last executing test programs:

50.808618093s ago: executing program 0 (id=36):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000007c0)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f2ffffffffffffff000000233f9b82455a64f734aed90f00"/40], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r3, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
lseek(0xffffffffffffffff, 0x1, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f77000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d60800000000000000c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f995a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bec62bcb2bc91ddcdfac2e6d442105ee6c0742b5e9584543b72f762d21c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48)
mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='exfat\x00', 0x10, &(0x7f0000000500)='{$,\\&\x00')
clock_getres(0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffefffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3, 0xfff2}, {0xfff2, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xb, 0x6}}}}]}, 0x45}, 0x1, 0x0, 0x0, 0x51}, 0x4044008)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {0x3}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x45, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)

50.687870979s ago: executing program 0 (id=37):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4)
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff)
listen(r0, 0x10)
listen(r0, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0})

50.622612188s ago: executing program 0 (id=39):
mkdir(&(0x7f0000001c00)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0xfffffffd, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x10)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x44)
move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x75)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9}, 0x94)
ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5)
r6 = socket$netlink(0x10, 0x3, 0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808)

48.956350967s ago: executing program 1 (id=42):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000007c0)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f2ffffffffffffff000000233f9b82455a64f734aed90f00"/40], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r3, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
lseek(0xffffffffffffffff, 0x1, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3}, [@CTA_SYNPROXY={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1404}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f77000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d60800000000000000c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f995a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bec62bcb2bc91ddcdfac2e6d442105ee6c0742b5e9584543b72f762d21c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48)
mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='exfat\x00', 0x10, &(0x7f0000000500)='{$,\\&\x00')
clock_getres(0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffefffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3, 0xfff2}, {0xfff2, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xb, 0x6}}}}]}, 0x45}, 0x1, 0x0, 0x0, 0x51}, 0x4044008)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {0x3}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x45, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)

48.851962421s ago: executing program 1 (id=43):
syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x1})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
listen(r4, 0x5)
r5 = syz_open_dev$loop(&(0x7f00000014c0), 0x4, 0x2)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r8, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xffffffffffffff4e]}})
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
r10 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r10, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200080, 0x4000, 0x3, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x401, 0x5, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x80000001, 0x0, 0x0, 0x5, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x200040]})
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f0000000240)={0x600, 0x1000000})

47.637556586s ago: executing program 1 (id=47):
openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_io_uring_submit(r0, r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
r3 = socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000e00)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, 0x0, 0x0, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1}, 0x3}}, 0x10)
listen(r3, 0x0)
r9 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4)
close(r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0xa, 0x0, 0x0, {{0xb}, {0xfef7, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe}}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0xfffffffffffffded}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0)
epoll_create(0x4)
r11 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r11, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000055090100000000009500000000000000bd9a000000000000b70200000000000085000000a0000000b70000000000000095000000000000008ef636300b8db8f48f1b7e9847a1e1027218"], &(0x7f0000000a80)='GPL\x00'}, 0x94)

47.374983087s ago: executing program 0 (id=48):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/mtdblock0\x00', 0x42, 0x1ff)
r2 = creat(&(0x7f0000000540)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x4000841)
ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000200)={r2, 0x9093, 0x6, r2})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
sendfile(r1, r0, 0x0, 0xc00)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x2, 0x8, 0x5, 0x0, 0x0, {0xb54e3794b46c7a29, 0x0, 0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x8c54}, 0x40)
close(r1)

46.479815513s ago: executing program 0 (id=50):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect(r1, &(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x87d4b69a72310a97)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x17c, 0x17c, 0x210, 0x2a4, 0xdc, 0x344, 0x344, 0x344, 0x344, 0x344, 0x6, 0x0, {[{{@ip={@private=0xa010102, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0xa4, 0x1}, 0x0, 0xa8, 0xdc, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x2}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x0, 0x6, 0x1}, {0xffffffffffffffff, 0x2, 0x7}, 0x4, 0x9}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'gretap0\x00', 'pim6reg\x00', {0xff}, {}, 0x36, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010103, @loopback, 0xffffffff, 0xff000000, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x434)
r7 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0)
process_vm_writev(r3, 0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000e40)=""/85, 0x55}, {&(0x7f0000000ec0)=""/105, 0x69}, {&(0x7f0000000f40)=""/187, 0xbb}, {&(0x7f0000001000)=""/192, 0xc0}, {&(0x7f00000010c0)=""/144, 0x90}, {&(0x7f0000001180)=""/171, 0xab}], 0x6, 0x0)
gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x8000002, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000000)=0xffffffffffffffa7)
quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, r8, &(0x7f0000000600))

46.452829872s ago: executing program 1 (id=51):
mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
futex(&(0x7f0000000000)=0x1, 0x10, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x2)
write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007b80), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000007bc0)={0x24, r3, 0xa5c59466aaff822d, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48805}, 0x64040)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0x3, {0xc, 0x10, 0x0, {0x1, 0x6, 0x4030cf7d, 0x8000000000000001, 0x4100000000004, 0x200000004, 0x80000000, 0x9, 0xe29, 0x1000, 0x9, 0x0, 0x0, 0x2, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lseek(r4, 0x0, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xa7, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00060000000086dd60aac4e000542c00fe800000000000000000000000000000fe8000000000000000000000000000aaa5cc6c5087e6862104000206000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020ff00080000000000000000000000000806655800000000"], 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
process_vm_readv(r5, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb)
geteuid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read(r6, &(0x7f0000000200)=""/193, 0xc1)
mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x2000004, 0x810, r4, 0x0)

46.080296287s ago: executing program 1 (id=53):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff9, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfffff92d, 0x2, 0x2, 0x7, 0xffffffff, 0x4}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x80080001, 0x7ff, 0x7, 0x8, 0x35}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x200008c2}, 0x0)

45.850545286s ago: executing program 0 (id=54):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000007c0)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f2ffffffffffffff000000233f9b82"], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r3, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
lseek(0xffffffffffffffff, 0x1, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3}, [@CTA_SYNPROXY={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1404}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48)
mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='exfat\x00', 0x10, &(0x7f0000000500)='{$,\\&\x00')
clock_getres(0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffefffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3, 0xfff2}, {0xfff2, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xb, 0x6}}}}]}, 0x45}, 0x1, 0x0, 0x0, 0x51}, 0x4044008)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {0x3}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x45, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)

45.846771581s ago: executing program 32 (id=54):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000007c0)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f2ffffffffffffff000000233f9b82"], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r3, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
lseek(0xffffffffffffffff, 0x1, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3}, [@CTA_SYNPROXY={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1404}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48)
mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='exfat\x00', 0x10, &(0x7f0000000500)='{$,\\&\x00')
clock_getres(0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffefffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3, 0xfff2}, {0xfff2, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xb, 0x6}}}}]}, 0x45}, 0x1, 0x0, 0x0, 0x51}, 0x4044008)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {0x3}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x45, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)

45.533556121s ago: executing program 1 (id=56):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000300)={'bond0\x00', @ifru_names='sit0\x00'})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="cab82d382f1b8c86410afb0e8da6e71f451f455e55b5778b86df103d910f9f2f121b814dd59e8a28331973331e601fc3daa7650b07c6121c60f8b897d7d1e38b3cc5cc0d12f06f3edf7a6c1c5ce4307bb90f5a7c68659e9b356713475d4225269583b7f41d9e013618f64196a59e99c4", @ANYRESDEC=r3], 0xfc}}, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0015", @ANYRESDEC=r3, @ANYRES32=r3, @ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x109080, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r6, 0x80044dfb, &(0x7f0000000040))
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r7, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="02002abd7000fcdb00250100000008000200ec3a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084088cda533"], 0x60}}, 0x200040c0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

45.404669119s ago: executing program 33 (id=56):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000300)={'bond0\x00', @ifru_names='sit0\x00'})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="cab82d382f1b8c86410afb0e8da6e71f451f455e55b5778b86df103d910f9f2f121b814dd59e8a28331973331e601fc3daa7650b07c6121c60f8b897d7d1e38b3cc5cc0d12f06f3edf7a6c1c5ce4307bb90f5a7c68659e9b356713475d4225269583b7f41d9e013618f64196a59e99c4", @ANYRESDEC=r3], 0xfc}}, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0015", @ANYRESDEC=r3, @ANYRES32=r3, @ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x109080, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r6, 0x80044dfb, &(0x7f0000000040))
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r7, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="02002abd7000fcdb00250100000008000200ec3a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084088cda533"], 0x60}}, 0x200040c0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

6.832249247s ago: executing program 2 (id=174):
setrlimit(0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000001c0)=0x2, 0x1)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

6.674513566s ago: executing program 2 (id=176):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80, 0x1})
io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x3f00)

6.583761139s ago: executing program 2 (id=177):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00')
setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f00000000c0)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, "5e209d7c085616b86862c2318c6c366d52ed6aa8e3a039b051d7a757129bd6da", 0x1, 0x8, 0x1000, 0x2}, 0x3c)
syz_emit_ethernet(0x38, &(0x7f0000000140)={@random="54e78535f492", @multicast, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x3, 0x1, 0x4}}, {@x25={0x805, {0x3, 0x8, 0xf7, "c66c9db88b663b4ab8ca979d46611df732c5593d7673d65e98deab2e9bcf36"}}}}, 0x0)
r3 = gettid()
setpgid(r3, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0xe30)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r4, r4, 0xd, 0x2, &(0x7f0000000400)="c20b", 0xb, 0x1, 0x15c2, 0x5505, 0x8b, 0x1, 0x9, 'syz1\x00'})

5.631286979s ago: executing program 2 (id=180):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
fcntl$setlease(r0, 0x400, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

5.043837771s ago: executing program 5 (id=186):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x40)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
name_to_handle_at(r3, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000200)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x0, 0x6e6, 0x4, 0xaf, 0x98, 0x7}}, &(0x7f00000002c0), 0x600)
accept4(r1, 0x0, 0x0, 0x800)
write$dsp(r0, &(0x7f0000000180)='\x00', 0x1)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

5.040112938s ago: executing program 3 (id=187):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d0}], 0x1, 0x20048805)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x24000890)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc1ffb}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10004, 0x3, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=<r3=>0x0)
ioprio_get$pid(0x2, r3)
ioctl$COMEDI_DEVINFO(0xffffffffffffffff, 0x80b06401, &(0x7f0000000240))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x3f8a, 0x4)
r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0)
sendmsg$nl_generic(r4, 0x0, 0x8000)

4.474747958s ago: executing program 2 (id=188):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB=' mO'], 0x0, 0x0, 0x0, 0x0}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000280), &(0x7f00000003c0)=0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x800, 0x9, 0x3}, 0x1c)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0)

4.305184104s ago: executing program 5 (id=189):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x25, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x98, r4, 0x1, 0x0, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x70, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

3.897010678s ago: executing program 3 (id=190):
r0 = syz_open_dev$dri(&(0x7f0000001500), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0x402c5829, &(0x7f0000001800)={0x0})

3.59978265s ago: executing program 3 (id=192):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'})

2.849661784s ago: executing program 3 (id=193):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r2 = getpid()
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
kcmp(r2, r2, 0x0, 0xffffffffffffffff, r3)
sendfile(r1, r1, 0x0, 0x8)
ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x3})
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x10, 0x4)

2.691228031s ago: executing program 3 (id=195):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', <r3=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
acct(&(0x7f0000000000)='./tracefs_dir/trace_marker\x00')
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0)

2.639012889s ago: executing program 5 (id=197):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x17c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, @TCA_GRED_STAB={0x104}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x4}]}, 0x17c}}, 0x0)

2.545195703s ago: executing program 3 (id=198):
iopl(0x3)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
iopl(0x8)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x2000)
ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000100)={0x9, 0xa2da})
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0)

2.54443798s ago: executing program 4 (id=199):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000007c0)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f2ffffffffffffff000000233f9b82455a64f734aed90f00"/40], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r3, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
lseek(0xffffffffffffffff, 0x1, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3}, [@CTA_SYNPROXY={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1404}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)
mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='exfat\x00', 0x10, &(0x7f0000000500)='{$,\\&\x00')
clock_getres(0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffefffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3, 0xfff2}, {0xfff2, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xb, 0x6}}}}]}, 0x45}, 0x1, 0x0, 0x0, 0x51}, 0x4044008)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {0x3}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x45, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)

2.412368958s ago: executing program 4 (id=200):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x421, 0x800000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8005}, 0x44002)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f00000002c0)=0x1, 0x4)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_le_set_cig_params={{0x3}, {0x3, 0x7}}}}, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff00000007058102"], 0x0)

2.334524015s ago: executing program 5 (id=201):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x25, 0x9, 0x0, 0x800, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x3c}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount$nfs4(&(0x7f0000000000)='-.%^%\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20c0c24, &(0x7f0000000500)=ANY=[@ANYBLOB="2f5e2d282d272e2a03212c3970002c236a2c2e2f62696e64657266732f62696e64657230002c2c002c7375626a5f757365723d242e232c66736d616769633d3078383030303030303030303030303030312c7365636c6162656c2c6673636f6e746578743d756e636f6e67696e65645f752c6d61736b3d5e4d41595f2b5845432c61707072616973652c0087e004439811ef4ad70fa96a87a04a948d5fe99cd16fa3f0e5bf7ef431150ca312673ce5c8d3ac3e310df8051a691f40f0f3bd3c0d289dbcf46b5bdd3836649061e44d94fc1d2f3988b522fd15ce705c3a1a4cda5609040b0ce8c450e0381702bc6385321398"])
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r3, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
getgroups(0x2, &(0x7f0000000600)=[0x0, 0x0])
sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x8)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './bus'}, 0x9)

2.303718745s ago: executing program 2 (id=202):
openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
chdir(&(0x7f0000000280)='./file0/file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup(r3)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}, @in={0x2, 0x4e21, @rand_addr=0x64010101}], 0x2c)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080), 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x100, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@mcast1, {}, {0x1b, 0x0, 0x5}, {}, 0x0, 0x400, 0xa, 0x0, 0xff}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x100}}, 0x0)
write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1.088420666s ago: executing program 5 (id=203):
socket$netlink(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"])
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000140)={0x8, 0x9, {<r2=>0xffffffffffffffff}, {}, 0x2, 0x9})
prlimit64(r2, 0xf, &(0x7f0000000300)={0x8}, &(0x7f0000000340))
syz_open_dev$tty1(0xc, 0x4, 0x1)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
mount(0x0, 0x0, 0x0, 0x44021, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107844e230007000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d66c0000007f000001000600000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000080fcffffff400000002abd7000043500000200010020000000480003006465666c61746500"/222], 0x138}, 0x1, 0x0, 0x0, 0x8805}, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000180)=0x1f, 0x4)
write(r4, &(0x7f0000000140)='namespace0.0', 0xc)
close(r4)

825.300639ms ago: executing program 4 (id=204):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'})

755.493862ms ago: executing program 4 (id=205):
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000007c0)={0x84, @private=0xa010101, 0x15, 0x3, 'dh\x00', 0x1, 0x4, 0x8}, 0x2c)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x52}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x1c, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @empty}}}}}, 0x0)
write(r0, &(0x7f0000000180)='0000:00:03.0\x00', 0xd)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r6, &(0x7f0000000100)='firewire_ohci\x00', 0xe)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/firewire_ohci/bind\x00', 0x1, 0x0)
write(r7, &(0x7f0000000180)='0000:00:03.0\x00', 0xd)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0), 0x4)

603.621551ms ago: executing program 4 (id=206):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='nfs4\x00', 0x108010, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/fs/afs/cells\x00', 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0xefdde095b55cd7ee, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffebe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='namespace0.0', 0xc)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='p', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='46618451-8636-4076-a006-25816b8ff40c', 0x24)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='namespace0.0', 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='pfn0.0', 0x6)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3000000, 0xff00}, 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
r7 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB="09000000001367a5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$binfmt_register(r7, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x4, 0x3a, '*-\xaa]', 0x3a, 'wlan0\x00', 0x3a, './proc/fs/afs/cells/file0', 0x3a, [0x50, 0x50, 0x4f, 0x43, 0x43]}, 0x48)

395.631078ms ago: executing program 5 (id=207):
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
read(r0, &(0x7f0000000380)=""/144, 0x90)
syz_usb_connect$uac3(0x4, 0x95, &(0x7f0000000200)=ANY=[@ANYBLOB="120101020000002082058205400001020301090281000301108003080b0102012330210904000000010130000a2401ff1500a2dc00000b240c7f066f06951b7e490904010000010230000904010101010230000a24020104036701e80209050109ff03ff06050a252530000000060f000904020000010230000904020101010230000905820900047705020a252502000000040600"], &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x211, 0x2, 0x5, 0x7, 0x10, 0x1}, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="050f13000203900b0b10010caf000202020040"], 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x102c}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40d}}]})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0001}]})
pwrite64(r0, 0x0, 0x0, 0x9)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x3c, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xefa5}]}}]}, 0x6c}}, 0x2000400c)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'wlan1\x00', {}, 0x9af})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
sendto$inet6(r3, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84)
close(0x3)
close_range(r1, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=208):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f80)=@getstats={0x1c, 0x5e, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x48804}, 0x8044)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0)
ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000300)=0x3)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/219, 0xdb}, {&(0x7f0000000800)=""/129, 0x81}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000000380)=""/73, 0x49}], 0x4}}], 0x1, 0x0, 0x0)
recvmsg$can_raw(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1}, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45)
write(r3, &(0x7f00000000c0)='on', 0x2)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r4 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4040800)
sendmmsg$inet6(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001)
sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x44000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:62233' (ED25519) to the list of known hosts.
[   48.589687][ T5728] cgroup: Unknown subsys name 'net'
[   48.731839][ T5728] cgroup: Unknown subsys name 'cpuset'
[   48.736672][ T5728] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.736574][ T5728] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.528866][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.538932][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.542301][ T5752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.545813][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.548880][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.548916][ T5757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.551957][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.554371][ T5757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.554773][ T5759] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   54.556874][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.557340][ T5758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.557572][ T5759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   54.559908][ T5757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.560150][ T5759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   54.563262][ T5757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.567806][ T5758] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   54.571211][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.572249][ T5757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.574680][ T5758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   54.580424][   T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.241983][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.244989][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.247562][ T5750] bridge_slave_0: entered allmulticast mode
[   55.254229][ T5750] bridge_slave_0: entered promiscuous mode
[   55.267889][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.279732][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.282075][ T5750] bridge_slave_1: entered allmulticast mode
[   55.284691][ T5750] bridge_slave_1: entered promiscuous mode
[   55.357830][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.388037][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.453133][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.456268][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.459511][ T5751] bridge_slave_0: entered allmulticast mode
[   55.463330][ T5751] bridge_slave_0: entered promiscuous mode
[   55.467663][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.470163][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.472560][ T5751] bridge_slave_1: entered allmulticast mode
[   55.475286][ T5751] bridge_slave_1: entered promiscuous mode
[   55.491650][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.494625][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.496958][ T5743] bridge_slave_0: entered allmulticast mode
[   55.499846][ T5743] bridge_slave_0: entered promiscuous mode
[   55.515720][ T5750] team0: Port device team_slave_0 added
[   55.517662][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.520016][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.522210][ T5743] bridge_slave_1: entered allmulticast mode
[   55.524895][ T5743] bridge_slave_1: entered promiscuous mode
[   55.548556][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.553433][ T5750] team0: Port device team_slave_1 added
[   55.600850][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.631342][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.634347][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.644719][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.654494][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.661704][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.665655][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.668975][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.671268][ T5745] bridge_slave_0: entered allmulticast mode
[   55.673995][ T5745] bridge_slave_0: entered promiscuous mode
[   55.682611][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.684835][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.692603][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.706456][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.708774][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.711017][ T5745] bridge_slave_1: entered allmulticast mode
[   55.714196][ T5745] bridge_slave_1: entered promiscuous mode
[   55.717691][ T5751] team0: Port device team_slave_0 added
[   55.721293][ T5751] team0: Port device team_slave_1 added
[   55.741111][ T5743] team0: Port device team_slave_0 added
[   55.744601][ T5743] team0: Port device team_slave_1 added
[   55.781504][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.783888][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.791761][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.797496][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.801913][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.804135][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.812047][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.821708][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.823898][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.832150][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.836812][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.839930][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.848372][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.853253][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.860841][ T5750] hsr_slave_0: entered promiscuous mode
[   55.863950][ T5750] hsr_slave_1: entered promiscuous mode
[   55.893568][ T5745] team0: Port device team_slave_0 added
[   55.898401][ T5745] team0: Port device team_slave_1 added
[   55.951465][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.954097][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.962964][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.972120][ T5743] hsr_slave_0: entered promiscuous mode
[   55.974564][ T5743] hsr_slave_1: entered promiscuous mode
[   55.976578][ T5743] debugfs: 'hsr0' already exists in 'hsr'
[   55.978569][ T5743] Cannot create hsr debugfs directory
[   56.001439][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.003669][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.012118][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.026657][ T5751] hsr_slave_0: entered promiscuous mode
[   56.030723][ T5751] hsr_slave_1: entered promiscuous mode
[   56.034088][ T5751] debugfs: 'hsr0' already exists in 'hsr'
[   56.036396][ T5751] Cannot create hsr debugfs directory
[   56.179649][ T5745] hsr_slave_0: entered promiscuous mode
[   56.182062][ T5745] hsr_slave_1: entered promiscuous mode
[   56.184421][ T5745] debugfs: 'hsr0' already exists in 'hsr'
[   56.186793][ T5745] Cannot create hsr debugfs directory
[   56.388067][ T5750] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.394953][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.399083][ T5750] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.408837][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.429269][ T5750] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.442936][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.467200][ T5750] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.472910][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.523988][ T5743] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.530904][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.534140][ T5743] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.540438][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.543774][ T5743] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.548112][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.554712][ T5743] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.561417][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.588947][ T5753] Bluetooth: hci1: command tx timeout
[   56.598683][ T5753] Bluetooth: hci0: command tx timeout
[   56.626694][ T5751] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.633981][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.643403][ T5751] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.650504][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.654535][ T5751] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.661119][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.664862][ T5751] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.669197][ T5753] Bluetooth: hci2: command tx timeout
[   56.669344][   T64] Bluetooth: hci3: command tx timeout
[   56.677238][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.727944][ T5745] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   56.734767][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.744840][ T5745] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   56.753880][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.757663][ T5745] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   56.764750][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.776380][ T5745] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   56.781927][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.801459][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.843974][ T5750] 8021q: adding VLAN 0 to HW filter on device team0
[   56.860600][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.863174][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.875366][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.887949][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.890219][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.928098][ T5743] 8021q: adding VLAN 0 to HW filter on device team0
[   56.944150][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.947066][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.963096][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.965836][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.978814][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.990328][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.026548][ T5745] 8021q: adding VLAN 0 to HW filter on device team0
[   57.039700][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.042000][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.052770][ T5751] 8021q: adding VLAN 0 to HW filter on device team0
[   57.067326][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.070663][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.084207][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.087392][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.110445][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.113343][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.320229][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.369496][ T5750] veth0_vlan: entered promiscuous mode
[   57.379617][ T5750] veth1_vlan: entered promiscuous mode
[   57.420938][ T5750] veth0_macvtap: entered promiscuous mode
[   57.431814][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.435143][ T5750] veth1_macvtap: entered promiscuous mode
[   57.448130][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.463246][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.475105][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.495701][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.562080][ T5743] veth0_vlan: entered promiscuous mode
[   57.588588][ T5743] veth1_vlan: entered promiscuous mode
[   57.595034][ T5751] veth0_vlan: entered promiscuous mode
[   57.604009][ T5745] veth0_vlan: entered promiscuous mode
[   57.644354][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.650199][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.667416][ T5745] veth1_vlan: entered promiscuous mode
[   57.676697][ T5751] veth1_vlan: entered promiscuous mode
[   57.685448][  T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.690458][  T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.712952][ T5743] veth0_macvtap: entered promiscuous mode
[   57.721764][ T5745] veth0_macvtap: entered promiscuous mode
[   57.729850][ T5743] veth1_macvtap: entered promiscuous mode
[   57.736402][ T5745] veth1_macvtap: entered promiscuous mode
[   57.741174][ T5751] veth0_macvtap: entered promiscuous mode
[   57.746144][ T5751] veth1_macvtap: entered promiscuous mode
[   57.751979][ T5750] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.764114][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.769339][ T5750] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   57.777774][ T5750] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   57.779241][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.786722][ T5750] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   57.786948][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.804138][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.806125][ T5750] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   57.810439][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.821133][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.858975][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.868408][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.960534][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.964943][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.984208][  T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.986734][  T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.012869][  T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.016183][  T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.036386][  T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.039374][  T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.059717][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.063390][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.077909][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.080630][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.080902][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.086933][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.145032][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.154231][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.160595][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.177724][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.192091][ T5823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.219481][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.224468][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.230054][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.237627][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.244633][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.289123][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.295451][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.340442][ T5901] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   58.395482][ T5901] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.669943][   T64] Bluetooth: hci0: command tx timeout
[   58.672269][   T64] Bluetooth: hci1: command tx timeout
[   58.700679][ T5917] capability: warning: `syz.1.10' uses 32-bit capabilities (legacy support in use)
[   58.749446][   T64] Bluetooth: hci2: command tx timeout
[   58.758545][   T64] Bluetooth: hci3: command tx timeout
[   59.142732][ T5925] tmpfs: Unknown parameter 'nr_inod'
[   59.176486][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'.
[   59.856966][ T5929] Zero length message leads to an empty skb
[   60.040682][ T5936] random: crng reseeded on system resumption
[   60.322817][ T5942] kernel profiling enabled (shift: 7)
[   60.423259][ T5942] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   60.749790][ T5753] Bluetooth: hci0: command tx timeout
[   60.752713][   T64] Bluetooth: hci1: command tx timeout
[   60.828361][ T5753] Bluetooth: hci2: command tx timeout
[   60.831797][   T64] Bluetooth: hci3: command tx timeout
[   61.044319][ T5947] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18'.
[   61.290547][ T5950] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800
[   62.378415][  T846] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   62.528927][ T5893] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   62.548440][  T846] usb 8-1: Using ep0 maxpacket: 8
[   62.559290][  T846] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[   62.564237][  T846] usb 8-1: config 0 has no interface number 0
[   62.566832][  T846] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   62.574288][  T846] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   62.579443][  T846] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   62.583972][  T846] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   62.589955][  T846] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   62.593740][  T846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.611611][  T846] usb 8-1: config 0 descriptor??
[   62.658951][ T5893] usb 7-1: device descriptor read/64, error -71
[   62.665992][  T846] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   62.833798][ T5753] Bluetooth: hci0: command tx timeout
[   62.836044][   T64] Bluetooth: hci1: command tx timeout
[   62.899637][ T5893] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[   62.922477][ T5753] Bluetooth: hci2: command tx timeout
[   62.925421][   T64] Bluetooth: hci3: command tx timeout
[   63.040846][ T5893] usb 7-1: device descriptor read/64, error -71
[   63.115960][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'.
[   63.150230][ T5893] usb usb7-port1: attempt power cycle
[   63.540494][ T5893] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[   63.595327][ T5893] usb 7-1: device descriptor read/8, error -71
[   63.838581][ T5893] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[   63.860858][ T5893] usb 7-1: device descriptor read/8, error -71
[   63.971304][ T5893] usb usb7-port1: unable to enumerate USB device
[   64.605538][   T42] audit: type=1326 audit(1786011971.710:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.28" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[   64.613349][   T42] audit: type=1326 audit(1786011971.720:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.28" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[   64.621159][   T42] audit: type=1326 audit(1786011971.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.28" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[   64.628334][   T42] audit: type=1326 audit(1786011971.720:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.28" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[   64.636171][   T42] audit: type=1326 audit(1786011971.720:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.28" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[   64.644186][   T42] audit: type=1326 audit(1786011971.720:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.28" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[   64.651465][   T42] audit: type=1326 audit(1786011971.730:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.28" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[   64.658892][   T42] audit: type=1326 audit(1786011971.730:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.28" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[   64.665844][   T42] audit: type=1326 audit(1786011971.730:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.28" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[   64.673214][   T42] audit: type=1326 audit(1786011971.730:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.28" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[   65.228495][  T846] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   65.402092][  T846] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   65.405709][  T846] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.409738][  T846] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   65.412808][  T846] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   65.419730][  T846] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[   65.422870][  T846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.425521][  T846] usb 6-1: Product: syz
[   65.426930][  T846] usb 6-1: Manufacturer: syz
[   65.429851][  T846] usb 6-1: SerialNumber: syz
[   65.502295][ T2320] usb 8-1: USB disconnect, device number 2
[   65.559734][ T2320] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[   65.624786][ T6003] Illegal XDP return value 4294967294 on prog  (id 11) dev N/A, expect packet loss!
[   65.640018][ T6003] =======================================================
[   65.640018][ T6003] WARNING: The mand mount option has been deprecated and
[   65.640018][ T6003]          and is ignored by this kernel. Remove the mand
[   65.640018][ T6003]          option from the mount to silence this warning.
[   65.640018][ T6003] =======================================================
[   65.645323][ T5893] usb 6-1: USB disconnect, device number 2
[   65.654454][ T6003] new mount options do not match the existing superblock, will be ignored
[   65.958400][   T61] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   66.008383][   T60] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   66.109098][   T61] usb 7-1: Using ep0 maxpacket: 8
[   66.120764][   T61] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[   66.123969][   T61] usb 7-1: config 179 has no interface number 0
[   66.126439][   T61] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   66.130852][   T61] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   66.135155][   T61] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   66.139529][   T61] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   66.143928][   T61] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   66.149135][   T61] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   66.152685][   T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.158655][ T6008] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   66.159778][   T60] usb 8-1: config 0 has no interfaces?
[   66.163750][   T60] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[   66.166820][   T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.171084][   T60] usb 8-1: config 0 descriptor??
[   66.363631][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'.
[   66.369721][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'.
[   66.376891][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'.
[   66.391604][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'.
[   66.431764][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'.
[   66.453203][ T5825] usb 8-1: USB disconnect, device number 3
[   66.615636][ T6008] syzkaller1: entered promiscuous mode
[   66.617565][ T6008] syzkaller1: entered allmulticast mode
[   66.826458][ T6025] program syz.0.39 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   66.984007][   T60] usb 7-1: USB disconnect, device number 6
[   66.984049][    C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   66.990846][    C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   67.541078][ T6029] syzkaller1: entered promiscuous mode
[   67.543635][ T6029] syzkaller1: entered allmulticast mode
[   67.546638][ T6028] netlink: 'syz.1.40': attribute type 2 has an invalid length.
[   67.553012][ T6028] netlink: 723 bytes leftover after parsing attributes in process `syz.1.40'.
[   67.928595][ T6025] infiniband syz0: set active
[   67.930613][ T6025] infiniband syz0: added bond_slave_1
[   67.936071][ T6025] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[   67.939548][ T6025] infiniband syz0: Couldn't open port 1
[   67.944500][ T6025] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   67.949479][ T6025] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   67.956087][ T6025] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   67.990141][ T6025] RDS/IB: syz0: added
[   67.994140][ T6025] smc: adding ib device syz0 with port count 1
[   67.996867][ T6025] smc:    ib device syz0 port 1 has no pnetid
[   69.226026][ T2320] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.237010][ T2320] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.245564][ T2320] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.250962][ T2320] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.257102][ T2320] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.262365][ T2320] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.264947][ T2320] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.271777][ T2320] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.278097][ T2320] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.286435][ T2320] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   69.306275][ T2320] hid-generic 0000:0000:0000.0002: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   69.778428][ T6062] tipc: Can't bind to reserved service type 1
[   70.092620][ T6066] ehci-pci 0000:00:1d.7: remove, state 1
[   70.097423][ T6066] usb usb1: USB disconnect, device number 1
[   70.104422][ T6066] usb 1-1: USB disconnect, device number 2
[   70.566316][ T6071] fido_id[6071]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   70.610452][ T6066] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[   70.904682][   T42] kauditd_printk_skb: 11 callbacks suppressed
[   70.904742][   T42] audit: type=1800 audit(1786011978.010:23): pid=6073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.51" name="/" dev="fuse" ino=1 res=0 errno=0
[   70.935756][ T6080] block device autoloading is deprecated and will be removed.
[   70.948703][   T41] usb 2-1: new full-speed USB device number 2 using uhci_hcd
[   70.977416][ T6076] capability: warning: `syz.3.52' uses deprecated v2 capabilities in a way that may be insecure
[   71.018931][ T1439] ieee802154 phy0 wpan0: encryption failed: -22
[   71.021902][ T1439] ieee802154 phy1 wpan1: encryption failed: -22
[   71.118512][   T41] usb 2-1: not running at top speed; connect to a high speed hub
[   71.148192][   T41] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[   71.157763][   T41] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[   71.167398][   T41] usb 2-1: Product: QEMU USB Tablet
[   71.176026][   T41] usb 2-1: Manufacturer: QEMU
[   71.180482][   T41] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[   71.222486][ T5823] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.283050][   T41] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0003/input/input5
[   71.328724][ T5823] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.420331][   T41] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[   71.462619][ T6069] usb 2-1: USB disconnect, device number 2
[   71.470558][ T5823] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.590912][ T6082] fido_id[6082]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/report_descriptor': No such file or directory
[   71.675165][   T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.684539][   T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.688161][   T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.692751][   T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.697385][   T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.775450][ T5823] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.883111][   T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.890007][   T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.897588][   T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.912301][   T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   71.917911][   T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   72.070317][ T6069] ehci-pci 0000:00:1d.7: EHCI Host Controller
[   72.085632][ T6069] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[   72.099241][ T6069] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[   72.128732][ T6069] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[   72.135779][ T6069] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[   72.140424][ T6069] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[   72.143925][ T6069] usb usb1: Product: EHCI Host Controller
[   72.146215][ T6069] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[   72.149928][ T6069] usb usb1: SerialNumber: 0000:00:1d.7
[   72.181589][ T6069] hub 1-0:1.0: USB hub found
[   72.201288][ T6069] hub 1-0:1.0: 6 ports detected
[   72.245405][ T5823] bridge_slave_1: left allmulticast mode
[   72.248719][ T5823] bridge_slave_1: left promiscuous mode
[   72.252721][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.280244][ T5823] bridge_slave_0: left allmulticast mode
[   72.282279][ T5823] bridge_slave_0: left promiscuous mode
[   72.283693][ T6069] hub 2-0:1.0: USB hub found
[   72.286447][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.291713][ T6069] hub 2-0:1.0: 2 ports detected
[   72.372205][ T6069] hub 3-0:1.0: USB hub found
[   72.375190][ T6069] hub 3-0:1.0: 2 ports detected
[   72.414805][ T6069] hub 4-0:1.0: USB hub found
[   72.417896][ T6069] hub 4-0:1.0: 2 ports detected
[   72.508504][ T5832] usb 1-1: new high-speed USB device number 2 using ehci-pci
[   72.536729][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.544430][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.568138][ T5823] bond0 (unregistering): Released all slaves
[   72.586014][ T6107] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint
[   72.602098][ T6107] pci 0000:00:05.0: BAR 0 [io  0xc0c0-0xc0df]
[   72.605903][ T6107] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff]
[   72.607396][ T5824] syz0: Port: 1 Link DOWN
[   72.609451][ T6107] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref]
[   72.633245][ T6107] pci 0000:00:05.0: Adding to iommu group 5
[   72.671962][ T6107] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned
[   72.693828][ T5832] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[   72.695833][ T6107] pci 0000:00:05.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned
[   72.701094][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[   72.705484][ T5832] usb 1-1: Product: QEMU USB Tablet
[   72.709608][ T6107] pci 0000:00:05.0: BAR 0 [io  0x2000-0x201f]: assigned
[   72.711752][ T5832] usb 1-1: Manufacturer: QEMU
[   72.715898][ T5832] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[   72.791426][ T5832] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0004/input/input6
[   72.902056][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2
[   72.907142][ T5832] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[   73.219712][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3
[   73.268381][  T846] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   73.418855][  T846] usb 8-1: too many configurations: 9, using maximum allowed: 8
[   73.422511][  T846] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.426136][  T846] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.430301][  T846] usb 8-1: config 0 interface 0 has no altsetting 0
[   73.434107][  T846] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.437127][  T846] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.444944][  T846] usb 8-1: config 0 interface 0 has no altsetting 0
[   73.451195][  T846] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.454010][  T846] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.457295][  T846] usb 8-1: config 0 interface 0 has no altsetting 0
[   73.460405][  T846] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.463212][  T846] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.466503][  T846] usb 8-1: config 0 interface 0 has no altsetting 0
[   73.469769][  T846] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.472707][  T846] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.476084][  T846] usb 8-1: config 0 interface 0 has no altsetting 0
[   73.479509][  T846] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.483891][  T846] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.487397][  T846] usb 8-1: config 0 interface 0 has no altsetting 0
[   73.490414][  T846] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.494683][  T846] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.501409][  T846] usb 8-1: config 0 interface 0 has no altsetting 0
[   73.504827][  T846] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.507705][  T846] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.511465][  T846] usb 8-1: config 0 interface 0 has no altsetting 0
[   73.516510][  T846] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   73.520356][  T846] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   73.523179][  T846] usb 8-1: Product: syz
[   73.524546][  T846] usb 8-1: Manufacturer: syz
[   73.526123][  T846] usb 8-1: SerialNumber: syz
[   73.527884][ T6144] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   73.534166][  T846] usb 8-1: config 0 descriptor??
[   73.540997][ T5453] 8021q: adding VLAN 0 to HW filter on device eth5
[   73.543889][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.546454][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.546962][  T846] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0
[   73.548939][ T6083] bridge_slave_0: entered allmulticast mode
[   73.550176][ T6083] bridge_slave_0: entered promiscuous mode
[   73.564481][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.567444][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.570983][ T6083] bridge_slave_1: entered allmulticast mode
[   73.575434][ T6083] bridge_slave_1: entered promiscuous mode
[   73.590954][ T5823] hsr_slave_0: left promiscuous mode
[   73.594866][ T5823] hsr_slave_1: left promiscuous mode
[   73.597729][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.601183][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.605151][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.607658][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.617815][ T5823] veth1_macvtap: left promiscuous mode
[   73.620974][ T5823] veth0_macvtap: left promiscuous mode
[   73.622928][ T5823] veth1_vlan: left promiscuous mode
[   73.624727][ T5823] veth0_vlan: left promiscuous mode
[   73.708378][ T5753] Bluetooth: hci0: command tx timeout
[   73.817924][ T5823] team0 (unregistering): Port device team_slave_1 removed
[   73.865860][ T5823] team0 (unregistering): Port device team_slave_0 removed
[   73.912688][   T36] smc: removing ib device syz0
[   74.029182][ T5753] Bluetooth: hci3: command tx timeout
[   74.055724][ T6083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.089017][   T36] smbdirect: ib_dev[syz0] removed
[   74.125129][ T6083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.215400][ T6083] team0: Port device team_slave_0 added
[   74.235782][ T6083] team0: Port device team_slave_1 added
[   74.380408][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.388747][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.406101][ T6083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.444758][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.456102][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.499656][ T6083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.647282][ T6152] block nbd0: Receive control failed (result -32)
[   74.647324][   T65] block nbd0: Receive control failed (result -32)
[   74.652840][  T846] usb 8-1: USB disconnect, device number 4
[   74.726235][ T6083] hsr_slave_0: entered promiscuous mode
[   74.733324][ T6083] hsr_slave_1: entered promiscuous mode
[   74.756549][ T6083] debugfs: 'hsr0' already exists in 'hsr'
[   74.757686][  T846] yurex 8-1:0.0: USB YUREX #0 now disconnected
[   74.758741][ T6083] Cannot create hsr debugfs directory
[   74.991060][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4
[   75.150818][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.153882][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.156751][ T6088] bridge_slave_0: entered allmulticast mode
[   75.160996][ T6088] bridge_slave_0: entered promiscuous mode
[   75.181217][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.184660][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.187748][ T6088] bridge_slave_1: entered allmulticast mode
[   75.192167][ T6088] bridge_slave_1: entered promiscuous mode
[   75.238008][ T6088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.252125][ T6088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.277993][ T6088] team0: Port device team_slave_0 added
[   75.300184][ T5823] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.312944][ T6088] team0: Port device team_slave_1 added
[   75.338012][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.341102][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.358134][ T6088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.377423][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.381236][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.389991][ T6088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.412697][ T5823] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.442857][ T6083] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   75.451124][ T6083] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.465122][ T6088] hsr_slave_0: entered promiscuous mode
[   75.467699][ T6088] hsr_slave_1: entered promiscuous mode
[   75.470194][  T846] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   75.473784][ T6088] debugfs: 'hsr0' already exists in 'hsr'
[   75.476130][ T6088] Cannot create hsr debugfs directory
[   75.479610][ T6083] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   75.485958][ T6083] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.490282][ T6083] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   75.495155][ T6083] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.505416][ T6083] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   75.513771][ T6083] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.542522][ T5823] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.599147][ T5823] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.629947][  T846] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.633692][  T846] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.642682][  T846] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   75.646740][  T846] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   75.655183][  T846] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[   75.667752][  T846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.670707][  T846] usb 7-1: Product: syz
[   75.672060][  T846] usb 7-1: Manufacturer: syz
[   75.674230][  T846] usb 7-1: SerialNumber: syz
[   75.691364][ T6088] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   75.699053][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.715927][ T6088] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   75.721565][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.724547][ T6088] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   75.729855][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.735155][ T6088] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   75.739913][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.788375][ T5753] Bluetooth: hci0: command tx timeout
[   75.803642][ T5823] bridge_slave_1: left allmulticast mode
[   75.806048][ T5823] bridge_slave_1: left promiscuous mode
[   75.808991][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.814493][ T5823] bridge_slave_0: left allmulticast mode
[   75.816636][ T5823] bridge_slave_0: left promiscuous mode
[   75.820052][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.893275][  T846] usb 7-1: USB disconnect, device number 7
[   75.946963][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.952589][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.956651][ T5823] bond0 (unregistering): Released all slaves
[   76.002686][ T6083] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.019749][ T6083] 8021q: adding VLAN 0 to HW filter on device team0
[   76.029462][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.032152][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.043691][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.046563][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.057279][ T6088] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.109522][ T5753] Bluetooth: hci3: command tx timeout
[   76.203018][ T6088] 8021q: adding VLAN 0 to HW filter on device team0
[   76.215705][  T217] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.218752][  T217] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.284531][  T190] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.287403][  T190] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.296234][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6
[   76.434334][ T5823] hsr_slave_0: left promiscuous mode
[   76.441311][ T5823] hsr_slave_1: left promiscuous mode
[   76.444198][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.447263][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.455689][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.462292][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.475299][ T5823] veth1_macvtap: left promiscuous mode
[   76.477777][ T5823] veth0_macvtap: left promiscuous mode
[   76.481163][ T5823] veth1_vlan: left promiscuous mode
[   76.483547][ T5823] veth0_vlan: left promiscuous mode
[   76.500485][    C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b177ba (__mcheck_cpu_init_prepare_banks+0x18a/0x380)
[   76.506866][    C0] Call Trace:
[   76.508308][    C0]  <IRQ>
[   76.509604][    C0]  ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10
[   76.512369][    C0]  ? sched_clock_cpu+0x6c/0x570
[   76.514402][    C0]  ? lockdep_softirqs_on+0xad/0x120
[   76.516543][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[   76.518664][    C0]  ? __pfx_mce_cpu_restart+0x10/0x10
[   76.520856][    C0]  mce_cpu_restart+0xd5/0x1f0
[   76.522830][    C0]  __flush_smp_call_function_queue+0x281/0x960
[   76.525385][    C0]  __sysvec_call_function+0x81/0x420
[   76.527454][    C0]  sysvec_call_function+0x9e/0xc0
[   76.529585][    C0]  </IRQ>
[   76.530676][    C0]  <TASK>
[   76.531756][    C0]  asm_sysvec_call_function+0x1a/0x20
[   76.533959][    C0] RIP: 0010:unwind_next_frame+0x144b/0x2090
[   76.536445][    C0] Code: 12 00 0f 85 23 ef ff ff 4c 89 ef c6 05 8d 3b b2 12 01 e8 e8 e8 ff ff e9 0f ef ff ff 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 <48> c1 ea 03 80 3c 02 00 0f 85 a6 08 00 00 48 89 c8 4d 8b 7d 38 48
[   76.542931][    C0] RSP: 0018:ffffc90002d86f38 EFLAGS: 00000246
[   76.544899][    C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff91d3aab8
[   76.547445][    C0] RDX: ffffc90002d86fe0 RSI: 0000000000000001 RDI: ffffffff9145cab4
[   76.550593][    C0] RBP: ffffc90002d86ff0 R08: ffffffff91d3aabc R09: 0000000000000007
[   76.553798][    C0] R10: 0000000000000200 R11: 0000000000017917 R12: ffffc90002d86ff8
[   76.557115][    C0] R13: ffffc90002d86fa8 R14: 0000000000000003 R15: 0000000000000000
[   76.560422][    C0]  ? unwind_next_frame+0x2ec/0x2090
[   76.562484][    C0]  ? __kasan_slab_alloc+0x89/0x90
[   76.564665][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   76.567269][    C0]  arch_stack_walk+0x94/0xf0
[   76.569253][    C0]  ? __kasan_slab_alloc+0x89/0x90
[   76.571363][    C0]  stack_trace_save+0x8e/0xc0
[   76.573332][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[   76.575477][    C0]  ? kernel_text_address+0x8d/0x100
[   76.577717][    C0]  ? unwind_get_return_address+0x59/0xa0
[   76.580090][    C0]  ? arch_stack_walk+0xa6/0xf0
[   76.582107][    C0]  kasan_save_stack+0x30/0x50
[   76.584108][    C0]  ? kasan_save_stack+0x30/0x50
[   76.586129][    C0]  ? kasan_save_track+0x14/0x30
[   76.588166][    C0]  ? __kasan_slab_alloc+0x89/0x90
[   76.590287][    C0]  kasan_save_track+0x14/0x30
[   76.592280][    C0]  __kasan_slab_alloc+0x89/0x90
[   76.594304][    C0]  kmem_cache_alloc_noprof+0x26b/0x6a0
[   76.596551][    C0]  ? mas_preallocate+0x1105/0x14a0
[   76.598734][    C0]  mas_preallocate+0x1105/0x14a0
[   76.600804][    C0]  ? __pfx_mas_preallocate+0x10/0x10
[   76.603017][    C0]  ? anon_vma_name+0x5a/0x250
[   76.604970][    C0]  __split_vma+0x33d/0xda0
[   76.606465][    C0]  ? __pfx___split_vma+0x10/0x10
[   76.608383][    C0]  vms_gather_munmap_vmas+0x1d2/0x1720
[   76.610685][    C0]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[   76.613125][    C0]  ? validate_mm+0x261/0x4e0
[   76.615067][    C0]  ? mas_find+0x2dd/0x740
[   76.616880][    C0]  ? validate_mm+0x392/0x4e0
[   76.618857][    C0]  ? __pfx_validate_mm+0x10/0x10
[   76.620924][    C0]  do_vmi_align_munmap+0x287/0x5f0
[   76.623063][    C0]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[   76.625415][    C0]  do_vmi_munmap+0x1f8/0x3e0
[   76.627363][    C0]  __vm_munmap+0x196/0x390
[   76.629264][    C0]  ? __pfx___vm_munmap+0x10/0x10
[   76.631306][    C0]  ? vm_mmap+0x96/0xc0
[   76.632795][    C0]  elf_load+0x54f/0x720
[   76.634559][    C0]  load_elf_binary+0x35b5/0x51c0
[   76.636615][    C0]  ? __pfx_load_elf_binary+0x10/0x10
[   76.638890][    C0]  ? find_held_lock+0x2b/0x80
[   76.640857][    C0]  ? bprm_execve+0x8d9/0x1730
[   76.642877][    C0]  ? bprm_execve+0x8d9/0x1730
[   76.644738][    C0]  bprm_execve+0x8fb/0x1730
[   76.646657][    C0]  ? __pfx_bprm_execve+0x10/0x10
[   76.648742][    C0]  ? copy_strings.isra.0+0x491/0x790
[   76.650809][    C0]  do_execveat_common.isra.0+0x4a5/0x580
[   76.653016][    C0]  __x64_sys_execve+0x93/0xd0
[   76.655001][    C0]  do_syscall_64+0x115/0x840
[   76.656867][    C0]  ? clear_bhb_loop+0x40/0x90
[   76.658884][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.661356][    C0] RIP: 0033:0x7f3006dfe107
[   76.663135][    C0] Code: Unable to access opcode bytes at 0x7f3006dfe0dd.
[   76.665972][    C0] RSP: 002b:00007ffe28a4d618 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[   76.669549][    C0] RAX: ffffffffffffffda RBX: 00005590435751a8 RCX: 00007f3006dfe107
[   76.672755][    C0] RDX: 000055904356d1c8 RSI: 00005590435751a8 RDI: 000055904356d250
[   76.675982][    C0] RBP: 000055904356d250 R08: 00007ffe28a50e9d R09: 000000000000001f
[   76.679251][    C0] R10: 0000559043564010 R11: 0000000000000246 R12: 000055904356d1c8
[   76.682387][    C0] R13: 00007f3006fc3e8b R14: 000055904356d1c8 R15: 0000000000000000
[   76.685599][    C0]  </TASK>
[   76.810391][ T5823] team0 (unregistering): Port device team_slave_1 removed
[   76.818092][ T5823] team0 (unregistering): Port device team_slave_0 removed
[   76.904526][ T6215] vlan1: entered promiscuous mode
[   76.909549][ T5453] 8021q: adding VLAN 0 to HW filter on device eth7
[   76.928368][ T5832] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   77.022937][ T6228] netlink: 'syz.2.70': attribute type 1 has an invalid length.
[   77.067568][ T6083] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.087133][ T5832] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   77.090909][ T5832] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.094045][ T5832] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   77.102622][ T5832] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   77.114057][ T5832] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[   77.118125][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.122672][ T5832] usb 8-1: Product: syz
[   77.124027][ T5832] usb 8-1: Manufacturer: syz
[   77.125606][ T5832] usb 8-1: SerialNumber: syz
[   77.210179][ T6088] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.214881][ T5453] 8021q: adding VLAN 0 to HW filter on device eth8
[   77.340810][ T5832] usb 8-1: USB disconnect, device number 5
[   77.370945][ T6083] veth0_vlan: entered promiscuous mode
[   77.377524][ T6083] veth1_vlan: entered promiscuous mode
[   77.420764][ T6083] veth0_macvtap: entered promiscuous mode
[   77.433795][ T6083] veth1_macvtap: entered promiscuous mode
[   77.443018][ T5453] 8021q: adding VLAN 0 to HW filter on device eth9
[   77.468449][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.478626][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.486258][ T5795] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.505269][ T6088] veth0_vlan: entered promiscuous mode
[   77.537925][ T6088] veth1_vlan: entered promiscuous mode
[   77.560900][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.564858][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.590879][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.594226][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.597520][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.601585][ T6088] veth0_macvtap: entered promiscuous mode
[   77.606162][ T6088] veth1_macvtap: entered promiscuous mode
[   77.621859][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.632406][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.639524][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.646582][ T5823] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.651597][ T5823] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.700520][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.702993][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.705682][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.709935][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.716032][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.740361][  T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.743150][  T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.869017][ T5753] Bluetooth: hci0: command tx timeout
[   77.961348][ T6280] uhci_hcd 0000:00:1d.0: remove, state 4
[   77.966957][ T6280] usb usb2: USB disconnect, device number 1
[   78.036901][ T6281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.73'.
[   78.213467][ T5753] Bluetooth: hci3: command tx timeout
[   78.245838][ T6279] smpboot: CPU 1 is now offline
[   78.428424][ T6280] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered
[   78.604793][ T6279] process 6245 (syz.2.71) no longer affine to cpu1
[   78.672636][ T6289] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[   78.674854][ T6289] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   78.681307][ T6289] vhci_hcd vhci_hcd.0: Device attached
[   78.820951][ T6282] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[   78.858005][ T6282] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2
[   78.870246][ T6282] uhci_hcd 0000:00:1d.0: detected 2 ports
[   78.879778][ T6282] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0
[   78.969509][ T6282] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02
[   78.976732][ T6282] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[   78.988528][   T61] usb 44-1: SetAddress Request (2) to port 0
[   78.993648][   T61] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[   78.998626][ T6282] usb usb2: Product: UHCI Host Controller
[   79.003014][ T6282] usb usb2: Manufacturer: Linux syzkaller uhci_hcd
[   79.009783][ T6282] usb usb2: SerialNumber: 0000:00:1d.0
[   79.109700][ T6282] hub 2-0:1.0: USB hub found
[   79.155099][   T42] audit: type=1800 audit(1786011986.260:24): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.79" name="ipv4_address" dev="configfs" ino=13843 res=0 errno=0
[   79.163652][ T6282] hub 2-0:1.0: 2 ports detected
[   79.173776][   T42] audit: type=1800 audit(1786011986.280:25): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.79" name="ipv4_port" dev="configfs" ino=13844 res=0 errno=0
[   79.188299][   T42] audit: type=1800 audit(1786011986.280:26): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.79" name="num" dev="configfs" ino=13845 res=0 errno=0
[   79.200974][   T42] audit: type=1800 audit(1786011986.290:27): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.79" name="block_bytes" dev="configfs" ino=13852 res=0 errno=0
[   79.215072][   T42] audit: type=1800 audit(1786011986.290:28): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.79" name="blocks" dev="configfs" ino=13853 res=0 errno=0
[   79.233052][   T42] audit: type=1800 audit(1786011986.290:29): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.79" name="start_block" dev="configfs" ino=13854 res=0 errno=0
[   79.245050][   T42] audit: type=1800 audit(1786011986.290:30): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.79" name="dev" dev="configfs" ino=13855 res=0 errno=0
[   79.456812][ T6292] vhci_hcd: connection reset by peer
[   79.461136][   T13] vhci_hcd vhci_hcd.3: stop threads
[   79.464538][   T13] vhci_hcd vhci_hcd.3: release socket
[   79.472717][   T13] vhci_hcd vhci_hcd.3: disconnect device
[   80.218369][ T6262] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   80.272297][ T5753] Bluetooth: hci3: command tx timeout
[   80.388607][ T6262] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.402377][ T6262] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.450978][ T6262] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   80.476244][ T6262] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   80.492751][ T6262] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[   80.496774][ T6262] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.500546][ T6262] usb 9-1: Product: syz
[   80.503685][ T6262] usb 9-1: Manufacturer: syz
[   80.506085][ T6262] usb 9-1: SerialNumber: syz
[   80.659486][ T6323] xt_HMARK: proto mask must be zero with L3 mode
[   80.772549][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'.
[   80.830253][ T6329] vlan2: entered allmulticast mode
[   80.832389][ T6329] dummy0: entered allmulticast mode
[   80.840687][ T6329] bridge0: port 3(vlan2) entered blocking state
[   80.843497][ T6329] bridge0: port 3(vlan2) entered disabled state
[   80.920036][ T6329] vlan2: entered promiscuous mode
[   80.922398][ T6329] dummy0: entered promiscuous mode
[   81.032172][ T5748] usb 9-1: USB disconnect, device number 2
[   81.341478][ T1042] cfg80211: failed to load regulatory.db
[   82.268435][ T5852] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   82.310228][ T6352] netlink: 40 bytes leftover after parsing attributes in process `syz.4.91'.
[   82.438638][ T5852] usb 8-1: Using ep0 maxpacket: 32
[   82.442642][ T5852] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   82.448657][ T5852] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   82.451556][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   82.454076][ T5852] usb 8-1: Product: syz
[   82.455414][ T5852] usb 8-1: Manufacturer: syz
[   82.457174][ T5852] usb 8-1: SerialNumber: syz
[   82.464092][ T5852] usb 8-1: config 0 descriptor??
[   82.468871][ T6341] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   82.472212][ T5852] hub 8-1:0.0: bad descriptor, ignoring hub
[   82.474895][ T5852] hub 8-1:0.0: probe with driver hub failed with error -5
[   82.589263][ T6262] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   82.629549][ T5748] usb 10-1: new low-speed USB device number 2 using dummy_hcd
[   82.750971][ T6262] usb 7-1: Using ep0 maxpacket: 32
[   82.762401][ T6262] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[   82.767983][ T6262] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   82.777778][ T6262] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   82.788143][ T6262] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[   82.790810][ T5748] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[   82.798420][ T5748] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   82.808420][ T5748] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   82.810360][ T6262] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   82.812557][ T5748] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   82.830816][ T5748] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   82.831401][ T6262] usb 7-1: config 0 interface 0 has no altsetting 0
[   82.839283][ T5748] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[   82.840436][ T6262] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   82.843699][ T5748] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   82.845706][ T6262] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   82.853530][ T6262] usb 7-1: Product: syz
[   82.854547][ T5748] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   82.855345][ T6262] usb 7-1: Manufacturer: syz
[   82.861149][ T6262] usb 7-1: SerialNumber: syz
[   82.861703][ T5748] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   82.867372][ T6262] usb 7-1: config 0 descriptor??
[   82.875877][ T6262] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   82.878758][ T5748] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   82.883041][ T6262] ldusb 7-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[   82.885384][ T5748] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[   82.892624][ T5748] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   82.908927][ T5748] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   82.914347][ T5748] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   82.918418][ T5748] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   82.924667][ T5748] usb 10-1: string descriptor 0 read error: -22
[   82.927698][ T5748] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   82.938387][ T5748] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.947741][ T5748] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux2
[   83.089550][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.107484][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.226800][   T42] audit: type=1326 audit(1786011990.330:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.4.96" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000
[   83.245962][   T42] audit: type=1326 audit(1786011990.330:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.4.96" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000
[   83.389879][ T6374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.401054][ T6374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.422171][ T6374] syz.2.93 uses obsolete (PF_INET,SOCK_PACKET)
[   83.605445][ T5495] usb 10-1: USB disconnect, device number 2
[   84.038881][   T61] usb 44-1: device descriptor read/8, error -110
[   84.079307][   T74] raw-gadget.0 gadget.3: failed to queue suspend event
[   84.149272][ T6338] raw-gadget.0 gadget.3: failed to queue resume event
[   84.171488][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[   84.253201][ T6341] raw-gadget.0 gadget.3: failed to queue resume event
[   84.290157][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[   84.358430][ T6338] raw-gadget.0 gadget.3: failed to queue resume event
[   84.392218][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[   84.442877][   T61] usb usb44-port1: attempt power cycle
[   84.468595][ T6338] raw-gadget.0 gadget.3: failed to queue resume event
[   84.531834][   T59] raw-gadget.0 gadget.3: failed to queue suspend event
[   84.609094][ T6338] raw-gadget.0 gadget.3: failed to queue resume event
[   84.636045][   T36] raw-gadget.0 gadget.3: failed to queue suspend event
[   84.730119][ T6341] raw-gadget.0 gadget.3: failed to queue resume event
[   84.739516][ T6410] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[   84.749815][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[   84.805477][   T42] kauditd_printk_skb: 28 callbacks suppressed
[   84.805496][   T42] audit: type=1326 audit(1786011991.910:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.5.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000
[   84.835668][   T42] audit: type=1326 audit(1786011991.920:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.5.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000
[   84.842528][ T6341] raw-gadget.0 gadget.3: failed to queue resume event
[   84.884413][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[   84.947445][ T6341] raw-gadget.0 gadget.3: failed to queue disconnect event
[   85.031051][   T61] usb usb44-port1: unable to enumerate USB device
[   85.049708][ T6262] usb 8-1: USB disconnect, device number 6
[   85.772025][ T5748] usb 7-1: USB disconnect, device number 8
[   85.824847][ T5748] ldusb 7-1:0.0: LD USB Device #1 now disconnected
[   86.485025][ T6458] CacheFiles: Failed to register: -95
[   87.388309][    C2] e1000e 0000:00:02.0 eth1: NETDEV WATCHDOG: CPU: 2: transmit queue 0 timed out 5280 ms
[   87.400074][ T5832] e1000e 0000:00:02.0 eth1: Reset adapter unexpectedly
[   87.685024][   T42] audit: type=1800 audit(1786011994.780:63): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.106" name="file0" dev="overlay" ino=183 res=0 errno=0
[   87.809351][ T5852] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   87.959550][ T5852] usb 10-1: Using ep0 maxpacket: 32
[   87.979610][ T5852] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   88.001547][ T5852] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   88.005692][ T5852] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   88.022825][ T5852] usb 10-1: Product: syz
[   88.024721][ T5852] usb 10-1: Manufacturer: syz
[   88.027030][ T5852] usb 10-1: SerialNumber: syz
[   88.076552][ T5852] usb 10-1: config 0 descriptor??
[   88.107283][ T6482] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   88.179158][ T5852] hub 10-1:0.0: bad descriptor, ignoring hub
[   88.182412][ T5852] hub 10-1:0.0: probe with driver hub failed with error -5
[   88.631651][ T6490] device-mapper: table: 248:0: zero-length target
[   88.635391][ T6490] device-mapper: ioctl: error adding target to table
[   88.866724][ T6482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.880466][ T6482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.001478][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'.
[   89.671711][   T59] raw-gadget.0 gadget.5: failed to queue suspend event
[   89.738462][ T6498] raw-gadget.0 gadget.5: failed to queue resume event
[   89.769682][   T59] raw-gadget.0 gadget.5: failed to queue suspend event
[   89.839508][ T6482] raw-gadget.0 gadget.5: failed to queue resume event
[   89.860026][  T190] raw-gadget.0 gadget.5: failed to queue suspend event
[   89.933893][ T6482] raw-gadget.0 gadget.5: failed to queue resume event
[   89.950887][  T217] raw-gadget.0 gadget.5: failed to queue suspend event
[   90.018934][ T6498] raw-gadget.0 gadget.5: failed to queue resume event
[   90.044928][  T217] raw-gadget.0 gadget.5: failed to queue suspend event
[   90.119063][ T6482] raw-gadget.0 gadget.5: failed to queue resume event
[   90.151217][  T217] raw-gadget.0 gadget.5: failed to queue suspend event
[   90.219089][ T6498] raw-gadget.0 gadget.5: failed to queue resume event
[   90.239983][  T217] raw-gadget.0 gadget.5: failed to queue suspend event
[   90.319011][ T6498] raw-gadget.0 gadget.5: failed to queue resume event
[   90.341414][   T37] raw-gadget.0 gadget.5: failed to queue suspend event
[   90.429848][ T6482] raw-gadget.0 gadget.5: failed to queue resume event
[   90.453347][   T37] raw-gadget.0 gadget.5: failed to queue suspend event
[   90.528554][ T6482] raw-gadget.0 gadget.5: failed to queue resume event
[   90.551107][   T59] raw-gadget.0 gadget.5: failed to queue suspend event
[   91.787089][ T5832] e1000e 0000:00:02.0 eth1: Hardware Error
[   92.014004][ T6477] raw-gadget.0 gadget.5: failed to queue disconnect event
[   92.043957][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.046268][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.064732][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.068571][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.157522][ T5748] usb 10-1: USB disconnect, device number 3
[   93.698920][ T6537] tmpfs: Unknown parameter 'nr_inod'
[   93.705251][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.115'.
[   95.232240][ T6578] ceph: Path missing in source
[   95.400233][ T6580] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   95.550441][ T6587] syz_tun: entered allmulticast mode
[   95.788966][ T5852] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   95.813828][ T6584] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8
[   95.949136][ T5852] usb 9-1: Using ep0 maxpacket: 16
[   95.952672][ T5852] usb 9-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config
[   95.956992][ T5852] usb 9-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   95.963815][ T5852] usb 9-1: config 0 interface 0 has no altsetting 0
[   95.967621][ T5852] usb 9-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[   95.977106][ T5852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.994086][ T5852] usb 9-1: config 0 descriptor??
[   96.021196][ T5852] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[   96.211491][ T5852] usb 9-1: USB disconnect, device number 3
[   96.778780][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   96.798811][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   96.818790][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   96.878328][    T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!!
[   97.068573][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   97.108608][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   97.152386][ T6622] FAULT_INJECTION: forcing a failure.
[   97.152386][ T6622] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   97.172909][ T6622] CPU: 0 UID: 0 PID: 6622 Comm: syz.4.126 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[   97.172945][ T6622] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[   97.172952][ T6622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   97.172964][ T6622] Call Trace:
[   97.172971][ T6622]  <TASK>
[   97.172979][ T6622]  dump_stack_lvl+0x100/0x190
[   97.173027][ T6622]  should_fail_ex.cold+0x5/0xa
[   97.173053][ T6622]  _copy_from_user+0x2e/0xd0
[   97.173123][ T6622]  do_sys_poll+0x345/0xe90
[   97.173159][ T6622]  ? kernel_text_address+0x8d/0x100
[   97.173192][ T6622]  ? __pfx_do_sys_poll+0x10/0x10
[   97.173291][ T6622]  ? ktime_get_ts64+0x306/0x420
[   97.173322][ T6622]  ? ktime_get_ts64+0x318/0x420
[   97.173349][ T6622]  ? ktime_get_ts64+0x257/0x420
[   97.173385][ T6622]  __ia32_sys_poll+0x1b3/0x420
[   97.173405][ T6622]  ? __pfx___ia32_sys_poll+0x10/0x10
[   97.173423][ T6622]  ? ksys_write+0x1ac/0x250
[   97.173471][ T6622]  ? __pfx_ksys_write+0x10/0x10
[   97.173495][ T6622]  __do_fast_syscall_32+0xe7/0x970
[   97.173524][ T6622]  ? lockdep_hardirqs_on+0x78/0x100
[   97.173551][ T6622]  do_fast_syscall_32+0x32/0x70
[   97.173578][ T6622]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   97.173603][ T6622] RIP: 0023:0xf7f75fec
[   97.173626][ T6622] Code: Unable to access opcode bytes at 0xf7f75fc2.
[   97.173634][ T6622] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000000a8
[   97.173655][ T6622] RAX: ffffffffffffffda RBX: 0000000080001200 RCX: 0000000000000001
[   97.173667][ T6622] RDX: 000000000000ffff RSI: 0000000000000000 RDI: 0000000000000000
[   97.173678][ T6622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   97.173688][ T6622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.173700][ T6622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   97.173724][ T6622]  </TASK>
[   97.218646][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   97.258602][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   97.408619][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   97.428600][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   98.972271][ T6631] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   98.976532][ T6631] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   98.986808][ T6631] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   98.997263][ T6631] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   99.000291][ T6631] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   99.006350][ T6631] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   99.014739][ T6631] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   99.017488][ T6631] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   99.024628][ T6631] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   99.031894][ T6631] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   99.035297][ T6631] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   99.045529][ T6631] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   99.274964][   T42] audit: type=1800 audit(1786012006.380:64): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.136" name="ipv4_address" dev="configfs" ino=15758 res=0 errno=0
[   99.290510][   T42] audit: type=1800 audit(1786012006.390:65): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.136" name="ipv4_port" dev="configfs" ino=15759 res=0 errno=0
[   99.304140][   T42] audit: type=1800 audit(1786012006.390:66): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.136" name="num" dev="configfs" ino=15760 res=0 errno=0
[   99.308861][   T61] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   99.469985][   T61] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.473650][   T61] usb 9-1: config 0 has no interfaces?
[   99.475445][   T61] usb 9-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[   99.484629][   T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.493175][   T61] usb 9-1: config 0 descriptor??
[  100.161212][ T6668] syz_tun: entered allmulticast mode
[  100.194567][ T6667] tmpfs: Unknown parameter 'nr_inod'
[  100.240069][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.140'.
[  100.253099][ T6666] syz_tun: left allmulticast mode
[  100.277491][   T64] Bluetooth: hci1: command 0x0c1a tx timeout
[  101.074304][   T64] Bluetooth: hci3: command 0x0c1a tx timeout
[  101.074399][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout
[  101.076558][ T5753] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  101.370230][   T42] audit: type=1800 audit(1786012008.480:67): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.145" name="ipv4_address" dev="configfs" ino=14578 res=0 errno=0
[  101.455379][   T42] audit: type=1800 audit(1786012008.480:68): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.145" name="ipv4_port" dev="configfs" ino=14579 res=0 errno=0
[  101.490870][   T42] audit: type=1800 audit(1786012008.480:69): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.145" name="num" dev="configfs" ino=14580 res=0 errno=0
[  101.512321][   T42] audit: type=1800 audit(1786012008.480:70): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.145" name="block_bytes" dev="configfs" ino=14581 res=0 errno=0
[  101.616294][ T6683] netlink: 40 bytes leftover after parsing attributes in process `syz.3.147'.
[  101.620791][ T6683] netlink: 40 bytes leftover after parsing attributes in process `syz.3.147'.
[  101.687075][ T6683] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  101.689874][ T6683] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  101.695171][ T6683] vhci_hcd vhci_hcd.0: Device attached
[  101.785817][ T6647] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  101.913293][   T61] usb 9-1: USB disconnect, device number 4
[  102.019844][ T5824] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  102.112160][ T6684] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0
[  102.125681][ T5823] vhci_hcd vhci_hcd.3: stop threads
[  102.129723][ T5823] vhci_hcd vhci_hcd.3: release socket
[  102.134277][ T5823] vhci_hcd vhci_hcd.3: disconnect device
[  102.360844][ T5753] Bluetooth: hci1: command 0x0c1a tx timeout
[  102.637785][ T5824] usb 43-1: enqueue for inactive port 0
[  103.149028][ T5753] Bluetooth: hci3: command 0x0c1a tx timeout
[  103.158724][ T5753] Bluetooth: hci2: command 0x0c1a tx timeout
[  103.195590][ T6696] process 'syz.2.150' launched '/dev/fd/8' with NULL argv: empty string added
[  103.291033][ T5824] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  104.052910][   T42] audit: type=1800 audit(1786012011.160:71): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.154" name="ipv4_address" dev="configfs" ino=12060 res=0 errno=0
[  104.087717][   T42] audit: type=1800 audit(1786012011.170:72): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.154" name="ipv4_port" dev="configfs" ino=12061 res=0 errno=0
[  104.116829][   T42] audit: type=1800 audit(1786012011.180:73): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.154" name="num" dev="configfs" ino=12062 res=0 errno=0
[  104.440436][ T5753] Bluetooth: hci1: command 0x0c1a tx timeout
[  104.476758][ T6715] netlink: 1 bytes leftover after parsing attributes in process `syz.3.156'.
[  104.600656][ T6715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.906482][ T6726] tmpfs: Unknown parameter 'nr_inod'
[  104.920450][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.158'.
[  105.239047][ T5753] Bluetooth: hci2: command 0x0c1a tx timeout
[  105.241707][ T5753] Bluetooth: hci3: command 0x0c1a tx timeout
[  106.451539][ T6741] tmpfs: Unknown parameter 'nr_inod'
[  106.456312][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'.
[  108.216944][ T6757] netlink: 204 bytes leftover after parsing attributes in process `syz.3.167'.
[  108.453451][ T5746] Bluetooth: hci1: unexpected event for opcode 0x2062
[  108.493227][ T6762] tmpfs: Unknown parameter 'nr_inod'
[  108.528925][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.169'.
[  108.961478][   T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  109.563035][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'.
[  109.566091][ T6765] bridge_slave_1: left allmulticast mode
[  109.569394][ T6765] bridge_slave_1: left promiscuous mode
[  109.575433][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.749885][   T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.753723][   T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.757386][   T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  109.760946][   T10] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  109.768422][   T10] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  109.772078][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.775140][   T10] usb 8-1: Product: syz
[  109.776751][   T10] usb 8-1: Manufacturer: syz
[  109.779080][   T10] usb 8-1: SerialNumber: syz
[  109.908797][ T6765] bridge_slave_0: left allmulticast mode
[  109.927303][ T6765] bridge_slave_0: left promiscuous mode
[  109.931369][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.987372][   T10] usb 8-1: USB disconnect, device number 7
[  110.608659][   T60] usb 9-1: new low-speed USB device number 5 using dummy_hcd
[  110.767013][   T60] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  111.285775][   T60] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  111.569612][   T60] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  111.574869][   T60] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  111.601542][   T60] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  111.609107][   T60] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  111.613971][   T60] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  111.619171][   T60] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  111.628295][   T60] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  111.634753][   T60] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  111.647892][   T60] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  111.650438][   T60] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  111.655514][   T60] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  111.668252][   T60] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  111.675085][   T60] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  111.693481][   T60] usb 9-1: string descriptor 0 read error: -22
[  111.696159][   T60] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  111.701163][   T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.729694][   T60] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  112.360731][ T6815] kvm: kvm [6814]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0x186) = 0x8300000f010e
[  112.450095][ T6815] kvm: kvm [6814]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0x186) = 0x8300000f010e
[  112.456439][ T2320] usb 9-1: USB disconnect, device number 5
[  112.485927][ T6815] kvm: kvm [6814]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0x187) = 0x9100000f010e
[  112.824435][ T6815] kvm: kvm [6814]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0x187) = 0x9100000f010e
[  112.858964][   T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  113.005459][ T6815] kvm: kvm [6814]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0x11e) = 0x300000f010e
[  113.009797][   T10] usb 7-1: Using ep0 maxpacket: 16
[  113.015045][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.025756][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.035204][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  113.047019][   T10] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  113.059786][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.071458][   T10] usb 7-1: config 0 descriptor??
[  113.752824][ T6830] tmpfs: Unknown parameter 'nr_inod'
[  113.821061][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'.
[  114.085556][   T10] hid_parser_main: 33 callbacks suppressed
[  114.085575][   T10] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  114.097885][   T10] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  114.103088][   T10] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  114.108573][   T10] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  114.114394][   T10] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  114.121594][   T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input9
[  114.166561][   T10] shield 0003:0955:7214.0005: Registered Thunderstrike controller
[  114.177829][   T10] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[  114.262322][    T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  114.268090][    T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  114.281432][   T10] usb 7-1: USB disconnect, device number 9
[  114.292152][    T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  114.325601][    T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  114.466219][ T6844] device-mapper: ioctl: name not supplied when creating device
[  114.845435][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.201'.
[  115.239004][    T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  115.369033][ T6860] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  115.371155][ T6860] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  115.385404][ T6860] vhci_hcd vhci_hcd.0: Device attached
[  115.406599][    T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.412089][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.420406][    T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  115.430316][    T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  115.446888][    T9] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  115.458345][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.464202][    T9] usb 9-1: Product: syz
[  115.465734][    T9] usb 9-1: Manufacturer: syz
[  115.475562][    T9] usb 9-1: SerialNumber: syz
[  115.669148][    T9] usb 42-1: SetAddress Request (2) to port 0
[  115.671270][    T9] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  115.689691][   T10] usb 9-1: USB disconnect, device number 6
[  116.110531][ T6861] vhci_hcd: connection reset by peer
[  116.117000][ T5823] vhci_hcd vhci_hcd.2: stop threads
[  116.121742][ T5823] vhci_hcd vhci_hcd.2: release socket
[  116.131242][ T5823] vhci_hcd vhci_hcd.2: disconnect device
[  116.258416][ T6868] tmpfs: Unknown parameter 'nr_inod'
[  116.368958][   T10] IPVS: starting estimator thread 0...
[  116.377648][ T6872] syz_tun: entered promiscuous mode
[  116.390863][ T6872] bridge0: port 1(syz_tun) entered blocking state
[  116.397168][ T6872] bridge0: port 1(syz_tun) entered disabled state
[  116.480576][ T6873] IPVS: using max 43 ests per chain, 103200 per kthread
[  116.605259][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.203'.
[  117.136679][ T6881] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  117.147473][    T0] Disabled fast string operations
[  117.149288][    T0] ------------[ cut here ]------------
[  117.151151][    T0] alternatives_patched
[  117.151159][    T0] WARNING: arch/x86/kernel/cpu/cpuid-deps.c:127 at do_clear_cpu_cap+0x356/0x440, CPU#1: swapper/1/0
[  117.157192][    T0] Modules linked in:
[  117.158960][    T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  117.162264][    T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  117.164631][    T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  117.168863][    T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440
[  117.171337][    T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d 31 5d 72 0f 31 ff 89 ee e8 08 6e 59 00 85 ed 0f 84 7d fd ff ff e8 8b 73 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 75 73 59 00 8b
[  117.179494][    T0] RSP: 0000:ffffc9000046fc98 EFLAGS: 00010093
[  117.182149][    T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b03d68
[  117.185588][    T0] RDX: ffff88801c742540 RSI: ffffffff81b03d75 RDI: ffff88801c742540
[  117.188988][    T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[  117.192712][    T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070
[  117.196175][    T0] R13: 0000000000000601 R14: ffffc9000046fce0 R15: ffffc9000046fd80
[  117.199657][    T0] FS:  0000000000000000(0000) GS:ffff888096cdf000(0000) knlGS:0000000000000000
[  117.203487][    T0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.206372][    T0] CR2: 0000000000000000 CR3: 000000000e994000 CR4: 0000000000350eb0
[  117.209880][    T0] Call Trace:
[  117.211393][    T0]  <TASK>
[  117.212716][    T0]  ? __pfx_do_clear_cpu_cap+0x10/0x10
[  117.215120][    T0]  ? _printk+0xcf/0x110
[  117.216987][    T0]  ? __pfx_cpu_parse_topology+0x10/0x10
[  117.219459][    T0]  ? early_init_intel.cold+0x129/0x1eb
[  117.221859][    T0]  early_init_intel.cold+0x13f/0x1eb
[  117.224201][    T0]  init_intel+0x1c/0x7b0
[  117.226097][    T0]  identify_cpu+0x8b0/0x1c30
[  117.228163][    T0]  ? __pfx_cpu_init+0x10/0x10
[  117.230219][    T0]  ? do_idle+0x12/0x5b0
[  117.232075][    T0]  identify_secondary_cpu+0x178/0x270
[  117.234447][    T0]  start_secondary+0xcf/0x2d0
[  117.236534][    T0]  ? __pfx_start_secondary+0x10/0x10
[  117.238988][    T0]  common_startup_64+0x13e/0x158
[  117.241188][    T0]  </TASK>
[  117.242795][    T0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  117.245939][    T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  117.250492][    T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  117.253169][    T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  117.257538][    T0] Call Trace:
[  117.259059][    T0]  <TASK>
[  117.260372][    T0]  dump_stack_lvl+0x100/0x190
[  117.262453][    T0]  vpanic+0x552/0x970
[  117.264217][    T0]  ? __pfx_vpanic+0x10/0x10
[  117.266241][    T0]  panic+0xd1/0xe0
[  117.267912][    T0]  ? __pfx_panic+0x10/0x10
[  117.269902][    T0]  ? check_panic_on_warn+0x1f/0x90
[  117.272165][    T0]  check_panic_on_warn.cold+0x19/0x34
[  117.274506][    T0]  ? do_clear_cpu_cap+0x356/0x440
[  117.276742][    T0]  __warn.cold+0x191/0x318
[  117.278747][    T0]  __report_bug+0x30f/0x440
[  117.280759][    T0]  ? do_clear_cpu_cap+0x356/0x440
[  117.282995][    T0]  ? __pfx___report_bug+0x10/0x10
[  117.285249][    T0]  ? prb_read_valid+0x78/0xa0
[  117.287331][    T0]  ? __pfx_prb_read_valid+0x10/0x10
[  117.289702][    T0]  ? tick_nohz_tick_stopped+0x6c/0xa0
[  117.292040][    T0]  ? do_clear_cpu_cap+0x356/0x440
[  117.294237][    T0]  report_bug+0xb2/0x220
[  117.296138][    T0]  ? do_clear_cpu_cap+0x356/0x440
[  117.298378][    T0]  handle_bug+0x16a/0x2a0
[  117.300297][    T0]  exc_invalid_op+0x17/0x50
[  117.302340][    T0]  asm_exc_invalid_op+0x1a/0x20
[  117.304492][    T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440
[  117.306952][    T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d 31 5d 72 0f 31 ff 89 ee e8 08 6e 59 00 85 ed 0f 84 7d fd ff ff e8 8b 73 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 75 73 59 00 8b
[  117.315195][    T0] RSP: 0000:ffffc9000046fc98 EFLAGS: 00010093
[  117.317845][    T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b03d68
[  117.321272][    T0] RDX: ffff88801c742540 RSI: ffffffff81b03d75 RDI: ffff88801c742540
[  117.324637][    T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[  117.327991][    T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070
[  117.331304][    T0] R13: 0000000000000601 R14: ffffc9000046fce0 R15: ffffc9000046fd80
[  117.334789][    T0]  ? do_clear_cpu_cap+0x348/0x440
[  117.336939][    T0]  ? do_clear_cpu_cap+0x355/0x440
[  117.339124][    T0]  ? do_clear_cpu_cap+0x355/0x440
[  117.340984][    T0]  ? __pfx_do_clear_cpu_cap+0x10/0x10
[  117.342715][    T0]  ? _printk+0xcf/0x110
[  117.344070][    T0]  ? __pfx_cpu_parse_topology+0x10/0x10
[  117.346202][    T0]  ? early_init_intel.cold+0x129/0x1eb
[  117.348446][    T0]  early_init_intel.cold+0x13f/0x1eb
[  117.350620][    T0]  init_intel+0x1c/0x7b0
[  117.352350][    T0]  identify_cpu+0x8b0/0x1c30
[  117.354260][    T0]  ? __pfx_cpu_init+0x10/0x10
[  117.356190][    T0]  ? do_idle+0x12/0x5b0
[  117.357846][    T0]  identify_secondary_cpu+0x178/0x270
[  117.359956][    T0]  start_secondary+0xcf/0x2d0
[  117.361992][    T0]  ? __pfx_start_secondary+0x10/0x10
[  117.364290][    T0]  common_startup_64+0x13e/0x158
[  117.365926][    T0]  </TASK>
[  117.367653][    T0] Kernel Offset: disabled
[  117.369094][    T0] Rebooting in 86400 seconds..