last executing test programs:

9m59.586123813s ago: executing program 5 (id=251):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x1ce)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0203", 0x2, 0x0, 0x0, 0x0)
unshare(0x2c020400)
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)

9m57.634111425s ago: executing program 5 (id=256):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x24000800}, 0x0)

9m56.927778267s ago: executing program 5 (id=257):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x40}, 0x0)

9m56.516126439s ago: executing program 5 (id=259):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = msgget$private(0x0, 0x0)
msgsnd(0x0, 0x0, 0x2000, 0x800)
msgsnd(r3, 0x0, 0x27, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setpgid(0x0, r4)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)

9m56.238152656s ago: executing program 5 (id=261):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
lseek(r0, 0x40203, 0x4)

9m55.005108705s ago: executing program 5 (id=262):
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0xc84}, 0x1c)
listen(0xffffffffffffffff, 0x3)
connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)

9m53.359444124s ago: executing program 32 (id=262):
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0xc84}, 0x1c)
listen(0xffffffffffffffff, 0x3)
connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)

9m8.459833111s ago: executing program 4 (id=359):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002192e20845050c800a0301020301090212000100000000090404"], 0x0)
syz_usb_ep_write(r0, 0x5, 0xdb, &(0x7f0000000440)="46508837fa3679aac5c86ae9f71c019f7b62cf46da098d37ebe16fd84ea36fca4a3559ecf9829eb761deca77977a49898142f6fd837e8f867f5053b3745ad880ccc58b3ef6e59305704b13d61c36e6825aa7cfe311126dff89db6d88ac1119d2e883f4605d0f9f314b0ade084cf947c052a99884765621d14a0026c1e32a16eb61496e97e69878b6c7975f5e431fa4f8c0b2b3747fe52d662ab96498442ab1bfe36272ec4403c04bec478fc6e16a6e357726f7f60e01d1333caf7d67f4e101b5d461deec47c7f8ab17af7d22375e24547b9706002e272b83d45836")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = timerfd_create(0x9, 0x0)
timerfd_gettime(r4, 0x0)

9m4.94786426s ago: executing program 4 (id=366):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460403ad03000000000000000002003e00000000000103000038"], 0x58)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x991)
close(r0)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)

9m3.502331958s ago: executing program 4 (id=368):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0x10, 0xb}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
migrate_pages(0x0, 0x8000, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0)

8m58.146524036s ago: executing program 4 (id=380):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000100000000000000001b000085000000870000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0ff03000087dbe9abc89b6f5b", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8m57.648101807s ago: executing program 4 (id=382):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = io_uring_setup(0x4351, &(0x7f0000000080)={0x0, 0xc982, 0x80, 0x3, 0x135})
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000300)={0x0, 0xa})
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100))
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00)
setrlimit(0x7, &(0x7f0000000000))
landlock_create_ruleset(&(0x7f0000000400)={0x100}, 0x10, 0x0)
sendmsg$tipc(r6, 0x0, 0x0)
accept4$tipc(r5, &(0x7f0000000280), 0x0, 0x80000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

8m54.270403769s ago: executing program 4 (id=384):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2)
r3 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x2ef8}, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820)
recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x40008062, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
syz_io_uring_submit(r4, r5, 0x0)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)

8m39.225080089s ago: executing program 33 (id=384):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2)
r3 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x2ef8}, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820)
recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x40008062, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
syz_io_uring_submit(r4, r5, 0x0)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)

2m51.242460727s ago: executing program 1 (id=1333):
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x48}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000740)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x1e8, 0x1e8, 0xfeffffff, 0x2e0, 0x2e0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x1e}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x1, 0xc}, 0x6, 0x2}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x4, 0x6]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'lo\x00', 'vlan0\x00', {}, {}, 0x1d}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@dccp={{0x30}, {[0x4e20, 0x4e20], [0x4e20, 0x4e24], 0x4, 0x1, 0x5d, 0xce}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x64}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wlan0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x204, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv4=@private=0xa010100, @ipv6=@local, @icmp_id=0x64, @gre_key=0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)

2m50.453460631s ago: executing program 1 (id=1335):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES64, @ANYRES16=r0, @ANYRES16=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000003c0)={r3, 0x10, "d24ec8bedb50a214ed375f000000005d"}, &(0x7f0000000480)=0x18)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x200, 0x0, 0x2f7}, &(0x7f0000002000), &(0x7f0000000000))

2m48.71599256s ago: executing program 1 (id=1338):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

2m46.09855062s ago: executing program 1 (id=1348):
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x48}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000740)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x1e8, 0x1e8, 0xfeffffff, 0x2e0, 0x2e0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x1e}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x1, 0xc}, 0x6, 0x2}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x4, 0x6]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'lo\x00', 'vlan0\x00', {}, {}, 0x1d}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@dccp={{0x30}, {[0x4e20, 0x4e20], [0x4e20, 0x4e24], 0x4, 0x1, 0x5d, 0xce}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x64}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wlan0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x204, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv4=@private=0xa010100, @ipv6=@local, @icmp_id=0x64, @gre_key=0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)

2m45.374225254s ago: executing program 1 (id=1352):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10)
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x5, 0x0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078)

2m35.822420625s ago: executing program 1 (id=1368):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0)

2m19.977793844s ago: executing program 34 (id=1368):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0)

1m53.336795842s ago: executing program 0 (id=1471):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
io_setup(0x4082, &(0x7f0000000380))
landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x108, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0x3)
r4 = io_uring_setup(0x253c, &(0x7f0000000000)={0x0, 0x8000, 0x10000, 0x8003, 0x2})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00')
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
close_range(r4, 0xffffffffffffffff, 0x0)

1m49.958213235s ago: executing program 0 (id=1477):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, 0x0, 0x8000)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x18}, 0x0)

1m49.459993992s ago: executing program 0 (id=1479):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0xfffffffffffffff1, &(0x7f0000000000))

1m45.492565764s ago: executing program 2 (id=1484):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r1 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000009c0)=ANY=[@ANYBLOB="0020000002000000", @ANYRES32=r1, @ANYBLOB='\x00'/10, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '])

1m44.655869449s ago: executing program 2 (id=1486):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
pipe2$9p(0x0, 0x4000)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000980)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000080)=ANY=[], 0x841, 0x0)
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000300), &(0x7f0000000240)=ANY=[], 0xa9, 0x1)

1m40.125004121s ago: executing program 2 (id=1494):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x220000, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x24004084)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
ioperm(0x4, 0x2000000000004, 0x2020008007)
prctl$PR_SET_PDEATHSIG(0x1, 0x200000000000)

1m40.050416121s ago: executing program 0 (id=1495):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socketpair(0x1, 0x6, 0x40, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x20, "42f4da8809fe2cdbcff4e37434ac8e7499929016d5169b5e5217432f9615"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x2}}}}, 0x390)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='xprtrdma_cb_setup\x00', r0}, 0x18)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="02", 0x29)

1m38.138715846s ago: executing program 0 (id=1498):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)

1m33.402667277s ago: executing program 0 (id=1506):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x220000, 0x0)
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a32000000000900030073797a31000000000900010073797a09"], 0x58}}, 0x24004084)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
shmat(r4, &(0x7f0000ffc000/0x1000)=nil, 0x4000)
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003a00)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x3, @private1, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1}}], 0x1, 0x4c040)

1m32.038373705s ago: executing program 7 (id=1509):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x100083, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4000}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10, &(0x7f0000000200)={[{0x9, 0x4e00, "f80837cd64be0bd548"}]})

1m31.894358076s ago: executing program 2 (id=1510):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socketpair(0x1, 0x6, 0x40, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x20, "42f4da8809fe2cdbcff4e37434ac8e7499929016d5169b5e5217432f9615"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x2}}}}, 0x390)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='xprtrdma_cb_setup\x00', r0}, 0x18)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="02", 0x29)

1m30.498299876s ago: executing program 2 (id=1512):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r1 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000009c0)=ANY=[@ANYBLOB="0020000002000000", @ANYRES32=r1, @ANYBLOB='\x00'/10, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '])

1m30.212437914s ago: executing program 7 (id=1513):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00')
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

1m28.598319623s ago: executing program 7 (id=1516):
r0 = syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1f1, &(0x7f0000000180)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x56, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
write$tun(r2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440))
sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0)
fadvise64(r6, 0xe10000, 0x1000000000084003, 0x3)
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x14020, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES32=0x0, @ANYRES64=r0, @ANYRESOCT], 0xfd, 0x233, &(0x7f00000002c0)="$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")

1m25.974033556s ago: executing program 2 (id=1520):
prctl$PR_SET_NAME(0xf, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f000001f6c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000003c80)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x400)
r0 = creat(0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x82000, 0x0, 0xfe, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4000)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="15000046007c00"/21], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, 0x0, 0xb0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x20, 0x4}}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800000, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
chdir(&(0x7f0000000100)='./file0\x00')
utimensat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)

1m24.627373781s ago: executing program 7 (id=1524):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socketpair(0x1, 0x6, 0x40, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x20, "42f4da8809fe2cdbcff4e37434ac8e7499929016d5169b5e5217432f9615"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x2}}}}, 0x390)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='xprtrdma_cb_setup\x00', r0}, 0x18)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="02", 0x29)

1m23.323197118s ago: executing program 7 (id=1526):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
writev(r1, 0x0, 0x0)

1m22.957983305s ago: executing program 6 (id=1527):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
io_setup(0x4082, &(0x7f0000000380))
landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x108, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close(0x3)
r5 = io_uring_setup(0x253c, &(0x7f0000000000)={0x0, 0x8000, 0x10000, 0x8003, 0x2})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00')
close_range(r5, 0xffffffffffffffff, 0x0)

1m21.3743462s ago: executing program 6 (id=1529):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rds(0x15, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x4000000000002, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$alg(0x26, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1m19.846603781s ago: executing program 7 (id=1535):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000003a00)=[{{&(0x7f00000003c0)=@nl=@proc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/47, 0x2f}], 0x1, &(0x7f00000004c0)=""/162, 0xa2}, 0x7}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/13, 0xd}, {&(0x7f00000006c0)=""/251, 0xfb}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000840)=""/240, 0xf0}, {&(0x7f0000000940)=""/136, 0x88}, {&(0x7f0000000a00)=""/212, 0xd4}, {&(0x7f0000000b00)=""/175, 0xaf}, {&(0x7f0000000bc0)=""/79, 0x4f}], 0x9}, 0x3}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000d80)=""/118, 0x76}, {&(0x7f0000000e00)=""/90, 0x5a}], 0x2, &(0x7f0000000e80)=""/179, 0xb3}, 0x3}, {{&(0x7f0000000f40)=@un=@abs, 0x80, &(0x7f0000003300)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/21, 0x15}, {&(0x7f0000002040)=""/75, 0x4b}, {&(0x7f00000020c0)=""/86, 0x56}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/35, 0x23}, {&(0x7f0000003180)=""/197, 0xc5}, {&(0x7f0000003280)=""/27, 0x1b}, {&(0x7f00000032c0)=""/43, 0x2b}], 0x9, &(0x7f00000033c0)=""/29, 0x1d}, 0x1000000}, {{&(0x7f0000003400)=@generic, 0x80, &(0x7f0000003740)=[{&(0x7f0000003480)=""/111, 0x6f}, {&(0x7f0000003500)=""/52, 0x34}, {&(0x7f0000003540)=""/81, 0x51}, {&(0x7f00000035c0)=""/159, 0x9f}, {&(0x7f0000003680)=""/161, 0xa1}], 0x5, &(0x7f00000037c0)=""/26, 0x1a}, 0xfffffff3}, {{&(0x7f0000003800)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003b80)=""/64, 0x40}, {&(0x7f00000038c0)=""/69, 0x45}], 0x2, &(0x7f0000003980)=""/98, 0x62}, 0x1ff}], 0x6, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x5, 0x7, @buffer={0x2, 0x4d, &(0x7f00000000c0)=""/77}, &(0x7f0000000380)="259374c96e", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0})
ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000001c0))
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [], [0x2b8, 0x8, 0xea, 0x1], [0x0, 0x9, 0x0, 0xfffffffe], [0xfffffffffffffffd, 0x0, 0x2]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_io_uring_setup(0x143c, &(0x7f0000003bc0)={0x0, 0xc793, 0x40, 0x3, 0x30}, &(0x7f0000000000), 0x0)
getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9)
close_range(r5, 0xffffffffffffffff, 0x0)

1m19.395223759s ago: executing program 6 (id=1536):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = creat(0x0, 0x0)
ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011)
epoll_create1(0x0)
lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, &(0x7f0000000180))
r3 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21)
ioctl$FIBMAP(r3, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m18.378350914s ago: executing program 6 (id=1538):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socketpair(0x1, 0x6, 0x40, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x20, "42f4da8809fe2cdbcff4e37434ac8e7499929016d5169b5e5217432f9615"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x2}}}}, 0x390)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
setns(r9, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='xprtrdma_cb_setup\x00', r1}, 0x18)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="02", 0x29)

1m17.208118557s ago: executing program 6 (id=1540):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x100083, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4000}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10, &(0x7f0000000200)={[{0x9, 0x4e00, "f80837cd64be0bd548"}]})

1m15.56659107s ago: executing program 6 (id=1544):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x4, 0x7fff, 0x0, @empty, @mcast1, 0x1, 0x20, 0x7, 0x3}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0)

1m14.608638372s ago: executing program 8 (id=1548):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rds(0x15, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x4000000000002, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$alg(0x26, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c0002800600", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1m12.818818922s ago: executing program 8 (id=1550):
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
mknodat$loop(r4, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00, @ANYBLOB='a'])
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r5, 0x10001, 0x0)

1m11.608520891s ago: executing program 8 (id=1551):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = creat(0x0, 0x0)
ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011)
epoll_create1(0x0)
lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, &(0x7f0000000180))
r3 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21)
ioctl$FIBMAP(r3, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m10.445719605s ago: executing program 8 (id=1552):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socketpair(0x1, 0x6, 0x40, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x20, "42f4da8809fe2cdbcff4e37434ac8e7499929016d5169b5e5217432f9615"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x2}}}}, 0x390)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
setns(r9, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='xprtrdma_cb_setup\x00', r1}, 0x18)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="02", 0x29)

1m9.266830716s ago: executing program 8 (id=1554):
r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x20000000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)

1m6.522751981s ago: executing program 8 (id=1557):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
io_setup(0x2, &(0x7f0000000200)=<r1=>0x0)
io_getevents(r1, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0)

6.74827586s ago: executing program 3 (id=1602):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003"], 0xf0}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x528}}, 0xc000)

6.646264195s ago: executing program 3 (id=1603):
r0 = syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1f1, &(0x7f0000000180)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x56, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
write$tun(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440))
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0)
fadvise64(r7, 0xe10000, 0x1000000000084003, 0x3)
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x14020, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES32=0x0, @ANYRES64=r0, @ANYRESOCT], 0xfd, 0x233, &(0x7f00000002c0)="$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")

4.656980092s ago: executing program 3 (id=1604):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040), 0x4)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4bfa, &(0x7f00000000c0)={0x0, "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"})
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000000))
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0205865, &(0x7f00000000c0)=ANY=[])
syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0xff8, 0x10100}, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(0x0, 0x327b, 0x220002)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$alg(0x26, 0x5, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x401, 0x1, 0x3, 0x1, 0x1}, 0x8)

2.146331727s ago: executing program 3 (id=1605):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socketpair(0x1, 0x6, 0x40, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x20, "42f4da8809fe2cdbcff4e37434ac8e7499929016d5169b5e5217432f9615"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x2}}}}, 0x390)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
setns(r9, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='xprtrdma_cb_setup\x00', r1}, 0x18)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="02", 0x29)

1.009336862s ago: executing program 3 (id=1606):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x800)

0s ago: executing program 3 (id=1607):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x5, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}}, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02)

kernel console output (not intermixed with test programs):

leasing backup interface
[  333.764188][   T12] bond0 (unregistering): Released all slaves
[  333.853593][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.898436][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.943639][ T8160] bridge_slave_0: entered allmulticast mode
[  333.966914][ T8160] bridge_slave_0: entered promiscuous mode
[  333.993244][   T12] hsr_slave_0: left promiscuous mode
[  333.999035][   T12] hsr_slave_1: left promiscuous mode
[  334.006358][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  334.020026][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.177315][ T8263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.490'.
[  335.605174][   T12] team0 (unregistering): Port device team_slave_1 removed
[  335.663915][   T12] team0 (unregistering): Port device team_slave_0 removed
[  336.177014][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.292714][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.325129][ T8160] bridge_slave_1: entered allmulticast mode
[  336.471971][ T8160] bridge_slave_1: entered promiscuous mode
[  337.737953][ T8160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.767367][ T8160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.235633][ T8160] team0: Port device team_slave_0 added
[  339.317262][ T8160] team0: Port device team_slave_1 added
[  339.780438][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.690234][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.720498][ T8160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.759983][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.779891][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.910027][ T8160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.834703][ T7879] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.228137][ T8160] hsr_slave_0: entered promiscuous mode
[  343.257558][ T8160] hsr_slave_1: entered promiscuous mode
[  343.275048][ T8160] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  343.295657][ T8160] Cannot create hsr debugfs directory
[  344.353908][ T7879] veth0_vlan: entered promiscuous mode
[  344.411184][ T7879] veth1_vlan: entered promiscuous mode
[  345.217653][ T7879] veth0_macvtap: entered promiscuous mode
[  345.436287][ T7879] veth1_macvtap: entered promiscuous mode
[  346.288717][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.320698][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.359962][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.389912][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.479093][ T8364] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  346.479462][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.650194][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.875355][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.070073][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.089471][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_0
[  347.129612][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.162820][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.172949][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.195889][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.239376][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.266732][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.310039][ T7879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.349933][ T7879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.398409][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_1
[  347.982584][ T7879] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.052654][ T7879] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.112229][ T8386] input: syz0 as /devices/virtual/input/input7
[  348.122640][ T7879] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.157025][ T7879] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.502787][ T8160] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  348.578876][ T8160] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  348.643992][ T8160] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  348.838843][ T6339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.839555][ T8160] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  348.877796][ T6339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.296032][ T8409] Cannot find set identified by id 0 to match
[  349.768465][ T8409] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  349.776460][ T8410] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  350.008161][ T5843] Bluetooth: hci5: command 0x0406 tx timeout
[  350.568556][ T7197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.577289][ T7197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.703949][ T8160] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.569200][ T5959] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.810206][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  352.819703][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  352.830513][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  352.840741][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  352.860261][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  352.894396][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  352.905345][ T8160] 8021q: adding VLAN 0 to HW filter on device team0
[  353.151723][ T5959] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.765504][ T5959] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.857126][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.864284][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.002277][ T5843] Bluetooth: hci2: command tx timeout
[  355.003941][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.015310][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.145367][ T8465] input: syz0 as /devices/virtual/input/input8
[  355.260297][ T5959] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.622748][ T8160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  355.672074][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  355.682034][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  355.690139][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  355.698587][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  355.710712][ T5839] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  355.720006][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  355.960763][ T5959] bridge_slave_1: left allmulticast mode
[  355.969957][ T5963] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  355.990102][ T5959] bridge_slave_1: left promiscuous mode
[  355.995878][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.040889][ T6066] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  356.113442][ T5959] bridge_slave_0: left allmulticast mode
[  356.119248][ T5959] bridge_slave_0: left promiscuous mode
[  356.129614][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.161827][ T5963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  356.179675][ T5963] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  356.202111][ T6066] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  356.211488][ T5963] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  356.229697][ T6066] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20
[  356.231781][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.251647][ T6066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.268660][ T5963] usb 1-1: config 0 descriptor??
[  356.278418][ T6066] usb 4-1: Product: syz
[  356.278687][ T5963] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  356.285993][ T6066] usb 4-1: Manufacturer: syz
[  356.315643][ T6066] usb 4-1: SerialNumber: syz
[  356.335974][ T6066] usb 4-1: config 0 descriptor??
[  356.361752][ T6066] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected
[  356.394924][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87
[  356.409169][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[  356.434412][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[  356.448187][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[  356.471536][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[  356.479430][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[  356.487345][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[  356.516699][ T6066] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  357.091024][ T5839] Bluetooth: hci2: command tx timeout
[  357.472640][ T5959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.601189][ T5959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.662436][ T5959] bond0 (unregistering): Released all slaves
[  357.774574][   T25] usb 4-1: USB disconnect, device number 4
[  357.800419][ T5839] Bluetooth: hci5: command tx timeout
[  357.844977][   T25] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  357.878222][   T25] keyspan 4-1:0.0: device disconnected
[  358.149557][ T8442] chnl_net:caif_netlink_parms(): no params data found
[  358.285501][ T5959] hsr_slave_0: left promiscuous mode
[  358.309298][ T5959] hsr_slave_1: left promiscuous mode
[  358.315718][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.324620][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.339704][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.353584][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.426062][ T5959] veth1_macvtap: left promiscuous mode
[  358.434740][ T5959] veth0_macvtap: left promiscuous mode
[  358.470061][ T5959] veth1_vlan: left promiscuous mode
[  358.475461][ T5959] veth0_vlan: left promiscuous mode
[  358.810648][ T5898] usb 1-1: USB disconnect, device number 18
[  359.467982][ T5839] Bluetooth: hci2: command tx timeout
[  359.904266][ T5839] Bluetooth: hci5: command tx timeout
[  360.242112][ T8515] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  361.220005][   T29] audit: type=1800 audit(1739639150.550:7): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.546" name="file0" dev="overlay" ino=20281 res=0 errno=0
[  361.471103][ T8517] netlink: 64 bytes leftover after parsing attributes in process `syz.3.550'.
[  361.480617][ T5839] Bluetooth: hci2: command tx timeout
[  361.831468][ T8523] 9pnet_fd: Insufficient options for proto=fd
[  361.979976][ T5839] Bluetooth: hci5: command tx timeout
[  364.442576][ T5839] Bluetooth: hci5: command tx timeout
[  364.905226][ T8545] Invalid ELF header type: 0 != 1
[  364.956720][   T29] audit: type=1107 audit(1739639155.170:8): pid=8540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='p?��v��&_q�	�<�,P�~1���wOB��i��Կ;̋��$e5��}rx�]X�f���?���G�iM�]4�0p���t֝���h`��~��
���Y��xeGǦ�<#u���-��]���\=G!�y-��
[  364.956720][   T29] h�'��d������A)�ׂ�s�7���y	��>|�3We�|���ܥ#1�z�_R�?='
[  365.591994][ T8547] No such timeout policy "syz1"
[  367.111777][   T29] audit: type=1326 audit(1739639157.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  367.939865][   T29] audit: type=1326 audit(1739639157.340:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  367.986623][   T29] audit: type=1326 audit(1739639157.340:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  368.009659][   T29] audit: type=1326 audit(1739639157.340:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  368.040882][   T29] audit: type=1326 audit(1739639157.340:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  368.091235][ T8563] netlink: 64 bytes leftover after parsing attributes in process `syz.1.562'.
[  368.110946][   T29] audit: type=1326 audit(1739639157.340:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  368.134491][   T29] audit: type=1326 audit(1739639157.340:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  368.160619][   T29] audit: type=1326 audit(1739639157.340:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  368.190607][   T29] audit: type=1326 audit(1739639157.340:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  368.407021][   T29] audit: type=1326 audit(1739639157.340:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  369.009416][ T5959] team0 (unregistering): Port device team_slave_0 removed
[  369.162341][ T8575] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  371.022312][ T8581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.565'.
[  372.307872][ T8575] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  372.448273][ T8575] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  372.452702][ T8160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.817825][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.840356][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.859319][ T8442] bridge_slave_0: entered allmulticast mode
[  372.871415][ T8442] bridge_slave_0: entered promiscuous mode
[  373.002341][ T8575] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  373.012236][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.063926][ T8575] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  373.077031][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.109034][ T8442] bridge_slave_1: entered allmulticast mode
[  373.121961][ T8575] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  373.127930][ T8575] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  373.148916][ T8442] bridge_slave_1: entered promiscuous mode
[  373.395542][ T8442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  373.408618][ T8160] veth0_vlan: entered promiscuous mode
[  373.422070][ T8160] veth1_vlan: entered promiscuous mode
[  373.460190][ T8442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  373.570818][ T8442] team0: Port device team_slave_0 added
[  373.583733][ T8469] chnl_net:caif_netlink_parms(): no params data found
[  373.640667][  T872] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  373.656125][ T8442] team0: Port device team_slave_1 added
[  373.700060][ T5913] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  373.740921][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_0
[  373.747930][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.778861][ T8442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  373.798595][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_1
[  373.806408][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.834213][ T8442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.856360][ T8606] vlan2: entered promiscuous mode
[  373.862037][  T872] usb 1-1: Using ep0 maxpacket: 8
[  373.882256][ T5913] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  373.894746][  T872] usb 1-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  373.917041][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.929948][  T872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.941880][ T5913] usb 4-1: config 0 descriptor??
[  373.946912][  T872] usb 1-1: Product: syz
[  373.954268][  T872] usb 1-1: Manufacturer: syz
[  373.962971][ T5913] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  373.970244][  T872] usb 1-1: SerialNumber: syz
[  373.978024][  T872] usb 1-1: config 0 descriptor??
[  373.989080][  T872] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  374.012927][  T872] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9
[  374.233464][ T8160] veth0_macvtap: entered promiscuous mode
[  374.280546][ T8160] veth1_macvtap: entered promiscuous mode
[  374.434987][ T8612] netlink: 64 bytes leftover after parsing attributes in process `syz.1.576'.
[  374.485401][ T1092] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.563151][ T8442] hsr_slave_0: entered promiscuous mode
[  374.575851][ T8442] hsr_slave_1: entered promiscuous mode
[  374.662378][ T1092] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.700277][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.722952][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.735799][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.747833][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.758439][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.769905][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.780489][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.800205][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.819196][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.992720][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.000270][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.007545][ T8469] bridge_slave_0: entered allmulticast mode
[  375.015015][ T8469] bridge_slave_0: entered promiscuous mode
[  375.063921][ T1092] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.103246][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.128587][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.309819][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.320819][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.331252][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.342199][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.352637][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.363966][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.375816][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.392429][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.403040][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.419601][ T8469] bridge_slave_1: entered allmulticast mode
[  375.429727][ T8469] bridge_slave_1: entered promiscuous mode
[  375.477143][ T1092] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.595423][ T8160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.606499][ T8160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.618708][ T8160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.637288][ T8160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.673447][ T5913] gspca_stv06xx: I2C: Read error writing address: -71
[  375.688397][ T5913] usb 4-1: USB disconnect, device number 5
[  375.723174][ T8469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.784790][ T8469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.920643][ T8469] team0: Port device team_slave_0 added
[  375.937938][ T8469] team0: Port device team_slave_1 added
[  376.030667][ T1092] bridge_slave_1: left allmulticast mode
[  376.052916][ T1092] bridge_slave_1: left promiscuous mode
[  376.076736][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.092924][ T1092] bridge_slave_0: left allmulticast mode
[  376.101158][ T8618] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  376.106563][ T1092] bridge_slave_0: left promiscuous mode
[  376.118452][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.144288][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  376.144305][   T29] audit: type=1800 audit(1739639166.380:21): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.578" name="file0" dev="overlay" ino=20281 res=0 errno=0
[  376.614643][    T8] usb 1-1: USB disconnect, device number 19
[  378.245535][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  381.105788][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  381.331101][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  381.371878][ T1092] bond0 (unregistering): Released all slaves
[  382.276764][ T8660] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  382.340295][ T8660] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  382.349129][ T8660] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  382.400073][ T8660] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  382.439992][ T8660] geneve2: entered promiscuous mode
[  382.469944][ T8660] geneve2: entered allmulticast mode
[  382.551713][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.558717][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.609954][ T8469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.631786][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  382.642493][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.649481][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.685481][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  382.693203][ T8469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.704189][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  382.712763][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  382.720560][ T5843] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  382.728139][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  382.760566][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  382.773070][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  382.782763][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  382.841488][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  382.851890][ T5839] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  382.863561][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  383.554396][ T8469] hsr_slave_0: entered promiscuous mode
[  383.574199][ T8469] hsr_slave_1: entered promiscuous mode
[  383.588834][ T8469] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  383.600318][ T8469] Cannot create hsr debugfs directory
[  383.686189][ T1092] hsr_slave_0: left promiscuous mode
[  383.703067][ T1092] hsr_slave_1: left promiscuous mode
[  383.729536][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  383.750770][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0
[  383.773327][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  383.810033][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1
[  383.869425][ T1092] veth1_macvtap: left promiscuous mode
[  383.900054][ T1092] veth0_macvtap: left promiscuous mode
[  383.908038][ T1092] veth1_vlan: left promiscuous mode
[  383.936382][ T1092] veth0_vlan: left promiscuous mode
[  384.928875][ T5843] Bluetooth: hci6: command tx timeout
[  385.559050][ T1092] team0 (unregistering): Port device team_slave_1 removed
[  386.299361][ T1092] team0 (unregistering): Port device team_slave_0 removed
[  387.001322][ T5843] Bluetooth: hci6: command tx timeout
[  387.825827][ T8692] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input10
[  389.286310][ T5843] Bluetooth: hci6: command tx timeout
[  391.319986][ T5843] Bluetooth: hci6: command tx timeout
[  395.261383][ T8442] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  395.330840][ T8442] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  395.355270][ T8662] chnl_net:caif_netlink_parms(): no params data found
[  395.478765][ T1092] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.573249][ T8442] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  396.851757][ T1092] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.921967][ T8442] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  397.128984][ T1092] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.173492][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.205377][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.249062][ T8662] bridge_slave_0: entered allmulticast mode
[  397.280389][ T8662] bridge_slave_0: entered promiscuous mode
[  397.323776][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.354769][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.388701][ T8662] bridge_slave_1: entered allmulticast mode
[  397.421540][ T8662] bridge_slave_1: entered promiscuous mode
[  397.571006][ T1092] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.714644][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.754291][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.926047][ T8662] team0: Port device team_slave_0 added
[  397.967553][ T8662] team0: Port device team_slave_1 added
[  398.170392][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.177393][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.398025][ T8662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.301170][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_1
[  399.308179][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.335575][ T8662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.498920][ T1092] bridge_slave_1: left allmulticast mode
[  399.511907][ T1092] bridge_slave_1: left promiscuous mode
[  399.538290][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.612272][ T1092] bridge_slave_0: left allmulticast mode
[  399.618007][ T1092] bridge_slave_0: left promiscuous mode
[  399.671013][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.162004][  T872] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  400.351677][  T872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  400.782448][  T872] usb 1-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20
[  400.883899][  T872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.912250][  T872] usb 1-1: Product: syz
[  400.917058][  T872] usb 1-1: Manufacturer: syz
[  400.931959][  T872] usb 1-1: SerialNumber: syz
[  400.950635][  T872] usb 1-1: config 0 descriptor??
[  400.980453][  T872] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected
[  400.988017][  T872] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87
[  401.005538][  T872] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7
[  401.038512][  T872] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[  401.054748][  T872] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  401.070387][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  401.089229][  T872] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  401.106867][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  401.146482][ T1092] bond0 (unregistering): Released all slaves
[  401.155006][  T872] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85
[  401.185556][  T872] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5
[  401.242915][ T8469] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  401.258207][  T872] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  401.469671][ T8662] hsr_slave_0: entered promiscuous mode
[  401.512261][ T8662] hsr_slave_1: entered promiscuous mode
[  401.541165][ T8662] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  401.548927][ T8662] Cannot create hsr debugfs directory
[  401.555450][ T8469] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  401.572850][ T8469] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  401.619498][ T1092] hsr_slave_0: left promiscuous mode
[  401.656431][   T25] usb 1-1: USB disconnect, device number 20
[  401.672121][   T25] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  401.699947][ T1092] hsr_slave_1: left promiscuous mode
[  401.718671][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  401.728587][   T25] keyspan 1-1:0.0: device disconnected
[  401.751103][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0
[  401.800827][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  401.808307][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1
[  401.867314][ T1092] veth1_macvtap: left promiscuous mode
[  401.886126][ T1092] veth0_macvtap: left promiscuous mode
[  401.896320][ T1092] veth1_vlan: left promiscuous mode
[  401.923927][ T1092] veth0_vlan: left promiscuous mode
[  403.059645][ T1092] team0 (unregistering): Port device team_slave_1 removed
[  403.143192][ T1092] team0 (unregistering): Port device team_slave_0 removed
[  403.358247][ T8794] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  404.413899][ T8469] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  404.908784][ T8442] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.762696][ T8442] 8021q: adding VLAN 0 to HW filter on device team0
[  405.877841][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.885067][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.963694][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.971093][ T6486] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.230891][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.504394][ T8469] 8021q: adding VLAN 0 to HW filter on device team0
[  406.573815][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.581019][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  406.759202][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.766413][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.613744][ T8662] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  407.706240][ T8662] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  407.816014][ T8662] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  408.146070][ T8662] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  408.616552][ T8442] 8021q: adding VLAN 0 to HW filter on device batadv0
[  408.961977][ T8662] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.038467][ T8662] 8021q: adding VLAN 0 to HW filter on device team0
[  409.102396][  T985] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.109565][  T985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.186204][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.193385][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.105482][ T8469] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.152060][ T8662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  410.480391][ T8865] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  410.632595][ T8442] veth0_vlan: entered promiscuous mode
[  410.705834][ T8442] veth1_vlan: entered promiscuous mode
[  411.347302][ T8442] veth0_macvtap: entered promiscuous mode
[  411.652451][ T8662] 8021q: adding VLAN 0 to HW filter on device batadv0
[  412.047710][ T8662] veth0_vlan: entered promiscuous mode
[  412.133203][ T8662] veth1_vlan: entered promiscuous mode
[  412.244911][ T8469] veth0_vlan: entered promiscuous mode
[  412.320907][ T8469] veth1_vlan: entered promiscuous mode
[  412.493046][ T8469] veth0_macvtap: entered promiscuous mode
[  412.522665][ T8662] veth0_macvtap: entered promiscuous mode
[  412.603715][ T8662] veth1_macvtap: entered promiscuous mode
[  412.637847][ T8469] veth1_macvtap: entered promiscuous mode
[  412.731645][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.808498][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.860006][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.899093][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.945519][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.988664][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.039614][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_0
[  413.101773][ T8914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  413.143820][ T8914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  413.164080][ T8914] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  413.179072][ T8914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  413.187713][ T8914] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  413.195226][ T8914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  413.319954][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.358684][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.400127][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.444549][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.489840][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.515334][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.574175][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_1
[  413.833507][ T8662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.889952][ T8662] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.898724][ T8662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.979803][ T8662] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.363245][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  414.373478][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  414.381900][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  414.390268][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  414.397940][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  414.405522][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  415.094969][ T6339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.150444][ T6339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.236095][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'.
[  415.248160][ T8914] Bluetooth: hci1: command tx timeout
[  415.305306][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.382343][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.249957][ T8914] Bluetooth: hci2: command tx timeout
[  417.320350][ T8914] Bluetooth: hci1: command tx timeout
[  417.323150][ T8913] chnl_net:caif_netlink_parms(): no params data found
[  417.394391][  T985] bridge_slave_1: left allmulticast mode
[  417.415355][  T985] bridge_slave_1: left promiscuous mode
[  417.434971][  T985] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.447302][ T8953] loop7: detected capacity change from 0 to 16384
[  417.480397][ T8948] loop7: detected capacity change from 16384 to 16383
[  417.497921][  T985] bridge_slave_0: left allmulticast mode
[  417.509994][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  417.519839][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read
[  417.525519][  T985] bridge_slave_0: left promiscuous mode
[  417.529406][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  417.551408][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read
[  417.552710][  T985] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.572406][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  417.587348][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read
[  417.655318][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  418.239405][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read
[  418.263120][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  418.279099][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read
[  418.298617][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  418.325566][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read
[  418.363761][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  418.373355][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read
[  418.383869][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  418.395836][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read
[  418.416682][ T8948] ldm_validate_partition_table(): Disk read failed.
[  418.445486][ T8964] openvswitch: netlink: nsh attribute has 65524 unknown bytes.
[  418.446842][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  418.453158][ T8964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.463164][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read
[  418.518438][ T8948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  418.530098][ T8948] Buffer I/O error on dev loop7, logical block 0, async page read
[  418.587220][ T8948] Dev loop7: unable to read RDB block 0
[  418.617873][ T8948]  loop7: unable to read partition table
[  418.713169][ T8948] loop_reread_partitions: partition scan of loop7 (R%0���T�$7�)]W����?�18��;9��C?��-��z׌����	������97d���) failed (rc=-5)
[  419.360076][ T8914] Bluetooth: hci2: command tx timeout
[  419.399933][ T8914] Bluetooth: hci1: command tx timeout
[  419.445798][ T8976] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  420.099067][  T985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  420.141878][  T985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  420.169037][  T985] bond0 (unregistering): Released all slaves
[  420.246020][ T8976] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  420.272832][ T8976] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  421.158991][  T985] hsr_slave_0: left promiscuous mode
[  421.178110][ T8976] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  421.184544][ T8976] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  421.194251][  T985] hsr_slave_1: left promiscuous mode
[  421.214250][  T985] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.244478][  T985] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.411664][  T985] veth0_macvtap: left promiscuous mode
[  421.417303][ T8914] Bluetooth: hci2: command tx timeout
[  421.430827][ T8976] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  421.437056][  T985] veth1_vlan: left promiscuous mode
[  421.440284][ T8976] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  421.447106][  T985] veth0_vlan: left promiscuous mode
[  422.621151][ T8997] Illegal XDP return value 4294967262 on prog  (id 92) dev N/A, expect packet loss!
[  423.532676][ T9004] befs: (nullb0): No write support. Marking filesystem read-only
[  423.545784][ T9004] befs: (nullb0): invalid magic header
[  425.484380][ T9015] overlayfs: missing 'lowerdir'
[  426.512798][  T985] team0 (unregistering): Port device team_slave_1 removed
[  426.602337][  T985] team0 (unregistering): Port device team_slave_0 removed
[  427.364099][ T9028] openvswitch: netlink: nsh attribute has 65524 unknown bytes.
[  427.373001][ T9028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.600056][ T8913] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.607274][ T8913] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.775288][ T8913] bridge_slave_0: entered allmulticast mode
[  430.743654][ T8913] bridge_slave_0: entered promiscuous mode
[  430.772151][ T8913] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.779645][ T8913] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.867005][ T9057] Invalid ELF header type: 0 != 1
[  430.909911][   T29] audit: type=1107 audit(1739639221.110:22): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='p?��v��&_q�	�<�,P�~1���wOB��i��Կ;̋��$e5��}rx�]X�f���?���G�iM�]4�0p���t֝���h`��~��
���Y��xeGǦ�<#u���-��]���\=G!�y-��
[  430.909911][   T29] h�'��d������A)�ׂ�s�7���y	��>|�3We�|���ܥ#1�z�_R�?='
[  430.960134][ T8913] bridge_slave_1: entered allmulticast mode
[  431.480734][ T8913] bridge_slave_1: entered promiscuous mode
[  431.902892][ T8913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.971037][ T8924] chnl_net:caif_netlink_parms(): no params data found
[  432.582160][ T8913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.826140][ T9091] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  432.851982][ T9093] ip6t_REJECT: ECHOREPLY is not supported
[  433.009129][ T8913] team0: Port device team_slave_0 added
[  433.127888][ T8913] team0: Port device team_slave_1 added
[  434.163063][ T8924] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.180911][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.220300][ T8924] bridge_slave_0: entered allmulticast mode
[  434.230793][ T8924] bridge_slave_0: entered promiscuous mode
[  434.251570][ T8924] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.390611][ T9114] openvswitch: netlink: nsh attribute has 65524 unknown bytes.
[  434.398713][ T9114] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.420933][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.435606][ T8924] bridge_slave_1: entered allmulticast mode
[  434.793971][ T8924] bridge_slave_1: entered promiscuous mode
[  434.838073][ T9113] Invalid ELF header type: 0 != 1
[  435.644349][   T29] audit: type=1107 audit(1739639225.080:23): pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='p?��v��&_q�	�<�,P�~1���wOB��i��Կ;̋��$e5��}rx�]X�f���?���G�iM�]4�0p���t֝���h`��~��
���Y��xeGǦ�<#u���-��]���\=G!�y-��
[  435.644349][   T29] h�'��d������A)�ׂ�s�7���y	��>|�3We�|���ܥ#1�z�_R�?='
[  435.910873][ T8913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  435.918049][ T8913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.019855][ T8913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.194406][ T8924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.261230][ T8913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.268621][ T8913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.429941][ T8913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.492175][ T8924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.884594][ T8913] hsr_slave_0: entered promiscuous mode
[  436.916826][ T8913] hsr_slave_1: entered promiscuous mode
[  437.092045][ T8924] team0: Port device team_slave_0 added
[  437.124158][ T8924] team0: Port device team_slave_1 added
[  437.952523][ T9155] ip6t_REJECT: ECHOREPLY is not supported
[  438.089402][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_0
[  438.110626][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.184989][ T8924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.228248][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.258952][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.349814][ T8924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  438.449630][ T9170] Invalid ELF header type: 0 != 1
[  438.501858][   T29] audit: type=1107 audit(1739639228.690:24): pid=9168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='p?��v��&_q�	�<�,P�~1���wOB��i��Կ;̋��$e5��}rx�]X�f���?���G�iM�]4�0p���t֝���h`��~��
���Y��xeGǦ�<#u���-��]���\=G!�y-��
[  438.501858][   T29] h�'��d������A)�ׂ�s�7���y	��>|�3We�|���ܥ#1�z�_R�?='
[  439.665249][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  440.056769][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'.
[  440.402032][ T6066] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  440.696680][ T8924] hsr_slave_0: entered promiscuous mode
[  440.856094][ T8924] hsr_slave_1: entered promiscuous mode
[  440.890096][ T9192] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  440.899881][ T8924] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  440.923429][ T6066] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  440.945102][ T8924] Cannot create hsr debugfs directory
[  440.976062][ T9187] 8021q: adding VLAN 0 to HW filter on device batadv1
[  440.989871][ T6066] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024
[  441.000850][ T9187] bridge0: port 3(batadv1) entered blocking state
[  441.064381][ T9187] bridge0: port 3(batadv1) entered disabled state
[  441.079324][ T6066] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  441.091520][ T9187] batadv1: entered allmulticast mode
[  441.110341][ T6066] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  441.120909][ T6066] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  441.130753][ T9187] batadv1: entered promiscuous mode
[  441.136111][ T6066] usb 2-1: Product: syz
[  441.149355][ T6066] usb 2-1: Manufacturer: syz
[  441.158129][ T9187] bridge0: port 3(batadv1) entered blocking state
[  441.164742][ T9187] bridge0: port 3(batadv1) entered forwarding state
[  441.172726][ T6066] usb 2-1: SerialNumber: syz
[  441.188760][ T6066] cdc_mbim 2-1:1.0: skipping garbage
[  441.402933][ T9186] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  441.535757][   T80] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  441.545336][   T80] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  441.809877][ T5913] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  441.943119][  T985] bridge_slave_1: left allmulticast mode
[  441.969265][  T985] bridge_slave_1: left promiscuous mode
[  442.018799][  T985] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.032049][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short
[  442.043407][ T6066] cdc_mbim 2-1:1.0: bind() failure
[  442.063498][ T5913] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  442.071829][ T6066] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  442.079331][ T5913] usb 3-1: config 1 has no interface number 1
[  442.095811][  T985] bridge_slave_0: left allmulticast mode
[  442.099806][ T5913] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  442.114426][ T6066] cdc_ncm 2-1:1.1: bind() failure
[  442.122150][  T985] bridge_slave_0: left promiscuous mode
[  442.127962][  T985] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.137730][ T5913] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  442.149921][ T6066] usb 2-1: USB disconnect, device number 3
[  442.151107][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.729578][ T5913] usb 3-1: Product: syz
[  442.749964][ T5913] usb 3-1: Manufacturer: syz
[  442.761918][ T5913] usb 3-1: SerialNumber: syz
[  443.467576][ T5913] usb 3-1: found format II with max.bitrate = 26774, frame size=1
[  443.529651][ T5913] usb 3-1: found format II with max.bitrate = 26774, frame size=1
[  443.587930][ T5913] usb 3-1: failed to enable PITCH for EP 0x82
[  444.237764][ T5913] usb 3-1: USB disconnect, device number 6
[  444.611236][  T985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.639494][  T985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.673023][  T985] bond0 (unregistering): Released all slaves
[  444.913059][  T985] hsr_slave_0: left promiscuous mode
[  444.926757][  T985] hsr_slave_1: left promiscuous mode
[  444.935485][  T985] batman_adv: batadv0: Removing interface: batadv_slave_0
[  444.971860][  T985] batman_adv: batadv0: Removing interface: batadv_slave_1
[  444.980019][ T5913] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  445.023439][  T985] veth1_macvtap: left promiscuous mode
[  445.029117][  T985] veth0_macvtap: left promiscuous mode
[  445.080555][  T985] veth1_vlan: left promiscuous mode
[  445.089513][  T985] veth0_vlan: left promiscuous mode
[  445.168677][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  445.228548][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.265100][ T5913] usb 3-1: config 0 descriptor??
[  445.322778][ T5913] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  447.182979][   T29] audit: type=1326 audit(1739639237.420:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  447.211277][   T29] audit: type=1326 audit(1739639237.420:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  447.238891][   T29] audit: type=1326 audit(1739639237.420:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  447.322975][ T5913] gspca_stv06xx: I2C: Read error writing address: -71
[  447.376141][ T5913] usb 3-1: USB disconnect, device number 7
[  447.440705][ T6066] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  447.515912][  T985] team0 (unregistering): Port device team_slave_1 removed
[  447.564708][  T985] team0 (unregistering): Port device team_slave_0 removed
[  447.609929][ T6066] usb 4-1: Using ep0 maxpacket: 16
[  447.630716][ T6066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.650387][ T6066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.669077][ T6066] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  447.687837][ T6066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.712772][ T6066] usb 4-1: config 0 descriptor??
[  448.503793][ T6066] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0
[  448.726595][ T6066] corsair 0003:1B1C:1B02.0001: Failed to get K90 initial state (error -71).
[  448.940213][ T6066] usb 4-1: USB disconnect, device number 6
[  449.969575][ T9311] netlink: 11 bytes leftover after parsing attributes in process `syz.1.740'.
[  453.392093][ T8913] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  454.446403][ T8913] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  454.469994][  T872] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  454.656353][ T8913] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  454.757299][  T872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  454.772520][ T8913] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  454.830147][  T872] usb 2-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20
[  454.860025][  T872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.916356][  T872] usb 2-1: Product: syz
[  454.940062][  T872] usb 2-1: Manufacturer: syz
[  454.960653][  T872] usb 2-1: SerialNumber: syz
[  455.027604][  T872] usb 2-1: config 0 descriptor??
[  455.072781][  T872] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected
[  455.131182][  T872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87
[  455.138944][  T872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7
[  455.213693][  T872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  455.305993][  T872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  455.390119][  T872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  455.436868][  T872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85
[  455.480260][  T872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5
[  455.578529][  T872] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  455.889513][  T872] usb 2-1: USB disconnect, device number 4
[  455.918382][  T872] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  456.108243][  T872] keyspan 2-1:0.0: device disconnected
[  456.118103][ T9380] netlink: 11 bytes leftover after parsing attributes in process `syz.2.753'.
[  456.602646][ T8913] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.667399][ T8924] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  456.707880][ T8924] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  456.823224][ T8924] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  456.888275][ T8924] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  457.053860][ T8913] 8021q: adding VLAN 0 to HW filter on device team0
[  457.078162][ T9388] befs: (nullb0): No write support. Marking filesystem read-only
[  457.086437][ T9388] befs: (nullb0): invalid magic header
[  457.210996][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.218139][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  457.244590][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.251775][ T5959] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.143244][ T8924] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.280958][ T8924] 8021q: adding VLAN 0 to HW filter on device team0
[  458.353968][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.361211][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.851261][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.858507][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[  459.258075][ T8913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  460.612514][ T8924] 8021q: adding VLAN 0 to HW filter on device batadv0
[  461.249651][ T8913] veth0_vlan: entered promiscuous mode
[  461.324772][ T8913] veth1_vlan: entered promiscuous mode
[  461.465924][ T8913] veth0_macvtap: entered promiscuous mode
[  461.564721][ T8913] veth1_macvtap: entered promiscuous mode
[  461.598675][ T8924] veth0_vlan: entered promiscuous mode
[  461.652937][ T8924] veth1_vlan: entered promiscuous mode
[  461.740815][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.779486][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.809998][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.843025][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.865340][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.889783][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.920127][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.939814][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.961875][ T8913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  461.988029][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.991806][ T9466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.770'.
[  462.008902][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.038632][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  462.062338][ T9466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.770'.
[  462.069810][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.110832][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  462.134693][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.144988][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  462.159945][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.173016][ T8913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  462.225374][ T9473] ip6t_REJECT: ECHOREPLY is not supported
[  462.727088][ T8913] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.777509][ T8913] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.843804][ T8913] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.030200][ T8913] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.487029][ T8924] veth0_macvtap: entered promiscuous mode
[  463.536869][ T8924] veth1_macvtap: entered promiscuous mode
[  464.351632][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.421344][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.469454][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.496650][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.525764][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.557213][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.589872][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.626021][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.663379][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.707175][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.718592][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_0
[  464.817813][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.856314][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.900523][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.918648][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.929702][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.942689][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.957635][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.978956][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.010789][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.053229][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.101251][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_1
[  465.138453][ T9514] vlan2: entered promiscuous mode
[  465.145203][ T6486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.167801][ T6486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.246409][ T8924] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.283280][ T8924] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.346145][ T8924] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.365558][ T8924] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.496652][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.526152][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.708016][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.739400][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.864182][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.893028][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.987350][ T9537] ip6t_REJECT: ECHOREPLY is not supported
[  468.101300][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'.
[  468.206352][ T9559] 8021q: adding VLAN 0 to HW filter on device batadv2
[  468.369037][ T9565] overlayfs: missing 'lowerdir'
[  468.965829][ T9559] bridge0: port 4(batadv2) entered blocking state
[  469.036511][ T9559] bridge0: port 4(batadv2) entered disabled state
[  469.059954][ T9559] batadv2: entered allmulticast mode
[  469.098805][ T9559] batadv2: entered promiscuous mode
[  469.137666][ T9559] bridge0: port 4(batadv2) entered blocking state
[  469.144269][ T9559] bridge0: port 4(batadv2) entered forwarding state
[  469.841452][   T52] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  469.850849][   T52] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  471.342529][ T9592] netlink: 11 bytes leftover after parsing attributes in process `syz.0.794'.
[  472.451251][ T6066] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  473.246429][ T6066] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  473.296263][ T6066] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20
[  473.315847][ T6066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.344430][ T6066] usb 4-1: Product: syz
[  473.369208][ T6066] usb 4-1: Manufacturer: syz
[  473.374129][ T6066] usb 4-1: SerialNumber: syz
[  473.423476][ T6066] usb 4-1: config 0 descriptor??
[  473.535750][ T6066] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected
[  473.603595][ T9615] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  473.613217][ T9615] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  473.661642][ T9616] bpf: Bad value for 'gid'
[  473.671467][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87
[  474.320980][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[  474.813290][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[  474.849510][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[  474.867481][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[  474.875506][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[  474.883703][ T6066] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[  474.892994][ T6066] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  474.967807][ T6066] usb 4-1: USB disconnect, device number 7
[  474.991116][ T9622] fuse: Bad value for 'fd'
[  475.028085][ T6066] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  475.089156][ T6066] keyspan 4-1:0.0: device disconnected
[  475.800137][ T5895] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  475.939954][ T5895] usb 1-1: device descriptor read/64, error -71
[  476.729894][ T5895] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  477.506167][ T5895] usb 1-1: device descriptor read/64, error -71
[  477.735076][ T5895] usb usb1-port1: attempt power cycle
[  478.353004][ T9659] netlink: 11 bytes leftover after parsing attributes in process `syz.3.810'.
[  478.490336][ T5895] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  478.760953][ T5895] usb 1-1: device not accepting address 23, error -71
[  479.664942][ T9675] overlayfs: missing 'lowerdir'
[  479.722027][ T9676] bpf: Bad value for 'gid'
[  480.803856][ T9681] openvswitch: netlink: nsh attribute has 65524 unknown bytes.
[  480.811886][ T9681] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  481.697276][ T9690] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  481.726493][ T9690] serio: Serial port ptm0
[  483.039344][ T9702] befs: (nullb0): No write support. Marking filesystem read-only
[  483.059258][ T9702] befs: (nullb0): invalid magic header
[  484.915030][ T9724] netlink: 11 bytes leftover after parsing attributes in process `syz.7.827'.
[  488.049096][ T9756] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  494.950024][ T6066] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  495.134962][ T6066] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  495.198411][ T6066] usb 2-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20
[  495.233590][ T6066] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.275104][ T6066] usb 2-1: Product: syz
[  495.279471][ T6066] usb 2-1: Manufacturer: syz
[  495.325797][ T6066] usb 2-1: SerialNumber: syz
[  495.348814][ T6066] usb 2-1: config 0 descriptor??
[  495.388319][ T6066] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected
[  495.412525][ T6066] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87
[  495.499889][ T6066] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7
[  495.541977][ T6066] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  495.589473][ T6066] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  495.646137][ T6066] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  495.672220][ T6066] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85
[  495.726199][ T6066] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5
[  495.775362][ T6066] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  495.931017][ T5895] usb 2-1: USB disconnect, device number 5
[  496.133721][ T5895] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  496.338079][ T5895] keyspan 2-1:0.0: device disconnected
[  501.375703][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  501.830767][ T9916] openvswitch: netlink: nsh attribute has 65524 unknown bytes.
[  501.838456][ T9916] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  502.319905][  T833] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  502.562404][  T833] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  502.582913][  T833] usb 1-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20
[  502.594307][  T833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.611518][  T833] usb 1-1: Product: syz
[  502.621237][  T833] usb 1-1: Manufacturer: syz
[  502.634981][  T833] usb 1-1: SerialNumber: syz
[  502.722835][  T833] usb 1-1: config 0 descriptor??
[  502.738424][  T833] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected
[  502.747247][  T833] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87
[  502.765588][  T833] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7
[  503.034998][  T833] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[  503.109425][  T833] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  503.125150][  T833] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  503.216395][  T833] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85
[  503.230097][  T833] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5
[  503.580288][  T833] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  503.823833][ T5913] usb 1-1: USB disconnect, device number 25
[  503.861349][ T5913] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  503.906894][ T5913] keyspan 1-1:0.0: device disconnected
[  506.035589][ T9971] openvswitch: netlink: nsh attribute has 65524 unknown bytes.
[  506.043387][ T9971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  511.900664][T10049] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  515.434673][T10097] loop7: detected capacity change from 0 to 512
[  515.520063][T10097] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  515.586443][T10097] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  517.040466][T10097] EXT4-fs (loop7): 1 truncate cleaned up
[  517.141002][T10097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.935524][ T5900] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  518.036522][ T8913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.091402][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.110638][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  518.163841][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  518.243324][ T5900] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  518.320969][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.372564][ T5900] usb 2-1: config 0 descriptor??
[  519.828136][ T5900] usbhid 2-1:0.0: can't add hid device: -71
[  519.836092][ T5900] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  519.866266][ T5900] usb 2-1: USB disconnect, device number 6
[  522.906529][T10190] befs: (nullb0): No write support. Marking filesystem read-only
[  522.918639][T10190] befs: (nullb0): invalid magic header
[  526.634089][T10229] loop6: detected capacity change from 0 to 32768
[  526.641300][T10229] =======================================================
[  526.641300][T10229] WARNING: The mand mount option has been deprecated and
[  526.641300][T10229]          and is ignored by this kernel. Remove the mand
[  526.641300][T10229]          option from the mount to silence this warning.
[  526.641300][T10229] =======================================================
[  527.994984][T10229] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  528.186569][T10229] XFS (loop6): Ending clean mount
[  528.198732][T10229] XFS (loop6): Quotacheck needed: Please wait.
[  528.323759][T10229] XFS (loop6): Quotacheck: Done.
[  528.630117][ T8924] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  529.850546][T10266] input: syz0 as /devices/virtual/input/input12
[  530.327585][T10251] evm: overlay not supported
[  530.371211][   T29] audit: type=1800 audit(1739639320.560:28): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.956" name="file1" dev="overlay" ino=932 res=0 errno=0
[  533.681731][T10320] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  537.090130][ T5838] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  537.264523][ T5838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.344536][ T5838] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20
[  537.368961][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.388807][ T5838] usb 4-1: Product: syz
[  537.414335][ T5838] usb 4-1: Manufacturer: syz
[  537.418982][ T5838] usb 4-1: SerialNumber: syz
[  537.456706][ T5838] usb 4-1: config 0 descriptor??
[  537.494367][ T5838] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected
[  537.551901][ T5838] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87
[  537.595461][ T5838] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[  537.650607][ T5838] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[  537.712829][ T5838] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[  537.759891][ T5838] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[  537.767974][ T5838] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[  537.863620][ T5838] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[  537.896386][ T5838] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  538.650569][ T5900] usb 4-1: USB disconnect, device number 8
[  538.681999][ T5900] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  538.750575][ T5900] keyspan 4-1:0.0: device disconnected
[  542.268332][ T9500] udevd[9500]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory
[  542.343327][T10418] bridge0: port 3(syz_tun) entered blocking state
[  542.367824][T10418] bridge0: port 3(syz_tun) entered disabled state
[  542.832643][T10418] syz_tun: entered allmulticast mode
[  542.961366][T10418] syz_tun: entered promiscuous mode
[  542.968828][T10418] bridge0: port 3(syz_tun) entered blocking state
[  542.975750][T10418] bridge0: port 3(syz_tun) entered forwarding state
[  543.141546][T10418] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  543.330510][T10418] syz.6.1002 (10418) used greatest stack depth: 16568 bytes left
[  543.649524][T10442] SET target dimension over the limit!
[  547.922874][ T5900] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  548.130748][ T5900] usb 4-1: Using ep0 maxpacket: 16
[  548.157237][ T5900] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  548.173518][ T5900] usb 4-1: config 0 has no interface number 0
[  548.187376][ T5900] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  548.194382][T10499] Cannot find add_set index 0 as target
[  548.242481][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.273241][ T5900] usb 4-1: Product: syz
[  548.292063][ T5900] usb 4-1: Manufacturer: syz
[  548.309798][ T5900] usb 4-1: SerialNumber: syz
[  548.324446][ T5900] usb 4-1: config 0 descriptor??
[  548.555697][ T5900] hub 4-1:0.1: bad descriptor, ignoring hub
[  548.595015][ T5900] hub 4-1:0.1: probe with driver hub failed with error -5
[  549.380512][ T5900] usb 4-1: selecting invalid altsetting 1
[  549.386317][ T5900] snd-usb-us122l 4-1:0.1: usb_set_interface error
[  549.428901][ T5900] snd-usb-us122l 4-1:0.1: probe with driver snd-usb-us122l failed with error -22
[  549.511397][ T5900] usb 4-1: USB disconnect, device number 9
[  552.500176][  T833] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  552.983677][  T833] usb 4-1: Using ep0 maxpacket: 8
[  553.078092][T10555] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  553.762350][  T833] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  553.779772][  T833] usb 4-1: config 179 has no interface number 0
[  553.786165][  T833] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  553.801529][  T833] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  553.813657][  T833] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  553.833623][  T833] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  553.855038][  T833] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  554.079744][  T833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.096082][T10546] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  555.030020][   T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  555.297874][   T25] usb 3-1: Using ep0 maxpacket: 16
[  555.698810][   T25] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  555.735428][   T25] usb 3-1: config 0 has no interface number 0
[  555.770069][   T25] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  555.805327][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.837267][   T25] usb 3-1: Product: syz
[  555.854140][   T25] usb 3-1: Manufacturer: syz
[  555.875302][   T25] usb 3-1: SerialNumber: syz
[  555.926850][   T25] usb 3-1: config 0 descriptor??
[  555.944702][   T25] hub 3-1:0.1: bad descriptor, ignoring hub
[  556.006412][   T25] hub 3-1:0.1: probe with driver hub failed with error -5
[  556.042144][   T25] usb 3-1: selecting invalid altsetting 1
[  556.066717][   T25] snd-usb-us122l 3-1:0.1: usb_set_interface error
[  556.095928][   T25] snd-usb-us122l 3-1:0.1: probe with driver snd-usb-us122l failed with error -22
[  557.898539][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  557.906936][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  557.916924][ T5900] usb 4-1: USB disconnect, device number 10
[  558.142833][T10605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  558.486066][T10610] befs: (nullb0): No write support. Marking filesystem read-only
[  558.564629][T10610] befs: (nullb0): invalid magic header
[  559.084065][T10621] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  560.034568][ T5900] usb 3-1: USB disconnect, device number 8
[  562.121962][T10641] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1067'.
[  562.891458][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  563.792127][T10661] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  564.289622][T10671] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  565.222518][T10674] netlink: 'syz.2.1077': attribute type 10 has an invalid length.
[  565.251068][T10674] 8021q: adding VLAN 0 to HW filter on device batadv0
[  565.307910][T10678] netlink: 'syz.2.1077': attribute type 10 has an invalid length.
[  565.342866][T10674] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  565.432378][T10678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1077'.
[  565.491984][T10678] batadv0: entered promiscuous mode
[  565.497377][T10678] batadv0: entered allmulticast mode
[  565.595146][T10678] bond0: (slave batadv0): Releasing backup interface
[  565.743500][T10678] bridge0: port 4(batadv0) entered blocking state
[  566.171949][T10678] bridge0: port 4(batadv0) entered disabled state
[  566.413339][T10691] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1082'.
[  567.212005][   T35] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  567.221406][   T35] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  567.489830][T10706] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  567.941199][T10719] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  569.147668][T10726] bpf: Bad value for 'gid'
[  570.494228][T10739] befs: (nullb0): No write support. Marking filesystem read-only
[  570.509814][T10739] befs: (nullb0): invalid magic header
[  570.537146][T10736] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  571.212490][T10742] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1097'.
[  573.623650][T10761] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  574.976365][   T29] audit: type=1326 audit(1739639365.210:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  575.114060][   T29] audit: type=1326 audit(1739639365.210:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  575.216767][   T29] audit: type=1326 audit(1739639365.240:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  575.289318][   T29] audit: type=1326 audit(1739639365.240:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  575.392990][T10789] syzkaller0: entered promiscuous mode
[  575.409876][   T29] audit: type=1326 audit(1739639365.240:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  575.442686][T10789] syzkaller0: entered allmulticast mode
[  576.015931][   T29] audit: type=1326 audit(1739639365.240:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  576.141084][   T29] audit: type=1326 audit(1739639365.240:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  576.282325][   T29] audit: type=1326 audit(1739639365.240:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  576.432179][   T29] audit: type=1326 audit(1739639365.240:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  576.688258][   T29] audit: type=1326 audit(1739639365.240:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f58cde9 code=0x7ffc0000
[  577.230470][T10804] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  578.820015][ T5838] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  578.949846][ T5838] usb 2-1: device descriptor read/64, error -71
[  579.191377][ T5838] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  579.330954][ T5838] usb 2-1: device descriptor read/64, error -71
[  579.446719][ T5838] usb usb2-port1: attempt power cycle
[  579.789898][ T5838] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  579.825169][ T5838] usb 2-1: device descriptor read/8, error -71
[  579.887069][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1131'.
[  580.090045][ T5838] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  580.132480][ T5838] usb 2-1: device descriptor read/8, error -71
[  580.257230][ T5838] usb usb2-port1: unable to enumerate USB device
[  582.000943][T10848] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  582.019647][T10848] serio: Serial port ptm0
[  586.629913][ T6066] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  586.858796][ T6066] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  586.878783][ T6066] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  586.906010][ T6066] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  586.944267][ T6066] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  586.991675][ T6066] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  587.325921][ T6066] usb 2-1: Product: syz
[  587.431074][ T6066] usb 2-1: Manufacturer: syz
[  587.521717][ T6066] usb 2-1: SerialNumber: syz
[  587.551624][ T6066] cdc_mbim 2-1:1.0: skipping garbage
[  587.560032][ T6066] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found
[  587.566955][ T6066] cdc_mbim 2-1:1.0: bind() failure
[  589.387852][ T5900] usb 2-1: USB disconnect, device number 11
[  589.749373][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'.
[  589.771255][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'.
[  599.087039][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'.
[  599.145281][T11015] vlan2: entered promiscuous mode
[  599.308596][ T6339] tipc: Subscription rejected, illegal request
[  600.990413][T11044] 
: renamed from bond0 (while UP)
[  605.940074][T11098] befs: (nullb0): No write support. Marking filesystem read-only
[  605.954277][T11098] befs: (nullb0): invalid magic header
[  608.181788][T11118] vlan2: entered promiscuous mode
[  611.206966][T11165] vlan2: entered promiscuous mode
[  616.638270][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  616.638293][   T29] audit: type=1800 audit(1739639406.870:46): pid=11220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1258" name="file1" dev="overlay" ino=492 res=0 errno=0
[  618.005936][T11252] netlink: 'syz.6.1265': attribute type 1 has an invalid length.
[  620.908728][   T29] audit: type=1800 audit(1739639411.140:47): pid=11272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1274" name="file1" dev="overlay" ino=1225 res=0 errno=0
[  621.371550][T11252] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  621.432797][T11282] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1278'.
[  622.272948][T11292] ubi31: attaching mtd0
[  622.278841][T11292] ubi31 error: ubi_attach_mtd_dev: bad VID header (24) or data offsets (88)
[  623.187169][T11301] befs: (nullb0): No write support. Marking filesystem read-only
[  624.008782][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  624.125096][T11301] befs: (nullb0): invalid magic header
[  629.654150][T11374] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  629.678061][T11374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  629.934032][  T833] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  630.079867][  T833] usb 2-1: device descriptor read/64, error -71
[  630.334392][  T833] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  630.412528][T11303] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  630.499935][  T833] usb 2-1: device descriptor read/64, error -71
[  630.623682][  T833] usb usb2-port1: attempt power cycle
[  631.220208][T11303] usb 3-1: Using ep0 maxpacket: 32
[  631.653107][T11303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  631.673306][T11303] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  631.690219][T11303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.711579][T11303] usb 3-1: config 0 descriptor??
[  631.750088][  T833] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  631.780814][  T833] usb 2-1: device descriptor read/8, error -71
[  632.391219][  T833] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  632.603657][  T833] usb 2-1: device descriptor read/8, error -71
[  632.740770][  T833] usb usb2-port1: unable to enumerate USB device
[  633.376718][T11303] usbhid 3-1:0.0: can't add hid device: -71
[  633.417860][T11303] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  633.465848][T11303] usb 3-1: USB disconnect, device number 9
[  633.793621][T11420] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  633.875163][T11420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  634.942849][T11437] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  636.380114][ T6066] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  636.573786][ T6066] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  636.622594][ T6066] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  636.672807][ T6066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.870451][ T6066] usb 4-1: config 0 descriptor??
[  639.015712][  T833] usb 4-1: USB disconnect, device number 11
[  639.219617][T11468] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  639.227411][T11468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  639.572766][  T833] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  639.761830][  T833] usb 2-1: Using ep0 maxpacket: 32
[  639.776749][  T833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  639.845232][  T833] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  639.909902][  T833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.945029][  T833] usb 2-1: config 0 descriptor??
[  640.014281][T11486] input: syz0 as /devices/virtual/input/input13
[  640.741006][  T833] usbhid 2-1:0.0: can't add hid device: -71
[  640.753090][  T833] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  640.774254][  T833] usb 2-1: USB disconnect, device number 16
[  641.460588][T11498] Cannot find set identified by id 0 to match
[  642.660209][   T51] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  644.970449][T11513] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  645.070164][   T51] usb 4-1: device descriptor read/64, error -71
[  645.332790][   T51] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  645.521626][   T51] usb 4-1: device descriptor read/64, error -71
[  645.714427][   T51] usb usb4-port1: attempt power cycle
[  645.966079][T11529] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  646.011635][T11529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  648.037059][T11551] Cannot find set identified by id 0 to match
[  652.660007][T11573] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  652.667916][T11573] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  660.226409][T11621] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  660.244691][T11621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  660.431658][T11626] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  668.823598][T11681] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  668.871810][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  668.880617][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  668.888263][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  669.006846][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  669.021050][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  669.028434][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  669.075966][ T8914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  669.084290][ T8914] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  669.099870][ T8914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  669.108160][ T8914] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  669.117582][ T8914] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  669.125301][ T8914] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  669.854626][T11687] chnl_net:caif_netlink_parms(): no params data found
[  671.256836][ T5843] Bluetooth: hci5: command tx timeout
[  673.319781][ T5843] Bluetooth: hci5: command tx timeout
[  675.114844][T11687] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.149862][T11687] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.188132][T11687] bridge_slave_0: entered allmulticast mode
[  675.213822][T11687] bridge_slave_0: entered promiscuous mode
[  675.252132][T11687] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.269784][T11687] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.277202][T11687] bridge_slave_1: entered allmulticast mode
[  675.388012][T11687] bridge_slave_1: entered promiscuous mode
[  675.400079][ T5843] Bluetooth: hci5: command tx timeout
[  677.385161][T11687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  677.425921][T11687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  677.480465][ T5843] Bluetooth: hci5: command tx timeout
[  679.485504][T11687] team0: Port device team_slave_0 added
[  679.576935][T11687] team0: Port device team_slave_1 added
[  681.331102][T11687] batman_adv: batadv0: Adding interface: batadv_slave_0
[  681.346594][T11687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  681.420258][T11687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  681.466880][T11687] batman_adv: batadv0: Adding interface: batadv_slave_1
[  681.488329][T11687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  681.585764][T11687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  682.531647][T11687] hsr_slave_0: entered promiscuous mode
[  682.538062][T11687] hsr_slave_1: entered promiscuous mode
[  682.585115][T11687] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  682.652376][T11687] Cannot create hsr debugfs directory
[  685.414147][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  687.900273][T11687] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  688.631832][T11687] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  688.893012][T11687] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  689.415785][T11687] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  691.272503][T11687] 8021q: adding VLAN 0 to HW filter on device bond0
[  691.574047][T11687] 8021q: adding VLAN 0 to HW filter on device team0
[  691.747395][  T985] bridge0: port 1(bridge_slave_0) entered blocking state
[  691.754739][  T985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  691.838763][  T985] bridge0: port 2(bridge_slave_1) entered blocking state
[  691.845932][  T985] bridge0: port 2(bridge_slave_1) entered forwarding state
[  692.121940][T11687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  693.323737][T11687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  694.269788][ T5913] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  694.366273][T11687] veth0_vlan: entered promiscuous mode
[  694.424849][T11687] veth1_vlan: entered promiscuous mode
[  694.502073][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  694.511811][T11687] veth0_macvtap: entered promiscuous mode
[  694.548751][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  694.551750][T11687] veth1_macvtap: entered promiscuous mode
[  694.789737][ T5913] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  694.796668][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.556995][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.590850][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.602006][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.607092][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.612261][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.630963][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.657083][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.676594][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.697249][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.718078][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.734714][ T5913] usb 4-1: config 0 descriptor??
[  695.784368][ T5913] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  695.801113][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.837591][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.885370][T11687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  695.952832][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  696.028945][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.189469][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  696.239167][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.289742][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  696.320369][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.377715][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  696.598509][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.610534][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  696.621438][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.631627][T11687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  696.642511][T11687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.832899][T11687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  697.288908][T11687] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  697.334347][T11687] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  697.361025][T11687] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  697.383028][T11687] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  698.167375][ T5898] usb 4-1: USB disconnect, device number 15
[  700.656749][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  700.707690][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  701.028696][ T6339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  701.068062][ T6339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  701.383091][T11980] Cannot find set identified by id 0 to match
[  703.549962][    T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  703.743804][    T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  703.759815][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.781686][    T8] usb 3-1: Product: syz
[  704.022773][    T8] usb 3-1: Manufacturer: syz
[  704.793979][    T8] usb 3-1: SerialNumber: syz
[  705.447391][T11998] netlink: 'syz.3.1488': attribute type 10 has an invalid length.
[  705.459963][T11998] 8021q: adding VLAN 0 to HW filter on device batadv0
[  705.472958][T11998] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  705.720761][    T8] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  705.812016][  T833] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  706.321957][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1489'.
[  706.471993][T12005] smc: net device bond0 applied user defined pnetid SYZ
[  706.839905][  T833] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  707.387642][  T833] ath9k_htc: Failed to initialize the device
[  707.461346][  T833] usb 3-1: ath9k_htc: USB layer deinitialized
[  707.612401][ T5898] usb 3-1: USB disconnect, device number 10
[  712.628290][T12055] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  712.643101][T12055] serio: Serial port ptm0
[  713.720080][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1501'.
[  714.121594][T12047] block nbd7: Device being setup by another task
[  714.148424][ T5843] block nbd7: Receive control failed (result -32)
[  714.870023][T12054] block nbd7: shutting down sockets
[  716.457450][T12078] Cannot find set identified by id 0 to match
[  717.267303][T12081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  717.280175][T12081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  717.288172][T12081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  717.309872][T12081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  717.318702][T12081] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  717.327702][T12081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  718.026340][T12089] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1514'.
[  718.071642][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1514'.
[  719.509794][T12081] Bluetooth: hci4: command tx timeout
[  721.569789][T12081] Bluetooth: hci4: command tx timeout
[  722.483656][   T80] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  723.445660][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  723.454928][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  723.463075][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  723.471561][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  723.481167][ T5843] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  723.488490][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  723.720703][T12125] Cannot find set identified by id 0 to match
[  724.417683][ T5843] Bluetooth: hci4: command tx timeout
[  725.092365][T12079] chnl_net:caif_netlink_parms(): no params data found
[  725.560096][ T5843] Bluetooth: hci6: command tx timeout
[  726.439884][ T5843] Bluetooth: hci4: command tx timeout
[  726.446625][T12138] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1529'.
[  726.455960][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1529'.
[  727.643179][ T5843] Bluetooth: hci6: command tx timeout
[  727.989455][   T80] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.788403][T12162] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  729.419569][T12081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  729.429852][T12081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  729.437666][T12081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  729.451394][T12081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  729.670314][T12081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  729.677656][T12081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  729.720015][ T5843] Bluetooth: hci6: command tx timeout
[  729.823082][T12169] Cannot find set identified by id 0 to match
[  731.422822][ T8924] bridge0: port 3(syz_tun) entered disabled state
[  731.706594][ T8924] syz_tun (unregistering): left allmulticast mode
[  731.713549][ T8924] syz_tun (unregistering): left promiscuous mode
[  731.720271][ T5843] Bluetooth: hci1: command tx timeout
[  731.720894][ T8924] bridge0: port 3(syz_tun) entered disabled state
[  731.799721][ T5843] Bluetooth: hci6: command tx timeout
[  732.401716][   T80] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.923872][T12079] bridge0: port 1(bridge_slave_0) entered blocking state
[  732.934349][T12079] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.970072][T12079] bridge_slave_0: entered allmulticast mode
[  732.978219][T12079] bridge_slave_0: entered promiscuous mode
[  733.031009][T12119] chnl_net:caif_netlink_parms(): no params data found
[  733.295859][T12193] netlink: 'syz.8.1548': attribute type 15 has an invalid length.
[  733.340410][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1548'.
[  733.547425][T12081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  733.557027][T12081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  733.567634][T12081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  734.151220][T12081] Bluetooth: hci1: command tx timeout
[  734.158153][T12081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  734.167725][   T80] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.178512][T12081] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  734.189929][T12081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  734.247944][T12079] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.266955][T12079] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.281718][T12079] bridge_slave_1: entered allmulticast mode
[  734.291938][T12079] bridge_slave_1: entered promiscuous mode
[  736.201876][T12081] Bluetooth: hci1: command tx timeout
[  736.279987][T12081] Bluetooth: hci2: command tx timeout
[  736.740889][T12079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  736.835930][T12079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  737.768315][T12221] Cannot find set identified by id 0 to match
[  738.279714][T12081] Bluetooth: hci1: command tx timeout
[  738.360068][T12081] Bluetooth: hci2: command tx timeout
[  738.650500][T12219] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  739.975828][T12079] team0: Port device team_slave_0 added
[  739.995285][T12079] team0: Port device team_slave_1 added
[  740.449844][T12081] Bluetooth: hci2: command tx timeout
[  741.026193][T12119] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.046547][T12119] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.080096][T12119] bridge_slave_0: entered allmulticast mode
[  741.088762][T12119] bridge_slave_0: entered promiscuous mode
[  741.121849][T12119] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.128954][T12119] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.155340][T12119] bridge_slave_1: entered allmulticast mode
[  741.179124][T12119] bridge_slave_1: entered promiscuous mode
[  741.617609][T12235] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1558'.
[  742.267840][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  742.289956][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  742.300005][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  742.311260][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  742.320786][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  742.328197][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  742.519784][T12081] Bluetooth: hci2: command tx timeout
[  742.723896][T12079] batman_adv: batadv0: Adding interface: batadv_slave_0
[  742.749692][T12079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  742.815576][T12079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  742.881840][T12119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  742.967326][T12079] batman_adv: batadv0: Adding interface: batadv_slave_1
[  742.979931][T12079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  743.028025][T12079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  743.062466][   T80] bridge_slave_1: left allmulticast mode
[  743.068144][   T80] bridge_slave_1: left promiscuous mode
[  743.093112][   T80] bridge0: port 2(bridge_slave_1) entered disabled state
[  743.227726][   T80] bridge_slave_0: left allmulticast mode
[  743.260070][   T80] bridge_slave_0: left promiscuous mode
[  743.265806][   T80] bridge0: port 1(bridge_slave_0) entered disabled state
[  744.143480][T12249] netlink: 'syz.3.1562': attribute type 15 has an invalid length.
[  744.159774][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'.
[  744.369179][T12081] Bluetooth: hci5: command tx timeout
[  746.440564][T12081] Bluetooth: hci5: command tx timeout
[  746.847199][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  748.529772][T12081] Bluetooth: hci5: command tx timeout
[  749.094288][   T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  749.330041][   T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  749.474696][   T80] bond0 (unregistering): Released all slaves
[  749.681371][T12119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  750.599788][T12081] Bluetooth: hci5: command tx timeout
[  750.955218][T12079] hsr_slave_0: entered promiscuous mode
[  750.982265][T12079] hsr_slave_1: entered promiscuous mode
[  750.996115][T12079] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  751.010388][T12079] Cannot create hsr debugfs directory
[  751.674041][T12267] Cannot find set identified by id 0 to match
[  753.003895][T12119] team0: Port device team_slave_0 added
[  753.797583][T12163] chnl_net:caif_netlink_parms(): no params data found
[  753.872161][T12119] team0: Port device team_slave_1 added
[  755.870480][T12283] block nbd3: Device being setup by another task
[  756.211153][T12119] batman_adv: batadv0: Adding interface: batadv_slave_0
[  756.218243][T12119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  756.245647][T12119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  756.256174][T12282] block nbd3: shutting down sockets
[  756.604962][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1569'.
[  758.090254][T12290] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1571'.
[  758.306219][   T80] hsr_slave_0: left promiscuous mode
[  758.329849][   T80] hsr_slave_1: left promiscuous mode
[  758.349686][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  758.357142][   T80] batman_adv: batadv0: Removing interface: batadv_slave_0
[  758.507774][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  758.520347][   T80] batman_adv: batadv0: Removing interface: batadv_slave_1
[  758.817295][   T80] veth1_macvtap: left promiscuous mode
[  758.845305][   T80] veth0_macvtap: left promiscuous mode
[  758.860641][   T80] veth1_vlan: left promiscuous mode
[  758.876178][   T80] veth0_vlan: left promiscuous mode
[  761.680676][T12302] netlink: 'syz.3.1575': attribute type 15 has an invalid length.
[  761.688547][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1575'.
[  765.379995][   T80] team0 (unregistering): Port device team_slave_1 removed
[  765.980002][   T80] team0 (unregistering): Port device team_slave_0 removed
[  772.189991][T12119] batman_adv: batadv0: Adding interface: batadv_slave_1
[  772.196979][T12119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  772.232459][T12119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  772.289928][T12195] chnl_net:caif_netlink_parms(): no params data found
[  772.617888][T12119] hsr_slave_0: entered promiscuous mode
[  772.636304][T12119] hsr_slave_1: entered promiscuous mode
[  772.658100][T12119] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  772.689495][T12119] Cannot create hsr debugfs directory
[  775.357299][T12336] Cannot find set identified by id 0 to match
[  777.199529][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  777.220381][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  777.231562][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  777.240391][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  777.259905][ T5843] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  777.270071][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  779.381179][T12081] Bluetooth: hci7: command tx timeout
[  781.455579][T12362] syz.3.1583 (12362): drop_caches: 2
[  781.480400][T12081] Bluetooth: hci7: command tx timeout
[  781.573459][T12362] syz.3.1583 (12362): drop_caches: 2
[  782.267359][T12366] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1584'.
[  782.630003][T12240] chnl_net:caif_netlink_parms(): no params data found
[  782.782072][T12371] serio: Serial port ptm0
[  783.559821][T12081] Bluetooth: hci7: command tx timeout
[  784.125460][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  784.139791][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  784.148070][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  784.157061][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  784.165300][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  784.178058][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  784.850191][T12163] bridge0: port 1(bridge_slave_0) entered blocking state
[  784.857325][T12163] bridge0: port 1(bridge_slave_0) entered disabled state
[  784.899915][T12163] bridge_slave_0: entered allmulticast mode
[  784.906965][T12163] bridge_slave_0: entered promiscuous mode
[  784.954102][T12163] bridge0: port 2(bridge_slave_1) entered blocking state
[  784.971868][T12163] bridge0: port 2(bridge_slave_1) entered disabled state
[  784.979053][T12163] bridge_slave_1: entered allmulticast mode
[  785.004709][T12163] bridge_slave_1: entered promiscuous mode
[  785.020457][T12195] bridge0: port 1(bridge_slave_0) entered blocking state
[  785.027607][T12195] bridge0: port 1(bridge_slave_0) entered disabled state
[  785.049871][T12195] bridge_slave_0: entered allmulticast mode
[  785.056906][T12195] bridge_slave_0: entered promiscuous mode
[  785.080407][T12195] bridge0: port 2(bridge_slave_1) entered blocking state
[  785.087526][T12195] bridge0: port 2(bridge_slave_1) entered disabled state
[  785.117514][T12195] bridge_slave_1: entered allmulticast mode
[  785.365185][T12195] bridge_slave_1: entered promiscuous mode
[  785.649762][T12081] Bluetooth: hci7: command tx timeout
[  786.280125][T12081] Bluetooth: hci4: command tx timeout
[  786.685262][T12385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1588'.
[  788.369814][T12081] Bluetooth: hci4: command tx timeout
[  788.508144][T12163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  788.561385][T12163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  788.919967][T12393] syz.3.1590 (12393): drop_caches: 2
[  788.940482][T12393] syz.3.1590 (12393): drop_caches: 2
[  789.694147][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  789.703486][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  789.715519][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  789.723779][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  789.732886][ T5843] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  789.741395][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  790.117618][T12195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  790.162550][T12195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  790.480007][ T5843] Bluetooth: hci4: command tx timeout
[  790.660507][T12409] Cannot find set identified by id 0 to match
[  791.800544][ T5843] Bluetooth: hci6: command tx timeout
[  792.530075][ T5843] Bluetooth: hci4: command tx timeout
[  792.705719][T12195] team0: Port device team_slave_0 added
[  793.774830][T12195] team0: Port device team_slave_1 added
[  793.879679][ T5843] Bluetooth: hci6: command tx timeout
[  794.945268][T12081] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  794.954406][T12081] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  794.962180][T12081] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  794.970508][T12081] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  794.978044][T12081] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  794.985394][T12081] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  795.192739][T12442] syz.3.1596 (12442): drop_caches: 2
[  795.202248][T12442] syz.3.1596 (12442): drop_caches: 2
[  795.960884][T12081] Bluetooth: hci6: command tx timeout
[  796.271840][T12240] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.278959][T12240] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.310808][T12240] bridge_slave_0: entered allmulticast mode
[  796.328403][T12240] bridge_slave_0: entered promiscuous mode
[  797.080270][T12081] Bluetooth: hci8: command tx timeout
[  797.721721][T12240] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.728895][T12240] bridge0: port 2(bridge_slave_1) entered disabled state
[  797.754703][T12240] bridge_slave_1: entered allmulticast mode
[  797.771089][T12240] bridge_slave_1: entered promiscuous mode
[  798.040052][T12081] Bluetooth: hci6: command tx timeout
[  799.160521][T12081] Bluetooth: hci8: command tx timeout
[  799.778531][T12240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  800.330405][T12462] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  800.602184][T12240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  801.240810][T12081] Bluetooth: hci8: command tx timeout
[  802.762914][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  802.780225][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  802.788673][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  802.798862][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  802.807244][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  802.830155][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  803.320220][T12081] Bluetooth: hci8: command tx timeout
[  804.284454][   T80] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  804.930245][T12081] Bluetooth: hci1: command tx timeout
[  805.962141][   T80] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.040297][T12486] Cannot find set identified by id 0 to match
[  807.001207][T12081] Bluetooth: hci1: command tx timeout
[  808.139226][   T80] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.288853][   T30] INFO: task syz.1.1368:11571 blocked for more than 143 seconds.
[  808.310850][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  808.331710][   T30]       Not tainted 6.14.0-rc2-syzkaller-00259-g7ff71e6d9239 #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  808.436586][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  808.541414][   T30] task:syz.1.1368      state:D stack:21744 pid:11571 tgid:11570 ppid:6647   task_flags:0x400040 flags:0x00004006
[  808.914973][   T30] Call Trace:
[  808.918308][   T30]  <TASK>
[  808.944620][   T30]  __schedule+0x190e/0x4c90
[  808.949194][   T30]  ? __pfx___schedule+0x10/0x10
[  808.954228][   T30]  ? __pfx_lock_release+0x10/0x10
[  808.959295][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  808.965075][   T30]  ? __lock_sock+0x1c8/0x330
[  808.969781][   T30]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  809.019622][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  809.025304][   T30]  ? schedule+0x90/0x320
[  809.059875][   T30]  schedule+0x14b/0x320
[  809.064062][   T30]  __lock_sock+0x1cd/0x330
[  809.068492][   T30]  ? __pfx___lock_sock+0x10/0x10
[  809.089636][T12081] Bluetooth: hci1: command tx timeout
[  809.090957][T12347] chnl_net:caif_netlink_parms(): no params data found
[  809.112279][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  809.118387][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  809.159946][   T30]  ? __local_bh_enable_ip+0x179/0x200
[  809.165353][   T30]  ? sk_stream_wait_memory+0x762/0xfa0
[  809.234048][   T30]  ? lock_sock_nested+0x6a/0x100
[  809.239038][   T30]  lock_sock_nested+0x9e/0x100
[  809.243939][   T30]  sk_stream_wait_memory+0x93c/0xfa0
[  809.249269][   T30]  ? __pfx_sk_stream_wait_memory+0x10/0x10
[  809.255315][   T30]  ? __pfx_woken_wake_function+0x10/0x10
[  809.261021][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  809.266689][   T30]  ? __tcp_push_pending_frames+0xd6/0x360
[  809.272474][   T30]  tcp_sendmsg_locked+0x1611/0x5330
[  809.277708][   T30]  ? mark_lock+0x9a/0x360
[  809.282152][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  809.288529][   T30]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  809.294161][   T30]  ? tcp_sendmsg+0x22/0x50
[  809.298607][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  809.319646][   T30]  tcp_sendmsg+0x30/0x50
[  809.323929][   T30]  __sock_sendmsg+0x1a6/0x270
[  809.328635][   T30]  ____sys_sendmsg+0x53a/0x860
[  809.349694][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  809.355383][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  809.369651][   T30]  ? __fget_files+0x2a/0x410
[  809.374289][   T30]  ? __fget_files+0x2a/0x410
[  809.378917][   T30]  __sys_sendmsg+0x269/0x350
[  809.398915][   T30]  ? __pfx_futex_wake+0x10/0x10
[  809.404796][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  809.414604][   T30]  ? __local_bh_enable_ip+0x168/0x200
[  809.420523][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  809.426891][   T30]  ? do_syscall_64+0x100/0x230
[  809.432145][   T30]  ? do_syscall_64+0xb6/0x230
[  809.436851][   T30]  do_syscall_64+0xf3/0x230
[  809.441797][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  809.447727][   T30] RIP: 0033:0x7fbba898cde9
[  809.453183][   T30] RSP: 002b:00007fbba9832038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  809.461912][   T30] RAX: ffffffffffffffda RBX: 00007fbba8ba5fa0 RCX: 00007fbba898cde9
[  809.470229][   T30] RDX: 0000000000000000 RSI: 00004000000015c0 RDI: 0000000000000005
[  809.478222][   T30] RBP: 00007fbba8a0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  809.499675][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  809.507670][   T30] R13: 0000000000000000 R14: 00007fbba8ba5fa0 R15: 00007ffeed9f1bb8
[  809.539674][   T30]  </TASK>
[  809.542863][   T30] 
[  809.542863][   T30] Showing all locks held in the system:
[  809.559961][   T30] 2 locks held by ksoftirqd/0/16:
[  809.565263][   T30] 1 lock held by khungtaskd/30:
[  809.579621][   T30]  #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  809.599608][   T30] 6 locks held by kworker/u8:4/80:
[  809.604736][   T30]  #0: ffff88801beed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0
[  809.629619][   T30]  #1: ffffc9000239fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0
[  809.659721][   T30]  #2: ffffffff8fec7a90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60
[  809.669214][   T30]  #3: ffff88802276b0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x13b/0x440
[  809.695328][   T30]  #4: ffff888056c70250 (&devlink->lock_key#21){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x14d/0x440
[  809.712880][   T30]  #5: ffffffff8eb3e300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  809.739691][   T30] 2 locks held by kworker/u8:5/985:
[  809.744928][   T30] 1 lock held by dhcpcd/5497:
[  809.769698][   T30]  #0: ffffffff8fed4208 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc55/0x1d30
[  809.778832][   T30] 2 locks held by getty/5591:
[  809.800068][   T30]  #0: ffff8880354520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  809.839670][   T30]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770
[  809.889633][   T30] 3 locks held by kworker/u8:10/6339:
[  809.895029][   T30] 3 locks held by kworker/u8:12/6486:
[  809.910301][   T30]  #0: ffff8880310bc948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0
[  809.930131][   T30]  #1: ffffc9000b5afc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0
[  809.970026][   T30]  #2: ffffffff8fed4208 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x10e/0x16a0
[  810.009689][   T30] 1 lock held by syz.1.1368/11571:
[  810.014821][   T30]  #0: ffff88802cddced8 (sk_lock-AF_INET){+.+.}-{0:0}, at: sk_stream_wait_memory+0x93c/0xfa0
[  810.040146][   T30] 6 locks held by syz.1.1368/11575:
[  810.045391][   T30] 2 locks held by syz-executor/12240:
[  810.059875][   T30]  #0: ffffffff8fed4208 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  810.069011][   T30]  #1: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x820
[  810.109747][   T30] 3 locks held by kworker/u8:0/12344:
[  810.115139][   T30]  #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0
[  810.149158][   T30]  #1: ffffc900040dfc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0
[  810.169637][   T30]  #2: ffffffff8fed4208 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  810.178784][   T30] 3 locks held by syz-executor/12347:
[  810.219757][   T30]  #0: ffff88805e0e4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510
[  810.239675][   T30]  #1: ffff88805e0e4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260
[  810.249468][   T30]  #2: ffff888076fa7338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690
[  810.269017][   T30] 1 lock held by syz-executor/12377:
[  810.289716][   T30]  #0: ffffffff8fed4208 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  810.299201][   T30] 3 locks held by syz-executor/12398:
[  810.330314][   T30]  #0: ffff888057c04d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510
[  810.349859][   T30]  #1: ffff888057c04078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260
[  810.369883][   T30]  #2: ffff88807e448b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690
[  810.379299][   T30] 1 lock held by syz-executor/12438:
[  810.399734][   T30]  #0: ffffffff8fed4208 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x47a/0x2310
[  810.409129][   T30] 2 locks held by syz-executor/12472:
[  810.440413][   T30]  #0: ffffffff8fec7a90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  810.460029][   T30]  #1: ffffffff8fed4208 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x29a/0x7e0
[  810.479879][   T30] 1 lock held by syz.3.1607/12493:
[  810.485008][   T30]  #0: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820
[  810.510787][   T30] 
[  810.513235][   T30] =============================================
[  810.513235][   T30] 
[  810.719643][   T30] NMI backtrace for cpu 0
[  810.719663][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00259-g7ff71e6d9239 #0
[  810.719690][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  810.719705][   T30] Call Trace:
[  810.719714][   T30]  <TASK>
[  810.719725][   T30]  dump_stack_lvl+0x241/0x360
[  810.719760][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  810.719793][   T30]  ? __pfx__printk+0x10/0x10
[  810.719829][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  810.719875][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  810.719911][   T30]  ? _printk+0xd5/0x120
[  810.719932][   T30]  ? __pfx__printk+0x10/0x10
[  810.719954][   T30]  ? __wake_up_klogd+0xcc/0x110
[  810.719987][   T30]  ? __pfx__printk+0x10/0x10
[  810.720010][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.720049][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  810.720084][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  810.720118][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  810.720161][   T30]  watchdog+0x1058/0x10a0
[  810.720201][   T30]  ? watchdog+0x1ea/0x10a0
[  810.720244][   T30]  ? __pfx_watchdog+0x10/0x10
[  810.720281][   T30]  kthread+0x7ab/0x920
[  810.720318][   T30]  ? __pfx_kthread+0x10/0x10
[  810.720357][   T30]  ? __pfx_watchdog+0x10/0x10
[  810.720393][   T30]  ? __pfx_kthread+0x10/0x10
[  810.720428][   T30]  ? __pfx_kthread+0x10/0x10
[  810.720468][   T30]  ? __pfx_kthread+0x10/0x10
[  810.720504][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  810.720528][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.720566][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  810.720593][   T30]  ? __pfx_kthread+0x10/0x10
[  810.720632][   T30]  ret_from_fork+0x4d/0x80
[  810.720664][   T30]  ? __pfx_kthread+0x10/0x10
[  810.720702][   T30]  ret_from_fork_asm+0x1a/0x30
[  810.720747][   T30]  </TASK>
[  810.720756][   T30] Sending NMI from CPU 0 to CPUs 1:
[  810.902553][    C1] NMI backtrace for cpu 1
[  810.902569][    C1] CPU: 1 UID: 0 PID: 11575 Comm: syz.1.1368 Not tainted 6.14.0-rc2-syzkaller-00259-g7ff71e6d9239 #0
[  810.902594][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  810.902608][    C1] RIP: 0010:preempt_count_add+0x44/0x190
[  810.902641][    C1] Code: 00 00 00 fc ff df 42 0f b6 04 38 84 c0 0f 85 ed 00 00 00 83 3d 0c 59 d5 18 00 75 07 65 8b 05 0b 76 74 7e 65 01 1d 04 76 74 7e <48> c7 c0 80 b9 64 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e4 00
[  810.902659][    C1] RSP: 0018:ffffc90014fae370 EFLAGS: 00000282
[  810.902682][    C1] RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffffffff9a64b903
[  810.902698][    C1] RDX: dffffc0000000000 RSI: ffffffff8a66b9f2 RDI: 0000000000000001
[  810.902713][    C1] RBP: ffffc90014fae498 R08: 0000000000000009 R09: ffffc90014fae550
[  810.902729][    C1] R10: dffffc0000000000 R11: ffffffff81ad4640 R12: dffffc0000000000
[  810.902745][    C1] R13: ffffc90014fae460 R14: ffffffff8a66b9f2 R15: dffffc0000000000
[  810.902764][    C1] FS:  00007fbba98116c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  810.902783][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  810.902798][    C1] CR2: 000055a874e6b978 CR3: 000000007cb40000 CR4: 0000000000350ef0
[  810.902815][    C1] Call Trace:
[  810.902823][    C1]  <NMI>
[  810.902831][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  810.902867][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  810.902902][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  810.902936][    C1]  ? nmi_handle+0x2a/0x5a0
[  810.902979][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  810.903008][    C1]  ? nmi_handle+0x151/0x5a0
[  810.903041][    C1]  ? nmi_handle+0x2a/0x5a0
[  810.903075][    C1]  ? preempt_count_add+0x44/0x190
[  810.903101][    C1]  ? default_do_nmi+0x63/0x160
[  810.903134][    C1]  ? exc_nmi+0x123/0x1f0
[  810.903165][    C1]  ? end_repeat_nmi+0xf/0x53
[  810.903197][    C1]  ? tcp_write_xmit+0x16e2/0x66c0
[  810.903220][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  810.903252][    C1]  ? tcp_write_xmit+0x16e2/0x66c0
[  810.903273][    C1]  ? preempt_count_add+0x44/0x190
[  810.903299][    C1]  ? preempt_count_add+0x44/0x190
[  810.903326][    C1]  ? preempt_count_add+0x44/0x190
[  810.903353][    C1]  </NMI>
[  810.903360][    C1]  <TASK>
[  810.903368][    C1]  ? tcp_write_xmit+0x16e2/0x66c0
[  810.903388][    C1]  unwind_next_frame+0xb0/0x22d0
[  810.903426][    C1]  ? __tcp_transmit_skb+0x23b0/0x3a60
[  810.903453][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  810.903481][    C1]  arch_stack_walk+0x11c/0x150
[  810.903526][    C1]  ? tcp_write_xmit+0x16e2/0x66c0
[  810.903550][    C1]  stack_trace_save+0x118/0x1d0
[  810.903578][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  810.903614][    C1]  kasan_save_track+0x3f/0x80
[  810.903636][    C1]  ? kasan_save_track+0x3f/0x80
[  810.903657][    C1]  ? __kasan_slab_alloc+0x66/0x80
[  810.903680][    C1]  ? kmem_cache_alloc_node_noprof+0x1d9/0x380
[  810.903710][    C1]  ? __alloc_skb+0x1c3/0x440
[  810.903738][    C1]  ? ip_frag_next+0xdc/0xb30
[  810.903761][    C1]  ? ip_do_fragment+0x8d3/0x1b30
[  810.903783][    C1]  ? __ip_finish_output+0x290/0x400
[  810.903808][    C1]  ? __ip_queue_xmit+0x103f/0x1960
[  810.903830][    C1]  ? __tcp_transmit_skb+0x23b0/0x3a60
[  810.903852][    C1]  ? tcp_write_xmit+0x16e2/0x66c0
[  810.903899][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.903934][    C1]  __kasan_slab_alloc+0x66/0x80
[  810.903960][    C1]  kmem_cache_alloc_node_noprof+0x1d9/0x380
[  810.903990][    C1]  ? __alloc_skb+0x1c3/0x440
[  810.904021][    C1]  __alloc_skb+0x1c3/0x440
[  810.904048][    C1]  ? ip_finish_output2+0x43e/0x12e0
[  810.904077][    C1]  ? __pfx___alloc_skb+0x10/0x10
[  810.904105][    C1]  ? ip_finish_output2+0x43e/0x12e0
[  810.904136][    C1]  ip_frag_next+0xdc/0xb30
[  810.904164][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.904201][    C1]  ip_do_fragment+0x8d3/0x1b30
[  810.904232][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.904266][    C1]  ? __pfx_ip_finish_output2+0x10/0x10
[  810.904294][    C1]  ? __pfx_ip_do_fragment+0x10/0x10
[  810.904321][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.904354][    C1]  ? skb_release_data+0x2b5/0x8a0
[  810.904389][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.904423][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.904456][    C1]  ? ip_fragment+0x9a/0x220
[  810.904483][    C1]  __ip_finish_output+0x290/0x400
[  810.904512][    C1]  __ip_queue_xmit+0x103f/0x1960
[  810.904541][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.904575][    C1]  ? csum_tcpudp_nofold+0x1e/0x60
[  810.904600][    C1]  ? __ip_queue_xmit+0x62/0x1960
[  810.904624][    C1]  ? __pfx_ip_queue_xmit+0x10/0x10
[  810.904648][    C1]  __tcp_transmit_skb+0x23b0/0x3a60
[  810.904682][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  810.904720][    C1]  ? __pfx___tcp_transmit_skb+0x10/0x10
[  810.904750][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.904789][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.904822][    C1]  ? tcp_small_queue_check+0x206/0x410
[  810.904847][    C1]  tcp_write_xmit+0x16e2/0x66c0
[  810.904876][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.904931][    C1]  __tcp_push_pending_frames+0x9b/0x360
[  810.904956][    C1]  tcp_rcv_established+0xf39/0x1f20
[  810.904983][    C1]  ? __pfx_lock_release+0x10/0x10
[  810.905022][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.905056][    C1]  ? __pfx_tcp_rcv_established+0x10/0x10
[  810.905083][    C1]  ? rt_is_expired+0x1c/0x2c0
[  810.905105][    C1]  ? rt_is_expired+0x242/0x2c0
[  810.905129][    C1]  tcp_v4_do_rcv+0x96d/0xc70
[  810.905165][    C1]  ? __pfx_tcp_v4_do_rcv+0x10/0x10
[  810.905196][    C1]  __release_sock+0x214/0x350
[  810.905222][    C1]  release_sock+0x61/0x1f0
[  810.905249][    C1]  sk_wait_data+0x250/0x510
[  810.905275][    C1]  ? __pfx_sk_wait_data+0x10/0x10
[  810.905296][    C1]  ? __pfx_woken_wake_function+0x10/0x10
[  810.905335][    C1]  ? __tcp_send_ack+0x17e/0x600
[  810.905361][    C1]  tcp_recvmsg_locked+0xcb4/0x3c80
[  810.905390][    C1]  ? mark_lock+0x9a/0x360
[  810.905424][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.905470][    C1]  ? do_raw_spin_lock+0x14f/0x370
[  810.905497][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  810.905531][    C1]  ? __pfx_tcp_recvmsg_locked+0x10/0x10
[  810.905564][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.905597][    C1]  ? mark_lock+0x9a/0x360
[  810.905619][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.905652][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  810.905686][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  810.905722][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  810.905746][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.905779][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  810.905804][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.905837][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  810.905861][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.905895][    C1]  ? tcp_recvmsg+0x23c/0x920
[  810.905924][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.905965][    C1]  tcp_recvmsg+0x25d/0x920
[  810.905999][    C1]  ? __pfx_tcp_recvmsg+0x10/0x10
[  810.906035][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.906068][    C1]  ? sock_rps_record_flow+0x1a/0x400
[  810.906092][    C1]  ? inet_recvmsg+0xde/0x2d0
[  810.906117][    C1]  ? __pfx_tcp_recvmsg+0x10/0x10
[  810.906146][    C1]  inet_recvmsg+0x150/0x2d0
[  810.906173][    C1]  ? __pfx_inet_recvmsg+0x10/0x10
[  810.906198][    C1]  ? aa_sock_msg_perm+0x91/0x160
[  810.906232][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.906265][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.906301][    C1]  sock_recvmsg+0x1ae/0x280
[  810.906328][    C1]  ____sys_recvmsg+0x1c6/0x480
[  810.906366][    C1]  ? __pfx_____sys_recvmsg+0x10/0x10
[  810.906413][    C1]  __sys_recvmsg+0x291/0x390
[  810.906448][    C1]  ? __pfx___sys_recvmsg+0x10/0x10
[  810.906493][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.906530][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  810.906568][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  810.906602][    C1]  ? exc_page_fault+0x590/0x8b0
[  810.906624][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  810.906660][    C1]  ? do_syscall_64+0xb6/0x230
[  810.906688][    C1]  do_syscall_64+0xf3/0x230
[  810.906717][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.906747][    C1] RIP: 0033:0x7fbba898cde9
[  810.906764][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  810.906782][    C1] RSP: 002b:00007fbba9811038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  810.906804][    C1] RAX: ffffffffffffffda RBX: 00007fbba8ba6080 RCX: 00007fbba898cde9
[  810.906819][    C1] RDX: 0000000000000700 RSI: 0000400000000580 RDI: 0000000000000005
[  810.906833][    C1] RBP: 00007fbba8a0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  810.906847][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  810.906860][    C1] R13: 0000000000000001 R14: 00007fbba8ba6080 R15: 00007ffeed9f1bb8
[  810.906886][    C1]  </TASK>
[  810.934621][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  810.934640][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00259-g7ff71e6d9239 #0
[  810.934667][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  810.934684][   T30] Call Trace:
[  810.934694][   T30]  <TASK>
[  810.934705][   T30]  dump_stack_lvl+0x241/0x360
[  811.805998][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  811.811206][   T30]  ? __pfx__printk+0x10/0x10
[  811.815792][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  811.821799][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  811.827443][   T30]  ? vscnprintf+0x5d/0x90
[  811.831787][   T30]  panic+0x349/0x880
[  811.835690][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  811.841338][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  811.847503][   T30]  ? __pfx_panic+0x10/0x10
[  811.851936][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  811.857580][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  811.863220][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  811.868599][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  811.874766][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  811.880933][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  811.886577][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  811.892749][   T30]  watchdog+0x1097/0x10a0
[  811.897111][   T30]  ? watchdog+0x1ea/0x10a0
[  811.901546][   T30]  ? __pfx_watchdog+0x10/0x10
[  811.906229][   T30]  kthread+0x7ab/0x920
[  811.910305][   T30]  ? __pfx_kthread+0x10/0x10
[  811.914909][   T30]  ? __pfx_watchdog+0x10/0x10
[  811.919596][   T30]  ? __pfx_kthread+0x10/0x10
[  811.924195][   T30]  ? __pfx_kthread+0x10/0x10
[  811.928796][   T30]  ? __pfx_kthread+0x10/0x10
[  811.933395][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  811.938586][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  811.944227][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  811.949426][   T30]  ? __pfx_kthread+0x10/0x10
[  811.954024][   T30]  ret_from_fork+0x4d/0x80
[  811.958445][   T30]  ? __pfx_kthread+0x10/0x10
[  811.963044][   T30]  ret_from_fork_asm+0x1a/0x30
[  811.967824][   T30]  </TASK>
[  811.971035][   T30] Kernel Offset: disabled
[  811.975385][   T30] Rebooting in 86400 seconds..