last executing test programs:

4m56.52318287s ago: executing program 32 (id=137):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)

4m52.578504803s ago: executing program 33 (id=160):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f00000017c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/116, 0x74}], 0x1}, 0x2000)

4m49.221035425s ago: executing program 34 (id=175):
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4m38.237783861s ago: executing program 35 (id=216):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)

4m34.40526672s ago: executing program 36 (id=222):
r0 = socket$unix(0x1, 0x7, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r4, 0x1276, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x3fc, 0x0, 0x3}}}}}}}, 0x0)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r1, r5, 0x0, 0x0, 0x0}, 0x30)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x100, 0x4)
r6 = timerfd_create(0x8, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @mcast1, 0x7}, 0x1c)
timerfd_settime(r6, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)

4m26.245479061s ago: executing program 37 (id=230):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000007740)={0x2, 0x1, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x7, 0x9, 0x2, 0xdea7, 0x453}]}, 0x30}}, 0x0)

4m22.987354931s ago: executing program 38 (id=239):
r0 = syz_open_procfs(0x0, 0x0)
lseek(r0, 0xd2, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000340)=0x5)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305829, &(0x7f00000002c0)={0x0, 0x6930, 0x5, 0x1})
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]})

4m18.7207386s ago: executing program 39 (id=245):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0)

4m12.434830049s ago: executing program 40 (id=252):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

4m7.991439307s ago: executing program 41 (id=259):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000001480))
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc090)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x523002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0x100, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xb, 0x6}}}, 0x24}}, 0x4004080)
socket$netlink(0x10, 0x3, 0x0)
sysinfo(&(0x7f0000000240)=""/8)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$inet(0x2, 0x3, 0x4)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0xfffffffd, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x800002, 0x2041, 0x1f, 0x13, 0x0, 0x0, 0xffffffff, {0x0, 0x1, 0x2000000, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10)

3m55.554671401s ago: executing program 42 (id=269):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x20000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

3m49.156925836s ago: executing program 43 (id=283):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket(0xa, 0x3, 0x3a)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00"], 0x40c}}, 0x0)

3m48.915756974s ago: executing program 2 (id=285):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7004fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="04002c80"], 0x20}, 0x1, 0x0, 0x0, 0x14081}, 0x9590f6cc3ea35512)

3m48.725179091s ago: executing program 2 (id=286):
pipe(&(0x7f0000000cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)='w', 0x1}], 0x1000000000000101, 0x1)
close(r1)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r3=>0x0})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000640)}, 0x20)
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x2, {}, 0x884d4e09817961eb}, 0x18)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)

3m47.493479945s ago: executing program 2 (id=287):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_USERDATA={0x6, 0xd, 0x1, 0x0, "a9f4"}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xb}]}, @NFT_MSG_DELSET={0x44, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1ab}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb0}, 0x1, 0x0, 0x0, 0xc000}, 0x8)

3m47.245255517s ago: executing program 2 (id=289):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$ax25(0x3, 0x2, 0x7)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x301883, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2ee2, &(0x7f00000002c0)={<r7=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, r7, 0x2}}, 0x48)
r8 = semget$private(0x0, 0x4000000009, 0x0)
semop(r8, &(0x7f00000000c0)=[{0x4, 0x1}], 0x1)
semctl$SETALL(r8, 0x0, 0x11, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x6, 0x4, 0x3ff, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000ac1414aa000000000000000000080000e000000200000000000000000000000000000000000000000000002000000000f00e57bc327f569d3e0479f463157f9a1b78fd07b1105fc3284c2adb784edaecec885e4a1d2d81a60cdb4fb2331602574fc19ca09eb3ed54f92991cf80bf5a823710ab045891daaf5b041fb75ef13cf7fb06dd52f048fb88cea529", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000052000000000000004c001400736d3300"/244], 0x13c}}, 0x0)

3m43.928885802s ago: executing program 2 (id=295):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, 0x0)
fchdir(r0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000005288bda0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
lseek(r6, 0x289e0cb5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x10, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="33a4bfa1c7ca0a7e0c9807a6f245d46884a4a96722a6b6af28f94fc57aa13201dc4abf70d4ef5f5b9e7b", @ANYBLOB="74a3f1cf3bec369e8fd2be2626aac5fb9306b245063926142d284d52bae4e58a06641129ebaafe2432f254d54a7d018dc8cb38deaa9ad107", @ANYRES8=r6, @ANYRES64=r2, @ANYBLOB="b05d796020b1ba3325fd8017310ba613f8ab46e7b8b238a01539f5813cb0e4be772954355a820ed0c5e2f7351a68625c040d9c5da2765f3497d61b4bd5672d9afa60117b55dec4214292ccb116864b60acb7767fc37a5060f0ed6ba0cca2d925cd96befda25dea62425ba8b0d6fadd5e7667c728b031ff0d8afa6d124fd768680e90427eb28b3a55347d2b5fffbdcbc46c4c4cc0b36d331a13a1eaf6647d2bb3d600"/173], 0x0, 0x1000, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
iopl(0x3)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r7, &(0x7f0000000000)="38000300010003", 0x7)
prctl$PR_SCHED_CORE(0x1f, 0x0, 0x0, 0x0, 0x0)

3m43.639583013s ago: executing program 1 (id=297):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x5c18e1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @remote}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x88882, 0x0)
setresuid(0xee00, 0x0, 0x0)
setpriority(0x2, 0x0, 0xffffffffffffffcd)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/130, 0x82}], 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8401}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000100)=[{r3, 0x10c4}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb9, 0xd, 0x4, 0x0, 0x4})
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x44000)

3m43.401055138s ago: executing program 1 (id=298):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "a26a96266dc1646434"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x44}, 0x0)

3m43.400540152s ago: executing program 2 (id=299):
r0 = socket$unix(0x1, 0x7, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xffffffff, @empty}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x80, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4a, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x3fc, 0x0, 0x3}, {"05a800b3e3aa943b12ed26b5f3523a4bd44e050000005b7d9a28723d113206da24aa73d765d1c0fbde1454a8f1297270e18929c36633"}}}}}}}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x100, 0x4)
r3 = timerfd_create(0x8, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @mcast1, 0x7}, 0x1c)
timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)

3m43.025266439s ago: executing program 44 (id=299):
r0 = socket$unix(0x1, 0x7, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xffffffff, @empty}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x80, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4a, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x3fc, 0x0, 0x3}, {"05a800b3e3aa943b12ed26b5f3523a4bd44e050000005b7d9a28723d113206da24aa73d765d1c0fbde1454a8f1297270e18929c36633"}}}}}}}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x100, 0x4)
r3 = timerfd_create(0x8, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @mcast1, 0x7}, 0x1c)
timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)

3m43.015136677s ago: executing program 1 (id=301):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x20000040)

3m42.599256198s ago: executing program 1 (id=302):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$ax25(0x3, 0x2, 0x7)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x301883, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2ee2, &(0x7f00000002c0)={<r7=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, r7, 0x2}}, 0x48)
r8 = semget$private(0x0, 0x4000000009, 0x0)
semop(r8, &(0x7f00000000c0)=[{0x4, 0x1}], 0x1)
semctl$SETALL(r8, 0x0, 0x11, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x6, 0x4, 0x3ff, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000ac1414aa000000000000000000080000e000000200000000000000000000000000000000000000000000002000000000f00e57bc327f569d3e0479f463157f9a1b78fd07b1105fc3284c2adb784edaecec885e4a1d2d81a60cdb4fb2331602574fc19ca09eb3ed54f92991cf80bf5a823710ab045891daaf5b041fb75ef13cf7fb06dd52f048fb88cea5298bd018", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000052000000000000004c001400736d3300"/244], 0x13c}}, 0x0)

3m41.389703287s ago: executing program 1 (id=303):
pipe(&(0x7f0000000cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)='w', 0x1}], 0x1000000000000101, 0x1)
close(r1)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r3=>0x0})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000640)}, 0x20)
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x2, {}, 0x884d4e09817961eb}, 0x18)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)

3m40.844859352s ago: executing program 1 (id=304):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48)

3m40.507002399s ago: executing program 45 (id=304):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48)

3m35.320347424s ago: executing program 3 (id=306):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x5c18e1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @remote}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x88882, 0x0)
setresuid(0xee00, 0x0, 0x0)
setpriority(0x2, 0x0, 0xffffffffffffffcd)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/130, 0x82}], 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8401}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000100)=[{r3, 0x10c4}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb9, 0xd, 0x4, 0x0, 0x4})
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x44000)

3m35.125024183s ago: executing program 3 (id=307):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00')
getdents64(r0, &(0x7f0000000380)=""/92, 0x2d)
r1 = syz_open_procfs(0x0, &(0x7f0000001380))
fstat(r1, &(0x7f0000007040))
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x2be, 0x80000001, 0x2e7daa37, 0x0, r0, 0x6, '\x00', 0x0, r1, 0x5, 0x5, 0x4, 0x6, @void, @value, @void, @value}, 0x50)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x10000000}}, 0x10)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1fb553244e946098, {{0x42, 0x200000c}, 0x1}}, 0x10)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x3, "c3e904"}, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x48, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x3, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0xa3, 0xf9}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xc, 0x0, 0x8, 0x40, 0x3}, 0x81, &(0x7f00000000c0)={0x5, 0xf, 0x81, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "3092e0955379b98017fa75d0d0867065"}, @generic={0x5e, 0x10, 0xe, "666b7838bf5dc7b4835c6e96153b661e7579fa0b603f798d894c2db1afb53b677bc09d87b702da36f6162b74ac3060a8885697e3392a436f856a0c78aee77d0f98beb95ce6070fa9e8f173f831fb1eb61145ed1f073053d4add34c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x42, 0x7, 0x1}]}, 0x2, [{0x26, &(0x7f00000001c0)=@string={0x26, 0x3, "98993dc969fa38087b9586ff312e333a004f7fd05849433579d65c58cb04a87c8c6965ac"}}, {0xce, &(0x7f00000002c0)=@string={0xce, 0x3, "b80aefccab99895c8f862c9835d46c60d8db6d216a9961d40ec860b710b61f2f26934db2c4e7b968fd534a7d61f36e45f4ac2609fec062ba0ec93712b4176eaa5468c43615be87cdb403695f1238ded1390467f7eec43047249af70f4935e0923c0dc5179bc2ffbfc0644bc02ab6ccc6a43de1826180a8a6d8387bd201c18ff2627b64f439f0419421eae7440195146200dcc6d9a6ab62dcd9dd363fb3ec8ed123a9f05fd035cc07268e6cf07928ef09f4edf8d7d2692532401be03127d6edeb2a01535a49bbb113a5810c3c"}}]})

3m32.767080175s ago: executing program 3 (id=308):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "a26a96266dc1646434"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x44}, 0x0)

3m32.546504751s ago: executing program 3 (id=309):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$ax25(0x3, 0x2, 0x7)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x301883, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2ee2, &(0x7f00000002c0)={<r7=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, r7, 0x2}}, 0x48)
r8 = semget$private(0x0, 0x4000000009, 0x0)
semop(r8, &(0x7f00000000c0)=[{0x4, 0x1}], 0x1)
semctl$SETALL(r8, 0x0, 0x11, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x6, 0x4, 0x3ff, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000ac1414aa000000000000000000080000e000000200000000000000000000000000000000000000000000002000000000f00e57bc327f569d3e0479f463157f9a1b78fd07b1105fc3284c2adb784edaecec885e4a1d2d81a60cdb4fb2331602574fc19ca09eb3ed54f92991cf80bf5a823710ab045891daaf5b041fb75ef13cf7fb06dd52f048fb88cea5298bd018", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000052000000000000004c001400736d3300"/244], 0x13c}}, 0x0)

3m31.373205551s ago: executing program 3 (id=310):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7004fcdbdf252100000008000300", @ANYRES32, @ANYBLOB="04002c80"], 0x20}, 0x1, 0x0, 0x0, 0x14081}, 0x9590f6cc3ea35512)

3m30.91294145s ago: executing program 3 (id=311):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x20, r1, 0xe23, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x4080)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x2, 0x80000001, 0x1})
socket(0x11, 0x80805, 0x0)
socket$inet(0x2, 0x80001, 0x84)
tkill(0x0, 0xb)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000980)={0x2, @pix_mp={0xa, 0x81, 0x59565955, 0x4, 0xb, [{0x200, 0x1}, {0xfffffff7, 0x9}, {0xff8f, 0x5}, {0x0, 0x3}, {0x8, 0x9d8}, {0x10, 0x4}, {0x1}, {0xfffff000}], 0xcb, 0x9, 0x8, 0x2, 0x6}})
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040))
fadvise64(0xffffffffffffffff, 0x1, 0xf1c, 0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=ANY=[@ANYBLOB="5c0000000101010300000000000000000a0000000c001980080002000f0400003c0002802c00018014000300fe8008000000000000000000000000aa14000400fc000000000000000000000000000000080002"], 0x5c}}, 0x0)

3m30.646201474s ago: executing program 46 (id=311):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x20, r1, 0xe23, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x4080)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x2, 0x80000001, 0x1})
socket(0x11, 0x80805, 0x0)
socket$inet(0x2, 0x80001, 0x84)
tkill(0x0, 0xb)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000980)={0x2, @pix_mp={0xa, 0x81, 0x59565955, 0x4, 0xb, [{0x200, 0x1}, {0xfffffff7, 0x9}, {0xff8f, 0x5}, {0x0, 0x3}, {0x8, 0x9d8}, {0x10, 0x4}, {0x1}, {0xfffff000}], 0xcb, 0x9, 0x8, 0x2, 0x6}})
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040))
fadvise64(0xffffffffffffffff, 0x1, 0xf1c, 0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=ANY=[@ANYBLOB="5c0000000101010300000000000000000a0000000c001980080002000f0400003c0002802c00018014000300fe8008000000000000000000000000aa14000400fc000000000000000000000000000000080002"], 0x5c}}, 0x0)

3m24.687632581s ago: executing program 6 (id=315):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}}, 0x20004000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000000c0), 0x4)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x1d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'veth1_vlan\x00', {}, 0x0, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1]}}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00'}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4)
recvmmsg(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f00000002c0)=""/181, 0xb5}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000c40)=[{0x0}], 0x1}, 0xff}], 0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETLINK(r7, 0x541b, 0x2000fcc6)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newspdinfo={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, 0x4, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a37055437", 0x1f)
socket$inet6_udplite(0xa, 0x2, 0x88)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5cd6}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x800)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000003c0)={'nat\x00', 0xda, "50c40f6430073555c728439972aab7ef734a7c158f0b4d303a80df7f4467d8cdd7cf0049219e281109dbf8ac674e648385b0cd9bf60db3605bface9cf1664c65036f294cf2d6e3460605c8ca6f5be5a4e1e587e2cf76005d0f6eb41dd43fd5a8e3e4b452f0b602a7b00f7269f05c19591cfe49614d4951c9210b05fa68864a67ce4a17af2bf6175cf40cbbed9814324c3d1c55f3d1418f41f19054108d2ba948f020495d0493ba94365d76c997f46e26964447574d1471ee97965b7c34ef4a25fc3c1321820a7c52be746c4756bcdd1554098fae961c0612882e"}, &(0x7f0000000040)=0xfe)

3m23.675623604s ago: executing program 6 (id=316):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x6, 0x8}, &(0x7f0000000600)=0x90)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1})
ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x19)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x9c, r1, 0x1, 0x2000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x7e, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @broadcast, @device_b, @random="7d73b97d7a62", {0x5, 0x2}}, 0xdcdf, @default, 0x410, @val={0x0, 0xe, @random="6171a531f35ed95b21b8a52cb4c6"}, @void, @void, @val={0x4, 0x6, {0x1, 0x1, 0xdd27, 0xcd}}, @val={0x6, 0x2, 0x7}, @val={0x5, 0x3, {0x4, 0x22, 0xfa}}, @val={0x25, 0x3, {0x1, 0xb5, 0x7}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x1000, 0x3, 0x0, 0x0, {0xfffffffffffffffc, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x83f6, 0x75}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfd, 0x4, 0x20}}, @val={0x76, 0x6, {0x6f, 0x8, 0x9, 0xfe02}}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x8000)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x1)

3m23.212206105s ago: executing program 6 (id=317):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x9590f6cc3ea35512)

3m23.053090517s ago: executing program 6 (id=318):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$ax25(0x3, 0x2, 0x7)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x301883, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2ee2, &(0x7f00000002c0)={<r7=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, r7, 0x2}}, 0x48)
r8 = semget$private(0x0, 0x4000000009, 0x0)
semop(r8, &(0x7f00000000c0)=[{0x4, 0x1}], 0x1)
semctl$SETALL(r8, 0x0, 0x11, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x6, 0x4, 0x3ff, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000ac1414aa000000000000000000080000e000000200000000000000000000000000000000000000000000002000000000f00e57bc327f569d3e0479f463157f9a1b78fd07b1105fc3284c2adb784edaecec885e4a1d2d81a60cdb4fb2331602574fc19ca09eb3ed54f92991cf80bf5a823710ab045891daaf5b041fb75ef13cf7fb06dd52f048fb88cea5298bd018ee", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000052000000000000004c001400736d3300"/244], 0x13c}}, 0x0)

3m21.917382977s ago: executing program 6 (id=319):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000b80), 0x0, 0x4048841)

3m20.632324986s ago: executing program 5 (id=321):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0x80000009, 0x2}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, 0x0, 0x8d4)

3m20.455926116s ago: executing program 5 (id=322):
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket(0x1d, 0x2, 0x6)
recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10100, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x18)
setsockopt$inet6_int(r4, 0x10d, 0xa, &(0x7f0000000240)=0xb, 0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r5, r5, &(0x7f0000000080), 0x107f03)

3m19.175658071s ago: executing program 5 (id=323):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}}, 0x20004000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000000c0), 0x4)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x1d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'veth1_vlan\x00', {}, 0x0, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1]}}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00'}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4)
recvmmsg(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f00000002c0)=""/181, 0xb5}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000c40)=[{0x0}], 0x1}, 0xff}], 0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETLINK(r7, 0x541b, 0x2000fcc6)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newspdinfo={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, 0x4, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a37055437", 0x1f)
socket$inet6_udplite(0xa, 0x2, 0x88)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5cd6}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x800)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000003c0)={'nat\x00', 0xda, "50c40f6430073555c728439972aab7ef734a7c158f0b4d303a80df7f4467d8cdd7cf0049219e281109dbf8ac674e648385b0cd9bf60db3605bface9cf1664c65036f294cf2d6e3460605c8ca6f5be5a4e1e587e2cf76005d0f6eb41dd43fd5a8e3e4b452f0b602a7b00f7269f05c19591cfe49614d4951c9210b05fa68864a67ce4a17af2bf6175cf40cbbed9814324c3d1c55f3d1418f41f19054108d2ba948f020495d0493ba94365d76c997f46e26964447574d1471ee97965b7c34ef4a25fc3c1321820a7c52be746c4756bcdd1554098fae961c0612882e"}, &(0x7f0000000040)=0xfe)

3m18.893117912s ago: executing program 6 (id=324):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x6, 0x8}, &(0x7f0000000600)=0x90)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1})
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x19)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x1)

3m18.409446679s ago: executing program 47 (id=324):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x6, 0x8}, &(0x7f0000000600)=0x90)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1})
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x19)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x1)

3m18.1936295s ago: executing program 5 (id=326):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$ax25(0x3, 0x2, 0x7)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x301883, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2ee2, &(0x7f00000002c0)={<r7=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, r7, 0x2}}, 0x48)
r8 = semget$private(0x0, 0x4000000009, 0x0)
semop(r8, &(0x7f00000000c0)=[{0x4, 0x1}], 0x1)
semctl$SETALL(r8, 0x0, 0x11, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x6, 0x4, 0x3ff, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000ac1414aa000000000000000000080000e000000200000000000000000000000000000000000000000000002000000000f00e57bc327f569d3e0479f463157f9a1b78fd07b1105fc3284c2adb784edaecec885e4a1d2d81a60cdb4fb2331602574fc19ca09eb3ed54f92991cf80bf5a823710ab045891daaf5b041fb75ef13cf7fb06dd52f048fb88cea5298bd018ee", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000052000000000000004c001400736d3300"/244], 0x13c}}, 0x0)

3m16.087827805s ago: executing program 5 (id=327):
r0 = getuid()
setreuid(r0, r0)
r1 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil)
shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
getpgid(0xffffffffffffffff)
getpid()
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180))
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x8, 0x8}, {0x101, 0x6, 0x9, 0xff01}}}}, 0x15)

3m15.22893403s ago: executing program 5 (id=328):
socket$inet6(0xa, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
io_setup(0x2278, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

3m14.640213726s ago: executing program 48 (id=328):
socket$inet6(0xa, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
io_setup(0x2278, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

3m11.852979434s ago: executing program 8 (id=335):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$ax25(0x3, 0x2, 0x7)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x301883, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2ee2, &(0x7f00000002c0)={<r7=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, r7, 0x2}}, 0x48)
r8 = semget$private(0x0, 0x4000000009, 0x0)
semop(r8, &(0x7f00000000c0)=[{0x4, 0x1}], 0x1)
semctl$SETALL(r8, 0x0, 0x11, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x6, 0x4, 0x3ff, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000ac1414aa000000000000000000080000e000000200000000000000000000000000000000000000000000002000000000f00e57bc327f569d3e0479f463157f9a1b78fd07b1105fc3284c2adb784edaecec885e4a1d2d81a60cdb4fb2331602574fc19ca09eb3ed54f92991cf80bf5a823710ab045891daaf5b041fb75ef13cf7fb06dd52f048fb88cea5298bd018ee", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000052000000000000004c001400736d3300"/244], 0x13c}}, 0x0)

3m11.553797502s ago: executing program 8 (id=336):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0x80000009, 0x2}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4)

2m40.412912568s ago: executing program 8 (id=336):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0x80000009, 0x2}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4)

1m53.367355285s ago: executing program 8 (id=336):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0x80000009, 0x2}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4)

1m16.512434418s ago: executing program 8 (id=336):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0x80000009, 0x2}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4)

43.070455687s ago: executing program 8 (id=336):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0x80000009, 0x2}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4)

16.625144097s ago: executing program 4 (id=842):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3400c041)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r1=>0x0, 0x0})
close(r1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000001)
socket$packet(0x11, 0x3, 0x300)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0)

15.672246856s ago: executing program 7 (id=845):
r0 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r0, &(0x7f0000001140)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x4c000000, 0x8, {0x0, @broadcast, @remote}}}], 0x58}, 0x0)

15.359777618s ago: executing program 7 (id=848):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001340)="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", 0x5bf}], 0x1}}], 0x1, 0x84)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="6780958aecbb43e0f84f257f8845250c6d67d4035f9f83b9cfdec4c139dafdc6fcb556cc05d569d47d6f73baba6c160931804840fd130a61741c4259bce2cb553eaeb219b7dfa014559b6b00c82889849fd73cdde27e95e6f697add76c1c41d34f05157d4cdaf7cbdd065ab5551a4477617f5e58f8ecee3ec6202f214a6ea07527594f26e3428b4b7c6eace53d9604e246becee60914f78df8f35961650500ea0132b0951e0e19c44da361e40c2fd3d8c0f4058272f10472314ad17ead709aa1fdd9874123e8029961cd0c3898b0313cd4f28db7af51e96c62355ed116cf8893f9746b1b53b5281767f00750bd09c59bfa8c9d9541", 0xf5}, {&(0x7f00000003c0)="c91821af30339a8d3c612bcf0d4786602bcd643c869ead6bb041c8921fb373013bf0abc68db8f3b773903a27343fe890dd06967d0b6c8feae356d6dea46d4917d6a4a43c40ae419943627e6f462fbe492912b2429fb8b460545a261b70defd93a1ec514749d1b92611fbbfd6bad848acdc2e805241e45b90cc75ec8a42d6c29e03b39614c56c66d3ad0b6a4389bc826a73e69ce082f70d7b0d91d1baeed446f831f27fc131329e6581315349384772a9711273398cae79f3e0a3430c39d4d5b9211c27b2c6d296e55aca3fb25c749b1bf1571ef539bc", 0xd6}, {&(0x7f00000004c0)="4132ca7b8b5252f31358f1e4d8433f3faa860e6f7fd98187b5fed69ecf0093af652716b0b61b3b6f58bbfbfae0178b6ea6f2728f63ad4472f98043c19a5f7b3080d17689538881398d77f16be0294bb3458565843bbabe0861857fd5a5b73a7407906c410c0d1916ef24a91d6d5a750a96cb7905703340552de0c26e3eb284483732f4c6a232c1ee00c4cf19962035f5de46e25f51d74cb92075966c563e21fb145b5e5973a727719d685a4f08e110e7997bc2f416533212be6d022acf9de61cee087e4deb309eaccca3", 0xca}], 0x3)

15.115059718s ago: executing program 0 (id=850):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x5c18e1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x88882, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/130, 0x82}], 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8401}, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000100)=[{r2, 0x10c4}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb9, 0xd, 0x4, 0x0, 0x4})
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x44000)

15.08876346s ago: executing program 7 (id=851):
pipe(&(0x7f0000000cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)='w', 0x1}], 0x1000000000000101, 0x1)
close(r1)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r3=>0x0})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000640)}, 0x20)
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x2, {}, 0x884d4e09817961eb}, 0x18)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)

14.955398281s ago: executing program 4 (id=853):
r0 = socket(0x2, 0x80805, 0x0)
listen(r0, 0xfffffffa)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0xc0)

14.729019963s ago: executing program 0 (id=854):
r0 = socket$l2tp(0x2, 0x2, 0x73)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
getpid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
getgid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194)
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @multicast1}, 0x2, 0x3, 0x0, 0x3}}, 0x2e)
sendto$inet(r0, 0x0, 0x0, 0x4000010, &(0x7f0000000000)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)

14.617179472s ago: executing program 4 (id=855):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b1a, &(0x7f0000000040))
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x40f00, 0x79, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x1, 0x0, &(0x7f00000000c0))

14.606033928s ago: executing program 9 (id=856):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8000000003, 0x0, 0x111, 0xa}}, 0x20)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
ioperm(0x6, 0xa875, 0x10000005)
modify_ldt$read(0x1100, 0x0, 0x0)

13.874962572s ago: executing program 7 (id=857):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @mss={0x2, 0x4, 0x494}]}}}}}}}, 0x0)

12.329850045s ago: executing program 0 (id=858):
r0 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r0, &(0x7f0000001140)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x4c000000, 0x8, {0x0, @broadcast, @remote}}}], 0x58}, 0x0)

12.295494176s ago: executing program 7 (id=859):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ad577d2c", @ANYRES16=r2, @ANYBLOB="010000000000000000000c0000001800058008000100756470000c0002800800040000000000"], 0x2c}}, 0x0)
r3 = io_uring_setup(0x10d5, &(0x7f00000002c0)={0x0, 0xeebd, 0x100, 0x0, 0x2000001d})
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x1ff)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000000)={0x7fffffff, 0xa9b, 0x8, 0x0, 0x3})
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0xfc36)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
accept$netrom(r5, &(0x7f0000000400)={{0x3, @null}, [@null, @null, @rose, @remote, @bcast, @rose, @remote, @default]}, &(0x7f0000000480)=0x48)
read(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000640)={<r8=>0xffffffffffffffff}, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xffffffff, @empty, 0x2}, {0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0xc3}, 0x1}, r8, 0x1}}, 0x48)
recvfrom(r0, &(0x7f0000000740)=""/4096, 0x1000, 0x10140, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x2, @broadcast, 'pim6reg1\x00'}}, 0x80)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000000540), r8, 0x2}}, 0x18)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c41090ea000000000001090224000100000000090400002303000000092100000001220700090581030000000000"], 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x2000, @loopback}, 0x10)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x2710, @my=0x0}, 0x10)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)

12.250751497s ago: executing program 9 (id=860):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0)

12.159043888s ago: executing program 4 (id=861):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001340)="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", 0x5bf}], 0x1}}], 0x1, 0x84)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="6780958aecbb43e0f84f257f8845250c6d67d4035f9f83b9cfdec4c139dafdc6fcb556cc05d569d47d6f73baba6c160931804840fd130a61741c4259bce2cb553eaeb219b7dfa014559b6b00c82889849fd73cdde27e95e6f697add76c1c41d34f05157d4cdaf7cbdd065ab5551a4477617f5e58f8ecee3ec6202f214a6ea07527594f26e3428b4b7c6eace53d9604e246becee60914f78df8f35961650500ea0132b0951e0e19c44da361e40c2fd3d8c0f4058272f10472314ad17ead709aa1fdd9874123e8029961cd0c3898b0313cd4f28db7af51e96c62355ed116cf8893f9746b1b53b5281767f00750bd09c59bfa8c9d9541", 0xf5}, {&(0x7f00000003c0)="c91821af30339a8d3c612bcf0d4786602bcd643c869ead6bb041c8921fb373013bf0abc68db8f3b773903a27343fe890dd06967d0b6c8feae356d6dea46d4917d6a4a43c40ae419943627e6f462fbe492912b2429fb8b460545a261b70defd93a1ec514749d1b92611fbbfd6bad848acdc2e805241e45b90cc75ec8a42d6c29e03b39614c56c66d3ad0b6a4389bc826a73e69ce082f70d7b0d91d1baeed446f831f27fc131329e6581315349384772a9711273398cae79f3e0a3430c39d4d5b9211c27b2c6d296e55aca3fb25c749b1bf1571ef539bc", 0xd6}, {&(0x7f00000004c0)="4132ca7b8b5252f31358f1e4d8433f3faa860e6f7fd98187b5fed69ecf0093af652716b0b61b3b6f58bbfbfae0178b6ea6f2728f63ad4472f98043c19a5f7b3080d17689538881398d77f16be0294bb3458565843bbabe0861857fd5a5b73a7407906c410c0d1916ef24a91d6d5a750a96cb7905703340552de0c26e3eb284483732f4c6a232c1ee00c4cf19962035f5de46e25f51d74cb92075966c563e21fb145b5e5973a727719d685a4f08e110e7997bc2f416533212be6d022acf9de61cee087e4deb309eaccca3", 0xca}], 0x3)

12.001341714s ago: executing program 0 (id=862):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001340)="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", 0xfc4}], 0x1}}], 0x1, 0x84)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

11.985937308s ago: executing program 9 (id=863):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3400c041)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r1=>0x0, 0x0})
close(r1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000001)
socket$packet(0x11, 0x3, 0x300)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0)

11.875637195s ago: executing program 4 (id=864):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x5, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r0}, &(0x7f0000000d40), &(0x7f0000000d80)=r1}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

11.63157749s ago: executing program 4 (id=865):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000005288bda0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')

10.965186011s ago: executing program 0 (id=866):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r1, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff)

10.709474136s ago: executing program 9 (id=867):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
listen(r3, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:* r\x00'], 0x8)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
r6 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="6115033a2a"], 0x8)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
bind$inet6(r3, &(0x7f0000002380)={0xa, 0x4e23, 0x59, @loopback, 0x2}, 0x1c)

9.980555145s ago: executing program 0 (id=868):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = syz_open_dev$swradio(0x0, 0x1, 0x2)
preadv(r1, 0x0, 0x0, 0x1000, 0x3f2f0fde)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc)
add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0)

8.878273798s ago: executing program 9 (id=869):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)=""/7, 0x7}, {&(0x7f00000001c0)=""/146, 0x92}], 0x2}, 0x100)

8.812344719s ago: executing program 7 (id=870):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8000000003, 0x0, 0x111, 0xa}}, 0x20)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
ioperm(0x6, 0xa875, 0x10000005)
modify_ldt$read(0x1100, 0x0, 0x0)

0s ago: executing program 9 (id=871):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b1a, &(0x7f0000000040))
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x40f00, 0x79, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x1, 0x0, &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

.834245][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.841618][   T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  184.850843][ T7123] bridge_slave_1: entered allmulticast mode
[  184.858814][ T7123] bridge_slave_1: entered promiscuous mode
[  184.954987][ T7123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.967846][ T7123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.986606][ T7158] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.995525][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.008891][ T7158] bridge_slave_0: entered allmulticast mode
[  185.016080][ T7158] bridge_slave_0: entered promiscuous mode
[  185.019171][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.024719][ T7158] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.040661][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.047970][ T7158] bridge_slave_1: entered allmulticast mode
[  185.054934][ T7158] bridge_slave_1: entered promiscuous mode
[  185.059300][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.088185][   T47] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  185.107472][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.127510][   T47] usb 4-1: config 0 descriptor??
[  185.150000][ T7123] team0: Port device team_slave_0 added
[  185.159032][ T7123] team0: Port device team_slave_1 added
[  185.274759][ T7158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.294073][ T7158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.323901][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.331752][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.359084][ T7123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.374045][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.381944][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.408185][ T7123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.419987][ T7022] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  185.434714][ T7022] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  185.467481][ T7158] team0: Port device team_slave_0 added
[  185.507782][ T7022] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  185.522208][ T7022] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  185.545798][ T7158] team0: Port device team_slave_1 added
[  185.578430][   T47] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0
[  185.675806][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.689934][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.717635][ T7158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.759737][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.766790][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.800004][ T7158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.821015][ T7123] hsr_slave_0: entered promiscuous mode
[  185.827759][ T7123] hsr_slave_1: entered promiscuous mode
[  185.834156][ T7123] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.842304][ T7123] Cannot create hsr debugfs directory
[  185.951540][ T7158] hsr_slave_0: entered promiscuous mode
[  185.961674][ T7158] hsr_slave_1: entered promiscuous mode
[  185.968553][ T7158] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.976186][ T7158] Cannot create hsr debugfs directory
[  185.997054][ T5836] Bluetooth: hci1: command tx timeout
[  186.101950][ T6128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.215098][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.218445][ T6128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.240709][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.265539][   T47] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device
[  186.284518][   T47] pyra 0003:1E7D:2CF6.0004: couldn't install mouse
[  186.295514][   T47] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71
[  186.314793][   T47] usb 4-1: USB disconnect, device number 2
[  186.374288][ T6128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.489421][ T6128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.544542][ T6983] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.637527][ T5836] Bluetooth: hci4: command tx timeout
[  186.783375][ T7022] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.938617][ T7022] 8021q: adding VLAN 0 to HW filter on device team0
[  186.996342][ T6128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.069625][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.076947][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.110291][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.117489][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.193232][ T6128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.294420][ T7022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  187.494591][ T6128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.583936][ T7265] netlink: 76 bytes leftover after parsing attributes in process `syz.3.309'.
[  188.107718][ T5836] Bluetooth: hci1: command tx timeout
[  188.340071][ T6983] veth0_vlan: entered promiscuous mode
[  188.421647][ T6128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.564518][ T7158] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  188.589173][ T6983] veth1_vlan: entered promiscuous mode
[  188.634611][ T7158] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  188.645395][ T7158] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  188.674280][ T7158] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  188.841855][ T6983] veth0_macvtap: entered promiscuous mode
[  188.976766][ T6983] veth1_macvtap: entered promiscuous mode
[  189.038408][ T6128] bridge_slave_1: left allmulticast mode
[  189.044107][ T6128] bridge_slave_1: left promiscuous mode
[  189.063810][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.078556][ T6128] bridge_slave_0: left allmulticast mode
[  189.084275][ T6128] bridge_slave_0: left promiscuous mode
[  189.119441][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.130033][ T6128] bridge_slave_1: left allmulticast mode
[  189.135732][ T6128] bridge_slave_1: left promiscuous mode
[  189.146133][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.156706][ T6128] bridge_slave_0: left allmulticast mode
[  189.162843][ T6128] bridge_slave_0: left promiscuous mode
[  189.170495][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.451364][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  189.462078][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  189.473745][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  189.491122][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  189.500517][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  189.508897][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  189.833768][ T6128] bond0 (unregistering): left allmulticast mode
[  189.841322][ T6128] bond_slave_0: left allmulticast mode
[  189.846915][ T6128] bond_slave_1: left allmulticast mode
[  189.852453][ T6128] bond0 (unregistering): left promiscuous mode
[  189.858797][ T6128] bond_slave_0: left promiscuous mode
[  189.864374][ T6128] bond_slave_1: left promiscuous mode
[  189.913651][ T6128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.925378][ T6128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.936817][ T6128] bond0 (unregistering): Released all slaves
[  190.049840][ T6128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.061361][ T6128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.071808][ T6128] bond0 (unregistering): Released all slaves
[  190.092875][ T7022] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.181418][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.215152][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.237081][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.257007][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.272690][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.283545][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.321912][ T6983] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.482058][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.494912][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.514433][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.525012][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.534979][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.545505][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.576741][ T6983] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.593883][ T6983] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.607183][ T6983] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.615930][ T6983] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.634600][ T6983] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.811449][ T7123] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  190.864289][ T7123] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  190.897185][ T7123] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  190.977211][ T7123] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  191.246142][ T7022] veth0_vlan: entered promiscuous mode
[  191.319198][ T6128] hsr_slave_0: left promiscuous mode
[  191.329724][ T6128] hsr_slave_1: left promiscuous mode
[  191.343866][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.353590][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.374164][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.388507][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.410550][ T6128] hsr_slave_0: left promiscuous mode
[  191.416554][ T6128] hsr_slave_1: left promiscuous mode
[  191.424636][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.432370][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.450397][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.460723][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.508808][ T6128] veth1_macvtap: left promiscuous mode
[  191.514421][ T6128] veth0_macvtap: left promiscuous mode
[  191.528348][ T6128] veth1_vlan: left promiscuous mode
[  191.533708][ T6128] veth0_vlan: left promiscuous mode
[  191.540582][ T6128] veth1_macvtap: left promiscuous mode
[  191.546144][ T6128] veth0_macvtap: left promiscuous mode
[  191.552475][ T6128] veth1_vlan: left promiscuous mode
[  191.558354][ T6128] veth0_vlan: left promiscuous mode
[  191.597681][ T5833] Bluetooth: hci3: command tx timeout
[  192.046059][ T6128] team0 (unregistering): Port device team_slave_1 removed
[  192.093786][ T6128] team0 (unregistering): Port device team_slave_0 removed
[  192.785077][ T6128] team0 (unregistering): Port device team_slave_1 removed
[  192.824556][ T6128] team0 (unregistering): Port device team_slave_0 removed
[  193.208651][ T7158] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.266171][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.297538][ T7022] veth1_vlan: entered promiscuous mode
[  193.305982][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.413683][ T3033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.431543][ T7288] chnl_net:caif_netlink_parms(): no params data found
[  193.452663][ T3033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.571661][ T7158] 8021q: adding VLAN 0 to HW filter on device team0
[  193.648828][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.655995][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.680551][ T5833] Bluetooth: hci3: command tx timeout
[  193.741646][ T7022] veth0_macvtap: entered promiscuous mode
[  193.814648][  T138] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.821903][  T138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.180157][   T30] audit: type=1326 audit(1742629849.169:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7344 comm="syz.6.313" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafa098d169 code=0x0
[  194.342790][ T7022] veth1_macvtap: entered promiscuous mode
[  194.577427][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  194.583866][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  194.600627][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.610583][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.645118][ T7288] bridge_slave_0: entered allmulticast mode
[  194.668221][ T7288] bridge_slave_0: entered promiscuous mode
[  194.704244][ T7158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  194.715669][ T7158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.760598][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.791886][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.833561][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.894740][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.916014][ T7022] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.997445][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.007746][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.015043][ T7288] bridge_slave_1: entered allmulticast mode
[  195.038735][ T7288] bridge_slave_1: entered promiscuous mode
[  195.063594][ T7368] Cannot find add_set index 0 as target
[  195.075566][ T7123] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.100305][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.122664][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.138933][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.157606][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.178356][ T7022] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.238451][ T7288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.278716][ T7022] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.291918][ T7022] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.300733][ T7022] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.309735][ T7022] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.325801][ T7288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.404148][ T7158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.422161][ T7123] 8021q: adding VLAN 0 to HW filter on device team0
[  195.442348][ T7288] team0: Port device team_slave_0 added
[  195.455213][  T138] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.462430][  T138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.482349][ T7288] team0: Port device team_slave_1 added
[  195.542219][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.558227][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.591754][ T7288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.651660][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.658877][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.688178][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.706653][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.741497][ T7288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.768400][ T5833] Bluetooth: hci3: command tx timeout
[  195.863645][ T6128] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.991689][ T6128] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.154739][ T6128] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.223937][ T7288] hsr_slave_0: entered promiscuous mode
[  196.236593][ T7288] hsr_slave_1: entered promiscuous mode
[  196.268250][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.291394][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.294854][ T6128] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.419334][ T7158] veth0_vlan: entered promiscuous mode
[  196.607234][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.631380][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.674494][ T7158] veth1_vlan: entered promiscuous mode
[  196.717450][ T7158] veth0_macvtap: entered promiscuous mode
[  196.735050][ T7158] veth1_macvtap: entered promiscuous mode
[  196.765367][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.775997][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.795053][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.807238][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.829804][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.844568][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.861425][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.876719][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.905161][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.932663][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.950982][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.994981][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.035593][ T7419] netlink: 76 bytes leftover after parsing attributes in process `syz.6.318'.
[  197.116306][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.214750][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.630363][ T7158] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.657151][ T7158] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.682543][ T7158] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.709651][ T7158] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.837373][ T5833] Bluetooth: hci3: command tx timeout
[  198.155230][ T6128] bridge_slave_1: left allmulticast mode
[  198.163603][ T6128] bridge_slave_1: left promiscuous mode
[  198.187083][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.926773][ T6128] bridge_slave_0: left allmulticast mode
[  198.951890][ T6128] bridge_slave_0: left promiscuous mode
[  198.962352][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.975148][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.320'.
[  200.455290][ T6128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.494674][ T6128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.524346][ T6128] bond0 (unregistering): Released all slaves
[  200.563329][ T7440] Cannot find add_set index 0 as target
[  200.866177][ T7123] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.140544][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.165685][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.258002][ T6128] hsr_slave_0: left promiscuous mode
[  201.282596][ T6128] hsr_slave_1: left promiscuous mode
[  201.308646][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.316134][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.340029][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.353869][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.444790][ T6128] veth1_macvtap: left promiscuous mode
[  201.477372][ T6128] veth0_macvtap: left promiscuous mode
[  201.483042][ T6128] veth1_vlan: left promiscuous mode
[  201.504236][ T6128] veth0_vlan: left promiscuous mode
[  201.814561][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  201.825908][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  201.834619][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  201.843615][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  201.851575][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  201.876073][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  201.999487][ T7467] netlink: 76 bytes leftover after parsing attributes in process `syz.5.326'.
[  202.714423][ T6128] team0 (unregistering): Port device team_slave_1 removed
[  202.755036][ T6128] team0 (unregistering): Port device team_slave_0 removed
[  203.289023][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.313844][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.540300][ T7288] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  203.612485][ T7123] veth0_vlan: entered promiscuous mode
[  203.636483][ T7288] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  203.917381][ T5836] Bluetooth: hci0: command tx timeout
[  203.978168][ T7288] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  204.007037][ T7288] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  204.957186][ T6128] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.029232][ T7123] veth1_vlan: entered promiscuous mode
[  205.137621][ T7288] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.156491][ T7288] 8021q: adding VLAN 0 to HW filter on device team0
[  205.181250][ T6128] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.247513][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.254705][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.265028][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.272219][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.997240][ T5836] Bluetooth: hci0: command tx timeout
[  206.373219][ T6128] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.472289][ T7464] chnl_net:caif_netlink_parms(): no params data found
[  206.512615][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  206.522708][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  206.539107][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  206.552916][ T6128] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.564241][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  206.572089][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  206.581222][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  206.699893][ T7123] veth0_macvtap: entered promiscuous mode
[  207.345697][ T7123] veth1_macvtap: entered promiscuous mode
[  207.460606][   T47] hid-generic 0005:16C0:5505.0005: item fetching failed at offset 0/3
[  207.487578][   T47] hid-generic 0005:16C0:5505.0005: probe with driver hid-generic failed with error -22
[  207.546595][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.556573][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.564238][ T7464] bridge_slave_0: entered allmulticast mode
[  207.580952][ T7464] bridge_slave_0: entered promiscuous mode
[  207.596011][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.609396][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.616664][ T7464] bridge_slave_1: entered allmulticast mode
[  207.629971][ T7464] bridge_slave_1: entered promiscuous mode
[  207.762105][ T6128] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.811497][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.828691][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.839895][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.850473][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.860658][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.871517][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.888986][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.960094][ T6128] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.975751][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.987501][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.998374][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.010382][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.020292][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.030937][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.042130][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.056489][ T7464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.069590][ T7464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.078766][ T5833] Bluetooth: hci0: command tx timeout
[  208.119794][ T7123] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.157193][ T7123] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.165968][ T7123] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.188883][ T7123] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.209359][ T7288] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.267918][ T6128] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.425573][ T6128] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.473308][ T7464] team0: Port device team_slave_0 added
[  208.511911][ T7464] team0: Port device team_slave_1 added
[  208.634732][ T7502] chnl_net:caif_netlink_parms(): no params data found
[  208.642742][ T5833] Bluetooth: hci2: command tx timeout
[  208.667626][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.674610][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.748315][ T7464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.769877][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.784794][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.821969][ T7464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.847541][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  208.857248][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  208.865123][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  208.873279][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  208.883007][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  208.890482][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  208.975356][ T6128] bridge_slave_1: left allmulticast mode
[  208.982513][ T6128] bridge_slave_1: left promiscuous mode
[  208.989680][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.999409][ T6128] bridge_slave_0: left allmulticast mode
[  209.005100][ T6128] bridge_slave_0: left promiscuous mode
[  209.011256][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.021663][ T6128] bridge_slave_1: left allmulticast mode
[  209.028089][ T6128] bridge_slave_1: left promiscuous mode
[  209.034251][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.044639][ T6128] bridge_slave_0: left allmulticast mode
[  209.051342][ T6128] bridge_slave_0: left promiscuous mode
[  209.057188][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.603875][ T6128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.621192][ T6128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.633433][ T6128] bond0 (unregistering): Released all slaves
[  209.743335][ T6128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.755985][ T6128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.767359][ T6128] bond0 (unregistering): Released all slaves
[  209.808434][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.821405][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.021732][ T7464] hsr_slave_0: entered promiscuous mode
[  210.037107][ T7464] hsr_slave_1: entered promiscuous mode
[  210.043431][ T7464] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  210.057351][ T7464] Cannot create hsr debugfs directory
[  210.156996][ T5836] Bluetooth: hci0: command tx timeout
[  210.231933][ T7288] veth0_vlan: entered promiscuous mode
[  210.274457][ T7502] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.286082][ T7502] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.307185][ T7502] bridge_slave_0: entered allmulticast mode
[  210.315791][ T7502] bridge_slave_0: entered promiscuous mode
[  210.336797][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.357100][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.413100][ T7502] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.421016][ T7502] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.428628][ T7502] bridge_slave_1: entered allmulticast mode
[  210.435644][ T7502] bridge_slave_1: entered promiscuous mode
[  210.496434][ T7288] veth1_vlan: entered promiscuous mode
[  210.715000][ T7502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.727349][ T5836] Bluetooth: hci2: command tx timeout
[  210.738627][ T7288] veth0_macvtap: entered promiscuous mode
[  210.790297][ T7502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.805826][ T7288] veth1_macvtap: entered promiscuous mode
[  210.832547][ T6128] hsr_slave_0: left promiscuous mode
[  210.844026][ T6128] hsr_slave_1: left promiscuous mode
[  210.850541][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.863045][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.872137][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.881133][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.893947][ T6128] hsr_slave_0: left promiscuous mode
[  210.900384][ T6128] hsr_slave_1: left promiscuous mode
[  210.906385][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.914677][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.923634][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.931656][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.957890][ T5836] Bluetooth: hci1: command tx timeout
[  210.974216][ T6128] veth1_macvtap: left promiscuous mode
[  210.990821][ T6128] veth0_macvtap: left promiscuous mode
[  210.996497][ T6128] veth1_vlan: left promiscuous mode
[  211.005215][ T6128] veth0_vlan: left promiscuous mode
[  211.015484][ T6128] veth1_macvtap: left promiscuous mode
[  211.022348][ T6128] veth0_macvtap: left promiscuous mode
[  211.035742][ T6128] veth1_vlan: left promiscuous mode
[  211.041449][ T6128] veth0_vlan: left promiscuous mode
[  212.773452][ T6128] team0 (unregistering): Port device team_slave_1 removed
[  212.797322][ T5836] Bluetooth: hci2: command tx timeout
[  212.824871][ T6128] team0 (unregistering): Port device team_slave_0 removed
[  213.037102][ T5836] Bluetooth: hci1: command tx timeout
[  213.679899][ T6128] team0 (unregistering): Port device team_slave_1 removed
[  213.759935][ T6128] team0 (unregistering): Port device team_slave_0 removed
[  214.284426][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.295280][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.306818][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.321080][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.336459][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.396114][ T7502] team0: Port device team_slave_0 added
[  214.462045][ T7502] team0: Port device team_slave_1 added
[  214.504697][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.531562][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.582642][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.608252][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.636316][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.675040][ T7502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.687427][ T7502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.724104][ T7502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.831504][ T7531] chnl_net:caif_netlink_parms(): no params data found
[  214.855947][ T7502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.863328][ T7502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.890266][ T5836] Bluetooth: hci2: command tx timeout
[  214.896737][ T7502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.109664][ T7288] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.170275][ T7288] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.209957][ T5836] Bluetooth: hci1: command tx timeout
[  215.237639][ T7288] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.286016][ T7288] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.645524][ T7502] hsr_slave_0: entered promiscuous mode
[  215.661570][ T7502] hsr_slave_1: entered promiscuous mode
[  215.702139][ T7502] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.716963][ T7502] Cannot create hsr debugfs directory
[  216.097619][ T7531] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.116618][ T7531] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.133105][ T7531] bridge_slave_0: entered allmulticast mode
[  216.140377][ T7531] bridge_slave_0: entered promiscuous mode
[  216.148400][ T7531] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.155518][ T7531] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.172342][ T7531] bridge_slave_1: entered allmulticast mode
[  216.187641][ T7531] bridge_slave_1: entered promiscuous mode
[  216.478949][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.494666][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.148816][ T7531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.179076][ T7531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.217202][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.256103][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.297022][ T5836] Bluetooth: hci1: command tx timeout
[  217.394909][ T7531] team0: Port device team_slave_0 added
[  217.408959][ T7531] team0: Port device team_slave_1 added
[  217.414976][ T7464] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  217.441392][ T7464] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  217.630923][ T7464] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  217.669025][ T7531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.676483][ T7531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.703974][ T7531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.724919][ T7464] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  217.753309][ T7531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.766286][ T7531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.793251][ T7531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.878491][   T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.056695][   T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.092817][ T7531] hsr_slave_0: entered promiscuous mode
[  218.100295][ T7531] hsr_slave_1: entered promiscuous mode
[  218.106355][ T7531] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  218.114934][ T7531] Cannot create hsr debugfs directory
[  218.138603][   T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.226686][   T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.349144][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.9.350'.
[  218.937510][ T7600] veth3: entered promiscuous mode
[  219.182822][ T7502] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  219.313999][ T7502] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  219.336338][ T7502] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  219.380453][ T7502] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  219.585273][ T7464] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.599734][   T36] bridge_slave_1: left allmulticast mode
[  220.265839][   T36] bridge_slave_1: left promiscuous mode
[  220.283058][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.293947][   T36] bridge_slave_0: left allmulticast mode
[  220.306883][   T36] bridge_slave_0: left promiscuous mode
[  220.313393][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.270367][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.357651][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.378946][   T36] bond0 (unregistering): Released all slaves
[  221.699168][ T7464] 8021q: adding VLAN 0 to HW filter on device team0
[  221.754614][ T7502] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.778942][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.786111][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.837781][ T7579] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  221.894131][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.901373][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.958192][   T36] hsr_slave_0: left promiscuous mode
[  221.964569][   T36] hsr_slave_1: left promiscuous mode
[  221.971295][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.978961][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.998088][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.005579][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.026977][ T7579] usb 10-1: Using ep0 maxpacket: 8
[  222.038233][ T7579] usb 10-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.061435][   T36] veth1_macvtap: left promiscuous mode
[  222.067255][ T7579] usb 10-1: config 0 interface 0 has no altsetting 0
[  222.077448][ T7579] usb 10-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00
[  222.089037][   T36] veth0_macvtap: left promiscuous mode
[  222.094636][ T7579] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.107222][   T36] veth1_vlan: left promiscuous mode
[  222.112644][   T36] veth0_vlan: left promiscuous mode
[  222.121234][ T7579] usb 10-1: config 0 descriptor??
[  222.575859][   T36] team0 (unregistering): Port device team_slave_1 removed
[  222.622407][   T36] team0 (unregistering): Port device team_slave_0 removed
[  222.913992][ T7579] usbhid 10-1:0.0: can't add hid device: -71
[  222.925475][ T7579] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  222.961509][ T7579] usb 10-1: USB disconnect, device number 2
[  223.179550][ T7502] 8021q: adding VLAN 0 to HW filter on device team0
[  223.232948][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.240151][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.294418][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.301619][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.408149][ T7502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  223.426492][ T7502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  223.533038][ T7464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  224.490371][ T7531] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  224.638840][ T7531] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  224.682000][ T7531] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  224.719313][ T7531] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  226.495583][ T7502] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.712859][ T7531] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.744226][ T7464] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.758188][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.9.364'.
[  226.849940][ T7663] veth3: entered promiscuous mode
[  226.866574][ T7531] 8021q: adding VLAN 0 to HW filter on device team0
[  226.940363][ T7464] veth0_vlan: entered promiscuous mode
[  226.977580][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.984747][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.030628][ T7464] veth1_vlan: entered promiscuous mode
[  227.068298][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.075505][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.232107][ T7531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  227.279984][ T7464] veth0_macvtap: entered promiscuous mode
[  227.291498][ T7464] veth1_macvtap: entered promiscuous mode
[  227.334633][ T7502] veth0_vlan: entered promiscuous mode
[  227.361907][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.396222][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.430386][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.465819][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.496032][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.538714][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.552899][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.573647][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.584739][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.626368][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.645454][ T7502] veth1_vlan: entered promiscuous mode
[  227.676666][ T7464] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.703021][ T7464] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.713801][ T7464] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.724422][ T7464] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.829940][ T7531] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.919517][ T7502] veth0_macvtap: entered promiscuous mode
[  227.975410][ T7502] veth1_macvtap: entered promiscuous mode
[  228.022750][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.042897][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.093135][ T7502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.133369][ T7502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.163905][ T7502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.184789][ T7502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.207612][ T7502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.239976][ T7502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.298322][ T7502] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.390513][ T7502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.286957][ T7502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.306912][ T7502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.333438][ T7502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.358118][ T7502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.590109][ T7502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.601707][ T7502] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.651808][ T6128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.227153][ T6128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.261766][ T7502] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.307136][ T7502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.333076][ T7502] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.358611][ T7502] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.388203][ T7531] veth0_vlan: entered promiscuous mode
[  230.440904][ T7531] veth1_vlan: entered promiscuous mode
[  230.587447][ T7728] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  231.565449][ T6128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.585821][ T6128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.691480][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz.7.376'.
[  231.860345][ T7531] veth0_macvtap: entered promiscuous mode
[  231.880542][ T6128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.902706][ T6128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.913436][ T7743] veth3: entered promiscuous mode
[  231.919109][ T7743] bridge1: port 1(veth3) entered blocking state
[  231.925730][ T7743] bridge1: port 1(veth3) entered disabled state
[  231.932455][ T7743] veth3: entered allmulticast mode
[  231.951348][ T7531] veth1_macvtap: entered promiscuous mode
[  232.069794][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.111706][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.146932][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.177039][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.200114][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.217637][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.266632][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.286912][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.320001][ T7531] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.383546][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.457635][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.513517][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.544493][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.586494][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.617991][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.656903][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.686975][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.688878][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'.
[  232.710534][ T7531] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.813021][ T7531] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.843227][ T7531] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.869674][ T7531] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.888638][ T7531] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.803744][ T6128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.883523][ T6128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.932399][ T5881] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  236.246502][ T5881] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30
[  236.257514][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.257541][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.289489][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.395979][ T7800] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  236.721269][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.845356][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35
[  237.502570][ T5881] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  237.668896][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.973872][ T5881] usb 5-1: config 0 descriptor??
[  238.158761][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.7.389'.
[  238.241231][ T5881] usbhid 5-1:0.0: can't add hid device: -71
[  238.256504][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  238.316142][ T5881] usb 5-1: USB disconnect, device number 2
[  238.405836][ T7805] veth5: entered promiscuous mode
[  238.434253][ T7805] bridge2: port 1(veth5) entered blocking state
[  238.451339][ T7805] bridge2: port 1(veth5) entered disabled state
[  238.577294][ T7805] veth5: entered allmulticast mode
[  239.034574][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'.
[  242.033469][ T2984] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.179277][ T2984] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.790442][ T2984] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.579609][ T2984] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.819699][ T7892] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  243.919208][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.405'.
[  244.182410][ T7904] veth3: entered promiscuous mode
[  244.260453][ T2984] bridge_slave_1: left allmulticast mode
[  244.286757][ T2984] bridge_slave_1: left promiscuous mode
[  244.305851][ T2984] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.356747][ T2984] bridge_slave_0: left allmulticast mode
[  244.369207][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  244.387157][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  244.395042][ T2984] bridge_slave_0: left promiscuous mode
[  244.401868][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  244.412886][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  244.418603][ T2984] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.429266][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  244.437589][   T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  244.445384][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.816329][   T47] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30
[  244.877179][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.889983][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.901416][   T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35
[  244.915740][   T47] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  245.058637][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.532538][   T47] usb 1-1: config 0 descriptor??
[  246.035252][   T47] usbhid 1-1:0.0: can't add hid device: -71
[  246.052736][   T47] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  246.068005][   T47] usb 1-1: USB disconnect, device number 2
[  247.035540][ T5833] Bluetooth: hci1: command tx timeout
[  249.131909][ T5833] Bluetooth: hci1: command tx timeout
[  249.573537][ T7976] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  249.617415][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'.
[  249.882880][ T2984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.904372][ T2984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.924113][ T2984] bond0 (unregistering): Released all slaves
[  249.999287][ T7958] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  251.130015][ T7986] veth3: entered promiscuous mode
[  251.198336][ T5833] Bluetooth: hci1: command tx timeout
[  253.277124][ T5833] Bluetooth: hci1: command tx timeout
[  253.360457][ T8021] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  256.097817][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  256.694375][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  256.745783][ T8046] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  257.087067][   T59] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  257.377191][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'.
[  257.387716][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'.
[  257.473387][   T59] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30
[  257.501382][   T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.501561][ T2984] hsr_slave_0: left promiscuous mode
[  257.523234][   T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.551524][   T59] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35
[  257.903357][ T2984] hsr_slave_1: left promiscuous mode
[  257.917083][ T2984] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.924940][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.941738][ T2984] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.951139][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.185570][   T59] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  258.246966][   T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.282716][   T59] usb 8-1: config 0 descriptor??
[  258.325396][ T2984] veth1_macvtap: left promiscuous mode
[  258.355444][ T2984] veth0_macvtap: left promiscuous mode
[  258.383317][ T2984] veth1_vlan: left promiscuous mode
[  258.404588][ T2984] veth0_vlan: left promiscuous mode
[  258.526984][   T59] usbhid 8-1:0.0: can't add hid device: -71
[  258.533097][   T59] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  258.606188][   T59] usb 8-1: USB disconnect, device number 2
[  258.631898][ T8072] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  263.278555][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'.
[  263.287568][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'.
[  263.535001][ T2984] team0 (unregistering): Port device team_slave_1 removed
[  263.897551][ T2984] team0 (unregistering): Port device team_slave_0 removed
[  264.368667][ T8115] netlink: 20 bytes leftover after parsing attributes in process `syz.7.453'.
[  264.715223][ T8133] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8
[  265.155087][ T7915] chnl_net:caif_netlink_parms(): no params data found
[  266.467007][   T59] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  266.799735][   T59] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30
[  267.532188][ T7915] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.557108][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.581226][ T7915] bridge_slave_0: entered allmulticast mode
[  267.614397][ T7915] bridge_slave_0: entered promiscuous mode
[  267.656904][   T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.673892][   T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.693887][ T7915] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.694907][   T59] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35
[  267.715704][   T59] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  267.724915][   T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.735256][   T59] usb 10-1: config 0 descriptor??
[  267.759130][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.766607][ T7915] bridge_slave_1: entered allmulticast mode
[  267.776984][ T7915] bridge_slave_1: entered promiscuous mode
[  267.923951][ T8175] netlink: 20 bytes leftover after parsing attributes in process `syz.7.467'.
[  267.959955][ T7915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.010215][ T7915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.219292][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.468'.
[  268.231270][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.468'.
[  268.768392][ T7915] team0: Port device team_slave_0 added
[  268.813640][ T7915] team0: Port device team_slave_1 added
[  269.046208][   T59] usbhid 10-1:0.0: can't add hid device: -71
[  269.064075][   T59] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  269.100989][ T7915] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.119010][   T59] usb 10-1: USB disconnect, device number 3
[  269.156084][ T7915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.507423][ T7915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.528968][ T7915] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.544073][ T7915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.779104][ T7915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.798324][ T8200] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9
[  272.633829][   T30] audit: type=1326 audit(1742629927.159:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.9.478" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a7798d169 code=0x0
[  273.915426][ T8244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.481'.
[  274.087251][ T7915] hsr_slave_0: entered promiscuous mode
[  274.093713][ T7915] hsr_slave_1: entered promiscuous mode
[  274.100227][ T7915] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  274.108035][ T7915] Cannot create hsr debugfs directory
[  274.667025][   T26] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  274.858880][   T26] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30
[  275.106554][   T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.147072][   T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.173666][   T26] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35
[  275.292435][   T26] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  275.474165][   T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.895723][   T26] usb 8-1: config 0 descriptor??
[  276.242457][ T5905] hid-generic 0005:15C2:5505.0006: item fetching failed at offset 0/2
[  276.257995][ T5905] hid-generic 0005:15C2:5505.0006: probe with driver hid-generic failed with error -22
[  276.356332][ T7915] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  276.406136][ T7915] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  276.469243][ T7915] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  276.539012][ T7915] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  276.804881][ T7915] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.890412][ T7915] 8021q: adding VLAN 0 to HW filter on device team0
[  277.661233][ T7915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  277.694646][   T26] usbhid 8-1:0.0: can't add hid device: -71
[  277.715149][   T26] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  277.734814][ T7915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  277.826946][   T26] usb 8-1: USB disconnect, device number 3
[  277.838747][  T138] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.845922][  T138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.917947][  T138] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.925144][  T138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.031690][ T7915] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.235922][ T8330] netlink: 20 bytes leftover after parsing attributes in process `syz.7.498'.
[  280.942497][ T7915] veth0_vlan: entered promiscuous mode
[  280.963549][ T7915] veth1_vlan: entered promiscuous mode
[  281.069660][ T7915] veth0_macvtap: entered promiscuous mode
[  281.099628][ T7915] veth1_macvtap: entered promiscuous mode
[  281.134645][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.186142][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.229453][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.284237][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.324762][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.360749][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.370932][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.381493][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.393206][ T7915] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.404063][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.415761][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.426096][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.658324][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.774764][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.903796][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.113403][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.186062][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.197524][ T7915] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.325307][    T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  282.414148][ T7915] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.446944][ T7915] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.171909][ T7915] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.181356][ T7915] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.199588][    T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30
[  283.218127][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.232697][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.243396][    T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35
[  283.256762][    T9] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  283.266142][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.328396][    T9] usb 8-1: config 0 descriptor??
[  283.553154][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.604881][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.723809][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.253755][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.613209][    T9] usbhid 8-1:0.0: can't add hid device: -71
[  285.758926][    T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  285.786960][    T9] usb 8-1: USB disconnect, device number 4
[  285.953383][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.9.516'.
[  285.962282][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.9.516'.
[  286.169298][ T8414] netlink: 20 bytes leftover after parsing attributes in process `syz.7.514'.
[  286.188969][ T8421] netlink: zone id is out of range
[  286.204647][ T8421] netlink: zone id is out of range
[  286.214545][ T8421] netlink: zone id is out of range
[  286.224735][ T8421] netlink: zone id is out of range
[  286.237549][ T8421] netlink: zone id is out of range
[  286.251564][ T8421] netlink: zone id is out of range
[  286.291210][ T8417] vlan2: entered allmulticast mode
[  286.302616][ T8421] netlink: zone id is out of range
[  286.318537][ T8417] team0: entered allmulticast mode
[  286.334134][ T8421] netlink: zone id is out of range
[  286.351978][ T8417] team_slave_0: entered allmulticast mode
[  286.371790][ T8421] netlink: zone id is out of range
[  286.385958][ T8417] team_slave_1: entered allmulticast mode
[  286.400621][ T8421] netlink: zone id is out of range
[  286.420456][ T8417] bridge0: port 3(vlan2) entered blocking state
[  286.427057][ T8417] bridge0: port 3(vlan2) entered disabled state
[  286.435745][ T8417] vlan2: entered promiscuous mode
[  286.446892][ T8417] team0: entered promiscuous mode
[  286.453132][ T8417] team_slave_0: entered promiscuous mode
[  286.483698][ T8417] team_slave_1: entered promiscuous mode
[  286.518368][ T8417] bridge0: port 3(vlan2) entered blocking state
[  286.525088][ T8417] bridge0: port 3(vlan2) entered forwarding state
[  286.816936][ T5833] Bluetooth: hci3: command 0x0406 tx timeout
[  287.546648][ T3033] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.735219][ T3033] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.443357][ T3033] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.731938][   T10] hid-generic 0005:15C2:5505.0007: item fetching failed at offset 0/1
[  288.793764][ T3033] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.037326][   T10] hid-generic 0005:15C2:5505.0007: probe with driver hid-generic failed with error -22
[  290.024960][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  290.039473][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'.
[  290.048336][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'.
[  290.058586][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  290.077653][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  290.123782][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  290.133196][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  290.141511][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  290.665276][ T3033] bridge_slave_1: left allmulticast mode
[  290.731719][ T3033] bridge_slave_1: left promiscuous mode
[  290.837475][ T3033] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.203575][ T8494] net_ratelimit: 309 callbacks suppressed
[  291.203598][ T8494] netlink: zone id is out of range
[  291.221679][ T3033] bridge_slave_0: left allmulticast mode
[  291.243907][ T3033] bridge_slave_0: left promiscuous mode
[  291.272256][ T3033] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.292889][ T8494] netlink: zone id is out of range
[  291.365562][ T8494] netlink: zone id is out of range
[  291.375757][ T8494] netlink: zone id is out of range
[  291.385900][ T8494] netlink: zone id is out of range
[  291.413551][ T8494] netlink: zone id is out of range
[  291.427082][ T8494] netlink: zone id is out of range
[  291.447897][ T8494] netlink: zone id is out of range
[  291.523566][ T8494] netlink: zone id is out of range
[  291.539856][ T8494] netlink: zone id is out of range
[  292.452193][ T5836] Bluetooth: hci1: command tx timeout
[  293.307645][ T3033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.329702][ T3033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.358485][ T3033] bond0 (unregistering): Released all slaves
[  293.411833][ T8514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.537'.
[  294.003500][   T30] audit: type=1326 audit(1742629948.969:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8534 comm="syz.4.539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0a778d169 code=0x0
[  294.541805][ T5836] Bluetooth: hci1: command tx timeout
[  295.698134][ T8558] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  296.931535][ T5833] Bluetooth: hci0: command 0x0406 tx timeout
[  296.931553][ T5139] Bluetooth: hci1: command tx timeout
[  298.552424][ T8477] chnl_net:caif_netlink_parms(): no params data found
[  299.046916][ T5836] Bluetooth: hci1: command tx timeout
[  299.218420][ T8568] net_ratelimit: 309 callbacks suppressed
[  299.218438][ T8568] netlink: zone id is out of range
[  299.711227][ T8568] netlink: zone id is out of range
[  299.716414][ T8568] netlink: zone id is out of range
[  299.737955][ T8568] netlink: zone id is out of range
[  299.800996][ T8568] netlink: zone id is out of range
[  299.806189][ T8568] netlink: zone id is out of range
[  299.819436][ T8568] netlink: zone id is out of range
[  299.824602][ T8568] netlink: zone id is out of range
[  299.840453][ T8568] netlink: zone id is out of range
[  299.856721][ T8568] netlink: zone id is out of range
[  300.060160][ T3033] hsr_slave_0: left promiscuous mode
[  300.276224][ T3033] hsr_slave_1: left promiscuous mode
[  300.302605][ T3033] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.310811][ T3033] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.321000][ T3033] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.337068][ T3033] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.376420][ T3033] veth1_macvtap: left promiscuous mode
[  300.443506][ T3033] veth0_macvtap: left promiscuous mode
[  300.524050][ T3033] veth1_vlan: left promiscuous mode
[  300.609343][ T3033] veth0_vlan: left promiscuous mode
[  303.113253][ T8631] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10
[  303.513715][ T3033] team0 (unregistering): Port device team_slave_1 removed
[  303.616050][ T3033] team0 (unregistering): Port device team_slave_0 removed
[  303.837092][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  304.160095][ T5836] Bluetooth: hci4: command 0x0406 tx timeout
[  304.395917][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.413740][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.425566][ T8477] bridge_slave_0: entered allmulticast mode
[  304.446647][ T8477] bridge_slave_0: entered promiscuous mode
[  304.477298][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.495609][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.512575][ T8477] bridge_slave_1: entered allmulticast mode
[  304.520144][ T8477] bridge_slave_1: entered promiscuous mode
[  304.526707][ T8604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.554'.
[  304.757622][ T8678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.562'.
[  304.765226][ T8477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.830065][ T8477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.310556][ T8477] team0: Port device team_slave_0 added
[  306.489906][ T8477] team0: Port device team_slave_1 added
[  306.970236][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.002415][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.046287][ T8477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.184897][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.222313][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.258812][ T8477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.350999][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.9.573'.
[  307.367292][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.9.573'.
[  307.399207][ T8716] netlink: 38 bytes leftover after parsing attributes in process `syz.9.573'.
[  307.492431][ T8477] hsr_slave_0: entered promiscuous mode
[  307.527594][ T8477] hsr_slave_1: entered promiscuous mode
[  307.533877][ T8477] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  307.562891][ T8477] Cannot create hsr debugfs directory
[  307.652266][ T8729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.576'.
[  309.620054][ T8477] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  309.690128][ T8477] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  309.706172][ T8781] netlink: 20 bytes leftover after parsing attributes in process `syz.9.591'.
[  309.789764][ T8477] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  309.865505][ T8477] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  311.558470][ T8477] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.651110][ T8477] 8021q: adding VLAN 0 to HW filter on device team0
[  311.796525][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.803754][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.868440][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.875604][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.698217][ T8838] netlink: 20 bytes leftover after parsing attributes in process `syz.7.607'.
[  312.855337][ T8477] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.027188][ T3863] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  313.335858][ T3863] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  313.426077][ T3863] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  313.473117][ T3863] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  313.511852][ T3863] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.559613][ T3863] usb 10-1: config 0 descriptor??
[  314.525284][ T5836] Bluetooth: hci3: command 0x0406 tx timeout
[  314.880397][ T3863] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.9-1/input0
[  315.511123][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.539035][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.569429][ T3863] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device
[  315.602382][ T3863] pyra 0003:1E7D:2CF6.0008: couldn't install mouse
[  315.658603][ T3863] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -71
[  315.738549][ T3863] usb 10-1: USB disconnect, device number 4
[  315.886105][ T8477] veth0_vlan: entered promiscuous mode
[  315.925805][ T8477] veth1_vlan: entered promiscuous mode
[  316.627072][ T5139] Bluetooth: hci4: command 0x0406 tx timeout
[  316.785302][ T8477] veth0_macvtap: entered promiscuous mode
[  316.979673][ T8477] veth1_macvtap: entered promiscuous mode
[  317.149007][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.209475][ T8896] netlink: 20 bytes leftover after parsing attributes in process `syz.9.621'.
[  317.218660][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.228913][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.239919][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.250420][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.275237][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.290693][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.301993][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.314762][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.328255][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.339220][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.385738][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.495770][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.507507][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.357861][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  318.364209][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  318.486852][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.496744][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.518783][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.260293][ T8907] =======================================================
[  319.260293][ T8907] WARNING: The mand mount option has been deprecated and
[  319.260293][ T8907]          and is ignored by this kernel. Remove the mand
[  319.260293][ T8907]          option from the mount to silence this warning.
[  319.260293][ T8907] =======================================================
[  319.552030][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.689502][ T8906] lo speed is unknown, defaulting to 1000
[  319.698469][ T8906] lo speed is unknown, defaulting to 1000
[  319.706224][ T8906] lo speed is unknown, defaulting to 1000
[  319.767888][ T8907] lo speed is unknown, defaulting to 1000
[  319.773985][ T8907] lo speed is unknown, defaulting to 1000
[  319.780932][ T8907] lo speed is unknown, defaulting to 1000
[  319.791918][ T8907] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  319.805659][ T8907] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  319.832740][ T8908] ������: renamed from lo (while UP)
[  319.909300][ T8907] ������ speed is unknown, defaulting to 1000
[  319.926334][ T8477] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.955762][ T8477] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.981483][ T8477] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.991376][ T8477] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.003036][ T8907] ������ speed is unknown, defaulting to 1000
[  320.011780][ T8907] ������ speed is unknown, defaulting to 1000
[  320.019104][ T8907] ������ speed is unknown, defaulting to 1000
[  320.022187][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'.
[  320.026423][ T8907] ������ speed is unknown, defaulting to 1000
[  320.044432][ T8906] infiniband s
z1: set active
[  320.050601][ T8906] infiniband s
z1: added ������
[  320.056651][ T8906] s
z1: rxe_create_cq: returned err = -12
[  320.063066][ T8906] infiniband s
z1: Couldn't create ib_mad CQ
[  320.069431][ T8906] infiniband s
z1: Couldn't open port 1
[  320.088891][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'.
[  320.102029][ T8906] RDS/IB: s
z1: added
[  320.106654][ T8906] smc: adding ib device s
z1 with port count 1
[  320.113186][ T8906] smc:    ib device s
z1 port 1 has pnetid 
[  320.129017][ T8913] netlink: 38 bytes leftover after parsing attributes in process `syz.0.626'.
[  320.159975][ T3863] ������ speed is unknown, defaulting to 1000
[  320.169271][ T8906] ������ speed is unknown, defaulting to 1000
[  320.419030][ T5881] ������ speed is unknown, defaulting to 1000
[  320.427146][ T8906] ������ speed is unknown, defaulting to 1000
[  320.628361][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.766978][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.858337][ T8906] ������ speed is unknown, defaulting to 1000
[  321.129484][ T8906] ������ speed is unknown, defaulting to 1000
[  321.171891][ T8922] xt_hashlimit: size too large, truncated to 1048576
[  321.271275][ T8906] ������ speed is unknown, defaulting to 1000
[  321.271317][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.302541][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.227746][ T5956] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  322.604659][ T5956] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.727083][ T5956] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.797682][ T5956] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  322.834251][ T5956] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.902831][ T5956] usb 10-1: config 0 descriptor??
[  323.111655][ T8948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.637'.
[  323.220488][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'.
[  323.287117][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'.
[  323.328300][ T8951] netlink: 38 bytes leftover after parsing attributes in process `syz.0.639'.
[  323.385777][ T5956] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.9-1/input0
[  323.463237][   T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.589273][ T8954] rdma_rxe: rxe_newlink: failed to add lo
[  323.601189][ T8954] siw: device registration error -23
[  324.263044][ T8936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.272169][   T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.288188][ T8936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.297173][ T8954] ������: renamed from lo (while UP)
[  324.454910][ T5956] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device
[  324.473970][ T5956] pyra 0003:1E7D:2CF6.0009: couldn't install mouse
[  324.490442][ T5956] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71
[  324.504377][   T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.510400][ T5956] usb 10-1: USB disconnect, device number 5
[  324.671429][   T55] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  324.718467][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  324.749663][   T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.565392][ T8970] xt_hashlimit: size too large, truncated to 1048576
[  325.698774][ T5139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  325.710042][ T5139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  325.718733][ T5139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  325.731035][ T5139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  325.738912][ T5139] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  325.746235][ T5139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  325.959343][   T13] bridge_slave_1: left allmulticast mode
[  325.998733][   T13] bridge_slave_1: left promiscuous mode
[  326.050047][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.540409][   T55] Bluetooth: hci4: SCO packet for unknown connection handle 201
[  327.075590][   T13] bridge_slave_0: left allmulticast mode
[  327.095113][   T13] bridge_slave_0: left promiscuous mode
[  327.333822][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.107839][ T5139] Bluetooth: hci1: command tx timeout
[  330.167858][ T5139] Bluetooth: hci1: command tx timeout
[  330.181555][ T7579] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  330.352468][ T7579] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.373358][ T7579] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.404073][ T7579] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  330.423193][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.433178][ T7579] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.442225][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.457672][ T7579] usb 8-1: config 0 descriptor??
[  330.465203][   T13] bond0 (unregistering): Released all slaves
[  330.613515][ T8974] ������ speed is unknown, defaulting to 1000
[  331.097235][ T7579] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0
[  332.627323][ T9013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.869005][ T5139] Bluetooth: hci1: command tx timeout
[  332.874359][ T8974] ������ speed is unknown, defaulting to 1000
[  332.899828][ T9013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.942321][ T5139] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  333.089795][ T7579] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device
[  333.097771][ T7579] pyra 0003:1E7D:2CF6.000A: couldn't install mouse
[  333.118946][ T7579] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71
[  333.147431][ T7579] usb 8-1: USB disconnect, device number 5
[  334.881300][ T5139] Bluetooth: hci1: command tx timeout
[  334.929482][ T9066] xt_hashlimit: size too large, truncated to 1048576
[  335.072072][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'.
[  335.085399][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'.
[  335.110300][ T9069] netlink: 38 bytes leftover after parsing attributes in process `syz.0.676'.
[  335.122021][ T5956] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  335.309316][ T5956] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30
[  335.340675][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.362612][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.382330][ T5956] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35
[  335.410619][ T5956] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  335.426932][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.475518][ T5956] usb 5-1: config 0 descriptor??
[  335.700945][ T5956] usbhid 5-1:0.0: can't add hid device: -71
[  335.739452][ T5956] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  335.802978][ T5956] usb 5-1: USB disconnect, device number 3
[  336.721908][ T5139] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  336.738639][   T13] hsr_slave_0: left promiscuous mode
[  336.755734][ T5881] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  336.842996][   T13] hsr_slave_1: left promiscuous mode
[  336.858431][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.866272][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.937975][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.955290][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.987315][ T5881] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.013173][ T5881] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.047363][ T5881] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  337.056475][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.068060][   T13] veth1_macvtap: left promiscuous mode
[  337.081895][   T13] veth0_macvtap: left promiscuous mode
[  337.097582][   T13] veth1_vlan: left promiscuous mode
[  337.105360][   T13] veth0_vlan: left promiscuous mode
[  337.254730][ T5881] usb 8-1: config 0 descriptor??
[  338.447255][ T5881] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0
[  338.769079][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.9.688'.
[  338.778891][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.9.688'.
[  338.787985][ T9105] netlink: 38 bytes leftover after parsing attributes in process `syz.9.688'.
[  338.852606][ T9106] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  339.165782][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.292800][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.607289][ T5881] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device
[  339.616244][ T5881] pyra 0003:1E7D:2CF6.000B: couldn't install mouse
[  339.630677][ T5881] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -71
[  339.645066][ T5881] usb 8-1: USB disconnect, device number 6
[  339.724069][ T9108] xt_hashlimit: size too large, truncated to 1048576
[  339.905286][   T13] team0 (unregistering): Port device team_slave_1 removed
[  339.956050][   T13] team0 (unregistering): Port device team_slave_0 removed
[  340.546888][ T7579] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  340.657718][ T8974] chnl_net:caif_netlink_parms(): no params data found
[  340.738625][ T7579] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30
[  340.769939][ T7579] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.803139][ T7579] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.837663][ T7579] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35
[  340.898921][ T7579] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  340.946089][ T7579] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.977712][ T7579] usb 8-1: config 0 descriptor??
[  341.038821][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.060252][ T8974] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.086251][ T8974] bridge_slave_0: entered allmulticast mode
[  341.107711][ T8974] bridge_slave_0: entered promiscuous mode
[  341.144874][ T8974] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.182300][ T8974] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.194670][ T7579] usbhid 8-1:0.0: can't add hid device: -71
[  341.201385][ T7579] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  341.219566][ T8974] bridge_slave_1: entered allmulticast mode
[  341.241098][ T7579] usb 8-1: USB disconnect, device number 7
[  341.280543][ T8974] bridge_slave_1: entered promiscuous mode
[  341.461764][ T9139] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  342.424548][ T8974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.538147][ T8974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.691996][ T8974] team0: Port device team_slave_0 added
[  342.719931][ T8974] team0: Port device team_slave_1 added
[  342.819348][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.826358][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.905269][ T9165] trusted_key: syz.0.702 sent an empty control message without MSG_MORE.
[  342.917042][ T8974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.958020][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.965043][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.077769][ T8974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.324730][ T8974] hsr_slave_0: entered promiscuous mode
[  343.344258][ T9176] xt_hashlimit: size too large, truncated to 1048576
[  343.364076][ T8974] hsr_slave_1: entered promiscuous mode
[  343.455695][ T8974] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  343.592361][ T8974] Cannot create hsr debugfs directory
[  344.842486][ T9201] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  344.987145][ T5878] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  345.300316][ T5878] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30
[  345.507181][ T5878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.666378][ T5878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.823628][ T5878] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35
[  345.888331][ T5878] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  345.945643][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.072573][ T5878] usb 8-1: config 0 descriptor??
[  346.118029][ T8974] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  346.159386][ T8974] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  346.190092][ T8974] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  346.242536][ T8974] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  346.306561][ T5878] usbhid 8-1:0.0: can't add hid device: -71
[  346.331265][ T5878] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  346.417465][ T5878] usb 8-1: USB disconnect, device number 8
[  346.561027][ T8974] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.780437][ T8974] 8021q: adding VLAN 0 to HW filter on device team0
[  346.801367][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.808592][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.834484][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.841838][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.821923][ T9235] 9pnet_virtio: no channels available for device 127.0.0.1
[  348.096890][ T5139] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  348.947673][ T9245] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  349.977805][ T9249] net_ratelimit: 309 callbacks suppressed
[  349.977826][ T9249] netlink: zone id is out of range
[  350.019742][ T9249] netlink: zone id is out of range
[  350.024934][ T9249] netlink: zone id is out of range
[  350.062806][ T9249] netlink: zone id is out of range
[  350.074575][ T9249] netlink: zone id is out of range
[  350.080249][ T9249] netlink: zone id is out of range
[  350.085688][ T9249] netlink: zone id is out of range
[  350.095874][ T9249] netlink: zone id is out of range
[  350.103237][ T9249] netlink: zone id is out of range
[  350.203559][ T9249] netlink: zone id is out of range
[  350.222236][ T8974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.258809][ T9253] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  352.251984][ T5139] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  353.115874][ T8974] veth0_vlan: entered promiscuous mode
[  353.146701][ T8974] veth1_vlan: entered promiscuous mode
[  353.220335][ T8974] veth0_macvtap: entered promiscuous mode
[  353.287040][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  353.296377][ T8974] veth1_macvtap: entered promiscuous mode
[  353.553091][ T5878] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  353.607545][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.620803][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.226970][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.247148][ T5878] usb 1-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config
[  354.260975][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.277305][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 97, changing to 10
[  354.294419][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.310416][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24677, setting to 1024
[  354.331500][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.344976][ T5878] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  354.368465][   T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30
[  354.371125][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.393002][ T5878] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  354.403693][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.412034][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.424808][ T5878] usb 1-1: config 0 descriptor??
[  354.439449][ T8974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.470920][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.482695][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.492513][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35
[  354.505496][   T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  354.514614][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.526266][   T10] usb 5-1: config 0 descriptor??
[  354.661703][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.687036][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.709767][ T5878] ath6kl: Failed to submit usb control message: -71
[  354.716458][ T5878] ath6kl: unable to send the bmi data to the device: -71
[  354.727179][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.743682][ T5878] ath6kl: Unable to send get target info: -71
[  354.756384][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.774208][ T5878] ath6kl: Failed to init ath6kl core: -71
[  354.783223][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.796223][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.804217][ T5878] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  354.806968][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.827624][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.841711][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  354.848138][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  354.870803][ T5878] usb 1-1: USB disconnect, device number 3
[  354.893153][ T8974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.910620][   T10] usb 5-1: USB disconnect, device number 4
[  354.912866][ T8974] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.934533][ T8974] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.966980][   T47] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  354.969369][ T8974] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.984015][ T8974] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.021392][ T9320] xt_hashlimit: size too large, truncated to 1048576
[  355.138588][ T7854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.158073][ T7854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.170131][   T47] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  355.195504][   T47] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  355.226984][   T47] usb 10-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  355.241947][   T47] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.261536][   T47] usb 10-1: config 0 descriptor??
[  355.332595][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.348133][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.838132][   T47] hid-rmi 0003:1532:011D.000C: unknown main item tag 0x1
[  356.059984][   T47] hid-rmi 0003:1532:011D.000C: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.9-1/input0
[  356.249674][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.741'.
[  356.530009][ T9345] Device name cannot be null; rc = [-22]
[  356.550119][ T5139] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  356.608858][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.745'.
[  356.646254][    T9] usb 10-1: USB disconnect, device number 6
[  356.742951][ T7802] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.013277][ T9356] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  358.181842][ T7802] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.310646][ T7802] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.403138][ T7802] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.575845][ T7802] bridge_slave_1: left allmulticast mode
[  358.587641][ T7802] bridge_slave_1: left promiscuous mode
[  358.595206][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.610997][ T7802] bridge_slave_0: left allmulticast mode
[  358.616696][ T7802] bridge_slave_0: left promiscuous mode
[  358.626635][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.982485][ T9383] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  362.095669][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  362.108708][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  362.128628][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  362.177111][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  362.187476][   T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  362.194813][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.263758][ T9394] xt_hashlimit: size too large, truncated to 1048576
[  362.740964][ T7802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  362.913095][ T7802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  363.045004][ T7802] bond0 (unregistering): Released all slaves
[  363.643349][ T9406] netlink: 20 bytes leftover after parsing attributes in process `syz.7.755'.
[  363.903016][   T55] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  364.134603][ T9391] ������ speed is unknown, defaulting to 1000
[  364.247386][   T55] Bluetooth: hci1: command tx timeout
[  364.539306][ T7579] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  365.107721][ T7579] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.169039][ T7579] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  365.248335][ T7579] usb 10-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  365.308720][ T7579] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.358180][ T7579] usb 10-1: config 0 descriptor??
[  365.464634][ T9391] ������ speed is unknown, defaulting to 1000
[  365.987455][ T7579] hid-rmi 0003:1532:011D.000D: unknown main item tag 0x1
[  366.001952][ T5905] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  366.302661][ T7579] hid-rmi 0003:1532:011D.000D: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.9-1/input0
[  366.317909][   T55] Bluetooth: hci1: command tx timeout
[  366.408872][ T5905] usb 1-1: config 0 has an invalid interface number: 109 but max is 0
[  366.422324][ T5905] usb 1-1: config 0 has no interface number 0
[  366.442866][ T5905] usb 1-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  366.465034][ T5905] usb 1-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1
[  366.485312][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.507810][ T5905] usb 1-1: config 0 descriptor??
[  366.519736][ T5905] cxacru 1-1:0.109: cxacru_bind: interface has incorrect endpoints
[  366.541881][ T5905] cxacru 1-1:0.109: usbatm_usb_probe: bind failed: -19!
[  366.552369][ T7802] hsr_slave_0: left promiscuous mode
[  366.587140][ T7802] hsr_slave_1: left promiscuous mode
[  366.609710][ T9457] net_ratelimit: 309 callbacks suppressed
[  366.609730][ T9457] netlink: zone id is out of range
[  366.609781][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.617677][ T9457] netlink: zone id is out of range
[  366.631177][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.643851][ T9457] netlink: zone id is out of range
[  366.659160][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.667158][ T9457] netlink: zone id is out of range
[  366.674984][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.676998][ T9457] netlink: zone id is out of range
[  366.708023][ T9457] netlink: zone id is out of range
[  366.728074][ T9457] netlink: zone id is out of range
[  366.732332][ T7579] libceph: connect (1)[c::]:6789 error -101
[  366.747404][ T9457] netlink: zone id is out of range
[  366.773705][ T7579] libceph: mon0 (1)[c::]:6789 connect error
[  366.783816][ T9457] netlink: zone id is out of range
[  366.813987][ T9457] netlink: zone id is out of range
[  366.850943][ T7802] veth1_macvtap: left promiscuous mode
[  366.879861][ T7802] veth0_macvtap: left promiscuous mode
[  366.897543][ T7802] veth1_vlan: left promiscuous mode
[  366.912035][ T7579] usb 10-1: USB disconnect, device number 7
[  366.918615][ T7802] veth0_vlan: left promiscuous mode
[  367.088036][   T47] libceph: connect (1)[c::]:6789 error -101
[  367.273760][   T47] libceph: mon0 (1)[c::]:6789 connect error
[  368.397272][   T55] Bluetooth: hci1: command tx timeout
[  368.544858][ T9447] ceph: No mds server is up or the cluster is laggy
[  368.607953][   T47] usb 1-1: USB disconnect, device number 4
[  370.491614][   T55] Bluetooth: hci1: command tx timeout
[  371.645830][ T7802] team0 (unregistering): Port device team_slave_1 removed
[  371.797359][ T7802] team0 (unregistering): Port device team_slave_0 removed
[  374.510082][ T9391] chnl_net:caif_netlink_parms(): no params data found
[  374.525797][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'.
[  374.616925][ T5905] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  374.808340][ T5905] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30
[  374.846886][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  374.887998][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.076889][ T5905] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35
[  375.106999][ T5905] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  375.178964][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.201119][ T5905] usb 8-1: config 0 descriptor??
[  375.222160][ T9391] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.377172][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.272518][ T9391] bridge_slave_0: entered allmulticast mode
[  376.292640][ T9391] bridge_slave_0: entered promiscuous mode
[  376.298699][ T5905] usbhid 8-1:0.0: can't add hid device: -71
[  376.331698][ T5905] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  376.653882][ T5905] usb 8-1: USB disconnect, device number 9
[  376.696117][ T9391] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.741066][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.760792][ T9391] bridge_slave_1: entered allmulticast mode
[  376.774731][ T9391] bridge_slave_1: entered promiscuous mode
[  376.920945][ T9391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.959770][ T9391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.253887][ T9604] net_ratelimit: 309 callbacks suppressed
[  377.253910][ T9604] netlink: zone id is out of range
[  377.265706][ T9604] netlink: zone id is out of range
[  377.431734][ T9604] netlink: zone id is out of range
[  377.558997][ T9604] netlink: zone id is out of range
[  377.672450][ T9604] netlink: zone id is out of range
[  377.794049][ T9604] netlink: zone id is out of range
[  377.899940][ T9604] netlink: zone id is out of range
[  377.930435][ T9604] netlink: zone id is out of range
[  377.953118][ T9604] netlink: zone id is out of range
[  377.974442][ T9604] netlink: zone id is out of range
[  378.111154][ T9391] team0: Port device team_slave_0 added
[  378.127871][ T9391] team0: Port device team_slave_1 added
[  378.456707][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_0
[  378.466893][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  378.520463][ T9391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  378.713854][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_1
[  378.790832][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  378.927214][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  378.941295][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  379.227116][ T9391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  379.248500][   T55] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  379.611815][ T9391] hsr_slave_0: entered promiscuous mode
[  379.639706][ T9391] hsr_slave_1: entered promiscuous mode
[  379.726535][ T9391] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  379.765919][ T9391] Cannot create hsr debugfs directory
[  379.806713][ T9639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.819'.
[  380.261550][ T9644] trusted_key: encrypted_key: insufficient parameters specified
[  381.379850][ T9391] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  381.422215][ T9391] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  381.460333][ T9391] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  381.512247][ T9391] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  381.771568][ T9391] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.795575][ T9694] netlink: 28 bytes leftover after parsing attributes in process `syz.9.835'.
[  381.854468][ T9391] 8021q: adding VLAN 0 to HW filter on device team0
[  382.083171][  T138] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.090415][  T138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  382.199276][  T138] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.206520][  T138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.099446][ T9391] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.635750][ T9391] veth0_vlan: entered promiscuous mode
[  385.863645][ T9391] veth1_vlan: entered promiscuous mode
[  387.206365][ T9391] veth0_macvtap: entered promiscuous mode
[  387.309317][ T9391] veth1_macvtap: entered promiscuous mode
[  387.362040][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.387223][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.436939][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.481763][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.496879][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.518152][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.538407][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.580969][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.608203][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.658469][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.696909][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.788409][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.874938][   T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  387.931271][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.960811][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.016679][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.061610][   T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30
[  388.081423][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.123745][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.152260][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.175220][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.206668][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.484030][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35
[  388.515146][ T9391] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.564083][   T10] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  388.574190][ T9391] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.625270][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.643807][ T9391] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.705468][ T9391] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.717980][   T10] usb 8-1: config 0 descriptor??
[  388.959692][   T10] usbhid 8-1:0.0: can't add hid device: -71
[  389.024271][   T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  389.138338][   T10] usb 8-1: USB disconnect, device number 10
[  389.258586][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.543665][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.590178][  T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.599101][  T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.026040][    C1] sched: DL replenish lagged too much
[  418.726471][ T5139] Bluetooth: hci2: command 0x0406 tx timeout
[  440.466079][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  440.484764][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  537.206730][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  537.213752][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P2/1:b..l
[  537.221966][    C0] rcu: 	(detected by 0, t=10503 jiffies, g=45709, q=1284052 ncpus=2)
[  537.230068][    C0] task:kthreadd        state:R  running task     stack:23304 pid:2     tgid:2     ppid:0      task_flags:0x208040 flags:0x00004000
[  537.244856][    C0] Call Trace:
[  537.248176][    C0]  <TASK>
[  537.251148][    C0]  __schedule+0x18bc/0x4c40
[  537.255745][    C0]  ? __pfx___schedule+0x10/0x10
[  537.260644][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  537.266679][    C0]  ? preempt_schedule_irq+0xf0/0x1c0
[  537.272011][    C0]  preempt_schedule_irq+0xfb/0x1c0
[  537.277163][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  537.282943][    C0]  irqentry_exit+0x5e/0x90
[  537.287405][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  537.293444][    C0] RIP: 0010:save_stack+0x10/0x1f0
[  537.298536][    C0] Code: e8 e5 5b f6 02 e9 e3 fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 <53> 48 83 e4 e0 48 81 ec 00 01 00 00 89 7c 24 1c 65 48 8b 04 25 28
[  537.318356][    C0] RSP: 0018:ffffc900000775e0 EFLAGS: 00000246
[  537.324465][    C0] RAX: 0000000003b40414 RBX: ffff88801d9ff730 RCX: ffff8881412e1e00
[  537.332483][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002800
[  537.340514][    C0] RBP: ffffc90000077600 R08: ffffffff8232640a R09: 1ffffffff28a2f08
[  537.348536][    C0] R10: dffffc0000000000 R11: fffffbfff28a2f09 R12: 1ffffd4000273250
[  537.356544][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88801d9ff720
[  537.364562][    C0]  ? page_ext_get+0x1ba/0x2a0
[  537.369302][    C0]  __reset_page_owner+0x76/0x430
[  537.374288][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  537.379541][    C0]  free_frozen_pages+0xe04/0x10e0
[  537.384613][    C0]  __put_partials+0x160/0x1c0
[  537.389329][    C0]  ? put_cpu_partial+0x14c/0x250
[  537.394307][    C0]  put_cpu_partial+0x17c/0x250
[  537.399107][    C0]  ? put_cpu_partial+0x70/0x250
[  537.404001][    C0]  __slab_free+0x290/0x380
[  537.408462][    C0]  ? __phys_addr+0xba/0x170
[  537.413022][    C0]  qlist_free_all+0x9a/0x140
[  537.417653][    C0]  ? copy_sighand+0x50/0x230
[  537.422277][    C0]  kasan_quarantine_reduce+0x14f/0x170
[  537.427780][    C0]  __kasan_slab_alloc+0x23/0x80
[  537.432671][    C0]  kmem_cache_alloc_noprof+0x1d9/0x380
[  537.438181][    C0]  copy_sighand+0x50/0x230
[  537.442637][    C0]  copy_process+0x171f/0x3cf0
[  537.447372][    C0]  ? copy_process+0x9fa/0x3cf0
[  537.452183][    C0]  ? __pfx_copy_process+0x10/0x10
[  537.457246][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  537.463282][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  537.469672][    C0]  kernel_clone+0x223/0x870
[  537.474220][    C0]  ? mark_lock+0x9a/0x360
[  537.478601][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  537.483685][    C0]  kernel_thread+0x1c0/0x250
[  537.488316][    C0]  ? __pfx_kthread+0x10/0x10
[  537.492952][    C0]  ? __pfx_kernel_thread+0x10/0x10
[  537.498112][    C0]  ? __pfx_kthread+0x10/0x10
[  537.502771][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  537.508021][    C0]  ? schedule+0x90/0x320
[  537.512310][    C0]  kthreadd+0x60d/0x810
[  537.516508][    C0]  ? kthreadd+0x3ac/0x810
[  537.520877][    C0]  ? __pfx_kthreadd+0x10/0x10
[  537.525593][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  537.531962][    C0]  ? __pfx_kthreadd+0x10/0x10
[  537.536697][    C0]  ? __pfx_kthreadd+0x10/0x10
[  537.541407][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  537.546655][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  537.551894][    C0]  ? __pfx_kthreadd+0x10/0x10
[  537.556616][    C0]  ret_from_fork+0x4b/0x80
[  537.561069][    C0]  ? __pfx_kthreadd+0x10/0x10
[  537.565786][    C0]  ret_from_fork_asm+0x1a/0x30
[  537.570603][    C0]  </TASK>
[  537.573660][    C0] rcu: rcu_preempt kthread starved for 6923 jiffies! g45709 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  537.584799][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  537.594797][    C0] rcu: RCU grace-period kthread stack dump:
[  537.600711][    C0] task:rcu_preempt     state:R  running task     stack:26040 pid:18    tgid:18    ppid:2      task_flags:0x208040 flags:0x00004000
[  537.614254][    C0] Call Trace:
[  537.617581][    C0]  <TASK>
[  537.620545][    C0]  __schedule+0x18bc/0x4c40
[  537.625112][    C0]  ? __pfx___schedule+0x10/0x10
[  537.630008][    C0]  ? __pfx_lock_release+0x10/0x10
[  537.635085][    C0]  ? __pfx___mod_timer+0x10/0x10
[  537.640064][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  537.646438][    C0]  ? schedule+0x90/0x320
[  537.650731][    C0]  schedule+0x14b/0x320
[  537.654934][    C0]  schedule_timeout+0x15a/0x290
[  537.659829][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  537.665249][    C0]  ? __pfx_process_timeout+0x10/0x10
[  537.670578][    C0]  ? prepare_to_swait_event+0x330/0x350
[  537.676176][    C0]  rcu_gp_fqs_loop+0x2df/0x1330
[  537.681071][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  537.686328][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  537.692530][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  537.697868][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  537.703112][    C0]  rcu_gp_kthread+0xa7/0x3b0
[  537.707748][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  537.712989][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  537.718929][    C0]  ? __kthread_parkme+0x169/0x1d0
[  537.723997][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  537.729239][    C0]  kthread+0x7a9/0x920
[  537.733349][    C0]  ? __pfx_kthread+0x10/0x10
[  537.737979][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  537.743220][    C0]  ? __pfx_kthread+0x10/0x10
[  537.747848][    C0]  ? __pfx_kthread+0x10/0x10
[  537.752491][    C0]  ? __pfx_kthread+0x10/0x10
[  537.757118][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  537.762359][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  537.767602][    C0]  ? __pfx_kthread+0x10/0x10
[  537.772234][    C0]  ret_from_fork+0x4b/0x80
[  537.776682][    C0]  ? __pfx_kthread+0x10/0x10
[  537.781308][    C0]  ret_from_fork_asm+0x1a/0x30
[  537.786117][    C0]  </TASK>
[  537.789164][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  537.795529][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0
[  537.805889][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  537.815979][    C0] RIP: 0010:ip_route_me_harder+0x28a/0x1360
[  537.821924][    C0] Code: 00 4d 85 ed 0f 84 55 01 00 00 e8 e1 c5 42 f7 eb 2c e8 da c5 42 f7 b0 01 89 44 24 24 31 c0 48 89 44 24 40 31 c0 48 89 44 24 48 <8b> 5c 24 30 e9 5f 01 00 00 e8 b8 c5 42 f7 4c 8b 6c 24 40 4c 89 e8
[  537.841591][    C0] RSP: 0018:ffffc90000006d40 EFLAGS: 00000246
[  537.847702][    C0] RAX: 0000000000000000 RBX: ffff88818ee6a600 RCX: ffffffff8e896580
[  537.855709][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffc90000006e90
[  537.863719][    C0] RBP: ffffc90000006f08 R08: ffffc90000006e8f R09: 0000000000000000
[  537.871731][    C0] R10: ffffc90000006e40 R11: fffff52000000dd2 R12: dffffc0000000000
[  537.879740][    C0] R13: ffffc90000006e40 R14: ffff88818f80a700 R15: ffff88818ee6c500
[  537.887751][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  537.896717][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  537.903329][    C0] CR2: 00007fc0eac00218 CR3: 0000000028982000 CR4: 00000000003526f0
[  537.911343][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  537.919348][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  537.927352][    C0] Call Trace:
[  537.930656][    C0]  <IRQ>
[  537.933524][    C0]  ? rcu_check_gp_kthread_starvation+0x278/0x310
[  537.939903][    C0]  ? print_other_cpu_stall+0x1481/0x15c0
[  537.945592][    C0]  ? __pfx_print_other_cpu_stall+0x10/0x10
[  537.951446][    C0]  ? seqcount_lockdep_reader_access+0x1c6/0x220
[  537.957725][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  537.964362][    C0]  ? kvm_check_and_clear_guest_paused+0x6a/0xd0
[  537.970649][    C0]  ? rcu_sched_clock_irq+0xa26/0x10e0
[  537.976056][    C0]  ? __pfx_rcu_sched_clock_irq+0x10/0x10
[  537.981729][    C0]  ? update_process_times+0x242/0x2f0
[  537.987153][    C0]  ? tick_nohz_handler+0x37c/0x500
[  537.992313][    C0]  ? __pfx_tick_nohz_handler+0x10/0x10
[  537.997816][    C0]  ? __hrtimer_run_queues+0x551/0xd30
[  538.003221][    C0]  ? ktime_get_update_offsets_now+0x2d/0x3b0
[  538.009265][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  538.015020][    C0]  ? read_tsc+0x9/0x20
[  538.019644][    C0]  ? ktime_get_update_offsets_now+0x38e/0x3b0
[  538.025787][    C0]  ? hrtimer_interrupt+0x403/0xa40
[  538.030958][    C0]  ? __sysvec_apic_timer_interrupt+0x110/0x420
[  538.037166][    C0]  ? sysvec_apic_timer_interrupt+0x52/0xc0
[  538.043018][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  538.049229][    C0]  ? ip_route_me_harder+0x28a/0x1360
[  538.054594][    C0]  ? __pfx_ip_route_me_harder+0x10/0x10
[  538.060188][    C0]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  538.065609][    C0]  ? kmem_cache_alloc_node_noprof+0x22c/0x380
[  538.071733][    C0]  synproxy_send_tcp+0x356/0x6c0
[  538.076717][    C0]  synproxy_send_client_synack+0x8a4/0xe20
[  538.082572][    C0]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  538.088943][    C0]  ? synproxy_pernet+0x45/0x270
[  538.093846][    C0]  nft_synproxy_eval_v4+0x3ca/0x610
[  538.099091][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  538.104903][    C0]  ? nf_ip_checksum+0x13a/0x500
[  538.109797][    C0]  nft_synproxy_do_eval+0x362/0xa60
[  538.115044][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  538.120813][    C0]  ? __pfx_validate_chain+0x10/0x10
[  538.126042][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  538.132080][    C0]  nft_do_chain+0x4ad/0x1da0
[  538.136722][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  538.141786][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  538.147233][    C0]  ? __pfx_nf_nat_inet_fn+0x10/0x10
[  538.152520][    C0]  nft_do_chain_inet+0x418/0x6b0
[  538.157505][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  538.163004][    C0]  ? ipt_do_table+0x312/0x1860
[  538.167819][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  538.173326][    C0]  nf_hook_slow+0xc3/0x220
[  538.177787][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  538.183799][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  538.189818][    C0]  NF_HOOK+0x29e/0x450
[  538.193930][    C0]  ? NF_HOOK+0x9a/0x450
[  538.198119][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  538.202745][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  538.208768][    C0]  ? ip_rcv_finish+0x406/0x560
[  538.213572][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  538.218718][    C0]  NF_HOOK+0x3a4/0x450
[  538.222819][    C0]  ? __lock_acquire+0x1397/0x2100
[  538.227881][    C0]  ? NF_HOOK+0x9a/0x450
[  538.232067][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  538.236688][    C0]  ? ip_rcv_core+0x801/0xd10
[  538.241308][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  538.246464][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  538.251006][    C0]  __netif_receive_skb+0x2bf/0x650
[  538.256162][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  538.261855][    C0]  ? __pfx___netif_receive_skb+0x10/0x10
[  538.267528][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  538.273551][    C0]  ? __pfx_lock_release+0x10/0x10
[  538.278620][    C0]  ? _raw_spin_lock_irq+0xdf/0x120
[  538.283785][    C0]  process_backlog+0x662/0x15b0
[  538.288685][    C0]  ? process_backlog+0x33b/0x15b0
[  538.293759][    C0]  ? __pfx_process_backlog+0x10/0x10
[  538.299082][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  538.305109][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  538.311495][    C0]  __napi_poll+0xcb/0x490
[  538.315861][    C0]  net_rx_action+0x89b/0x1240
[  538.320596][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  538.325748][    C0]  ? __run_timer_base+0x178/0x8e0
[  538.330812][    C0]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  538.336507][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  538.341746][    C0]  handle_softirqs+0x2d4/0x9b0
[  538.346548][    C0]  ? __irq_exit_rcu+0xf7/0x220
[  538.351345][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  538.356671][    C0]  ? irqtime_account_irq+0xd4/0x1e0
[  538.361911][    C0]  __irq_exit_rcu+0xf7/0x220
[  538.366536][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  538.371781][    C0]  irq_exit_rcu+0x9/0x30
[  538.376056][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  538.381734][    C0]  </IRQ>
[  538.384690][    C0]  <TASK>
[  538.387645][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  538.393678][    C0] RIP: 0010:acpi_safe_halt+0x21/0x30
[  538.398993][    C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d5 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 65 5e 88 00 f3 0f 1e fa fb f4 <fa> c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
[  538.418640][    C0] RSP: 0018:ffffffff8e807ca8 EFLAGS: 00000246
[  538.424753][    C0] RAX: ffffffff8e896580 RBX: ffff888144281864 RCX: 000000000011f0f9
[  538.432758][    C0] RDX: 0000000000000001 RSI: ffff888144281800 RDI: ffff888144281864
[  538.440767][    C0] RBP: 000000000003a938 R08: ffff8880b863799b R09: 1ffff110170c6f33
[  538.448809][    C0] R10: dffffc0000000000 R11: ffffffff8c016010 R12: ffff88801f78a800
[  538.456817][    C0] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f3261a0
[  538.464830][    C0]  ? __pfx_acpi_idle_enter+0x10/0x10
[  538.470170][    C0]  acpi_idle_enter+0xe4/0x140
[  538.474886][    C0]  cpuidle_enter_state+0x109/0x470
[  538.480028][    C0]  ? __pfx_menu_select+0x10/0x10
[  538.485014][    C0]  cpuidle_enter+0x5d/0xa0
[  538.489472][    C0]  do_idle+0x372/0x5c0
[  538.493586][    C0]  ? __pfx_do_idle+0x10/0x10
[  538.498221][    C0]  ? poll_idle+0x60/0xb0
[  538.502507][    C0]  ? rest_init+0x31/0x300
[  538.506866][    C0]  cpu_startup_entry+0x42/0x60
[  538.511662][    C0]  rest_init+0x2dc/0x300
[  538.515933][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  538.521518][    C0]  start_kernel+0x484/0x510
[  538.526067][    C0]  x86_64_start_reservations+0x2a/0x30
[  538.531564][    C0]  x86_64_start_kernel+0x66/0x70
[  538.536546][    C0]  common_startup_64+0x13e/0x147
[  538.541528][    C0]  </TASK>
[  542.726134][   T31] INFO: task kworker/u8:11:6128 blocked for more than 143 seconds.