last executing test programs:

35.075187626s ago: executing program 4 (id=432):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = socket(0x15, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @empty=0xffffffff}, 0x8}, 0x1c)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2)
ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0)
preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/mem_sleep', 0x4200, 0x128)
mount(0x0, 0x0, &(0x7f00000000c0)='efs\x00', 0x208000, 0x0)
syz_io_uring_setup(0x10c, 0x0, &(0x7f0000000400)=<r3=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = dup(r4)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22c4a65c05}, 0x20008040)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000080)={0x1})
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00')
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x1f1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0xe8}}, 0x1000)

33.981206143s ago: executing program 4 (id=436):
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x8000000000000003, {}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x200, 0xf0bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5)

31.332332792s ago: executing program 4 (id=439):
socket(0x80000000000000a, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0))
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x10aa, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010000009500200c00"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r5 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89ef, 0x0)
r6 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040), &(0x7f0000000180))
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000300)=[r7], 0x1)
finit_module(r7, &(0x7f0000000000)='/d\n\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280", @ANYRES32], 0x3c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)

27.077522336s ago: executing program 4 (id=446):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000005000000000000000000"], 0x50)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'veth1_to_team\x00', {0xe}, 0x6})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000009500"/21], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(r2, 0x0, 0x10000, 0x0)
r3 = syz_open_dev$video4linux(0x0, 0x92e2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00')
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f000001c380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
r4 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r4, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)}], 0x1}, 0x400c011)
r5 = fanotify_init(0x2, 0x40000)
fanotify_mark(r5, 0x1, 0x40000022, 0xffffffffffffffff, 0x0)
fcntl$setlease(r0, 0x400, 0x2)

25.45654339s ago: executing program 4 (id=452):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = epoll_create1(0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000))
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r4, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000140))
ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000040))
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xb59)
mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000010})
read$FUSE(0xffffffffffffffff, &(0x7f0000003600)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0406000000000000c88000ac00060720000000010602020000800000000000001858587a5ff7ea5c000003d93b5500000000"], 0x40)
semget$private(0x0, 0x1, 0x2a8)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
gettid()
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xd8}], 0x1)

23.949571782s ago: executing program 4 (id=454):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r1 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)=<r2=>0x0)
read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3)
getsockname$packet(r3, 0x0, &(0x7f0000000200))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}})
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
timer_getoverrun(r2)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4)
sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}}, 0x64000)

10.855273867s ago: executing program 0 (id=487):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(r0, 0x4, 0x0, &(0x7f00000001c0))
r3 = epoll_create1(0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x1800848, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

9.36610576s ago: executing program 0 (id=489):
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0)
sendfile(r0, r0, 0x0, 0x40008)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x2)

9.242410731s ago: executing program 3 (id=491):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x7fffffffffffffff, 0x2040)
ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, &(0x7f0000000380))
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
ioprio_set$pid(0x1, 0x0, 0x4000)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0)
sendfile(r5, r5, 0x0, 0xc3)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x4}, 0x8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0103000000000000000011585d0008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)

8.892939027s ago: executing program 0 (id=492):
syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00')
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0)
r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r6, 0x402, 0x8000001f)
close_range(r6, 0xffffffffffffffff, 0x0)

8.132516568s ago: executing program 32 (id=454):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r1 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)=<r2=>0x0)
read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3)
getsockname$packet(r3, 0x0, &(0x7f0000000200))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}})
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
timer_getoverrun(r2)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4)
sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}}, 0x64000)

8.121492478s ago: executing program 3 (id=495):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0]}, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xc, 0x7, 0x43e64c37}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x20000800)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'macvlan1\x00', 0x0})
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

7.810032223s ago: executing program 3 (id=496):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/18, 0x12}], 0x1}, 0x0)

7.635450466s ago: executing program 2 (id=497):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0)

6.551335892s ago: executing program 2 (id=498):
r0 = creat(0x0, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x801, &(0x7f00000002c0)=ANY=[], 0x11, 0x6345, &(0x7f0000000f80)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x20200, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca", 0x1)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x9)

6.382148074s ago: executing program 3 (id=500):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xc8)
syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000300)='./bus\x00', 0x2000002, &(0x7f0000000100)=ANY=[], 0xfe, 0x60aa, &(0x7f000000d780)="$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")
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='pvfs2\x00', 0x0, 0x0)
r1 = socket(0x2, 0x3, 0xff)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x1)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, &(0x7f0000000040)=0x1)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40, 0x1})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = userfaultfd(0x80801)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, 0x0)
io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

5.439447608s ago: executing program 1 (id=501):
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r1=>0xffffffffffffffff}}, './file0\x00'})
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000b86dd0f1c3dc99e804000000", @ANYRES32=r3, @ANYBLOB="b41500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20)
close(r3)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000900)}, 0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0xfffb, 0x4, 0x7, 0x8, 0x61134d30, 0xdf9, 0x6, 0x6}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000003200)={r1, 0xfffffffffffffff9, 0x9, 0x3})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000280)={0x9})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

5.274046691s ago: executing program 2 (id=502):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(r0, 0x4, 0x0, &(0x7f00000001c0))
epoll_create1(0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x1800848, 0x0)

3.813395552s ago: executing program 1 (id=503):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = epoll_create1(0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000))
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r4, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000140))
ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000040))
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xb59)
mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000010})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0406000000000000c88000ac00060720000000010602020000800000000000001858587a5ff7ea5c000003d93b5500000000"], 0x40)
semget$private(0x0, 0x1, 0x2a8)
r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
gettid()
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xd8}], 0x1)

3.795865083s ago: executing program 0 (id=504):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setpgid(r0, r0)
setpgid(0x0, r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
fspick(r2, &(0x7f0000000240)='./file0\x00', 0x0)

3.32513458s ago: executing program 2 (id=505):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x7fffffffffffffff, 0x2040)
ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, &(0x7f0000000380))
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
ioprio_set$pid(0x1, 0x0, 0x4000)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0)
sendfile(r5, r5, 0x0, 0xc3)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x4}, 0x8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0103000000000000000011585d0008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)

3.29958781s ago: executing program 1 (id=506):
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_usb_connect$uac1(0x2, 0xa8, 0x0, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x8000000000000003, {}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x200, 0xf0bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'})

2.562380201s ago: executing program 1 (id=507):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(r0, 0x4, 0x0, &(0x7f00000001c0))

2.115129738s ago: executing program 2 (id=508):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0x1e8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x17}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'vlan1\x00', 'dvmrp0\x00', {}, {}, 0x24, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = dup2(r5, r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000640)={@remote, @private0, @empty, 0x5, 0x40, 0x5, 0x100, 0x0, 0x40180043, r7})

2.034432319s ago: executing program 3 (id=509):
syz_open_dev$amidi(0x0, 0xc, 0x321200)
socket(0x400000000010, 0x3, 0x0)
openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x10)
syslog(0x4, &(0x7f0000000080)=""/55, 0x37)
syz_open_dev$evdev(0x0, 0x0, 0x60000)
sendto(0xffffffffffffffff, &(0x7f00000003c0)="b6e40d1830ece56af1567b1c64a8b8c877cf82da519383b342a5bea2ff6586b20a998502a9d2a4ed37c78904e72c2815bb6e5e0b8eb84c0d9e2b6b79202d8c1dba5f98dda2cc2e248c7b282ef81669745c7c5081714b68d569d1641502a4b0faef401984ff3404b89dfaf40c26b19f6e763df0fc9b2dcee802730b7b3ffa14a587a713d755b82883c439db", 0x8b, 0x4000091, &(0x7f0000000100)=@nl=@unspec, 0x80)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat$incfs(0xffffffffffffffff, 0x0, 0x24000, 0x122)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff)

1.666033524s ago: executing program 1 (id=510):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
pipe2(&(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4080)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, <r6=>0x0], &(0x7f0000000040), 0x3, r5, 0xcccccccc})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000040), 0x0, 0x300})

1.112804853s ago: executing program 0 (id=511):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
pipe(0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000030c0)=""/4110, 0x100e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x27, 0x3, 0x80000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)

1.090682853s ago: executing program 3 (id=512):
syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000200)="e5", 0x1}], 0x2)

899.196696ms ago: executing program 2 (id=513):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xc, 0x7, 0x43e64c37}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x2c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20000800)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'macvlan1\x00', 0x0})
r2 = accept4(r1, 0x0, 0x0, 0x800)
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000340)={0xf8, 0x1})
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

23.649059ms ago: executing program 1 (id=514):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(r0, 0x4, 0x0, &(0x7f00000001c0))
epoll_create1(0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x1800848, 0x0)

0s ago: executing program 0 (id=515):
syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000001300)="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", 0xfed}, {&(0x7f0000000200)}, {&(0x7f0000000240)="b321fb652228841535f76b0ad6782e75995bca5f95", 0x15}], 0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts.
[   49.711374][ T4173] cgroup: Unknown subsys name 'net'
[   49.871176][ T4173] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.071863][ T4173] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   52.329708][ T4183] chnl_net:caif_netlink_parms(): no params data found
[   52.416392][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   52.528724][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.536640][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.545142][ T4183] device bridge_slave_0 entered promiscuous mode
[   52.553422][ T4187] chnl_net:caif_netlink_parms(): no params data found
[   52.565998][ T4184] chnl_net:caif_netlink_parms(): no params data found
[   52.588671][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.596358][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.604420][ T4189] device bridge_slave_0 entered promiscuous mode
[   52.612268][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.619475][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.627246][ T4183] device bridge_slave_1 entered promiscuous mode
[   52.646982][ T4191] chnl_net:caif_netlink_parms(): no params data found
[   52.657096][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.664161][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.672368][ T4189] device bridge_slave_1 entered promiscuous mode
[   52.731648][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.761695][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.774637][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.799229][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.826819][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.834008][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.842537][ T4187] device bridge_slave_0 entered promiscuous mode
[   52.870793][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.878036][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.886688][ T4187] device bridge_slave_1 entered promiscuous mode
[   52.902275][ T4183] team0: Port device team_slave_0 added
[   52.912867][ T4183] team0: Port device team_slave_1 added
[   52.922180][ T4189] team0: Port device team_slave_0 added
[   52.956431][ T4189] team0: Port device team_slave_1 added
[   52.975455][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.982820][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.991043][ T4184] device bridge_slave_0 entered promiscuous mode
[   53.005178][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.012533][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.038887][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.059538][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.072647][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.082044][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.089800][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.097874][ T4184] device bridge_slave_1 entered promiscuous mode
[   53.104826][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.112294][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.120160][ T4191] device bridge_slave_0 entered promiscuous mode
[   53.128007][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.134955][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.161144][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.192173][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.199477][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.207653][ T4191] device bridge_slave_1 entered promiscuous mode
[   53.219259][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.226388][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.253669][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.297207][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.307575][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.314529][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.341211][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.354254][ T4187] team0: Port device team_slave_0 added
[   53.361843][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.372926][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.397346][ T4187] team0: Port device team_slave_1 added
[   53.412799][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.431496][ T4191] team0: Port device team_slave_0 added
[   53.466346][ T4191] team0: Port device team_slave_1 added
[   53.488644][ T4183] device hsr_slave_0 entered promiscuous mode
[   53.501322][ T4183] device hsr_slave_1 entered promiscuous mode
[   53.523104][ T4189] device hsr_slave_0 entered promiscuous mode
[   53.529929][ T4189] device hsr_slave_1 entered promiscuous mode
[   53.536734][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.544436][ T4189] Cannot create hsr debugfs directory
[   53.551182][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.558503][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.585016][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.607848][ T4184] team0: Port device team_slave_0 added
[   53.622268][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.629373][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.655732][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.674072][ T4184] team0: Port device team_slave_1 added
[   53.688846][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.696103][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.722336][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.764516][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.771894][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.798707][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.822967][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.830809][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.857672][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.898268][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.905244][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.932314][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.952648][ T4187] device hsr_slave_0 entered promiscuous mode
[   53.959577][ T4187] device hsr_slave_1 entered promiscuous mode
[   53.966567][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.974146][ T4187] Cannot create hsr debugfs directory
[   54.008754][ T4191] device hsr_slave_0 entered promiscuous mode
[   54.015659][ T4191] device hsr_slave_1 entered promiscuous mode
[   54.022436][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.030483][ T4191] Cannot create hsr debugfs directory
[   54.126927][    T7] Bluetooth: hci4: command 0x0409 tx timeout
[   54.133830][    T7] Bluetooth: hci3: command 0x0409 tx timeout
[   54.135820][   T21] Bluetooth: hci0: command 0x0409 tx timeout
[   54.140027][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[   54.152300][    T7] Bluetooth: hci2: command 0x0409 tx timeout
[   54.160821][ T4184] device hsr_slave_0 entered promiscuous mode
[   54.168009][ T4184] device hsr_slave_1 entered promiscuous mode
[   54.174541][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.182257][ T4184] Cannot create hsr debugfs directory
[   54.347693][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   54.368487][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   54.378631][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   54.389084][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   54.422510][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.433119][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.463441][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.473298][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.536659][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   54.549780][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   54.580013][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   54.590937][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.603289][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.618044][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.631566][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   54.645269][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.657013][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.712651][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.721686][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.747645][ T4183] 8021q: adding VLAN 0 to HW filter on device team0
[   54.758856][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.769029][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.778207][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.785441][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.809835][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.825309][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   54.833516][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.843033][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.852647][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.863629][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.874042][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.898266][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.917661][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.927235][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.937722][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.944935][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.953285][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.964920][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.973676][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.980996][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.989127][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.998726][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.008105][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.015248][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.023100][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.032648][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.045628][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.066386][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.075044][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.108940][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.118246][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.128856][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.137948][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.147337][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.156056][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.164608][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.174487][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.183266][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.193216][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.201500][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.219070][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.227812][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.245126][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.255912][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.287179][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.297030][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.307652][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.316539][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.324744][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.333895][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.342945][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.360850][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.375479][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.419314][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.433006][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.442997][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.471545][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.489168][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   55.511976][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.533180][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.556896][ T4191] 8021q: adding VLAN 0 to HW filter on device team0
[   55.564440][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.585570][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.597799][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.607703][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.616564][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.623707][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.634969][ T4184] 8021q: adding VLAN 0 to HW filter on device team0
[   55.662236][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.670381][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.679145][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.689103][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.696317][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.704438][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.713423][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.722601][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.729785][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.737662][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.745133][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.753557][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.762502][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.771366][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.779922][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.787016][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.794659][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.808321][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.830207][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.838691][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.847904][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.855401][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.865766][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.875112][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.883691][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.890975][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.906553][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.922562][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.934494][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.963847][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.973122][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.983738][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.995044][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.004331][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.011525][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.020313][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.029341][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.039037][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.048041][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.057333][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.100133][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.113047][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.128582][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.139994][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.151830][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.162034][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.170834][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.179781][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.188786][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.197740][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.206909][ T4255] Bluetooth: hci2: command 0x041b tx timeout
[   56.213194][ T4255] Bluetooth: hci0: command 0x041b tx timeout
[   56.213444][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.220090][ T4255] Bluetooth: hci1: command 0x041b tx timeout
[   56.233540][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.234188][ T4255] Bluetooth: hci3: command 0x041b tx timeout
[   56.242633][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.248642][ T4255] Bluetooth: hci4: command 0x041b tx timeout
[   56.262864][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.271441][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.280539][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.290459][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.299429][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.308281][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.317243][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.325584][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.335476][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.343902][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.352553][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.361407][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.370913][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.379170][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.387136][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.394961][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.403246][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.414029][ T4189] device veth0_vlan entered promiscuous mode
[   56.450071][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.466832][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.475635][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.490973][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.511554][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.521848][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.538322][ T4189] device veth1_vlan entered promiscuous mode
[   56.615948][ T4183] device veth0_vlan entered promiscuous mode
[   56.635004][ T4189] device veth0_macvtap entered promiscuous mode
[   56.657318][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.669058][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.686541][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.695364][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.709143][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.717529][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.725425][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.737161][ T4183] device veth1_vlan entered promiscuous mode
[   56.751735][ T4189] device veth1_macvtap entered promiscuous mode
[   56.787551][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.796306][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.804700][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   56.817707][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.825159][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.840239][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.858230][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.869227][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.881911][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.890350][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.904491][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.917430][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.928605][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.938763][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.947888][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.957032][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.967932][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.977642][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.996771][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.013152][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.021983][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.038318][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.048875][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.057833][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.067560][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.087144][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.098590][ T4183] device veth0_macvtap entered promiscuous mode
[   57.112405][ T4191] device veth0_vlan entered promiscuous mode
[   57.130766][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.139318][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.148532][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.158780][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.167407][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.189429][ T4191] device veth1_vlan entered promiscuous mode
[   57.216489][ T4183] device veth1_macvtap entered promiscuous mode
[   57.228450][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.242779][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.251936][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.262462][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.312148][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   57.322092][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.333633][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.343487][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.355067][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.367899][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.385108][ T4187] device veth0_vlan entered promiscuous mode
[   57.399727][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.409890][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.419856][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.423315][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.429013][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.445078][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.453744][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   57.462026][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.470071][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.484115][ T4191] device veth0_macvtap entered promiscuous mode
[   57.493707][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.503625][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.514033][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.525135][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.538108][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.563967][ T4191] device veth1_macvtap entered promiscuous mode
[   57.572058][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.580620][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.589435][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.599684][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.609908][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.618694][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.628973][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.638493][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.653466][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.662566][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.686833][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.691532][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.697749][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.711584][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.723112][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.733919][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.748098][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.756381][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.764814][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.772894][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   57.784279][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.793374][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.807342][ T4187] device veth1_vlan entered promiscuous mode
[   57.831135][ T4184] device veth0_vlan entered promiscuous mode
[   57.840274][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.852541][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.863402][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.874944][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.887895][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.901095][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.913811][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.923452][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.932746][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.955284][ T4184] device veth1_vlan entered promiscuous mode
[   57.986512][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.994627][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.004608][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.080994][ T4184] device veth0_macvtap entered promiscuous mode
[   58.140640][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   58.174136][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.210485][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.222441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   58.238833][ T4187] device veth0_macvtap entered promiscuous mode
[   58.254602][ T4187] device veth1_macvtap entered promiscuous mode
[   58.280089][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.303211][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.323314][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.342519][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.354363][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.362563][ T4294] Bluetooth: hci4: command 0x040f tx timeout
[   58.373150][ T4294] Bluetooth: hci3: command 0x040f tx timeout
[   58.379826][ T4294] Bluetooth: hci1: command 0x040f tx timeout
[   58.380389][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.386394][ T4294] Bluetooth: hci0: command 0x040f tx timeout
[   58.402970][ T4294] Bluetooth: hci2: command 0x040f tx timeout
[   58.404818][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.444774][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.685142][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.905860][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   58.974900][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.984072][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.000819][  T498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.011766][  T498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.041851][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   59.050891][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.061742][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.072860][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.083074][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.094810][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.104685][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.115218][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.126737][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.134967][ T4184] device veth1_macvtap entered promiscuous mode
[   59.152207][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.161630][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.173422][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.185463][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.194533][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.203394][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.217526][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.228049][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.244655][  T498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.254841][  T498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.264011][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.272141][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   59.285437][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.297999][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.307901][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.318870][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.329009][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.339732][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.351293][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.362019][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.373521][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.387906][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.397637][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.433736][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.451585][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.463307][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.473150][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.484331][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.495539][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.506187][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.517346][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.527410][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.538781][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.550210][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.568824][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   59.577980][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.587180][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.625497][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.635797][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.644521][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.653874][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.741221][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.964296][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   60.030695][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.066569][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   60.304974][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.578607][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   60.586749][ T4246] Bluetooth: hci2: command 0x0419 tx timeout
[   60.680985][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   60.885842][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #340!!!
[   61.086051][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   61.176101][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   61.238022][ T4246] Bluetooth: hci0: command 0x0419 tx timeout
[   61.244283][ T4246] Bluetooth: hci1: command 0x0419 tx timeout
[   61.251339][ T4246] Bluetooth: hci3: command 0x0419 tx timeout
[   61.257520][ T4246] Bluetooth: hci4: command 0x0419 tx timeout
[   61.346430][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.358640][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.416772][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   61.465238][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.477662][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.517171][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   61.555082][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.563694][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.600801][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   62.331901][ T4329] process 'syz.4.10' launched './file0' with NULL argv: empty string added
[   63.176176][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   63.185708][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   63.194777][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   64.281072][ T4349] loop1: detected capacity change from 0 to 40427
[   64.295898][ T4349] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff
[   64.305169][ T4349] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4
[   64.315916][ T4349] F2FS-fs (loop1): invalid crc value
[   64.380373][ T4349] F2FS-fs (loop1): Found nat_bits in checkpoint
[   64.574691][ T4349] F2FS-fs (loop1): Start checkpoint disabled!
[   64.596657][ T4349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   65.961533][  T155] attempt to access beyond end of device
[   65.961533][  T155] loop1: rw=2049, want=40976, limit=40427
[   67.940544][ T4362] loop2: detected capacity change from 0 to 32768
[   68.013982][ T4362] ERROR: device name not specified.
[   71.102112][ T4400] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   71.450828][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[   71.457490][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[   71.675760][ T4411] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   72.915186][ T4419] loop1: detected capacity change from 0 to 40427
[   73.102854][ T4419] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff
[   73.111411][ T4419] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4
[   73.149988][ T4419] F2FS-fs (loop1): invalid crc value
[   73.445844][ T4419] F2FS-fs (loop1): Found nat_bits in checkpoint
[   73.477371][ T4419] F2FS-fs (loop1): Start checkpoint disabled!
[   73.496109][ T4419] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   73.753387][ T4437] 9pnet: Insufficient options for proto=fd
[   73.861324][ T4438] overlayfs: missing 'lowerdir'
[   75.616500][ T4314] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   75.632387][ T4284] attempt to access beyond end of device
[   75.632387][ T4284] loop1: rw=2049, want=40976, limit=40427
[   76.449288][ T1327] cfg80211: failed to load regulatory.db
[   76.456331][ T4314] usb 3-1: Using ep0 maxpacket: 16
[   76.796069][ T4314] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   76.816928][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.944613][ T4314] usb 3-1: Product: syz
[   76.974665][ T4314] usb 3-1: Manufacturer: syz
[   77.122620][ T4196] Bluetooth: Unexpected continuation frame (len 16)
[   77.132667][   T26] audit: type=1326 audit(1753230448.239:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.1.42" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0eddd149a9 code=0x0
[   77.605589][ T4314] usb 3-1: SerialNumber: syz
[   77.689557][ T4480] 9pnet: Insufficient options for proto=fd
[   77.697474][ T4314] r8152-cfgselector 3-1: config 0 descriptor??
[   77.799674][ T4314] r8152-cfgselector 3-1: can't set config #0, error -71
[   78.077030][ T4490] overlayfs: missing 'lowerdir'
[   78.657025][ T4314] r8152-cfgselector 3-1: Unknown version 0x0000
[   78.767344][ T4314] r8152-cfgselector 3-1: USB disconnect, device number 2
[   78.996973][ T4498] loop2: detected capacity change from 0 to 40427
[   79.054268][ T4499] loop1: detected capacity change from 0 to 512
[   79.081522][ T4498] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff
[   79.090047][ T4498] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4
[   79.099781][ T4498] F2FS-fs (loop2): invalid crc value
[   79.132317][ T4498] F2FS-fs (loop2): Found nat_bits in checkpoint
[   79.167105][ T4499] EXT4-fs (loop1): first meta block group too large: 4294967295 (group descriptor block count 1)
[   79.167992][ T4498] F2FS-fs (loop2): Start checkpoint disabled!
[   79.195803][ T4498] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   80.047231][ T4385] attempt to access beyond end of device
[   80.047231][ T4385] loop2: rw=2049, want=40976, limit=40427
[   81.297025][ T4525] loop2: detected capacity change from 0 to 32768
[   81.337862][ T4525] 
[   81.337862][ T4525]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   81.337862][ T4525] 
[   82.908460][ T4189] 
[   82.908460][ T4189]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   82.908460][ T4189] 
[   82.979375][ T4541] overlayfs: missing 'lowerdir'
[   83.357652][ T4189] 
[   83.357652][ T4189]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   83.357652][ T4189] 
[   83.523061][ T4548] loop3: detected capacity change from 0 to 512
[   83.671563][ T4548] EXT4-fs (loop3): first meta block group too large: 4294967295 (group descriptor block count 1)
[   85.269267][ T4557] loop2: detected capacity change from 0 to 40427
[   85.363327][ T4557] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff
[   85.372036][ T4557] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4
[   85.387210][ T4557] F2FS-fs (loop2): invalid crc value
[   85.401271][ T4557] F2FS-fs (loop2): Found nat_bits in checkpoint
[   85.432145][ T4557] F2FS-fs (loop2): Start checkpoint disabled!
[   85.442406][ T4557] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   86.679035][ T4284] attempt to access beyond end of device
[   86.679035][ T4284] loop2: rw=2049, want=40976, limit=40427
[   87.208700][ T4290] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   87.316542][ T4584] overlayfs: missing 'lowerdir'
[   87.611738][ T4583] device syz_tun entered promiscuous mode
[   87.636095][ T4290] usb 3-1: config 15 has an invalid interface number: 226 but max is 0
[   87.692880][ T4290] usb 3-1: config 15 has no interface number 0
[   87.848400][ T4290] usb 3-1: config 15 interface 226 has no altsetting 0
[   87.946448][ T4583] device batadv_slave_0 entered promiscuous mode
[   88.077080][ T4290] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice=c6.c0
[   88.117336][ T4290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.118736][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[   88.164039][ T4290] usb 3-1: Product: syz
[   88.187883][ T4290] usb 3-1: Manufacturer: syz
[   88.213924][ T4290] usb 3-1: SerialNumber: syz
[   88.657527][ T4290] mos7840 3-1:15.226: required endpoints missing
[   88.698051][ T4290] usb 3-1: USB disconnect, device number 3
[   90.637016][ T4610] binder: 4609:4610 ioctl c0306201 0 returned -14
[   90.666650][ T4610] binder: 4609:4610 unknown command 0
[   90.672249][ T4610] binder: 4609:4610 ioctl c0306201 2000000003c0 returned -22
[   90.731784][ T4612] binder: 4609:4612 ioctl c0306201 0 returned -14
[   96.804047][ T4666] loop2: detected capacity change from 0 to 40427
[   96.846553][ T4666] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff
[   96.855256][ T4666] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4
[   96.864549][ T4666] F2FS-fs (loop2): invalid crc value
[   96.974925][ T4666] F2FS-fs (loop2): Found nat_bits in checkpoint
[   97.024480][ T4666] F2FS-fs (loop2): Start checkpoint disabled!
[   97.054611][ T4666] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   98.569572][ T4305] attempt to access beyond end of device
[   98.569572][ T4305] loop2: rw=2049, want=40976, limit=40427
[   98.696151][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[   98.706500][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:5 Not tainted 5.15.189-syzkaller #0
[   98.714824][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   98.724869][ T4196] Workqueue: hci0 hci_rx_work
[   98.729674][ T4196] Call Trace:
[   98.732943][ T4196]  <TASK>
[   98.735865][ T4196]  dump_stack_lvl+0x168/0x230
[   98.740534][ T4196]  ? show_regs_print_info+0x20/0x20
[   98.745736][ T4196]  ? load_image+0x3b0/0x3b0
[   98.750237][ T4196]  sysfs_create_dir_ns+0x252/0x280
[   98.755715][ T4196]  ? __lock_acquire+0x7c60/0x7c60
[   98.760757][ T4196]  ? sysfs_warn_dup+0xa0/0xa0
[   98.765588][ T4196]  ? le_conn_complete_evt+0xcbc/0x1590
[   98.771653][ T4196]  ? hci_event_packet+0xe05/0x12f0
[   98.777027][ T4196]  ? process_one_work+0x863/0x1000
[   98.782132][ T4196]  ? do_raw_spin_unlock+0x11d/0x230
[   98.787672][ T4196]  kobject_add_internal+0x662/0xd00
[   98.792864][ T4196]  kobject_add+0x152/0x210
[   98.797302][ T4196]  ? kobject_init+0x1d0/0x1d0
[   98.801989][ T4196]  ? klist_children_get+0x50/0x50
[   98.807028][ T4196]  ? get_device_parent+0x121/0x3f0
[   98.812136][ T4196]  device_add+0x483/0xfb0
[   98.816468][ T4196]  hci_conn_add_sysfs+0xd1/0x1e0
[   98.821448][ T4196]  le_conn_complete_evt+0xcbc/0x1590
[   98.826952][ T4196]  ? cs_le_create_conn+0x5e0/0x5e0
[   98.832054][ T4196]  ? __mutex_trylock_common+0x14f/0x250
[   98.837591][ T4196]  hci_le_meta_evt+0x289/0x3b80
[   98.842433][ T4196]  ? hci_event_packet+0x36d/0x12f0
[   98.847538][ T4196]  ? hci_event_packet+0x2e2/0x12f0
[   98.852655][ T4196]  ? __lock_acquire+0x7c60/0x7c60
[   98.857766][ T4196]  ? hci_remote_host_features_evt+0x280/0x280
[   98.863912][ T4196]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[   98.869536][ T4196]  ? mark_lock+0x94/0x320
[   98.873852][ T4196]  ? mutex_unlock+0x10/0x10
[   98.878347][ T4196]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[   98.884327][ T4196]  ? lock_chain_count+0x20/0x20
[   98.889260][ T4196]  ? __rwlock_init+0x140/0x140
[   98.894035][ T4196]  hci_event_packet+0xe05/0x12f0
[   98.899070][ T4196]  ? lockdep_hardirqs_on+0x94/0x140
[   98.904261][ T4196]  ? rcu_lock_release+0x20/0x20
[   98.909095][ T4196]  ? hci_send_to_monitor+0x9c/0x4a0
[   98.914464][ T4196]  hci_rx_work+0x255/0xa10
[   98.919186][ T4196]  process_one_work+0x863/0x1000
[   98.924219][ T4196]  ? worker_detach_from_pool+0x240/0x240
[   98.930040][ T4196]  ? lockdep_hardirqs_off+0x70/0x100
[   98.935571][ T4196]  ? _raw_spin_lock_irq+0xab/0xe0
[   98.940699][ T4196]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[   98.946803][ T4196]  ? wq_worker_running+0x97/0x170
[   98.951947][ T4196]  worker_thread+0xaa8/0x12a0
[   98.956646][ T4196]  kthread+0x436/0x520
[   98.960696][ T4196]  ? rcu_lock_release+0x20/0x20
[   98.965525][ T4196]  ? kthread_blkcg+0xd0/0xd0
[   98.970092][ T4196]  ret_from_fork+0x1f/0x30
[   98.974521][ T4196]  </TASK>
[   98.982508][ T4196] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   98.996191][ T4196] Bluetooth: hci0: failed to register connection device
[  100.670553][ T4709] loop2: detected capacity change from 0 to 512
[  100.740430][ T4709] EXT4-fs (loop2): first meta block group too large: 4294967295 (group descriptor block count 1)
[  101.585798][ T4226] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  101.957033][ T1327] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  101.964720][   T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  101.995878][ T4226] usb 5-1: config 0 has no interfaces?
[  102.001587][ T4226] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  102.011088][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.028560][ T4226] usb 5-1: config 0 descriptor??
[  102.205989][   T13] usb 2-1: Using ep0 maxpacket: 16
[  102.211327][ T1327] usb 4-1: Using ep0 maxpacket: 16
[  102.291678][ T4196] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  102.302816][ T4226] usb 5-1: USB disconnect, device number 2
[  102.336229][   T13] usb 2-1: config 6 has an invalid interface number: 28 but max is 3
[  102.344505][   T13] usb 2-1: config 6 has an invalid interface number: 4 but max is 3
[  102.353073][   T13] usb 2-1: config 6 has an invalid interface number: 86 but max is 3
[  102.361669][   T13] usb 2-1: config 6 has an invalid interface number: 191 but max is 3
[  102.369954][   T13] usb 2-1: config 6 has no interface number 0
[  102.384480][   T13] usb 2-1: config 6 has no interface number 1
[  102.390716][   T13] usb 2-1: config 6 has no interface number 2
[  102.396918][   T13] usb 2-1: config 6 has no interface number 3
[  102.403126][   T13] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  102.413850][   T13] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  102.425193][   T13] usb 2-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  102.436229][   T13] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  102.447239][   T13] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  102.465723][   T13] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  102.476617][   T13] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7
[  102.488186][   T13] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0
[  102.498358][ T1327] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  102.507937][   T13] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  102.519288][ T1327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.534381][   T13] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0
[  102.548539][ T1327] usb 4-1: Product: syz
[  102.552830][ T1327] usb 4-1: Manufacturer: syz
[  102.561509][ T1327] usb 4-1: SerialNumber: syz
[  102.568318][   T13] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  102.627293][ T1327] usb 4-1: config 0 descriptor??
[  102.644610][   T13] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  102.688673][   T13] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  102.747101][   T13] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  102.793848][   T13] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  102.879524][   T13] usb 2-1: config 6 interface 4 has no altsetting 0
[  102.921676][   T13] usb 2-1: config 6 interface 86 has no altsetting 0
[  102.944931][   T13] usb 2-1: config 6 interface 191 has no altsetting 0
[  103.006244][ T1327] dvb_usb_dtv5100: probe of 4-1:0.0 failed with error -71
[  103.130929][ T1327] usb 4-1: USB disconnect, device number 2
[  103.196734][   T13] usb 2-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9
[  103.252427][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.357322][   T13] usb 2-1: Product: syz
[  103.424898][   T13] usb 2-1: Manufacturer: syz
[  103.461715][   T13] usb 2-1: SerialNumber: syz
[  104.937216][   T13] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware
[  104.973731][   T13] usb 2-1: Direct firmware load for dvb-usb-s630.fw failed with error -2
[  104.992530][   T13] usb 2-1: Falling back to sysfs fallback for: dvb-usb-s630.fw
[  106.006859][ T4767] ERROR: device name not specified.
[  107.565066][ T4772] loop2: detected capacity change from 0 to 512
[  107.655747][ T4772] EXT4-fs (loop2): first meta block group too large: 4294967295 (group descriptor block count 1)
[  109.121576][ T4786] netlink: 44 bytes leftover after parsing attributes in process `syz.0.137'.
[  111.256104][ T4246] Bluetooth: hci0: command 0x2021 tx timeout
[  111.715206][ T4817] netlink: 'syz.2.147': attribute type 10 has an invalid length.
[  111.731033][ T4817] team0: Device ipvlan1 failed to register rx_handler
[  112.250627][ T4829] Zero length message leads to an empty skb
[  113.521022][   T23] Bluetooth: hci4: command 0x2016 tx timeout
[  114.458875][ T4837] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  114.465673][ T4837] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  114.474549][ T4837] vhci_hcd vhci_hcd.0: Device attached
[  114.511695][ T4841] vhci_hcd: connection closed
[  114.514793][ T4313] vhci_hcd: stop threads
[  114.515201][ T4313] vhci_hcd: release socket
[  114.531252][ T4313] vhci_hcd: disconnect device
[  115.242621][ T4847] loop4: detected capacity change from 0 to 512
[  115.686608][ T1327] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  115.789531][ T4847] EXT4-fs (loop4): first meta block group too large: 4294967295 (group descriptor block count 1)
[  116.735930][ T1327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.756099][ T1327] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping
[  116.793218][ T1327] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  117.045941][ T1327] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  117.063025][ T1327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  117.087120][ T1327] usb 1-1: Product: syz
[  117.099494][ T1327] usb 1-1: Manufacturer: syz
[  117.114599][ T1327] usb 1-1: SerialNumber: syz
[  117.129880][ T1327] usb 1-1: config 0 descriptor??
[  117.178443][ T1327] radio-si470x 1-1:0.0: could not find interrupt in endpoint
[  117.186340][ T1327] radio-si470x: probe of 1-1:0.0 failed with error -5
[  117.207924][ T1327] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  118.203881][ T4877] netlink: 68 bytes leftover after parsing attributes in process `syz.3.164'.
[  118.907095][ T1112] usb 1-1: USB disconnect, device number 2
[  121.526930][ T4897] Cannot find add_set index 0 as target
[  122.210416][ T4906] loop0: detected capacity change from 0 to 512
[  122.293941][ T4906] EXT4-fs (loop0): first meta block group too large: 4294967295 (group descriptor block count 1)
[  124.413071][ T4935] loop1: detected capacity change from 0 to 32768
[  124.504597][ T4935] 
[  124.504597][ T4935]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  124.504597][ T4935] 
[  125.592861][ T4191] 
[  125.592861][ T4191]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  125.592861][ T4191] 
[  125.800565][ T4191] 
[  125.800565][ T4191]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  125.800565][ T4191] 
[  127.482041][ T4939] loop4: detected capacity change from 0 to 32768
[  127.671064][ T4967] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  127.680417][ T4967] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  129.848151][ T4987] loop3: detected capacity change from 0 to 32768
[  129.967308][ T4987] 
[  129.967308][ T4987]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  129.967308][ T4987] 
[  130.528374][ T4991] loop4: detected capacity change from 0 to 512
[  130.685587][ T4187] 
[  130.685587][ T4187]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.685587][ T4187] 
[  130.706285][ T4991] EXT4-fs (loop4): first meta block group too large: 4294967295 (group descriptor block count 1)
[  131.280526][ T4187] 
[  131.280526][ T4187]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  131.280526][ T4187] 
[  131.506333][ T4256] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  131.932777][ T5005] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  132.769274][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  132.778103][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  133.045745][ T4256] usb 1-1: Using ep0 maxpacket: 8
[  133.321312][ T4256] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  133.335512][ T4256] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  133.345712][ T4256] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  133.354858][ T5010] loop3: detected capacity change from 0 to 32768
[  133.356122][ T4256] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  133.372231][ T4256] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  134.009378][ T5010] ERROR: device name not specified.
[  136.623068][ T4256] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  137.602602][ T4256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.750171][ T4256] usb 1-1: can't set config #16, error -71
[  137.906696][ T4256] usb 1-1: USB disconnect, device number 3
[  139.396544][ T5047] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.211'.
[  140.009303][ T5056] ksmbd: Unknown IPC event: 6, ignore.
[  140.427433][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'.
[  140.456972][ T5053] loop3: detected capacity change from 0 to 512
[  141.039750][ T5053] EXT4-fs (loop3): first meta block group too large: 4294967295 (group descriptor block count 1)
[  143.275778][ T1112] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  144.167058][ T1112] usb 1-1: Using ep0 maxpacket: 8
[  144.446037][ T1112] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  144.675747][ T4256] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  144.759367][ T1112] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  144.779721][ T1112] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  144.796031][ T1112] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  144.811529][ T1112] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  144.825358][ T1112] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  144.841624][ T1112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.095792][ T4256] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.166106][ T1112] usb 1-1: GET_CAPABILITIES returned 0
[  145.171987][ T1112] usbtmc 1-1:16.0: can't read capabilities
[  145.424645][ T1112] usb 1-1: USB disconnect, device number 4
[  145.942019][ T4256] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  145.951372][ T4256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.970212][ T4256] usb 3-1: config 0 descriptor??
[  145.998539][ T5103] loop4: detected capacity change from 0 to 512
[  146.007554][ T4256] pwc: Askey VC010 type 2 USB webcam detected.
[  146.046258][ T5103] EXT4-fs (loop4): first meta block group too large: 4294967295 (group descriptor block count 1)
[  146.586042][ T4256] pwc: recv_control_msg error -32 req 02 val 2b00
[  146.925965][ T4256] pwc: recv_control_msg error -71 req 02 val 2c00
[  146.955891][ T4256] pwc: recv_control_msg error -71 req 04 val 1000
[  146.975779][ T4256] pwc: recv_control_msg error -71 req 04 val 1300
[  146.995797][ T4256] pwc: recv_control_msg error -71 req 04 val 1400
[  147.015791][ T4256] pwc: recv_control_msg error -71 req 02 val 2000
[  147.137310][ T5114] loop0: detected capacity change from 0 to 512
[  147.167499][ T4256] pwc: recv_control_msg error -71 req 02 val 2100
[  147.170846][ T5114] EXT4-fs (loop0): first meta block group too large: 4294967295 (group descriptor block count 1)
[  147.186352][ T4256] pwc: recv_control_msg error -71 req 04 val 1500
[  147.316209][ T4256] pwc: recv_control_msg error -71 req 02 val 2500
[  147.335993][ T4256] pwc: recv_control_msg error -71 req 02 val 2400
[  148.222943][ T4256] pwc: recv_control_msg error -71 req 02 val 2600
[  148.246037][ T4256] pwc: recv_control_msg error -71 req 02 val 2900
[  148.265837][ T4256] pwc: recv_control_msg error -71 req 02 val 2800
[  148.285858][ T4256] pwc: recv_control_msg error -71 req 04 val 1100
[  148.307332][ T4256] pwc: recv_control_msg error -71 req 04 val 1200
[  148.359336][ T4256] pwc: Registered as video103.
[  148.385310][ T4256] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[  148.923403][ T4256] usb 3-1: USB disconnect, device number 4
[  149.754292][ T5135] syz.3.241 (5135) used greatest stack depth: 18592 bytes left
[  151.047333][ T4199] Bluetooth: Unexpected continuation frame (len 16)
[  151.385530][ T5158] loop2: detected capacity change from 0 to 512
[  154.251452][ T5158] EXT4-fs (loop2): first meta block group too large: 4294967295 (group descriptor block count 1)
[  154.946519][ T5181] loop1: detected capacity change from 0 to 512
[  155.540472][ T5181] EXT4-fs (loop1): first meta block group too large: 4294967295 (group descriptor block count 1)
[  155.909465][ T1112] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  156.892309][ T5205] syz.2.260 uses obsolete (PF_INET,SOCK_PACKET)
[  156.906026][ T1112] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  156.924008][ T5206] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.259'.
[  156.942743][ T1112] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.961015][ T1112] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  156.973939][ T1112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.915794][ T1112] usb 1-1: usb_control_msg returned -32
[  157.921412][ T1112] usbtmc 1-1:16.0: can't read capabilities
[  158.969811][ T4308] usb 1-1: USB disconnect, device number 5
[  159.055444][ T5225] loop4: detected capacity change from 0 to 512
[  159.139638][ T5225] EXT4-fs (loop4): first meta block group too large: 4294967295 (group descriptor block count 1)
[  165.530985][ T5288] loop3: detected capacity change from 0 to 512
[  165.615041][ T5288] EXT4-fs (loop3): first meta block group too large: 4294967295 (group descriptor block count 1)
[  165.737828][ T5292] vivid-002: =================  START STATUS  =================
[  165.747338][ T5292] vivid-002: Radio HW Seek Mode: Bounded
[  165.753472][ T5292] vivid-002: Radio Programmable HW Seek: false
[  165.759892][ T5292] vivid-002: RDS Rx I/O Mode: Block I/O
[  165.765715][ T5292] vivid-002: Generate RBDS Instead of RDS: false
[  165.772309][ T5292] vivid-002: RDS Reception: true
[  165.777459][ T5292] vivid-002: RDS Program Type: 0 inactive
[  165.783362][ T5292] vivid-002: RDS PS Name:  inactive
[  165.817793][ T5292] vivid-002: RDS Radio Text:  inactive
[  165.823729][ T5292] vivid-002: RDS Traffic Announcement: false inactive
[  165.831006][ T5292] vivid-002: RDS Traffic Program: false inactive
[  165.838393][ T5292] vivid-002: RDS Music: false inactive
[  165.844497][ T5292] vivid-002: ==================  END STATUS  ==================
[  168.083147][ T5302] overlayfs: missing 'workdir'
[  168.963459][   T13] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  169.079704][   T13] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware
[  169.111807][ T5307] netlink: 68 bytes leftover after parsing attributes in process `syz.2.288'.
[  169.148898][   T13] usb 2-1: Direct firmware load for dvb-usb-s630.fw failed with error -2
[  169.175213][ T5312] loop1: detected capacity change from 0 to 512
[  169.294929][ T5312] EXT4-fs (loop1): first meta block group too large: 4294967295 (group descriptor block count 1)
[  169.302543][   T13] usb 2-1: Falling back to sysfs fallback for: dvb-usb-s630.fw
[  172.975740][ T4308] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  172.993951][ T5348] loop0: detected capacity change from 0 to 512
[  173.148348][ T5348] EXT4-fs (loop0): first meta block group too large: 4294967295 (group descriptor block count 1)
[  173.345194][ T4308] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  173.465007][ T4308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.606073][ T4308] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  173.920709][ T4308] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.135135][ T4308] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.267260][ T4308] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  174.283454][ T4308] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  174.302061][ T4308] usb 5-1: Product: syz
[  174.307442][ T4308] usb 5-1: Manufacturer: syz
[  174.360562][ T4308] cdc_wdm 5-1:1.0: skipping garbage
[  174.391423][ T4308] cdc_wdm 5-1:1.0: skipping garbage
[  174.524291][ T4308] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  174.686735][ T4308] cdc_wdm 5-1:1.0: Unknown control protocol
[  175.626875][ T5374] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  175.811558][    T7] Bluetooth: hci1: command 0x0406 tx timeout
[  175.948489][   T23] Bluetooth: hci0: command 0x0406 tx timeout
[  176.003633][   T23] usb 5-1: USB disconnect, device number 3
[  176.073009][    T7] Bluetooth: hci2: command 0x0406 tx timeout
[  176.079307][    T7] Bluetooth: hci3: command 0x0406 tx timeout
[  176.305545][ T5381] loop1: detected capacity change from 0 to 512
[  176.809866][ T5381] EXT4-fs (loop1): first meta block group too large: 4294967295 (group descriptor block count 1)
[  179.678821][ T5425] autofs4:pid:5425:autofs_fill_super: called with bogus options
[  181.960506][ T5438] loop1: detected capacity change from 0 to 512
[  181.995468][ T5438] EXT4-fs (loop1): first meta block group too large: 4294967295 (group descriptor block count 1)
[  183.317465][   T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  183.364403][ T5464] netlink: 'syz.1.336': attribute type 20 has an invalid length.
[  183.531410][ T5466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.336'.
[  183.595742][   T23] usb 4-1: Using ep0 maxpacket: 8
[  184.556946][   T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.593572][   T23] usb 4-1: config 0 has no interfaces?
[  184.791292][   T23] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  184.813576][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.940748][   T23] usb 4-1: Product: syz
[  184.950371][   T23] usb 4-1: Manufacturer: syz
[  184.962038][   T23] usb 4-1: SerialNumber: syz
[  184.980739][   T23] usb 4-1: config 0 descriptor??
[  185.665896][   T23] usb 4-1: can't set config #0, error -71
[  185.739322][   T23] usb 4-1: USB disconnect, device number 3
[  186.037251][ T5492] loop3: detected capacity change from 0 to 512
[  186.071256][ T5492] EXT4-fs (loop3): first meta block group too large: 4294967295 (group descriptor block count 1)
[  186.205807][ T4290] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  186.485954][ T4290] usb 1-1: Using ep0 maxpacket: 8
[  186.899145][ T4290] usb 1-1: config 5 has an invalid interface number: 52 but max is 1
[  186.908740][ T4290] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  186.919590][ T4290] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 2
[  186.928983][ T4290] usb 1-1: config 5 has no interface number 0
[  187.125941][ T4290] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c
[  187.135525][ T4290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.144138][ T4290] usb 1-1: Product: syz
[  187.149948][ T4290] usb 1-1: Manufacturer: syz
[  187.155290][ T4290] usb 1-1: SerialNumber: syz
[  191.200165][ T5535] loop4: detected capacity change from 0 to 40427
[  191.308609][ T5535] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff
[  191.317562][ T5535] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4
[  191.333798][ T5535] F2FS-fs (loop4): invalid crc value
[  191.393703][ T4290] cytherm 1-1:5.52: Cypress thermometer device now attached
[  191.407314][ T4290] usb 1-1: USB disconnect, device number 6
[  191.417945][ T4290] cytherm 1-1:5.52: Cypress thermometer now disconnected
[  192.132468][ T5535] F2FS-fs (loop4): Found nat_bits in checkpoint
[  192.155581][ T5535] F2FS-fs (loop4): Start checkpoint disabled!
[  192.172340][ T5535] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  193.714921][ T5570] 9pnet: Insufficient options for proto=fd
[  193.886208][ T4284] attempt to access beyond end of device
[  193.886208][ T4284] loop4: rw=2049, want=40976, limit=40427
[  193.996773][ T5580] netlink: 'syz.0.370': attribute type 10 has an invalid length.
[  194.042599][ T5580] device hsr0 entered promiscuous mode
[  194.157485][ T5580] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  194.220293][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  194.226806][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  194.237881][ T5580] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  194.344652][ T5580] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  194.421661][ T5580] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  194.813087][ T5592] netlink: 'syz.0.372': attribute type 21 has an invalid length.
[  197.442285][ T5615] loop4: detected capacity change from 0 to 40427
[  197.516207][ T5615] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff
[  197.524742][ T5615] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4
[  197.534919][ T5615] F2FS-fs (loop4): invalid crc value
[  197.615057][ T5615] F2FS-fs (loop4): Found nat_bits in checkpoint
[  197.660979][ T5615] F2FS-fs (loop4): Start checkpoint disabled!
[  197.710326][ T5615] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  198.626090][ T5627] 9pnet: Insufficient options for proto=fd
[  198.660379][ T4305] attempt to access beyond end of device
[  198.660379][ T4305] loop4: rw=2049, want=40976, limit=40427
[  200.880642][ T5641] netlink: 68 bytes leftover after parsing attributes in process `syz.0.385'.
[  200.902568][ T5642] loop3: detected capacity change from 0 to 512
[  200.957228][ T5642] EXT4-fs (loop3): first meta block group too large: 4294967295 (group descriptor block count 1)
[  202.861539][ T5663] loop2: detected capacity change from 0 to 40427
[  203.039135][ T5663] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff
[  203.048666][ T5663] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4
[  203.075860][ T5663] F2FS-fs (loop2): invalid crc value
[  203.113543][ T5663] F2FS-fs (loop2): Found nat_bits in checkpoint
[  203.150190][ T5663] F2FS-fs (loop2): Start checkpoint disabled!
[  203.183364][ T5665] 9pnet: Insufficient options for proto=fd
[  203.186960][ T5663] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  204.419435][ T4451] attempt to access beyond end of device
[  204.419435][ T4451] loop2: rw=2049, want=40976, limit=40427
[  204.525695][ T5679] loop4: detected capacity change from 0 to 32768
[  204.565573][ T5682] netlink: 'syz.3.395': attribute type 10 has an invalid length.
[  204.573420][ T5682] netlink: 40 bytes leftover after parsing attributes in process `syz.3.395'.
[  204.583918][ T5682] device dummy0 entered promiscuous mode
[  204.594477][ T5682] bridge0: port 3(dummy0) entered blocking state
[  204.601110][ T5682] bridge0: port 3(dummy0) entered disabled state
[  204.617970][ T5682] bridge0: port 3(dummy0) entered blocking state
[  204.624570][ T5682] bridge0: port 3(dummy0) entered forwarding state
[  205.101585][ T5679] 
[  205.101585][ T5679]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  205.101585][ T5679] 
[  205.302072][ T5684] xt_l2tp: wrong L2TP version: 0
[  205.795975][ T4183] 
[  205.795975][ T4183]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  205.795975][ T4183] 
[  205.809509][ T4183] 
[  205.809509][ T4183]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  205.809509][ T4183] 
[  207.773400][ T5710] 9pnet: Insufficient options for proto=fd
[  207.847820][ T5714] loop0: detected capacity change from 0 to 512
[  209.836290][ T5714] EXT4-fs (loop0): first meta block group too large: 4294967295 (group descriptor block count 1)
[  210.313961][ T5719] loop2: detected capacity change from 0 to 40427
[  210.491785][ T5719] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff
[  210.501682][ T5719] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4
[  210.547588][ T5719] F2FS-fs (loop2): invalid crc value
[  210.747346][ T5719] F2FS-fs (loop2): Found nat_bits in checkpoint
[  210.770679][ T5719] F2FS-fs (loop2): Start checkpoint disabled!
[  211.016546][ T5719] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  213.412385][ T4448] attempt to access beyond end of device
[  213.412385][ T4448] loop2: rw=2049, want=40976, limit=40427
[  213.985064][ T5756] 9pnet: Insufficient options for proto=fd
[  216.173898][ T5760] sched: RT throttling activated
[  216.731808][ T5780] loop0: detected capacity change from 0 to 32768
[  216.780376][ T5780] 
[  216.780376][ T5780]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  216.780376][ T5780] 
[  216.855096][ T5782] xt_l2tp: wrong L2TP version: 0
[  217.605364][ T4184] 
[  217.605364][ T4184]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.605364][ T4184] 
[  217.643425][ T4184] 
[  217.643425][ T4184]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.643425][ T4184] 
[  219.720887][ T5798] nvme_fabrics: missing parameter 'transport=%s'
[  219.913156][ T5798] nvme_fabrics: missing parameter 'nqn=%s'
[  219.942495][ T5801] qrtr: Invalid version 0
[  221.380315][ T5815] vivid-003: =================  START STATUS  =================
[  221.388208][ T5815] vivid-003: Radio HW Seek Mode: Bounded
[  221.394021][ T5815] vivid-003: Radio Programmable HW Seek: false
[  221.400582][ T5815] vivid-003: RDS Rx I/O Mode: Block I/O
[  221.406810][ T5815] vivid-003: Generate RBDS Instead of RDS: false
[  221.413261][ T5815] vivid-003: RDS Reception: true
[  221.418425][ T5815] vivid-003: RDS Program Type: 0 inactive
[  221.424365][ T5815] vivid-003: RDS PS Name:  inactive
[  221.433835][ T5815] vivid-003: RDS Radio Text:  inactive
[  221.439497][ T5815] vivid-003: RDS Traffic Announcement: false inactive
[  221.446424][ T5815] vivid-003: RDS Traffic Program: false inactive
[  221.453328][ T5815] vivid-003: RDS Music: false inactive
[  221.459301][ T5815] vivid-003: ==================  END STATUS  ==================
[  222.074044][ T5801] loop0: detected capacity change from 0 to 32768
[  222.357335][ T5801] ERROR: device name not specified.
[  229.080585][ T5861] usb usb8: usbfs: process 5861 (syz.2.445) did not claim interface 0 before use
[  230.225805][ T5872] netlink: 'syz.0.448': attribute type 21 has an invalid length.
[  230.835503][   T13] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  230.968759][   T13] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware
[  232.847203][   T13] usb 2-1: Direct firmware load for dvb-usb-s630.fw failed with error -2
[  232.870905][   T13] usb 2-1: Falling back to sysfs fallback for: dvb-usb-s630.fw
[  233.645982][ T4290] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  234.148500][ T5913] vivid-008: =================  START STATUS  =================
[  234.155817][ T4290] usb 4-1: device descriptor read/64, error -71
[  234.166937][ T5913] vivid-008: Enable Output Cropping: true
[  234.173200][ T5913] vivid-008: Enable Output Composing: true
[  234.179414][ T5913] vivid-008: Enable Output Scaler: true
[  234.185214][ T5913] vivid-008: Tx RGB Quantization Range: Automatic
[  234.191786][ T5913] vivid-008: Transmit Mode: HDMI
[  234.196933][ T5913] vivid-008: Display Present: true inactive
[  234.209035][ T5913] vivid-008: Hotplug Present: 0x00000001
[  234.215195][ T5913] vivid-008: RxSense Present: 0x00000001
[  234.221874][ T5913] vivid-008: EDID Present: 0x00000001
[  234.228032][ T5913] vivid-008: ==================  END STATUS  ==================
[  235.115787][ T4290] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  236.056092][ T4290] usb 4-1: device descriptor read/64, error -71
[  236.999514][ T4290] usb usb4-port1: attempt power cycle
[  238.203195][ T5939] netlink: 60 bytes leftover after parsing attributes in process `syz.2.468'.
[  238.356993][ T5937] loop0: detected capacity change from 0 to 32768
[  238.413531][ T5941] 9pnet: Insufficient options for proto=fd
[  238.433581][ T5937] 
[  238.433581][ T5937]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  238.433581][ T5937] 
[  238.509588][ T5943] xt_l2tp: wrong L2TP version: 0
[  239.107918][ T5948] autofs4:pid:5948:autofs_fill_super: called with bogus options
[  239.330713][ T4184] 
[  239.330713][ T4184]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  239.330713][ T4184] 
[  240.126336][ T4184] 
[  240.126336][ T4184]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  240.126336][ T4184] 
[  240.259071][ T5957] loop3: detected capacity change from 0 to 40427
[  240.454460][ T5957] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff
[  240.462978][ T5957] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4
[  240.472757][ T5957] F2FS-fs (loop3): invalid crc value
[  240.489827][ T5957] F2FS-fs (loop3): Found nat_bits in checkpoint
[  240.526148][ T5957] F2FS-fs (loop3): Start checkpoint disabled!
[  240.545755][ T5957] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  243.937982][ T5986] qrtr: Invalid version 0
[  243.972459][ T5988] 9pnet: Insufficient options for proto=fd
[  244.590613][ T5986] loop2: detected capacity change from 0 to 32768
[  244.727136][ T5986] ERROR: device name not specified.
[  244.731951][ T6000] autofs4:pid:6000:autofs_fill_super: called with bogus options
[  246.636460][ T6012] overlayfs: missing 'lowerdir'
[  248.098375][ T4314] Bluetooth: hci4: command 0x0406 tx timeout
[  249.050525][ T6040] syz.2.497 sent an empty control message without MSG_MORE.
[  250.107077][ T6042] loop2: detected capacity change from 0 to 32768
[  250.152523][ T6048] qrtr: Invalid version 0
[  250.473362][ T6042] 
[  250.473362][ T6042]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  250.473362][ T6042] 
[  250.641313][ T6053] xt_l2tp: wrong L2TP version: 0
[  251.225977][ T4189] 
[  251.225977][ T4189]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  251.225977][ T4189] 
[  251.346167][ T4189] 
[  251.346167][ T4189]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  251.346167][ T4189] 
[  251.885732][ T4314] Bluetooth: hci5: command 0x0409 tx timeout
[  251.920756][ T6043] chnl_net:caif_netlink_parms(): no params data found
[  253.006762][ T6073] autofs4:pid:6073:autofs_fill_super: called with bogus options
[  253.965765][ T4314] Bluetooth: hci5: command 0x041b tx timeout
[  254.456499][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.520191][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.176730][ T6043] device bridge_slave_0 entered promiscuous mode
[  255.187000][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.194157][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.202284][ T6043] device bridge_slave_1 entered promiscuous mode
[  255.441327][ T6043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.908506][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  255.932795][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  256.177123][ T1112] Bluetooth: hci5: command 0x040f tx timeout
[  256.285308][ T6043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.356890][ T6043] team0: Port device team_slave_0 added
[  256.375688][ T4314] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  256.533684][ T6043] team0: Port device team_slave_1 added
[  256.583545][ T6043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.862110][ T6043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.936203][   T27] INFO: task udevd:4175 blocked for more than 145 seconds.
[  256.955668][   T27]       Not tainted 5.15.189-syzkaller #0
[  256.961533][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  256.994901][ T6043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.012162][ T1112] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[  257.022480][   T27] task:udevd           state:D stack:23296 pid: 4175 ppid:  3562 flags:0x00004002
[  257.080719][   T27] Call Trace:
[  257.084572][   T27]  <TASK>
[  257.088492][   T27]  __schedule+0x11b8/0x43b0
[  257.093046][   T27]  ? release_firmware_map_entry+0x190/0x190
[  257.114761][   T27]  ? __lock_acquire+0x7c60/0x7c60
[  257.121047][   T27]  ? __mutex_trylock_common+0x80/0x250
[  257.147914][   T27]  ? rcu_lock_release+0x20/0x20
[  257.152955][   T27]  schedule+0x11b/0x1e0
[  257.165673][   T27]  schedule_preempt_disabled+0xf/0x20
[  257.171088][   T27]  __mutex_lock_common+0xc71/0x2390
[  257.189248][   T27]  ? uevent_show+0x17a/0x330
[  257.193887][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  257.199980][   T27]  mutex_lock_nested+0x17/0x20
[  257.204774][   T27]  uevent_show+0x17a/0x330
[  257.209620][   T27]  dev_attr_show+0x50/0xb0
[  257.214053][   T27]  ? device_get_ownership+0xa0/0xa0
[  257.219679][   T27]  sysfs_kf_seq_show+0x316/0x4c0
[  257.224636][   T27]  seq_read_iter+0x49b/0xd50
[  257.230273][   T27]  vfs_read+0x725/0xcf0
[  257.234547][   T27]  ? kernel_read+0x1e0/0x1e0
[  257.239692][   T27]  ? __context_tracking_exit+0x4c/0x80
[  257.245273][   T27]  ? __fdget_pos+0x2c6/0x370
[  257.257751][   T27]  ksys_read+0x14d/0x250
[  257.262044][   T27]  ? vfs_write+0xd00/0xd00
[  257.267124][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  257.272443][   T27]  do_syscall_64+0x4c/0xa0
[  257.277368][   T27]  ? clear_bhb_loop+0x30/0x80
[  257.282062][   T27]  ? clear_bhb_loop+0x30/0x80
[  257.287359][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  257.293868][   T27] RIP: 0033:0x7f82f9eb7407
[  257.299951][   T27] RSP: 002b:00007ffe28d3a400 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  257.308701][   T27] RAX: ffffffffffffffda RBX: 00007f82f9dc9880 RCX: 00007f82f9eb7407
[  257.317069][   T27] RDX: 0000000000001000 RSI: 000055ead5079a10 RDI: 0000000000000008
[  257.325063][   T27] RBP: 00007f82f9fffff0 R08: 0000000000000000 R09: 0000000000000000
[  257.333758][   T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[  257.342815][   T27] R13: 00007f82f9fffea0 R14: 0000000000000000 R15: 000055ead5099880
[  257.351367][   T27]  </TASK>
[  257.368964][ T6097] ODEBUG: Out of memory. ODEBUG disabled
[  257.406024][   T27] 
[  257.406024][   T27] Showing all locks held in the system:
[  257.413774][   T27] 6 locks held by kworker/0:1/13:
[  257.494333][   T27]  #0: ffff88801b990538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x760/0x1000
[  257.541769][   T27]  #1: ffffc90000d27d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000
[  257.595672][   T27]  #2: ffff888023d32220 (&dev->mutex){....}-{3:3}, at: hub_event+0x18f/0x4fa0
[  257.621265][   T27]  #3: ffff888025af8220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  257.645701][   T27]  #4: ffff88807907d1a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  257.654982][   T27]  #5: ffffffff8bfccbf0 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0xe7/0x320
[  257.705704][   T27] 1 lock held by khungtaskd/27:
[  257.710597][   T27]  #0: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  257.735648][   T27] 5 locks held by kworker/0:2/1112:
[  257.740904][   T27]  #0: ffff88801b990538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x760/0x1000
[  257.774026][   T27]  #1: ffffc90004917d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000
[  257.786848][   T27]  #2: ffff888023346220 (&dev->mutex){....}-{3:3}, at: hub_event+0x18f/0x4fa0
[  257.796081][   T27]  #3: ffff888147cfe5c0 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x1e4d/0x4fa0
[  257.807257][   T27]  #4: ffff888023ae9268 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x1e7a/0x4fa0
[  257.817722][   T27] 2 locks held by getty/3946:
[  257.822498][   T27]  #0: ffff88802c5a2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  257.832540][   T27]  #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30
[  257.843307][   T27] 4 locks held by udevd/4175:
[  257.848139][   T27]  #0: ffff88801eae71c8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50
[  257.857958][   T27]  #1: ffff888060dac888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0
[  257.867322][   T27]  #2: ffff888062bd5660 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0
[  257.877056][   T27]  #3: ffff888025af8220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330
[  257.886271][   T27] 3 locks held by syz-executor/4189:
[  257.891556][   T27]  #0: ffff888018fd4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030
[  257.901887][   T27]  #1: ffff888018fd4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x3f4/0x1030
[  257.912190][   T27]  #2: ffffffff8d37c328 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220
[  257.922558][   T27] 2 locks held by kworker/1:6/4256:
[  257.927835][   T27]  #0: ffff888016872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x760/0x1000
[  257.938284][   T27]  #1: ffffc9000336fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000
[  257.949714][   T27] 3 locks held by kworker/0:10/4314:
[  257.955006][   T27]  #0: ffff88801b990538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x760/0x1000
[  257.966074][   T27]  #1: ffffc900034bfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000
[  257.977752][   T27]  #2: ffff888023e0a220 (&dev->mutex){....}-{3:3}, at: hub_event+0x18f/0x4fa0
[  257.987850][   T27] 2 locks held by kworker/u4:14/4451:
[  257.993332][   T27]  #0: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  258.003678][   T27]  #1: ffff8880b9027848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x495/0x810
[  258.016405][   T27] 1 lock held by syz.4.454/5891:
[  258.021372][   T27]  #0: ffffffff8c120de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x320/0x6b0
[  258.032408][   T27] 3 locks held by syz-executor/6043:
[  258.037819][   T27]  #0: ffff888073e58ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030
[  258.048101][   T27]  #1: ffff888073e58078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x3f4/0x1030
[  258.057895][   T27]  #2: ffffffff8d37c328 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220
[  258.068244][   T27] 3 locks held by syz.3.512/6097:
[  258.073356][   T27]  #0: ffff888074eecff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030
[  258.083511][   T27]  #1: ffff888074eec078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x3f4/0x1030
[  258.093633][   T27]  #2: ffffffff8d37c328 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220
[  258.104064][   T27] 4 locks held by syz.1.514/6114:
[  258.109449][   T27]  #0: ffff888074f38ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030
[  258.119403][   T27]  #1: ffff888074f38078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x3f4/0x1030
[  258.129589][   T27]  #2: ffffffff8d37c328 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220
[  258.139671][   T27]  #3: ffffffff8c120de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x347/0x6b0
[  258.151025][   T27] 3 locks held by syz.0.515/6111:
[  258.156115][   T27]  #0: ffff888074ee8ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030
[  258.165938][   T27]  #1: ffff888074ee8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x3f4/0x1030
[  258.175718][   T27]  #2: ffffffff8d37c328 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220
[  258.185911][   T27] 
[  258.188255][   T27] =============================================
[  258.188255][   T27] 
[  258.197161][   T27] NMI backtrace for cpu 0
[  258.201491][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0
[  258.209750][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  258.220187][   T27] Call Trace:
[  258.223471][   T27]  <TASK>
[  258.226404][   T27]  dump_stack_lvl+0x168/0x230
[  258.231097][   T27]  ? show_regs_print_info+0x20/0x20
[  258.236312][   T27]  ? load_image+0x3b0/0x3b0
[  258.241060][   T27]  ? nmi_cpu_backtrace+0x1b6/0x3d0
[  258.246381][   T27]  nmi_cpu_backtrace+0x397/0x3d0
[  258.251339][   T27]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  258.257609][   T27]  ? _printk+0xcc/0x110
[  258.261780][   T27]  ? load_image+0x3b0/0x3b0
[  258.266343][   T27]  ? load_image+0x3b0/0x3b0
[  258.270981][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  258.277186][   T27]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  258.283164][   T27]  watchdog+0xe0f/0xe50
[  258.287314][   T27]  kthread+0x436/0x520
[  258.291367][   T27]  ? hungtask_pm_notify+0x40/0x40
[  258.296381][   T27]  ? kthread_blkcg+0xd0/0xd0
[  258.301047][   T27]  ret_from_fork+0x1f/0x30
[  258.305453][   T27]  </TASK>
[  258.309053][   T27] Sending NMI from CPU 0 to CPUs 1:
[  258.314704][    C1] NMI backtrace for cpu 1
[  258.314716][    C1] CPU: 1 PID: 4451 Comm: kworker/u4:14 Not tainted 5.15.189-syzkaller #0
[  258.314731][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  258.314739][    C1] Workqueue: bat_events batadv_nc_worker
[  258.314761][    C1] RIP: 0010:mark_lock+0x6e/0x320
[  258.314780][    C1] Code: 09 00 00 00 83 dd 00 41 bc 01 00 00 00 89 e9 41 d3 e4 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 22 02 00 00 <41> 8b 07 41 89 c7 41 81 e7 ff 1f 00 00 c1 e8 03 25 f8 03 00 00 48
[  258.314791][    C1] RSP: 0018:ffffc9000302f7e0 EFLAGS: 00000046
[  258.314802][    C1] RAX: 0000000000000000 RBX: ffff888026fe1dc0 RCX: 0000000000000009
[  258.314812][    C1] RDX: 0000000000000008 RSI: ffff888026fe2900 RDI: ffff888026fe1dc0
[  258.314821][    C1] RBP: 0000000000000009 R08: dffffc0000000000 R09: fffffbfff1ff6e36
[  258.314830][    C1] R10: fffffbfff1ff6e36 R11: 1ffffffff1ff6e35 R12: 0000000000000200
[  258.314839][    C1] R13: dffffc0000000000 R14: ffff888026fe2900 R15: ffff888026fe2920
[  258.314850][    C1] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  258.314861][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  258.314870][    C1] CR2: 0000200001000000 CR3: 000000002b7b8000 CR4: 00000000003506e0
[  258.314883][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  258.314890][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  258.314898][    C1] Call Trace:
[  258.314902][    C1]  <TASK>
[  258.314909][    C1]  __lock_acquire+0xd5a/0x7c60
[  258.314929][    C1]  ? mark_lock+0x94/0x320
[  258.314946][    C1]  ? verify_lock_unused+0x140/0x140
[  258.314960][    C1]  ? rcu_preempt_deferred_qs_irqrestore+0x836/0xc10
[  258.314981][    C1]  ? sync_rcu_exp_done_unlocked+0x140/0x140
[  258.314997][    C1]  lock_acquire+0x197/0x3f0
[  258.315011][    C1]  ? rcu_lock_acquire+0x5/0x30
[  258.315027][    C1]  ? rcu_lock_release+0x5/0x20
[  258.315042][    C1]  ? read_lock_is_recursive+0x10/0x10
[  258.315057][    C1]  ? __lock_acquire+0x7c60/0x7c60
[  258.315071][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  258.315089][    C1]  rcu_lock_acquire+0x2a/0x30
[  258.315104][    C1]  ? rcu_lock_acquire+0x5/0x30
[  258.315117][    C1]  batadv_nc_worker+0xc9/0x5c0
[  258.315134][    C1]  process_one_work+0x863/0x1000
[  258.315153][    C1]  ? worker_detach_from_pool+0x240/0x240
[  258.315166][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  258.315182][    C1]  ? _raw_spin_lock_irq+0xab/0xe0
[  258.315197][    C1]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  258.315212][    C1]  ? wq_worker_running+0x97/0x170
[  258.315226][    C1]  worker_thread+0xaa8/0x12a0
[  258.315239][    C1]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  258.315254][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  258.315269][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  258.315281][    C1]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  258.315300][    C1]  kthread+0x436/0x520
[  258.315311][    C1]  ? rcu_lock_release+0x20/0x20
[  258.315324][    C1]  ? kthread_blkcg+0xd0/0xd0
[  258.315336][    C1]  ret_from_fork+0x1f/0x30
[  258.315354][    C1]  </TASK>
[  258.315727][ T4308] Bluetooth: hci5: command 0x0419 tx timeout
[  258.325515][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  258.628379][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0
[  258.636341][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  258.646647][   T27] Call Trace:
[  258.649940][   T27]  <TASK>
[  258.652980][   T27]  dump_stack_lvl+0x168/0x230
[  258.657645][   T27]  ? show_regs_print_info+0x20/0x20
[  258.662916][   T27]  ? load_image+0x3b0/0x3b0
[  258.667666][   T27]  panic+0x2c9/0x7f0
[  258.671553][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  258.677179][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  258.681746][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  258.687280][   T27]  ? nmi_trigger_cpumask_backtrace+0x260/0x280
[  258.693541][   T27]  watchdog+0xe4e/0xe50
[  258.697693][   T27]  kthread+0x436/0x520
[  258.701755][   T27]  ? hungtask_pm_notify+0x40/0x40
[  258.706800][   T27]  ? kthread_blkcg+0xd0/0xd0
[  258.711373][   T27]  ret_from_fork+0x1f/0x30
[  258.715776][   T27]  </TASK>
[  258.718972][   T27] Kernel Offset: disabled
[  258.723405][   T27] Rebooting in 86400 seconds..