_macvtap: entered promiscuous mode
[   84.916796][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.931797][ T5833] veth0_macvtap: entered promiscuous mode
[   84.940543][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.981156][ T5833] veth1_macvtap: entered promiscuous mode
[   84.996713][ T5851] Bluetooth: hci3: command tx timeout
[   85.003926][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.033026][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.042895][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.053864][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.064761][ T5851] Bluetooth: hci0: command tx timeout
[   85.070182][ T5851] Bluetooth: hci4: command tx timeout
[   85.077458][ T5852] Bluetooth: hci2: command tx timeout
[   85.077680][ T5842] Bluetooth: hci1: command tx timeout
[   85.087139][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.107456][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.118061][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.128429][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.140404][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.151489][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.160006][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   85.187693][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.198975][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.209038][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.219557][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.229830][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.240878][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.252071][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.261494][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.270871][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.279910][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.290009][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.301693][ T5832] veth0_macvtap: entered promiscuous mode
[   85.314781][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.326589][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.337756][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.348826][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.361031][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.371764][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.386370][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.406329][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.460838][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.483192][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.491926][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.549824][ T5832] veth1_macvtap: entered promiscuous mode
[   85.661415][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.691719][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.705725][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.723259][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.731169][ T5931] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   85.739721][ T5931] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   85.747928][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.758599][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.768479][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.778947][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.790718][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.816082][ T5932] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'.
[   85.830605][ T5929] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'.
[   85.840268][ T5933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'.
[   85.876652][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.898042][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.923638][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.940413][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.952770][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.964276][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.996226][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.018928][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.031176][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.074970][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.107639][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.120469][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.137876][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.340334][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.350593][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.389326][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.407611][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.543353][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.559113][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.589608][  T120] cfg80211: failed to load regulatory.db
[   86.598991][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.612022][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.771070][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.822141][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.002801][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.060522][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.068105][ T5842] Bluetooth: hci3: command tx timeout
[   87.146855][ T5842] Bluetooth: hci4: command tx timeout
[   87.152290][ T5842] Bluetooth: hci1: command tx timeout
[   87.159236][ T5851] Bluetooth: hci2: command tx timeout
[   87.165125][ T5143] Bluetooth: hci0: command tx timeout
[   87.425931][ T5965] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   87.432370][ T5965] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   87.541773][ T5973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18'.
[   87.583481][ T5967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18'.
[   87.617507][ T5973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18'.
[   87.864644][ T5978] mmap: syz.0.1 (5978) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   87.894799][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   87.903100][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   87.912075][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   87.943321][ T5978] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use)
[   87.997145][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   88.006007][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   88.201935][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   88.210915][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   88.503484][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   88.816647][ T5981] ubi31: attaching mtd0
[   88.883290][ T5981] ubi31: scanning is finished
[   88.888436][ T5981] ubi31: empty MTD device detected
[   89.203559][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   89.277474][ T5981] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[   89.303487][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   89.306284][ T5981] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   89.332266][ T5981] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[   89.358988][ T5981] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[   89.409364][ T5981] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   89.418114][ T5981] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[   89.427743][ T5981] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3531901973
[   89.441131][ T5981] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   89.454904][ T5993] ubi31: background thread "ubi_bgt31d" started, PID 5993
[   89.915228][ T6008] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   89.921695][ T6008] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   90.039451][ T6014] netlink: 60 bytes leftover after parsing attributes in process `syz.0.32'.
[   90.055022][ T6007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.32'.
[   90.159657][ T6014] netlink: 60 bytes leftover after parsing attributes in process `syz.0.32'.
[   91.316515][ T6038] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   91.323041][ T6038] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   91.802071][ T6049] evm: overlay not supported
[   95.555850][ T5887] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   96.383908][ T5887] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[   96.423337][ T5887] usb 3-1: config 0 has no interface number 0
[   96.438254][ T5887] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   96.498609][ T5887] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   96.525808][ T5887] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[   96.553241][ T5887] usb 3-1: config 0 interface 200 has no altsetting 0
[   96.566708][ T5887] usb 3-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39
[   96.590880][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.618239][ T5887] usb 3-1: Product: syz
[   96.656217][ T5887] usb 3-1: Manufacturer: syz
[   96.660893][ T5887] usb 3-1: SerialNumber: syz
[   96.698279][ T5887] usb 3-1: config 0 descriptor??
[   96.743986][ T6091] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   97.280488][ T5887] usb 3-1: USB disconnect, device number 2
[  100.671837][ T6160] netlink: 60 bytes leftover after parsing attributes in process `syz.4.91'.
[  100.688425][ T6157] netlink: 60 bytes leftover after parsing attributes in process `syz.4.91'.
[  100.705340][ T6160] netlink: 60 bytes leftover after parsing attributes in process `syz.4.91'.
[  102.223854][ T6172] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  102.543651][ T6181] syz.4.100 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  103.306043][ T6194] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  103.313496][ T6195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.105'.
[  103.416860][ T6192] netlink: 60 bytes leftover after parsing attributes in process `syz.2.105'.
[  103.477349][ T6198] netlink: 60 bytes leftover after parsing attributes in process `syz.2.105'.
[  107.834981][ T6238] netlink: 60 bytes leftover after parsing attributes in process `syz.0.118'.
[  107.884077][ T6236] netlink: 60 bytes leftover after parsing attributes in process `syz.0.118'.
[  107.937921][ T6238] netlink: 60 bytes leftover after parsing attributes in process `syz.0.118'.
[  110.591491][ T6271] loop8: detected capacity change from 0 to 1
[  110.628480][ T6271] Dev loop8: unable to read RDB block 1
[  110.669403][ T6271]  loop8: unable to read partition table
[  110.722849][ T6271] loop8: partition table beyond EOD, truncated
[  110.732375][ T6279] netlink: 60 bytes leftover after parsing attributes in process `syz.3.133'.
[  110.872250][ T6276] netlink: 60 bytes leftover after parsing attributes in process `syz.3.133'.
[  110.969530][ T6271] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  110.988300][ T6276] netlink: 60 bytes leftover after parsing attributes in process `syz.3.133'.
[  116.773448][ T6320] netlink: 60 bytes leftover after parsing attributes in process `syz.3.145'.
[  116.877560][ T6319] netlink: 60 bytes leftover after parsing attributes in process `syz.3.145'.
[  116.951334][ T6324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.145'.
[  118.535952][ T6347] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  123.111984][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'.
[  126.927079][ T5851] Bluetooth: hci3: Invalid handle: 0x3030 > 0x0eff
[  127.827287][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  127.836514][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.858128][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.883545][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  127.891248][   T30] audit: type=1326 audit(1744725690.711:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  128.127787][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  128.238713][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'.
[  129.173725][   T30] audit: type=1326 audit(1744725690.711:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  129.203367][   T30] audit: type=1326 audit(1744725690.711:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  129.282345][   T30] audit: type=1326 audit(1744725690.711:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  129.588848][   T30] audit: type=1326 audit(1744725690.711:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  129.674577][   T30] audit: type=1326 audit(1744725690.721:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  130.076674][   T30] audit: type=1326 audit(1744725690.751:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  130.145251][   T30] audit: type=1326 audit(1744725690.751:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  130.170199][   T30] audit: type=1326 audit(1744725690.751:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  130.266676][ T6403] chnl_net:caif_netlink_parms(): no params data found
[  130.296709][ T5851] Bluetooth: hci5: command tx timeout
[  130.304544][   T30] audit: type=1326 audit(1744725690.751:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  132.343329][ T5851] Bluetooth: hci5: command tx timeout
[  132.547128][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.694478][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  132.701035][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  133.121796][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.129088][ T6403] bridge_slave_0: entered allmulticast mode
[  133.145966][ T6403] bridge_slave_0: entered promiscuous mode
[  133.158796][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.195799][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.228716][ T6403] bridge_slave_1: entered allmulticast mode
[  133.299829][ T6403] bridge_slave_1: entered promiscuous mode
[  133.431608][ T6452] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  133.438097][ T6452] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  134.433168][ T5851] Bluetooth: hci5: command tx timeout
[  134.496872][ T6453] xt_hashlimit: size too large, truncated to 1048576
[  134.533068][ T6403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.612342][ T6403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.751783][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  134.751800][   T30] audit: type=1326 audit(1744725697.581:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167fb8e169 code=0x7ffc0000
[  134.962192][   T30] audit: type=1326 audit(1744725697.581:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167fb8e169 code=0x7ffc0000
[  134.983878][   T30] audit: type=1326 audit(1744725697.581:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f167fb8e169 code=0x7ffc0000
[  135.005085][    C1] vkms_vblank_simulate: vblank timer overrun
[  135.783383][   T30] audit: type=1326 audit(1744725697.581:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167fb8e169 code=0x7ffc0000
[  135.804699][    C1] vkms_vblank_simulate: vblank timer overrun
[  135.868390][   T30] audit: type=1326 audit(1744725697.581:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167fb8e169 code=0x7ffc0000
[  135.942689][   T30] audit: type=1326 audit(1744725697.581:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f167fb8e169 code=0x7ffc0000
[  135.977799][   T30] audit: type=1326 audit(1744725697.581:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167fb8e169 code=0x7ffc0000
[  136.080926][   T30] audit: type=1326 audit(1744725697.581:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167fb8e169 code=0x7ffc0000
[  136.523887][ T5851] Bluetooth: hci5: command tx timeout
[  136.798739][   T30] audit: type=1326 audit(1744725697.611:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f167fb8e169 code=0x7ffc0000
[  136.877623][   T30] audit: type=1326 audit(1744725697.611:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6460 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167fb8e169 code=0x7ffc0000
[  138.165108][ T6403] team0: Port device team_slave_0 added
[  138.180855][ T6403] team0: Port device team_slave_1 added
[  138.608135][ T6487] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  140.944837][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  140.944866][   T30] audit: type=1326 audit(1744725703.561:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996b8e169 code=0x7ffc0000
[  140.972733][    C1] vkms_vblank_simulate: vblank timer overrun
[  140.981583][   T30] audit: type=1326 audit(1744725703.561:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996b8e169 code=0x7ffc0000
[  141.003875][   T30] audit: type=1326 audit(1744725703.571:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fe996b8e169 code=0x7ffc0000
[  141.025153][    C1] vkms_vblank_simulate: vblank timer overrun
[  141.861967][   T30] audit: type=1326 audit(1744725703.571:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996b8e169 code=0x7ffc0000
[  142.053497][   T30] audit: type=1326 audit(1744725703.571:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996b8e169 code=0x7ffc0000
[  142.074804][    C1] vkms_vblank_simulate: vblank timer overrun
[  142.086597][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.302668][   T30] audit: type=1326 audit(1744725703.571:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fe996b8e169 code=0x7ffc0000
[  142.324006][    C1] vkms_vblank_simulate: vblank timer overrun
[  142.330724][   T30] audit: type=1326 audit(1744725703.571:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996b8e169 code=0x7ffc0000
[  142.352206][   T30] audit: type=1326 audit(1744725703.571:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996b8e169 code=0x7ffc0000
[  142.373497][    C1] vkms_vblank_simulate: vblank timer overrun
[  143.025968][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.211622][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.268752][   T30] audit: type=1326 audit(1744725703.571:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe996b8e169 code=0x7ffc0000
[  143.290315][    C1] vkms_vblank_simulate: vblank timer overrun
[  143.407926][ T6403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.501059][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.516346][   T30] audit: type=1326 audit(1744725703.571:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996b8e169 code=0x7ffc0000
[  143.555462][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.647328][ T6403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.797841][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.694927][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.420204][ T6403] hsr_slave_0: entered promiscuous mode
[  146.635131][ T6403] hsr_slave_1: entered promiscuous mode
[  146.787997][ T6403] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.842741][ T6403] Cannot create hsr debugfs directory
[  147.114176][ T6565] Zero length message leads to an empty skb
[  147.137809][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.752280][ T6403] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  151.817593][   T12] bridge_slave_1: left allmulticast mode
[  151.875081][   T12] bridge_slave_1: left promiscuous mode
[  151.881666][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.994318][   T12] bridge_slave_0: left allmulticast mode
[  152.022371][   T12] bridge_slave_0: left promiscuous mode
[  152.049528][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.166550][ T6634] syz.0.237 (6634): drop_caches: 4
[  153.750519][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.764052][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.776570][   T12] bond0 (unregistering): Released all slaves
[  154.413373][ T6403] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  154.472236][ T6403] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  154.554468][ T6403] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  156.759965][ T6673] capability: warning: `syz.3.247' uses deprecated v2 capabilities in a way that may be insecure
[  157.183060][ T6679] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  161.579957][   T12] hsr_slave_0: left promiscuous mode
[  161.606820][   T12] hsr_slave_1: left promiscuous mode
[  161.757649][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.766101][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.811220][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.396604][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.550111][   T12] veth1_macvtap: left promiscuous mode
[  162.601993][   T12] veth0_macvtap: left promiscuous mode
[  162.626868][   T12] veth1_vlan: left promiscuous mode
[  162.634023][   T12] veth0_vlan: left promiscuous mode
[  163.574435][ T6721] Driver unsupported XDP return value 0 on prog  (id 42) dev N/A, expect packet loss!
[  164.554056][   T12] team0 (unregistering): Port device team_slave_1 removed
[  165.559634][   T12] team0 (unregistering): Port device team_slave_0 removed
[  166.893370][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'.
[  167.166809][ T6403] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.199659][ T6403] 8021q: adding VLAN 0 to HW filter on device team0
[  167.540335][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.547538][ T5980] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.558528][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.565739][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.107780][ T5887] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  170.166460][ T6403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.325298][ T5887] usb 3-1: Using ep0 maxpacket: 16
[  170.424031][ T5887] usb 3-1: config 0 has no interfaces?
[  170.449872][ T5887] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  170.471589][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.490061][ T5887] usb 3-1: Product: syz
[  170.500166][ T5887] usb 3-1: Manufacturer: syz
[  170.510298][ T5887] usb 3-1: SerialNumber: syz
[  170.541881][ T5887] usb 3-1: config 0 descriptor??
[  170.922650][ T6792] dns_resolver: Unsupported content type (8)
[  171.024346][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.033878][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.465944][ T6403] veth0_vlan: entered promiscuous mode
[  172.521485][ T6403] veth1_vlan: entered promiscuous mode
[  172.756515][ T6403] veth0_macvtap: entered promiscuous mode
[  172.797247][ T6403] veth1_macvtap: entered promiscuous mode
[  173.408110][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.493611][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.566329][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.633174][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.688014][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.733155][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.775337][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.883243][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.940856][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.062131][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.094354][    T9] usb 3-1: USB disconnect, device number 3
[  174.121069][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.353192][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.380153][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.363116][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.374730][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.385033][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.664401][ T6864] netlink: set zone limit has 4 unknown bytes
[  175.687073][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.924698][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.040608][ T6403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.174709][ T6403] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.194049][ T6403] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.202771][ T6403] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.356277][ T6883] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  178.207868][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.241113][ T6891] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  178.894901][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.307007][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.363288][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.846885][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  180.003126][    T9] usb 3-1: Using ep0 maxpacket: 16
[  180.018983][    T9] usb 3-1: config 0 has no interfaces?
[  180.041080][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  180.063165][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.080809][    T9] usb 3-1: Product: syz
[  180.091776][    T9] usb 3-1: Manufacturer: syz
[  180.106043][    T9] usb 3-1: SerialNumber: syz
[  180.123019][    T9] usb 3-1: config 0 descriptor??
[  181.443360][ T6897] dns_resolver: Unsupported content type (8)
[  181.565188][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.563505][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.631910][ T6942] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  184.743238][ T5842] Bluetooth: hci5: command 0x0405 tx timeout
[  185.169260][ T5838] usb 3-1: USB disconnect, device number 4
[  191.105940][ T7004] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  194.575993][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  194.582462][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  195.482088][ T7046] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  195.629604][ T7046] process 'syz.0.338' launched '/dev/fd/8' with NULL argv: empty string added
[  195.735283][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'.
[  198.552669][ T7046] bridge_slave_1: left allmulticast mode
[  198.625470][ T7046] bridge_slave_1: left promiscuous mode
[  198.715892][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.696450][ T7046] bridge_slave_0: left allmulticast mode
[  199.764731][ T7046] bridge_slave_0: left promiscuous mode
[  199.770989][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.509132][ T7073] netlink: 72 bytes leftover after parsing attributes in process `syz.1.344'.
[  201.723112][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  201.723191][ T5847] Bluetooth: hci4: command 0x0406 tx timeout
[  201.729180][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  201.735690][ T5839] Bluetooth: hci0: command 0x0406 tx timeout
[  202.583482][ T5887] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  202.673239][ T5838] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[  202.882847][ T5887] usb 6-1: config 1 interface 0 has no altsetting 0
[  202.921653][ T5887] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  202.941156][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.952643][ T5838] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  202.967483][ T5838] usb 1-1: config 0 has no interface number 0
[  202.975818][ T5887] usb 6-1: Product: syz
[  202.983139][ T5887] usb 6-1: Manufacturer: syz
[  202.988407][ T5838] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  202.999474][ T5887] usb 6-1: SerialNumber: syz
[  203.008758][ T5838] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  203.025486][ T5838] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  203.056227][ T5838] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  203.073957][ T5889] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  203.089390][ T5838] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  203.101687][ T5838] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  203.115311][ T5838] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  203.130356][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.138105][ T7126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.355'.
[  203.151578][ T5838] usb 1-1: config 0 descriptor??
[  203.152227][ T7124] netlink: 60 bytes leftover after parsing attributes in process `syz.3.355'.
[  203.172257][ T7106] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  203.183287][ T7106] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  203.186545][ T7126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.355'.
[  203.217911][ T5838] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  203.243642][ T5889] usb 3-1: Using ep0 maxpacket: 8
[  203.262747][ T5889] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  203.284799][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  203.301148][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 14129, setting to 64
[  203.314314][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  203.327671][ T5889] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  203.337203][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.352114][ T5889] usb 3-1: config 0 descriptor??
[  203.461499][ T5889] usb 1-1: USB disconnect, device number 2
[  203.694935][ T5889] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  204.292125][ T5887] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  205.301930][ T7159] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  205.837185][ T5917] usb 3-1: USB disconnect, device number 5
[  205.921491][    T9] usb 6-1: USB disconnect, device number 2
[  206.009838][    T9] usblp0: removed
[  206.180940][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  206.180963][   T30] audit: type=1326 audit(1744725768.931:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  206.337104][   T30] audit: type=1326 audit(1744725768.931:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  206.437361][   T30] audit: type=1326 audit(1744725768.931:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  206.969578][   T30] audit: type=1326 audit(1744725768.941:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  207.015013][   T30] audit: type=1326 audit(1744725768.941:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  207.133248][   T30] audit: type=1326 audit(1744725768.941:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  207.163653][ T7178] netlink: 16 bytes leftover after parsing attributes in process `syz.5.364'.
[  207.216094][   T30] audit: type=1326 audit(1744725768.941:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  207.256367][   T30] audit: type=1326 audit(1744725768.941:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  207.297325][ T7183] netlink: 60 bytes leftover after parsing attributes in process `syz.2.366'.
[  207.331628][ T7181] netlink: 60 bytes leftover after parsing attributes in process `syz.2.366'.
[  207.346530][   T30] audit: type=1326 audit(1744725768.941:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  207.382206][ T7183] netlink: 60 bytes leftover after parsing attributes in process `syz.2.366'.
[  207.849036][   T30] audit: type=1326 audit(1744725768.941:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d3d8e169 code=0x7ffc0000
[  210.725721][ T7233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.378'.
[  210.766052][ T7231] netlink: 60 bytes leftover after parsing attributes in process `syz.1.378'.
[  210.819112][ T7233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.378'.
[  211.853171][    T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  214.025736][    T9] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  214.105977][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.176353][    T9] usb 1-1: config 0 descriptor??
[  214.206746][    T9] usb 1-1: can't set config #0, error -71
[  214.235108][    T9] usb 1-1: USB disconnect, device number 3
[  214.469577][ T7271] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  214.763238][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'.
[  214.945253][ T7283] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  214.984455][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.390'.
[  215.250324][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'.
[  215.541796][ T7293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.393'.
[  215.551067][ T7291] netlink: 60 bytes leftover after parsing attributes in process `syz.2.393'.
[  215.720246][ T7293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.393'.
[  215.742125][ T7273] [U] v�3
[  216.177044][ T7303] dlm: no local IP address has been set
[  216.182846][ T7303] dlm: cannot start dlm midcomms -107
[  217.933453][ T7302] netlink: 60 bytes leftover after parsing attributes in process `syz.1.394'.
[  223.363177][ T5143] Bluetooth: hci5: link tx timeout
[  223.368533][ T5143] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  223.383227][ T5852] Bluetooth: hci5: link tx timeout
[  223.388764][ T5852] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  223.431188][ T5852] Bluetooth: hci5: link tx timeout
[  223.436704][ T5852] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  223.444459][ T5852] Bluetooth: hci5: link tx timeout
[  223.449743][ T5852] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  223.459041][ T5852] Bluetooth: hci5: link tx timeout
[  223.464813][ T5852] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  224.127761][ T5852] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  224.137941][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: kworker/u9:7 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) 
[  224.137967][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  224.137980][ T5852] Workqueue: hci0 hci_rx_work
[  224.138016][ T5852] Call Trace:
[  224.138024][ T5852]  <TASK>
[  224.138032][ T5852]  dump_stack_lvl+0x241/0x360
[  224.138069][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.138096][ T5852]  ? __pfx__printk+0x10/0x10
[  224.138121][ T5852]  ? kernfs_path_from_node+0x2b/0x250
[  224.138151][ T5852]  ? kernfs_path_from_node+0x217/0x250
[  224.138188][ T5852]  sysfs_create_dir_ns+0x2fd/0x3f0
[  224.138215][ T5852]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  224.138250][ T5852]  kobject_add_internal+0x435/0x8d0
[  224.138287][ T5852]  kobject_add+0x15b/0x230
[  224.138312][ T5852]  ? do_raw_spin_unlock+0x13c/0x8b0
[  224.138349][ T5852]  ? device_add+0x3e7/0xbf0
[  224.138371][ T5852]  ? __pfx_kobject_add+0x10/0x10
[  224.138395][ T5852]  ? _raw_spin_unlock+0x28/0x50
[  224.138417][ T5852]  ? get_device_parent+0x165/0x410
[  224.138444][ T5852]  device_add+0x4e5/0xbf0
[  224.138471][ T5852]  hci_conn_add_sysfs+0xe8/0x200
[  224.138501][ T5852]  le_conn_complete_evt+0xc6e/0x12a0
[  224.138536][ T5852]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  224.138556][ T5852]  ? __mutex_unlock_slowpath+0x229/0x800
[  224.138583][ T5852]  ? __skb_clone+0x5c/0x6d0
[  224.138606][ T5852]  ? skb_pull_data+0x112/0x230
[  224.138634][ T5852]  hci_le_conn_complete_evt+0x18c/0x420
[  224.138662][ T5852]  hci_event_packet+0xa5c/0x1550
[  224.138695][ T5852]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  224.138720][ T5852]  ? __pfx_hci_event_packet+0x10/0x10
[  224.138753][ T5852]  ? kcov_remote_start+0x480/0x7d0
[  224.138778][ T5852]  ? lockdep_hardirqs_on+0x9d/0x150
[  224.138804][ T5852]  ? hci_send_to_monitor+0xdc/0x530
[  224.138828][ T5852]  hci_rx_work+0x3f3/0xdb0
[  224.138855][ T5852]  ? process_scheduled_works+0x9cb/0x18e0
[  224.138874][ T5852]  process_scheduled_works+0xac3/0x18e0
[  224.138922][ T5852]  ? __pfx_process_scheduled_works+0x10/0x10
[  224.138954][ T5852]  ? assign_work+0x367/0x3d0
[  224.138978][ T5852]  worker_thread+0x870/0xd50
[  224.139013][ T5852]  ? __kthread_parkme+0x1a8/0x200
[  224.139038][ T5852]  ? __pfx_worker_thread+0x10/0x10
[  224.139059][ T5852]  kthread+0x7b7/0x940
[  224.139103][ T5852]  ? __pfx_worker_thread+0x10/0x10
[  224.139125][ T5852]  ? __pfx_kthread+0x10/0x10
[  224.139148][ T5852]  ? __pfx_kthread+0x10/0x10
[  224.139199][ T5852]  ? __pfx_kthread+0x10/0x10
[  224.139243][ T5852]  ? __pfx_kthread+0x10/0x10
[  224.139271][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[  224.139291][ T5852]  ? lockdep_hardirqs_on+0x9d/0x150
[  224.139315][ T5852]  ? __pfx_kthread+0x10/0x10
[  224.139345][ T5852]  ret_from_fork+0x4b/0x80
[  224.139364][ T5852]  ? __pfx_kthread+0x10/0x10
[  224.139392][ T5852]  ret_from_fork_asm+0x1a/0x30
[  224.139443][ T5852]  </TASK>
[  224.139543][ T5852] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  224.437512][ T5852] Bluetooth: hci0: failed to register connection device
[  224.445473][ T5852] ==================================================================
[  224.453574][ T5852] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xd7/0x140
[  224.462118][ T5852] Read of size 8 at addr ffff88805de7c188 by task kworker/u9:7/5852
[  224.470104][ T5852] 
[  224.472434][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: kworker/u9:7 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) 
[  224.472455][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  224.472466][ T5852] Workqueue: hci0 hci_rx_work
[  224.472484][ T5852] Call Trace:
[  224.472491][ T5852]  <TASK>
[  224.472497][ T5852]  dump_stack_lvl+0x241/0x360
[  224.472522][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.472543][ T5852]  ? rcu_is_watching+0x15/0xb0
[  224.472562][ T5852]  ? __virt_addr_valid+0x183/0x530
[  224.472583][ T5852]  ? lock_release+0x4e/0x3e0
[  224.472598][ T5852]  ? __virt_addr_valid+0x183/0x530
[  224.472617][ T5852]  ? __virt_addr_valid+0x183/0x530
[  224.472638][ T5852]  print_report+0x16e/0x5b0
[  224.472661][ T5852]  ? __virt_addr_valid+0x183/0x530
[  224.472680][ T5852]  ? __virt_addr_valid+0x183/0x530
[  224.472698][ T5852]  ? __virt_addr_valid+0x45f/0x530
[  224.472717][ T5852]  ? __phys_addr+0xba/0x170
[  224.472736][ T5852]  ? l2cap_sock_ready_cb+0xd7/0x140
[  224.472758][ T5852]  kasan_report+0x143/0x180
[  224.472772][ T5852]  ? l2cap_sock_ready_cb+0xd7/0x140
[  224.472797][ T5852]  l2cap_sock_ready_cb+0xd7/0x140
[  224.472820][ T5852]  l2cap_le_start+0x522/0x1800
[  224.472841][ T5852]  ? l2cap_connect_cfm+0x6a3/0x1220
[  224.472860][ T5852]  ? __pfx_l2cap_le_start+0x10/0x10
[  224.472878][ T5852]  ? l2cap_global_fixed_chan+0x2df/0x370
[  224.472899][ T5852]  ? __pfx_l2cap_global_fixed_chan+0x10/0x10
[  224.472922][ T5852]  ? l2cap_chan_put+0x11b/0x250
[  224.472945][ T5852]  l2cap_connect_cfm+0x6e2/0x1220
[  224.472968][ T5852]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  224.472987][ T5852]  ? device_add+0x460/0xbf0
[  224.473006][ T5852]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  224.473026][ T5852]  hci_connect_cfm+0xa2/0x150
[  224.473044][ T5852]  le_conn_complete_evt+0xcf4/0x12a0
[  224.473067][ T5852]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  224.473087][ T5852]  ? __mutex_unlock_slowpath+0x229/0x800
[  224.473114][ T5852]  ? __skb_clone+0x5c/0x6d0
[  224.473136][ T5852]  ? skb_pull_data+0x112/0x230
[  224.473162][ T5852]  hci_le_conn_complete_evt+0x18c/0x420
[  224.473187][ T5852]  hci_event_packet+0xa5c/0x1550
[  224.473218][ T5852]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  224.473241][ T5852]  ? __pfx_hci_event_packet+0x10/0x10
[  224.473271][ T5852]  ? kcov_remote_start+0x480/0x7d0
[  224.473298][ T5852]  ? lockdep_hardirqs_on+0x9d/0x150
[  224.473322][ T5852]  ? hci_send_to_monitor+0xdc/0x530
[  224.473347][ T5852]  hci_rx_work+0x3f3/0xdb0
[  224.473368][ T5852]  ? process_scheduled_works+0x9cb/0x18e0
[  224.473393][ T5852]  process_scheduled_works+0xac3/0x18e0
[  224.473427][ T5852]  ? __pfx_process_scheduled_works+0x10/0x10
[  224.473460][ T5852]  ? assign_work+0x367/0x3d0
[  224.473481][ T5852]  worker_thread+0x870/0xd50
[  224.473506][ T5852]  ? __kthread_parkme+0x1a8/0x200
[  224.473527][ T5852]  ? __pfx_worker_thread+0x10/0x10
[  224.473544][ T5852]  kthread+0x7b7/0x940
[  224.473564][ T5852]  ? __pfx_worker_thread+0x10/0x10
[  224.473581][ T5852]  ? __pfx_kthread+0x10/0x10
[  224.473600][ T5852]  ? __pfx_kthread+0x10/0x10
[  224.473619][ T5852]  ? __pfx_kthread+0x10/0x10
[  224.473638][ T5852]  ? __pfx_kthread+0x10/0x10
[  224.473657][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[  224.473672][ T5852]  ? lockdep_hardirqs_on+0x9d/0x150
[  224.473689][ T5852]  ? __pfx_kthread+0x10/0x10
[  224.473708][ T5852]  ret_from_fork+0x4b/0x80
[  224.473723][ T5852]  ? __pfx_kthread+0x10/0x10
[  224.473742][ T5852]  ret_from_fork_asm+0x1a/0x30
[  224.473771][ T5852]  </TASK>
[  224.473777][ T5852] 
[  224.806530][ T5852] Allocated by task 7381:
[  224.810850][ T5852]  kasan_save_track+0x3f/0x80
[  224.815535][ T5852]  __kasan_kmalloc+0x9d/0xb0
[  224.820128][ T5852]  __kmalloc_noprof+0x28e/0x4d0
[  224.824978][ T5852]  sk_prot_alloc+0xe0/0x210
[  224.829477][ T5852]  sk_alloc+0x3e/0x370
[  224.833541][ T5852]  bt_sock_alloc+0x3c/0x340
[  224.838037][ T5852]  l2cap_sock_create+0x13d/0x300
[  224.842969][ T5852]  bt_sock_create+0x161/0x230
[  224.847636][ T5852]  __sock_create+0x4c0/0xa30
[  224.852223][ T5852]  __sys_socket+0x14d/0x3c0
[  224.856735][ T5852]  __x64_sys_socket+0x7a/0x90
[  224.861432][ T5852]  do_syscall_64+0xf3/0x230
[  224.865944][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.871832][ T5852] 
[  224.874148][ T5852] Freed by task 7381:
[  224.878115][ T5852]  kasan_save_track+0x3f/0x80
[  224.882792][ T5852]  kasan_save_free_info+0x40/0x50
[  224.887821][ T5852]  __kasan_slab_free+0x59/0x70
[  224.892581][ T5852]  kfree+0x198/0x430
[  224.896470][ T5852]  __sk_destruct+0x4ce/0x650
[  224.901058][ T5852]  l2cap_sock_release+0x15b/0x1d0
[  224.906081][ T5852]  sock_close+0xbc/0x240
[  224.910328][ T5852]  __fput+0x3e9/0x9f0
[  224.914327][ T5852]  task_work_run+0x251/0x310
[  224.918922][ T5852]  get_signal+0x15db/0x1730
[  224.923422][ T5852]  arch_do_signal_or_restart+0x98/0x840
[  224.928964][ T5852]  syscall_exit_to_user_mode+0xce/0x340
[  224.934503][ T5852]  do_syscall_64+0x100/0x230
[  224.939085][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.944968][ T5852] 
[  224.947283][ T5852] The buggy address belongs to the object at ffff88805de7c000
[  224.947283][ T5852]  which belongs to the cache kmalloc-2k of size 2048
[  224.961324][ T5852] The buggy address is located 392 bytes inside of
[  224.961324][ T5852]  freed 2048-byte region [ffff88805de7c000, ffff88805de7c800)
[  224.975199][ T5852] 
[  224.977512][ T5852] The buggy address belongs to the physical page:
[  224.983919][ T5852] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5de78
[  224.992671][ T5852] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  225.001161][ T5852] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  225.009133][ T5852] page_type: f5(slab)
[  225.013110][ T5852] raw: 00fff00000000040 ffff88801b042000 0000000000000000 dead000000000001
[  225.021684][ T5852] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  225.030263][ T5852] head: 00fff00000000040 ffff88801b042000 0000000000000000 dead000000000001
[  225.038928][ T5852] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  225.047591][ T5852] head: 00fff00000000003 ffffea0001779e01 00000000ffffffff 00000000ffffffff
[  225.056254][ T5852] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  225.064912][ T5852] page dumped because: kasan: bad access detected
[  225.071319][ T5852] page_owner tracks the page as allocated
[  225.077023][ T5852] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6403, tgid 6403 (syz-executor), ts 139475558397, free_ts 139448295612
[  225.097943][ T5852]  post_alloc_hook+0x1f4/0x240
[  225.102716][ T5852]  get_page_from_freelist+0x351d/0x36b0
[  225.108259][ T5852]  __alloc_frozen_pages_noprof+0x211/0x5b0
[  225.114068][ T5852]  alloc_pages_mpol+0x339/0x690
[  225.118916][ T5852]  allocate_slab+0x8f/0x3a0
[  225.123417][ T5852]  ___slab_alloc+0xc3b/0x1500
[  225.128084][ T5852]  __slab_alloc+0x58/0xa0
[  225.132407][ T5852]  __kmalloc_node_track_caller_noprof+0x2ef/0x4d0
[  225.138813][ T5852]  kmalloc_reserve+0x111/0x2a0
[  225.143569][ T5852]  pskb_expand_head+0x1fd/0x1510
[  225.148498][ T5852]  netlink_trim+0x1d6/0x2e0
[  225.152993][ T5852]  netlink_broadcast_filtered+0x76/0x12a0
[  225.158708][ T5852]  nlmsg_notify+0xfb/0x1c0
[  225.163128][ T5852]  __dev_notify_flags+0xf9/0x410
[  225.168054][ T5852]  rtnl_configure_link+0x22d/0x340
[  225.173159][ T5852]  veth_newlink+0x53f/0xb80
[  225.177671][ T5852] page last free pid 6495 tgid 6488 stack trace:
[  225.183985][ T5852]  __free_frozen_pages+0xddf/0x10a0
[  225.189196][ T5852]  __put_partials+0x160/0x1c0
[  225.193874][ T5852]  put_cpu_partial+0x17e/0x250
[  225.198634][ T5852]  __slab_free+0x294/0x390
[  225.203046][ T5852]  qlist_free_all+0x9a/0x140
[  225.207638][ T5852]  kasan_quarantine_reduce+0x14f/0x170
[  225.213098][ T5852]  __kasan_slab_alloc+0x23/0x80
[  225.217949][ T5852]  kmem_cache_alloc_node_noprof+0x1f2/0x3b0
[  225.223850][ T5852]  __alloc_skb+0x1c2/0x480
[  225.228254][ T5852]  __ip6_append_data+0x2d15/0x41b0
[  225.233365][ T5852]  ip6_append_data+0x25f/0x380
[  225.238126][ T5852]  rawv6_sendmsg+0x1855/0x23c0
[  225.242891][ T5852]  __sock_sendmsg+0x1a6/0x270
[  225.247564][ T5852]  ____sys_sendmsg+0x523/0x860
[  225.252319][ T5852]  __sys_sendmmsg+0x3a0/0x7b0
[  225.257000][ T5852]  __x64_sys_sendmmsg+0xa0/0xb0
[  225.261853][ T5852] 
[  225.264173][ T5852] Memory state around the buggy address:
[  225.269798][ T5852]  ffff88805de7c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.277858][ T5852]  ffff88805de7c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.285918][ T5852] >ffff88805de7c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.293974][ T5852]                       ^
[  225.298298][ T5852]  ffff88805de7c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.306370][ T5852]  ffff88805de7c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.314442][ T5852] ==================================================================
[  225.322556][    C0] vkms_vblank_simulate: vblank timer overrun
[  225.331881][ T5852] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  225.339113][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: kworker/u9:7 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) 
[  225.351292][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  225.361370][ T5852] Workqueue: hci0 hci_rx_work
[  225.366065][ T5852] Call Trace:
[  225.369346][ T5852]  <TASK>
[  225.372276][ T5852]  dump_stack_lvl+0x241/0x360
[  225.377131][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.382351][ T5852]  ? __pfx__printk+0x10/0x10
[  225.386955][ T5852]  ? vprintk_emit+0x81f/0xa40
[  225.391647][ T5852]  ? vscnprintf+0x5d/0x90
[  225.395981][ T5852]  panic+0x349/0x880
[  225.399887][ T5852]  ? check_panic_on_warn+0x21/0xb0
[  225.405005][ T5852]  ? __pfx_panic+0x10/0x10
[  225.409429][ T5852]  ? _raw_spin_unlock_irqrestore+0x134/0x140
[  225.415411][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  225.421746][ T5852]  check_panic_on_warn+0x86/0xb0
[  225.426695][ T5852]  ? l2cap_sock_ready_cb+0xd7/0x140
[  225.431901][ T5852]  end_report+0x77/0x160
[  225.436156][ T5852]  kasan_report+0x154/0x180
[  225.440658][ T5852]  ? l2cap_sock_ready_cb+0xd7/0x140
[  225.445871][ T5852]  l2cap_sock_ready_cb+0xd7/0x140
[  225.450913][ T5852]  l2cap_le_start+0x522/0x1800
[  225.455691][ T5852]  ? l2cap_connect_cfm+0x6a3/0x1220
[  225.460897][ T5852]  ? __pfx_l2cap_le_start+0x10/0x10
[  225.466096][ T5852]  ? l2cap_global_fixed_chan+0x2df/0x370
[  225.471732][ T5852]  ? __pfx_l2cap_global_fixed_chan+0x10/0x10
[  225.477717][ T5852]  ? l2cap_chan_put+0x11b/0x250
[  225.482575][ T5852]  l2cap_connect_cfm+0x6e2/0x1220
[  225.487611][ T5852]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  225.493081][ T5852]  ? device_add+0x460/0xbf0
[  225.497600][ T5852]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  225.503072][ T5852]  hci_connect_cfm+0xa2/0x150
[  225.507761][ T5852]  le_conn_complete_evt+0xcf4/0x12a0
[  225.513060][ T5852]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  225.518785][ T5852]  ? __mutex_unlock_slowpath+0x229/0x800
[  225.524423][ T5852]  ? __skb_clone+0x5c/0x6d0
[  225.528929][ T5852]  ? skb_pull_data+0x112/0x230
[  225.533698][ T5852]  hci_le_conn_complete_evt+0x18c/0x420
[  225.539283][ T5852]  hci_event_packet+0xa5c/0x1550
[  225.544264][ T5852]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  225.549563][ T5852]  ? __pfx_hci_event_packet+0x10/0x10
[  225.554946][ T5852]  ? kcov_remote_start+0x480/0x7d0
[  225.560067][ T5852]  ? lockdep_hardirqs_on+0x9d/0x150
[  225.565271][ T5852]  ? hci_send_to_monitor+0xdc/0x530
[  225.570472][ T5852]  hci_rx_work+0x3f3/0xdb0
[  225.574888][ T5852]  ? process_scheduled_works+0x9cb/0x18e0
[  225.580624][ T5852]  process_scheduled_works+0xac3/0x18e0
[  225.586181][ T5852]  ? __pfx_process_scheduled_works+0x10/0x10
[  225.592172][ T5852]  ? assign_work+0x367/0x3d0
[  225.596766][ T5852]  worker_thread+0x870/0xd50
[  225.601364][ T5852]  ? __kthread_parkme+0x1a8/0x200
[  225.606391][ T5852]  ? __pfx_worker_thread+0x10/0x10
[  225.611510][ T5852]  kthread+0x7b7/0x940
[  225.615585][ T5852]  ? __pfx_worker_thread+0x10/0x10
[  225.620695][ T5852]  ? __pfx_kthread+0x10/0x10
[  225.625290][ T5852]  ? __pfx_kthread+0x10/0x10
[  225.629884][ T5852]  ? __pfx_kthread+0x10/0x10
[  225.634496][ T5852]  ? __pfx_kthread+0x10/0x10
[  225.639094][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.644288][ T5852]  ? lockdep_hardirqs_on+0x9d/0x150
[  225.649488][ T5852]  ? __pfx_kthread+0x10/0x10
[  225.654089][ T5852]  ret_from_fork+0x4b/0x80
[  225.658500][ T5852]  ? __pfx_kthread+0x10/0x10
[  225.663086][ T5852]  ret_from_fork_asm+0x1a/0x30
[  225.667856][ T5852]  </TASK>
[  225.671240][ T5852] Kernel Offset: disabled
[  225.675560][ T5852] Rebooting in 86400 seconds..