last executing test programs:

12m56.381152623s ago: executing program 32 (id=98):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141042, 0x0)
pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xff00, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

12m45.530011563s ago: executing program 33 (id=91):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0)
write$smackfs_load(r0, 0x0, 0xf)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = gettid()
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000002fc0)={0x84, &(0x7f0000000ac0)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000180))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$inet6_sctp(0xa, 0x1, 0x84)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='exofs\x00', 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
getpid()

12m45.439787315s ago: executing program 34 (id=104):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
socket$unix(0x1, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xc8, 0x0, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x9, 0xd, 0x5, 0xff, 0x2}, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000218bc8133e67c396e20dbffa51bdd11036541295a28d06d227cce9040000004fe113832b2a483653408f0fb61e0269604b935122114ebe600a527d988873ed881538943cfeb7a5d63c4ee9b6592422afb8602576f6fd0f4b64299f7c519917ab79e68ca7e8f9fbc4bb59e019c8b89304c9ba5e1f82d8ec10c1"], 0x1, [{0x0, 0x0}]})
syz_open_dev$cec(0x0, 0x0, 0x80200)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x1a1a01)
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"})
syz_usb_disconnect(r0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000740)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x2, 0x3}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

12m45.173111993s ago: executing program 35 (id=105):
syz_open_dev$MSR(0x0, 0xea9, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102392, 0xfffffd9e)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f000043c000/0x4000)=nil, 0x4000, 0x14)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
bind$can_raw(r1, &(0x7f00000001c0), 0x10)
recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b40)=""/167, 0xa7}], 0x1}}], 0x1, 0x40000002, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4)
sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "000000000000000e"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4004000)
r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d)

12m45.012703416s ago: executing program 36 (id=106):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x141200, 0x0)
sendfile(r0, r1, 0x0, 0x80009)
pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000000)='/}', 0x2}], 0x1, 0x7e7, 0x4, 0x19)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r3 = getpid()
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x0, 0xa4, &(0x7f00000007c0)='\xb7\x00\xf7B\xeb\x0e\xe7\x17\xfb\xba\xfd\x85\x1biD\xed>\xa4\xab\x14\xa5.\xe0\x9d\x8c\xd8\xef*b\x8f\xf0\xf4\x89@\xe2O\xc3\xf5\xf5\x90\xb4\t\x14\x80\x10\f4a\xf4\xf6\\\x88\x8f\x00\xd9\x95\xba\xc8(\b\xe2\xa3\xbeY\x17\xfb\xa9`x\x06\x99\x0e\xcaf\x85\x82\xa7\x99W2La\xdbS\xe6\xce\xc8E\xcb}\xe1\xe7L3\xb47\xf2\xce|\x0e\x19\xce Y@\xa5\xc4\xf55,\xcf\xb3\v\x94\x18\'\xf7\x0fSZ\xe6\xae\x92\x1d(\xb6\xfe\xd4\xcas\x92\xf2\xde\x92\xeb\xde\xb1U\x89\xe6\x01u\xb2\xb8\x97\xef\xa8M\xd6;\x1f\xbd(\xd5m\x92\xf7t\xc3&8\xf9\x0e\x0e'}, 0x30)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4m43.574008665s ago: executing program 8 (id=1471):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x18ff1)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00')
preadv2(r2, &(0x7f00000001c0)=[{&(0x7f0000002240)=""/148, 0x94}], 0x1, 0xd0d, 0x0, 0x0)
r3 = syz_open_dev$media(0x0, 0x1, 0x8000)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xd2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@srh={0x42, 0x6, 0x4, 0x3, 0x7, 0x78, 0x80, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}, 0x38)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [], {0x14}}, 0x28}}, 0x4041)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_vs\x00')
preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/232, 0xe8}], 0x1, 0x4, 0x5)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4)

4m43.493324823s ago: executing program 7 (id=1473):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000a0000008510000003000000180000000000000000000000000000009500000000000000184a0000ffffffff000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0xf1, &(0x7f0000000300)=""/241, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001500010000000000000000000a"], 0x48}}, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2401, @void, @value}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x44}}, 0x0)
clock_gettime(0x4, 0x0)

4m41.933461216s ago: executing program 7 (id=1474):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup(r0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0x12e, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x8, 0xffffffffffffff92, 0x0}}, 0x10)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x2, 0x80805, 0x0)

4m41.312209183s ago: executing program 7 (id=1477):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
epoll_create1(0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mq_open(&(0x7f0000000080)='$((^\x00', 0x40, 0x0, &(0x7f00000000c0)={0x0, 0xffff, 0x7})

4m39.418220794s ago: executing program 8 (id=1480):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x4000000d})
syz_emit_ethernet(0x8a, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x8f}, @window={0x3, 0x3, 0xac}, @timestamp={0x8, 0xa, 0x200, 0x8}, @sack={0x5, 0x2}, @fastopen={0x22, 0xd, "54df942f7e09586180bbb0"}, @sack={0x5, 0x6, [0x8]}, @sack={0x5, 0x1a, [0x5, 0x5, 0x10, 0x0, 0xc2, 0xfffffff7]}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0)

4m38.235134235s ago: executing program 7 (id=1483):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r2})
close_range(r0, r0, 0x2)
munlockall()
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x30)
timerfd_create(0x0, 0x80000)
r4 = syz_io_uring_complete(0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000001c0))
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x2, @empty, 0x2}, 0x1c)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x40, 0x5}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x210, r8, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x184, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ddf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1af}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x439}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x324}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x368a}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff16}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb98}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x272}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x1}, 0x80)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000740)={0xaa, 0x120})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', r4}, 0x18)
r9 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x9)
fcntl$setownex(r9, 0xf, &(0x7f0000000800))
ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000840)=<r10=>0x0)
sched_setscheduler(r10, 0x6, &(0x7f0000000880)=0x1)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000001a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000900)={0x1138, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffffd}, @NL80211_ATTR_VENDOR_DATA={0xdd, 0xc5, "3a970381c9ac55b3e197a13b9bc05002bd21b26f661844d2f57315e3b096669143d88d0822ec95f22ad9e1303f93227586586ab1ab30803c3a8f30bb1c250ba940339060aa70c4057d18243845001fd6fb55e0e75959f62922f8949b54d461b106082ae776370fcc4b8fc0826401740f1194e3142be837fdb9c2606a5adb93dcf6992529559122acaff2c5677a7f4ab17674b6b4fe28f1edc6300ad69fee244c8eebfda82eb11c8d88fded1e1cf003bc35726798023b23fb47ce96dbb096c03d3013bda2f7fec36df6a287d49e07eef7cc9dd8d15dcddd5399"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xf997}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "01bcbce81f68fc41ec79622e713c1c58c6c882bfa78d60bf4ea38f85187f70f778a2e747776e7b5b56a63e5a0664743926a156d24606b9579af16d6fe7eb03caa4117b477525474b2ef42b7ef524ff688feef7470e114387555fcd84d9707daf6b56ac8fff5e34786731df87bac2ff1a3ac06cb04b052bde464ba9fae57b5afaee4170ae0b05a197e6c6f024d6b0bd407e85f804dd4324955b4d515dd0c47d9455bf67f08c743e5d83d23e301dfbc561804efba91c5dce9fa7345d26fcb626dc13623706a99496b68ee9b02d3aa1314e4f661371c1d6abf0c328d0e662ee7ab2591a133e31704ef31ac0db19905b61a78888d275b501ee0549ac66ac07c154faf29abca4e12bd4895c84195dd4f7ae9faded24b97b5d80653c390cba58b8de9f757afbc1706faccf4b3d943e7c2f337720f9ebe478a4e8454253e3bf9d4434842ebbffa4207d7c6a4f10b7ad86ec326541129940fa6a0ccec344dac12512e6076ce6e2ec5831d60a2c6652a6be7174fe7917ac5f7097ff70132782e144dc746f8152043ea5be1a0f8eddb13a3ebd09631cdad662d9e4e6d1d67ae966aa2f1b6eebae05353f6d73dfb18158fa9d0455dd3fc5846c6ea59976a283f1152c73dbadbbd94424cc14f26af37c950f2c05e10d534a7203523854181b8f5ebf3fcf85467a379e112a8336154b9fbbadddfc14a307ea3cbfed2435b66e990a8d8f051116a6b179c03be60cc4a538d0b23af3bffc28a4b74a2dde18f3a54d88d592465e47a1e8111f004af45c15d2fa49eb6b768097733d69b812f6816e522b8c0a1a0804d5eed63f7dd4a01b13d4555834a9c88afa996f0fdc821349a3460866b051f63322fdfbb8a8f6abf94725724bfd416baccfeea5897ab9f125aebbeb6a252e68eda1615f23ceecf3561752828846b8159a11d7254b445f15b400fc4d99264288ad7497224c88203015c602f9de8baa97ab5ce3f5144682f4c83e7e05326a1ab4c134eb5483cba31d00a8820bacd72b8e166d27898f2af8f339b59d777a8a87ffd04fc3f97d08f3d03bdf0cb33470fc0f03cb733c7c544f1892629cfc8c725a9069636edbc9342c82b988acca288955679164a15b961e0a86b3f8025ecd6960cfd25f60aa60dec395a6dc567ac377c495adadb55ad2f6ac3bb885e5b95d38661dcf9babb16fd907061142496cbce76cc2908da8638c416bdaeac879815d1a88a4bb25b73d503ab00b70cebca4dd5d5ff0a32147b67715295be83353e0cb04dce1e027cbb015f827883c6243fa689a59a689e68c45d7c8b63235a9fb111fcd7b3d4355107b45c9c1ca65c5b7a9d38558a7c9c00ed81cb695eef359a0c31ff172b103913ed04e451d8d212f9125c3a3df192dd8e04bc51bcb1331282a644f884b9a0f6872652e4e4407821767d8b53893ea1bab2626d362efc5a7b6c8735e648c6bfbb2d1a87be9c82ec913bb979a90c738cf2fe7db4a6ecda2253c79c1f69c6503226ba9c627aa107579308d128bd24a6d221cd163fc9933dbb0363a15b992fc0b10e54cc684562cc18657409296594c0925bad76a9f930fbd74ab4dd6fcc1f983684207689f724d308023992bbb50d985cd5fdc016b2e53a4b1bd56913723bca6918c3267b7c10a8571ba2d9dcc367a5d795465346827efa8f68f8ed00583a25e7b77bcccc2ac69d2450aff5346c9950637dcc52058c8dc0a6daccd1d59247c8ccac7bcc68013628e3619ccecc1615c1f81f236c84b0736423cdc1afc4bf10cccba8e38041ab20e212a83aab3ab089de6abe78dbdaa8d63f9087e6400fef7c0415fb2cd72aef392048ba9afa6fe09fb37c7dfa7e5effede916d4818ee02b444886cbb836ba7ed8ccd4ba7482599212a7b714af439f01f9e4a2a17a7089c13d11bbce6164f6cf0696fbabcea6f85b6a200d78322c81bd46fbf242253cc04f0eab56c9496a19ecb16c8452175756051298be80a9d9d86aaf80129838266951c1fabe42d0a3de02ec3fa8007381a08fbb96a5447e6055d63fcc20a56748ad532544af82406d40d702d00ea40fb4ab7714532eb23db490d2d87539abe8b5c6dce6d512bee1a155b09d34dd92951ab7bb81520ad127e33dca96f4ac28af997f09e423d464ca24cc0728f72a57fd68396a49896b247d310ccd0e444cb2595ca802745e03cbc62d3866c57c9bec0273886569f89026d8aea2843e2855e2c6dce9770baffc906aff52a0d8bffc0fe6ddb92e1ce72614d0749867200bef5750c97aee4bc39e3e3b022873527206192ef5c4030fdecc6e20ceab15cb51025823049d311219db2a82c9db1e30239d2e0baed5dcc29bae45470e0106c6e3b05bfe36b11c5554bf691d1c448971f7231b6950d38e08942c8b59107d614097431ba1cf2ac0506c94fa00d6b5c8a2583194be90ae4223c7905d08fa6681c2da2ac3817f80cb1f5ae75f28c7bbc5a5e077633ea47ad46533ab008f08544afad850a30bb88ce385fa7ace07935f5e62fe004ef28c6ce6bfbbc92ab800b73b01b8602344fdc073802130e6f1396bd35a3294fca79db93162d7cbd01dcbb9b6377c5758cde815d02e36a51be330bfd8ad2199f2b182f30f48f3cf100cefafd6050c8dbdbfbb8cd9fad8901995121fb95932a42a029b7a04bca672071a05ab0eb2f2f9ec692ee5401725c9f9355badd436140b9d5292e52ce49e97c5a8d1b9c8f747081ebcfbca2a254967668bf17cd9d39b9e24de57c8d3c40c696eacbc1e4e6e14a89d8bf322109fb4629de05fdf73f83c4311b29a2a84e05dd4c7168293fcb4949a66d18eefbcfd7a90e9b722d727ee473c421ad774a363cddb9128f1225b45b878bf89a8063cdf23767bb45d1b408a92d8c434ac48488a2b3ee93e5d798f2a93a36787afdf922b5f4e098808e7ba1b106c6fe7e074d4d6bed36e9b820c444893de8db27e6aa0167596bd71638c46fb050eec63759397222907ccff210b56cd494a499c309cd7332d688944c8f6d8cd3f547b25e915d653560d0d5aa1ef2dfd95e50d76aa9dee52c0724834526c708b4eeefc6fe1844f38b74ca2a7e7dfec0c9c06d27a4c19f0dce12ef2b50b828288e346fefc7619d7114b6e37db24689cd5b2f2fefe593614a7524a9460d52f70b0743dc793500621ef5c12935c9b65aac4fa9476164fcb3c9ebb886790f1a0c42041b2a605b75ba2489bcfd7e7b829ae0b9ea32a78dbf3c9f82326f8ad7d7aa45278d3e2006d260ed10baedf8c21ce5be7cdae8a935f7c98a51f153fcfe4161be75c38520835f20359cbbc56f3fe9aaa9435d3eddf68bb843fbe0dfc265747b224c0071d322d42dfd3c18615c5c5ae772f4ba81aa4f06919919ce70f504e7f6e44dd984cc5f9174c92fc48109a0bf3f8812d629978e66ca5f7943cfe36b675495092929c9b3febf0c62e908013ee1893ecd2a7bcd475b1b285ddc33fd357c07d1da69eb8556d4b52e49c012be264d1978f06a0f6aa894014bfa164f359eaedb1df89dd058a685de2cb196954aa1be3e263aa5096f678901d47b95557ef0a6fabced097e7090b7cbfdb268121494abaa80b28606f91cfe180fbaff25bd95491fd49a9c3717241bfb7c65181d3a4bbbbd8b8fb165fd5327db5b333999f2f6ba5b6982aef6114bde45cf689e63bc253e0caa081b319d0e7f2ef7dfab56379db1678f1c077eec5440c1f420b4f36fd58b29d7a9d7f90b5385a21f35a4d3a72d106290a081fecb6ed38e344c076156cc9dd9a01e8352ffca59b42abe105d02971c61f18fd8d4a89edcb3364cb02d880430abddd3f20451b05eff2765cdc01f3903503a8ebcf1b32781cd3db8daab250eebe9dc657f02ae8e2447e704d1555e4e93daed6e381d6efb05fa36accbebf953908eb57b48753a02856a0a33d619db7068c6f3142a6c0788ac7d8c4945bfd3fcef67c47c5a3022312fc49a0fa29462ccbcd338b52175cd5bba6f2dc59e7cd8031f167a04ca8b1cab856571a10f5e2b8d43c7c4ce6c2a9afeb546d11d5d6f62a95167ab12c90f5b0effa83187ee1773d7318011c6327b8c13c9a3b7b4dd29d2b9389221794faf0cac90df4327903fca467fd05164e7f800deb472b2da239c96c413cedf6b882a33c2375ee026a00460982d5b4e63a4a3d55eea8e50e5837f9ceb42c6a44ecdb6ca345720ae162c7392fd7f52f8de45c62626de5c3b3fc72a1d7a207645f50f6640b9b91ae70c29cfaf0c05d036b5ea4c624003ee76ab86daf51e8e1cecc398d0acd4c665747a7caf5760a82698dea5122939c291ccf33cd758bcfaa6931d8ff7b463a3d4db687c43f55003c0422d68e087f7e65d0d5a2261baafe535c4a3c58c1d625c066a4314d31b86df3c0f18d42332a18ab117073759ffe9cb69016ad7dc9224ff8ac16772db5f09a30d54b4913aa012dafc5a999902ac1e81b23397cd2c988a2bd85eb7da9abf1bd80c2dbeb167d327a70d455b45ca8b86040b6002c9e54b28ba0fa6eb731693501f7c518d629976110807c67f895d299ea5d8636a9442b2548ce26efb3bba1d4e53d2e2acccba0a0bf64c41630a9b481d2757fcd0d7511aacc8fe91df126f572edcb116c6f3dbd51448ed67ee6e809c4de5a5eeba08ea16bbf42dac87098872127f7fabc598406f8888fcb124a704b3870c86f98ae3f7c38738e9f69ab45b105c0d3535500f421f3530e18db514a151e039e026c12f176fab3fce62dfaf80b04e89d3a3fcc03487235d93b2352f0e27ac1495b8588d0f25b70c95e4ed2112ca67afbf7e2cd7df653ea18cd3072646d84f71678aafe4b46bcfd7740cfd2efbcf68f2ba68540c9b8852fa589dfc34b39ede325310f74acd12588c19af54ba7058ce4dc8dacd2d64e3016e8c2d035ad5bfe5b7ca8f1b9dbda875b9398eb596fd345b1fb69f96e621557bf844974b250e7455e1754b315cd9669bea3973d1a3d5e1c8ee79bbe4c8d72fce1f7ad8b57ca8336afdbc1c9ef1279e0d72291307f2ce18caa93409935ede48014a44122f06a573b4d824cd797b6275c6a93713de973a0233da04643e51091da1e37428bdc5d1d530d2522a45b750fcd85018edb784c4ad56b07096110d91577299b57ae9baa59f3e6b76963bcd6c094e88d10d2ee4866fcfd2ac745d6ab648e749d98920c479cfc50e43dc0e248b4208137cf44f4a1c96dc0fb394f2906cab522de4cf2e5fe9abb59eb75d2ee02afee559649cb2d04f397e1a416be41b7c6f9c0aa420e6adb95924384f33b2a9c089e38b30f39fdfbadf62f30b7f20553dd0827214d327b8421bb50e524d6cc37eac815357fc72e5e4294d620e33fc982f000ea93095b99c2e5be6d44f7c85c914ffe9dec5664ccb10f952e74e497e386739a61438a89d651c6cbda20c9f9ed51033d5e4b8404eea24f4c787bbd19a33866e6b12ea9b1d7ae0582a8ad7d43b906bb6e69f74543b2c1c00b2e1e9191d208c6445c6b7075b37201193fb9f2a9efb244c4ba0463c83712cb81ebe163c2f7c3cf5914a3af6b533980e7c55cc3757552d3d80d03f743d7cd5d6dcfa4393ec5143c173eaa13108f19bfdd0bc3675c409ff18ea208fc37eaf0f37358842b41e62684e5c780b9acbc1f7fc4e13d29af9f340347b31ee9141f8782109e3b77b0a910eff2a6f5f371ae6b70950ca7dbb64d4c00ca7f67e12012387ab0e6f76a75a084bd1a6daf053302584c35ba172067dcaab888d2758844f29f4fca9afae1caaeaad156d760bc9c0218bf6b01d766ae73ce0ddf3e0a2ee3f9a99778b7442a385bf2b8b2c1a7c03665c5f7ad53cd2ed2d739a2158a586bb3ef25c"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x401}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x401}]}, 0x1138}, 0x1, 0x0, 0x0, 0x14}, 0x4003)
mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x8)
sendmsg$unix(r4, &(0x7f0000002180)={&(0x7f0000001b00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001b80)="818b6cb7d62d863a7e5230c7cffb883004af3b287d54bb0f56bbc73d2f4cc0c69f96d31712a763af81367d9419035f6f4bd080123a8cc6ad72ebcf3c4ac6cca4888506302a0b76a323805f02dd9d0d5721fa39479231473e3209831835f8e260c66a7390a19e69aba97b01eee9bc9c96bf250c624f07b4c9a681b64e85de", 0x7e}, {&(0x7f0000001c00)="046caddf8316eee94a86addce36fcf855d74a8ca883b3f576c4e427d961fcb85b111a9189bc7c4f5e2dcb26e4cb87dbf717d66ad0f17772416970e8dc768a30899b0190a4fd00161681dad684c1426c43d005d1488647b936e486056c056f59bf317596f954a", 0x66}, {&(0x7f0000001c80)="0f04e8924842a8d7a094e2c9923390d7de33ee4d6cf142a7a2ab12f8dd1feaaadc6d0dbae84efbbd81fe0111243b6d1660ad1c9b33df8532edbcf9bdc9f88b2b91a43772e0ac18e3574602b3d86ca01d344e504f79", 0x55}, {&(0x7f0000001d00)="e86a33c94f445d822204c58c7aeb07f1d362a936a542641b7dad16b037064a622fb57981c38937aa2a8cfbec74edf2d5699dff00d58491618451b86677006b8031b459ce1ab6ed2d2dc5bd", 0x4b}, {&(0x7f0000001d80)="b7b2d51387d0d647146e0de24e4feaed9930e502cf220d8a694c69f7f1", 0x1d}, {&(0x7f0000001dc0)="b533c77f1f236488e681d88dcfe5b7a0b9a04e70464ffd5612be8e2283cf6bed633425dc338752375ec0e3f3e93b39419a5e5f59039b44a26eef188f049c7cf3075b2decbbe7bf1b188add0d73e619528668707603bd898c5de0c198fbf380f56f86cd383bc56e2148d08b6db0994aa0e0edbf20c75f2ab22ba3e2492ed6a7bb40f8010eb2f2ba0208dd313ad35bfa2be866ff69d2d90c8f393f0fe18fa397fb78d9bd9a0bcf42cd69acd0c6b1e40afc7674a8aa902f70249495e24ca99ee13cb6868bac0a34901a45", 0xc9}, {&(0x7f0000001ec0)="d9bbb21484c5ed7c4463af56bb0ef59e5517d6c3d1eb936b401f7c8ca1bd6a778b8aa10da2bee2001efe73fac77370eb7f5ba60be8d378783417603f94ec649ef0d48d7a3428c3681d89cf0e04e76fc1496c7c76c5c6029e78fb", 0x5a}], 0x7, &(0x7f0000002100)=[@rights={{0x18, 0x1, 0x1, [r7, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01}}}], 0x58, 0xc004010}, 0x40)

4m38.172968187s ago: executing program 8 (id=1484):
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='loginuid\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000c273000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='ext4_request_blocks\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r6) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r7 = syz_open_procfs(r5, &(0x7f0000000140)='pagemap\x00') (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="2c0100009e173610ef171e7206de010203010902"], 0x0)
read$msr(r7, 0x0, 0x0) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, r3, 0x7, 0x0, @void}, 0x10) (async)
r8 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x4829, 0x10100, 0x1, 0x0, 0x0, r3}, &(0x7f00000003c0)=<r9=>0x0, &(0x7f0000000300)=<r10=>0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000800'], 0x2a, 0xfffffffffffffffc) (async)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async)
syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000340)=[{&(0x7f00000018c0)=""/15, 0xf}], 0x1}) (async)
io_uring_enter(r8, 0x567, 0xa1ff, 0x0, 0x0, 0x0)

4m37.365421755s ago: executing program 7 (id=1485):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000a0000008510000003000000180000000000000000000000000000009500000000000000184a0000ffffffff000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0xf1, &(0x7f0000000300)=""/241, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001500010000000000000000000a"], 0x48}}, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2401, @void, @value}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x44}}, 0x0)
setitimer(0x2, 0x0, 0x0)

4m37.269463818s ago: executing program 8 (id=1486):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r1)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
unshare(0x2040600)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x0, 0x2, 0xee14}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000, 0x20, 0x7fffffff, 0x2000000000004}, 0x0, 0x0)
connect$packet(r0, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)

4m33.519800117s ago: executing program 7 (id=1489):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
timerfd_create(0x7, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"})
r1 = syz_open_pts(r0, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040))
ioctl$TCFLSH(r0, 0x540b, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000640)=[{0x0}], 0x1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x8, &(0x7f0000000440)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)

4m33.518947287s ago: executing program 8 (id=1490):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019bc0)=""/102400, 0x19000)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0xffffffff, 0x1, 0x2, 0x8000, 0x7, 0x4, 0x1, {0x0, @in6={{0xa, 0x4e20, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x6, 0x401, 0x6, 0x3, 0x8}}, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$mixer(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x84044d1f, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff6}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcab}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7e85}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc19}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb3c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x200040d1}, 0xc1)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000)

4m32.563453763s ago: executing program 6 (id=1491):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="2b1ccaed"], 0x20)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)

4m25.499525949s ago: executing program 37 (id=1462):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8)
r1 = getpid()
prlimit64(r1, 0x5, &(0x7f0000000440)={0x4, 0xb490}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$sndmidi(&(0x7f0000000100), 0xffffffff, 0x400000)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000)
syz_clone(0x0, 0x0, 0x2710976e35b8bc97, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
process_mrelease(0xffffffffffffffff, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
ioprio_get$uid(0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r6=>r3, {0x6}}, './file0\x00'})
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000340)={0xc, <r7=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000400)={0x18, r7, 0x5, 0x0, &(0x7f0000000380)=[{0x7, 0x10001}, {0x9, 0xfffffffffffffffe}, {0x3, 0xb}, {0x7, 0x3ff}, {0x1, 0xb}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e0001000000003f"], 0x24}}, 0x0)

4m21.501432367s ago: executing program 6 (id=1494):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0xfd4, 0x0, 0x302, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x60, 0x5, "d2ef5a938826a591091fa71b98c33bf83ae8bd385ba06dd897f5ff8ff9702a27620fc3ec243d1f1a2aa1a2be726e7174f6d64da97b4d3e052d7806540a6276dc1019b73385f8331e2c8d06ce40e7744300d1eb91c78c2a5f58eeb768"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5d, 0x5, "8b6f6edc9dab2426df1daea8cad5b72d269138582b4adeccf5b4d6b5a4de41375a477c9d1a85e64593ecb86af72ebee3c8ec85842e372a80f5f2153655c2d67a575c75625fc0179704f2a606805813c686598ad4e323f0e2ce"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xef0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_MASK={0xecd, 0x5, "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"}]}]}, 0xfd4}, 0x1, 0x0, 0x0, 0x8000}, 0x80010)

4m21.326482622s ago: executing program 8 (id=1495):
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0xe6da)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000000))
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000540)={0x8})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000440)=""/139, 0x8b})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = fanotify_init(0x200, 0x0)
fanotify_mark(r3, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0)
unlink(0x0)
dup2(r3, 0xffffffffffffffff)
kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x800000}], 0x0)

4m17.294702084s ago: executing program 38 (id=1489):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
timerfd_create(0x7, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"})
r1 = syz_open_pts(r0, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040))
ioctl$TCFLSH(r0, 0x540b, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000640)=[{0x0}], 0x1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x8, &(0x7f0000000440)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)

4m17.115150246s ago: executing program 6 (id=1497):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x80000000009f9, 0x2, 0x8, 0xffffffffffffffff, 0xe40798b4ec632f73})
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
iopl(0x3)
rt_sigsuspend(0x0, 0x0)
flock(r1, 0x5)
syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r4, 0x107, 0x2, &(0x7f00000005c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, 0x10)
ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, 0x0)
syz_usb_connect(0x6, 0xadd, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xbb, 0x9c, 0x9c, 0x10, 0x17ef, 0x3054, 0x80b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xacb, 0x2, 0x4, 0x86, 0x30, 0x7, [{{0x9, 0x4, 0x67, 0x0, 0xe, 0xaa, 0xb9, 0xcf, 0x0, [], [{{0x9, 0x5, 0x6, 0x8, 0x400, 0x5, 0x69, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x1}, @generic={0xeb, 0xc1319de5a3ff4852, "d376ebbbe30cd2697e4062b975a99a65b0d0a533d2815156e0e95b99d10c97d000a385c7d24f40ed1fbf4e3d073c53e331572944a6e0b12716356f87b6f8614fb2628312fc458cf9c5763c10b9bbf9ccb4c0a941742ee6aec39cdcbafddce296731bc6cfc0ea1535d77361781b1dc5b9fe5bd14a0877c287de25ac125b243c46c734287a8ee1f9232b34576ee175f50bc3d9a91c9cbc7a80a60033b9b9bb4d30304dfa7c71d4cd95d0897e25ccd4c81777910ac3d80b864a1d5bfe53d19b6f8d38bd5ac89e530ad52275bc04cdced4c56c6d95c6ef0aa62863fbdb9b963353e4e1dd735be63043660c"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x0, 0x80, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7ff}]}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0x9, 0xd, 0x9, [@generic={0xd6, 0x22, "94421d3fae97036d2b35aac985f57da06aac9cc101ca5680e02eb04498a678b8bf51ff7c31c9dab836ec573ef5865b12a15c49cbe283230d01faaafe719901c596c2c1d3a3301ec35b3d883088477e669af7c015467ded9d8198e29c58fefe4d75b1621a48732bc471b877826ee59ae65bdb58f88740e39b6b8d0c451c3f9c4aa3a6bbbe66250d0eeaae5402e2371c076eb0565bbc5d196f64e900e30507abbf76223a5f9ea6f5f7c3d56a05d505ccddbad6272e95bcb3a67f42ca38763f9d57522caef2264e6570358e8ea0569e19233fea173e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x8, 0x0, 0x21}}, {{0x9, 0x5, 0x7, 0x2, 0x0, 0x0, 0x0, 0xb2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf5, 0x83}, @generic={0xd3, 0xa, "3df13288f29581a684b12337eb7a642f55b71ecebf378ae63a8eaaec47e1367275de3f30a25e1d63371e33533fbfa8d3d37a45ba2b2b9ccae6f3bd94ee83dfb917db8b53b9c3e930fd5cef16d32ab119303000831d9344b80ae91dcbc1cc8bece297e0c8a5e94020448a930f8541efd003f6d0083cab5c01d167e352323f0954fb0eeb65092de6137a3a112e0ba07f5ffcfbb97bd0466df611557918cdb6d6adbf1eeb4e3e23e4d5627771b24641d335949d8f3ad945af9b722ff563b6f0d3dc56179e093cf7aabf77ebe4aa8474eec5fb"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x8, 0x9, 0x2, [@generic={0xd6, 0x6, "a81784216d0429f2037893d21e17997d269d40402862691d4d4d6c0d291e8f326ed2f29e3142a74f07a318192ba8c7fc30d78d113607180368632233397467fb3952d1ffa7e946ba414054396aa7456d7b0b50eded706d171180f02b0c10415e5af1edb184fe777a498d976c0d4d722e2e4df8cef65e007e14e13c7a430e5bc731c723814139a8846e2f7b124e35ec43931aabe3661b68f674f13de1930c37322af3d4b98441cfd7548192f4a0626504a778f2f381cc95b74a71dba220db83c4eac908144b136b1f2b1732880c0cacd43be78c05"}, @generic={0x84, 0x1, "7e7333f531c249270ee8f50b6052d6ff8e0c0b1a56b550b6b68bbe29b02b68cf6d439c437cbd46e8c7b82289231aec67701a56da1a0347a6a24933de698b5278340a43d559d052a7edc4e37a6ec76431a884b8ba5bbef4aea1aded05b32f309017dc91e56a7adf8d505544980b4b59ac03c20a86c63b46248307ea98c51b46b783c7"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x7f, 0x4, 0x2}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0xde, 0x2, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x200}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x9, 0x6, 0x1d, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9f, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x4}]}}, {{0x9, 0x5, 0x5, 0x10, 0x25a5f241fe379edb, 0x4, 0xfb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x1000}, @generic={0x45, 0x30, "45348a11beeec98e93744e386c15ca6af31ced9a4b86e6b39e4a5db429acf9ed1058ee65cf1d442fd65aba3fd713900699c4f52863c57c7146daebb7b1fe57b63eca4d"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x10, 0x6, 0xd, 0x4}}, {{0x9, 0x5, 0x9, 0x8, 0x0, 0xb6, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x401}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x9, 0x6, 0x1}}, {{0x9, 0x5, 0x9, 0x4, 0x0, 0x3, 0x7, 0x3, [@generic={0x76, 0xf, "3d89197d8a42802ba91d1f021900f14b519acf2c3d28495bab6ef268cd49daf2cda0f93d9805d50e8fdb65fa9a888053a427bdd5e45c700f1afbf2ca5f03be460d3037268413fabdaaae03f7545b31454cd95c16f08f9fee85e0835eb4a26001b7e5f1fffd5c8b637963d0227012f29eff2801a7"}]}}]}}, {{0x9, 0x4, 0x4, 0x7, 0xe, 0x91, 0x1, 0xd0, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x101, 0x8}, [@feature_unit={0x13, 0x24, 0x6, 0x1, 0x5, 0x6, [0x1, 0x2, 0x6, 0xa, 0x6, 0xb], 0xcb}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x9, "6286c37850"}, @selector_unit={0x6, 0x24, 0x5, 0x2, 0x5, "d1"}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x6, 0x40, '4'}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x6, 0x6, [0x3, 0x3, 0x18, 0x8, 0x5, 0x4], 0x96}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x3, 0x1, [0x2], 0x2}]}, @generic={0x49, 0xe, "1a402023db57e1a020636b8874f400db34147785cd83f58a25ad92f3d134c725680db282b2f20951ee409d7460589f33dd5e731e493f70801954d8c4db3eff808465dc3a595b8e"}], [{{0x9, 0x5, 0xc, 0x4, 0x20, 0x10, 0x7c, 0xb4}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x20, 0x6, 0x9, [@generic={0x4e, 0x9, "1f229f73d718a1769ad55a31b59f01138a21a9313ec36e8f9a1eeedb47a52705a73ef4f617d333eda4f1640cdc97064c5772120c8ac4be67fa9ad0309031edf866e3d1e75622ceade791cb68"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x77ae}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x40, 0x9, 0x9, [@generic={0x44, 0x21, "42897bcf4a49496d6a3e5d5615ed3d7439e98515a9e9f024ad2de698f8f29c0ac47dc29dade4d3b0f1ffe481918fc6b7f05831c9f74367d575851e10b59a15711405"}, @generic={0x4f, 0x9, "a75e5eb8bfe67590327e3821c539c47a03046505079654f53746fd779b7c410a1ed0d054095833efa808a8d5cf985cdc457fc29f00035e7aa679cf3c4b1410a169eaa87ba5f335e697283bfc0c"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3d7, 0x62, 0x3, 0x4, [@generic={0x7, 0x1, "9dbda073f0"}, @generic={0x48, 0x9, "cb9e9e0808ff51a6c153c664535a83f55f00d7cc0a1d1f884c05543ffd89509f4d8fb91b72c9dcdf0a9393e595dd3940d5161c6a0187d5da94c13f31f5c7b79eef4115e5d25a"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0xdc, 0x7, 0x6}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x4, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3}]}}, {{0x9, 0x5, 0x3, 0x1d, 0x630, 0x81, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x4, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0xf9, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x58b7}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x5, 0x2, [@generic={0x1d, 0x23, "50442a679432910c74560f22ff57dbfe38fc0736ba22c0fc1b302b"}, @generic={0xd2, 0xa, "94b4386baa590ce2f487eadf631579e86977093bf4b8f4088f3e730fff77dc0d3c3350b42abb865dd332eac6c03bd3fff0ce4ff08e3c1df44c8dd7d3ca8a40876d0989de8d2c00c6364c2598f8cf3e9b9bf279ec9bddafd24d81f989d5f5c91d140b9874ad092c50a03b0b4e220d2f8097d3afd998e04f32b3166a40cb1d2e30de1dd1892af98730b8e537c4f76c57ebae95e855a5a43413cefab030a864ce4856afc86909337ab29b0e1c1dda6392085637efb8c1ad332767515b8b0cb712d326a1b2b597770dced1787e29376bc7e6"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x7c, 0x2c, 0x3}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x10, 0x0, 0x6, [@generic={0xf4, 0xe, "46704bcbfae6e245a99bceff74b3d43dd50499aa2cb64f020a2c5b3843667b517d275c540bd5c3b04ca03137acd631589aa12977b446e370fef88c4e0984abd3e923b29034d2899c07dcb32879cf2f46b3b4a883a7b480e27d6c01dd2a6519d3fe0dfc9341e1f95ddd7652cef4a49c97b9e34db75d44adaa9b75beb38a345b420484bbb4e4bf45b0741c591763562fb5999dca7be61f9e1dcccfef64231fe443f798b0d5a15bf37c50bfcad4e61ba5f52cbc9b9ffe3f55a5bbbca7a047afcae543785acffe51a875dc419ffe36f88e7c961b2304e95fc826382d2bbad1cfccdadef8349c17168542503057bb1eb3ad001836"}]}}, {{0x9, 0x5, 0x8d, 0x6, 0x3ff, 0x9, 0xc, 0x17, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}, {{0x9, 0x5, 0x9, 0xc, 0x40, 0x9, 0x5, 0x4e, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb, 0x6}, @generic={0xca, 0x30, "88481f6aaba9d2857e65ffff3af83de52192b0bc7b1b0b6a496dec98b2fe48a9a1347a794d34a097a7a2c4b882382b7cb8a4a2dd254297fecb73ccf9547def54cec49dead1b156bfe686dad5d125cd9b6f6d71e2ffb736df3ad3aef6e9e48e76d13cc05717b85a7856e192fa02277e9543e82caf4eb224a2602b94eac375ea9cb8dae4a280ccbbb91d67fce5354f7727c9a9fb9d1402ce7e5b4683117f60b7372da9e6547c3691b4e8586f627303ee26068bf571d0d25bc48b4ce5fa34760ca1099cd4ba08a97aec"}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x340, 0x4, 0xfa, 0xa0, 0x8, 0x25}, 0x30, &(0x7f0000000140)={0x5, 0xf, 0x30, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xc0, 0x9, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x7, 0x7, 0x7fff, 0x1c}, @wireless={0xb, 0x10, 0x1, 0x8, 0x61, 0x4, 0x0, 0x5, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0x94, 0x4, 0x5, 0x8}]}, 0x1, [{0xeb, &(0x7f00000003c0)=@string={0xeb, 0x3, "e2e2d5717676c40843950035ba9f2478faefbc77aac0fb45b90a0ddc4d5351add0b4455cc9e11412403140ddcd1f3a270c875514abf4e20704aee27725d778f53824663ad531001ec57120cee0ec43b430856fc310e84fa4d9a2410d50d2cc01965dd3a2422cb21bf47643e01bd553bc9c2bf01dddba9dec18d23f159ba12c97e0022dcf50ac5d8414418d5356a44b0c6269f6d7335fa90422a6bdc90bba8692950ee878337e3929a749af1bc6a4cae6435a20c2089ce7856b56b8069252523829f8d303c412264310a711dd9df1578628a40105db5634a4755d47128964d0e79d72adaeb118e82c9c"}}]})

4m13.132895501s ago: executing program 6 (id=1499):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
write$dsp(r1, &(0x7f0000002200)='D', 0x1)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000080))
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000540)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x65, 0x0, 0xffffffffffff47c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x63ca8286, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xfffffbfffffffffc, 0x10006, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xa9d5, 0x0, 0x0, 0x5, 0x0, 0x0, 0xf, 0x0, 0x0, 0xfeb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000001, 0x73fb, 0x0, 0x0, 0x0, 0x2, 0xb7a5, 0xff, 0x3, 0xfffffffffffffffc]})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002000128049000100626f6e000001040008808000"/41], 0x40}}, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000780)={'broute\x00', 0x0, 0x3, 0x0, [0x7, 0xb29, 0x8, 0x800, 0xf, 0x7f], 0x0, 0x0, 0x0}, &(0x7f0000000800)=0x78)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}})
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
r5 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000021000000000000500000000060015000200000014001680100008800c00018006000180"], 0x38}}, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000100)=0x400, 0x4)
syz_usb_disconnect(0xffffffffffffffff)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x9, 0x0, 0x16)
r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r9, &(0x7f0000000000)="25966cd2cbe02041f4ab8694005ab5e93311815c8f", 0x15)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0xffffffffffffff2d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}]}, 0x4c}}, 0x0)

4m11.147645052s ago: executing program 6 (id=1501):
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
setreuid(0x0, 0xee00)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000480)="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")
r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
r4 = syz_io_uring_setup(0x516b, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x3, 0x20000, 0x0, r3}, &(0x7f0000000400)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x2b, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff})
io_uring_enter(r4, 0xb15, 0x0, 0x0, 0x0, 0x0)
r7 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xfffffe27, 0x800)
r8 = dup(r7)
clock_gettime(0x0, &(0x7f0000000300)={<r9=>0x0, <r10=>0x0})
ppoll(0x0, 0x0, &(0x7f0000000440)={r9, r10+10000000}, 0x0, 0x0)
modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10)
ioperm(0x2, 0xf, 0x9e8f)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r11, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
modify_ldt$read(0x0, 0xfffffffffffffffd, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r6, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=fscache,\x00'])
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="186100000a00000000000000090000005123c0fff0ffffff183a000000000085000000b600"/48], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x17, &(0x7f0000000180)=""/23, 0x41100, 0x9, '\x00', 0x0, @fallback=0x2f, r8, 0x8, &(0x7f00000002c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, r8], &(0x7f0000000280)=[{0x2, 0x2, 0xc, 0xb}, {0x4, 0x4, 0x4, 0x8}, {0x1, 0x3, 0x2, 0x9}], 0x10, 0x5, @void, @value}, 0x94)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
rename(&(0x7f0000000f80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)

4m10.730296347s ago: executing program 9 (id=1502):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x4, 0x300, 0x5, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5}, 0x18)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7}, 0x18)
r8 = socket$inet(0x2, 0x1, 0x0)
fsetxattr$smack_xattr_label(r8, &(0x7f0000000280)='security.SMACK64IPOUT\x00', &(0x7f00000002c0)={'\"\xe7-#{{('}, 0x8, 0x1)
connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18)
sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0)
recvmsg$can_j1939(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, &(0x7f00000003c0)='G', 0x0}, 0x20)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4m9.951753787s ago: executing program 6 (id=1503):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000a0000008510000003000000180000000000000000000000000000009500000000000000184a0000ffffffff000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0xf1, &(0x7f0000000300)=""/241, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001500010000000000000000000a"], 0x48}}, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2401, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
setitimer(0x2, 0x0, 0x0)

4m8.839614115s ago: executing program 9 (id=1504):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019bc0)=""/102400, 0x19000)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0xffffffff, 0x1, 0x2, 0x8000, 0x7, 0x4, 0x1, {0x0, @in6={{0xa, 0x4e20, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x6, 0x401, 0x6, 0x3, 0x8}}, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$mixer(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x84044d1f, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff6}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcab}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7e85}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc19}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb3c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x200040d1}, 0xc1)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000)

4m8.238970453s ago: executing program 9 (id=1505):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0xfd4, 0x0, 0x302, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x60, 0x5, "d2ef5a938826a591091fa71b98c33bf83ae8bd385ba06dd897f5ff8ff9702a27620fc3ec243d1f1a2aa1a2be726e7174f6d64da97b4d3e052d7806540a6276dc1019b73385f8331e2c8d06ce40e7744300d1eb91c78c2a5f58eeb768"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5d, 0x5, "8b6f6edc9dab2426df1daea8cad5b72d269138582b4adeccf5b4d6b5a4de41375a477c9d1a85e64593ecb86af72ebee3c8ec85842e372a80f5f2153655c2d67a575c75625fc0179704f2a606805813c686598ad4e323f0e2ce"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xef0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_MASK={0xecd, 0x5, "a6edd385d9fb862a5f3d1dcccc50bee17a6cbba97820e02348dfe66e17e2e4780ee89d58c16cd3fc8158f227fec8e25e55e55c43fc15c5a22dd20b2c8b82b2877cd098d93474ff0c1f0c4ca53bfc79c835759998865adcd77f5562374706a4d23ce6c07a1132ba73f95ffbbaadf88bd48a402bda7b4d696c2d0ca9c1a168fa912a4259e26e4f77dcc333df97454bd321e2e9a8d723c82eb8f911100ad84ec7f5fdd763a48427400952e3f9ae2412a3009157f2383982f5392fedf37e94d8bcb0fec2b6cc5258ff763b980918ef9358066a8f3bb71fd71634cc650ddbb9a736a3be26afec4455872137270a7a4e3ec8039f2c06391b247617011385a2451dc7ba754dece6e56f7d63f1a5ea2f3df93995548fcb94480d248bc963d8463fedd77ca9b4b360271acbef92b37617fb29a0510581e991f93e985a8fe3868145993a99eb8b5841ff869698f62957943a8e2a2cadbaa1fa723903ba1ac64646b8f9935d8e914889f31ae3027d105e82df639f670d3420a938498d5be1d1f7f1b93df2fbffb2a23a9e6771a78b48364b6460da68039f392f3017cbc41ac861589e99553697bef9c18e574e26ec183d9d10a68eaf6a41d7359015efcc33b13ce7658d4a86dcec7d6c638b28b0134e477fed02b45a5b22e896e90001c94cf3c52fa927eb8351485c306cf58dbb130d9d682236455029a56b42d9fdbf7f4ff50ad267d3c3f63bc9adfb2c315accd9d88dddffba80277a8de5f1d98c75febc046c7189c7cd1db844729af8b4ed1ba35877bfb09eb75247e9b6a85ea53c5199be2982de0384524439d16476829cf32a7e8218a790331e3e15b9f439ad518af2fb1a3f1f350ed11a81407bf5f86462f73792139676da0dc94a3bc0a9d33e2be2647f7564c3dbad4fab8de2150b460fb3d4f9f6ba9b9b47e15bf59f50630a9f7a9774c2ce16e757389c786da42f23ead1676e9d5517628bab3156801b6a2fce7b4e4f85a4b479ca952abbe8674b88e82c2f6be9e0f161d5c608c7f8baccf756bcbd10e9e7e794df9db50557e561dcc4fc2b8a0b7b7d48cd6cf91f7ff99aae87cc231775b6ea2c43278d4af0691907126249a42fe50bd4554e2e02e67d216a8abacd5621b6bb6b7fe93159374ad802b196c51d5b04e1ce38acf4fc91710fe9b981b0333167e6417678f6d5fafde6c77478a43977c1a607237f4a73ed88ec9a9e07b021c8366e4ba86c2bfc9e63b711422fdc2a573858cb6360e515888919842dc6cf7dd2006ef384c17dab62db75c2d0df597c7a9f0414e02f393d8620ae65d6f33a553e90f43587d23a9df425e6fc00c8d12baf50f8439511da96eba7a7e93eb018ad2796e875f01cf3ba4a9bfe6daddedad12ee8431c87ffb6d3f432f5a669ba24202527d2ed60876943655f2b74829ef3087449c250977fd6e5356fb126f78d5e8429a5d1b3e08b66bbaed648c09a9f0ac1281c459a9784ffc2da0558e63ac49f300abc3091b141cb9a6571a6d17ed8014c44246b16c7a1d2c743374ba14fa45cf5c683ef641f8008256886ffcafcc61e185667ac366b1be438aef8bd65176a8276a14b859c43ec2c469f1fe2b97376958e2082b695c535511dd62ad9b5cd479c4eb31e067683a7d2800e3c763528853e8f2e70b8c03b6d77250a0718c65c8f09dc5a7e2357591a009db309bda290547552fccfc312749d8b2ed7a27770effbe2114be55fc95e1652558ce40b0ae175432b449e71f53f3b58b4641ed92a4f115d5035f2c4f16c328c98e9ff7905593db31bdac1c31acebc7d0993c869cbee1a13b6d78a30198834f8448965939bf85efcfbd941075c5f11e2e7d71806163ce9ef8f65dc961030c140e82a258e4113692f8911fb1e0558b908c4543168fc8e3ce9eb342cb94bb47ca729ada4140f9e7b2f677043ccbdd119a0881e0235869620de94cf4094f05ef865d5a2c8ffd0c8600eb15cac1fdaeb71ee12c3c0896d7340ccb744dced357ff68f8867ae2d8b4c9365f75294ec3e2278a464f21d262fb6d9b96ff614b22e3931437223f0cf8c3e00c9809e008646d6a38eee25a0a35baa41753e886b1a6c7fa0992a918eb4baa0cc253a4aa4b0c22a442cdadea66938d0b1f3152cb291f5b7bce6ba8fd9e1aa0aa98ed8ef3a07a520a56f12b998654ff89393f2abcef64aec085a712f7ac56a93c046c307cfcec52b62cae4eb304ed14c110b2392c1b6f87952cc2d82d686b3f416ba1e78a9f91d0fe695341b20ccf8fb378a55b0e4e87f8dc2fc6e2480a6eb9b82455d34f67c51cb8b61dd995ecb0b9dfdff590c41f7ac4938d44e5e67c3d026a1e106b115db2b745ebb40dafbaf3a946891186e8c3ed11bb60c548369920845758d11dbb0f3b4d751bed2c0b2507c30a8892b7b42f90cbf2a9d0cebf1e722f6d5f20fd7a34b1d4a1e6af26be156e6f7c1776acc239dc93303e92d0d085917d13fcf96c03f01e0a2d0bd70556b4482023c1ad959501a346afcc43b1754db91be0e402185e573cd632fe2f1c2a7a03e391385e857139260c02143221c763bf5a36ee68fc16fe16be878373114a6ebb46576d191a866982cdc7db856c8f73a30478f3c50c103b7f533d107304c5b00d5c45266f0103c9a654f9c7e7f3394252636af52641674feb73c0acb90378e4b9405ae391ce865100585c3cfea422cf9c36999f8d89a139e56be2c1fac67647dffb9153047e347260bedb446e566693cc3a4c4f1a2148d92978a247a6185ec6620452f60c13d94fba7317f7b6b77d4c2eff75f0ffa6f47ffca265fb2bc0f20787e43d469c1506b93a915aff30dba6ab11f460572d316ecfd883a2215aded9775cc579ef61473ae7580d73158241e83f6901567346c6d468f3cac0e61b6583d84916a777d37363713adffa6a106e19134df3f029423e9dd5a69044e0f68c2bfd1e63619ac6efbdcdb600b82a3c8c0c8608b818bb01c355929c270095897fc31300be23aa4690253f96fb21a8b970a2d050a7f532b552b17e1bb0bbfaf371899e31db9c9a1fe330dbeebc0967bfb0bfcf8df554b7140ebb72a3c684fa7bb1b91fe45d575bd8a9a500b17a98a59a182ed1872157433a8f0dc6535f182e96105326137fa2e19a287fd0c1f5987929fe12cd701a38a8c94b8bae5c732935c14c942df5fecf7b81c3c66f34802fbae1123d2f09e2024db1bd72b960707d0f0ce086aa54587d71ee16055bd193f467699177fa0bb41e5afd2c466634cd2950419d66f0026399f92afae66534e67491b4ca740607a675c8655da81545ecb6a980ce738782ca0b66d604687a68d6ced7b1d711cd6a22506b06daefcbc7d30c8f2f933044a62c89b64096c4f8d93bf34446fecd7c3ee19225c294e76205c9e940b4d3fab6b3f1d043c8268be77a2dc4ee2cbad538f878ba059636d1478a764f7c790a1f6b15d5527dd1aa684e307ba20a670b256c145d411c67e8e52463fe8b0bba5fd82c3ddc57c6544e58a42b4d270021cf62b5897e74d93301686b449292518ca2d2dc0ddb0dca675f9c9bf6b8a027d9e41c30649f8e4d05330dabcb17522a71576a0d1aab4506bbe63fd3684bc4eb65637452d4909797a336ff2ec483ebaa7fc867da0e5eaa1a6ed67c00d95cc4d017bed985ef886499902f6ae3179ae1a062a6c20bfa34fd01ed7c06d2a6a0dbf7753779958be31138a834c4410e1b0829b68b4e6e82e411c1a231b237d93af89ec107c2a9560c9fd08d150fc8c39a221ea9cad70692d669759926062231f03409aeddf738aab42b127265fc3277bf0ecb7a58b7f39c5a0380e54404975832908bf8758028232e805431273d047541012b8a2a1e261a380787bc9d287c1f8597447c6d3038d4230f0d2905bc7454e7481a81bb6d9481260884cc63ed57174dfa52023c6250c1629211c922c240527ba32bd99303f08dbbfb66f6aa33bf1653ccfc329038e13e71ee7f95b9bc8332807a5b0bc89997d2878231b02307b1146d0d15989285e7e436f77365fa74d8740282862cabecdf84aef3f65d568eaf734745c2c29fd5dbedfc72aecf6025775323bfe8e80be1ddee09650f4ebd90a5e5028271cb2e855a22a13f1efdf897f704f29b3a2c3807c50ce005cacb738a34af383be6d92dd0dead08aedec3313b5c0ef899c4c8226579f2a61af126eae065194696b0928c162225fcc50a5bc51fcc7a54c1b01f38ca3654ace4d0fb062006307885582a47a65d17ac6dca2ca3ff3e45f8d65c286723f42ab466c723b4ed369229c564c566f4560d4b3baecb9dbb67cd66ca735c2197883613d063cc317102bc04860a36feff185dded8535fdbdea7ada16f874c1acc66bd863832cdfe6de7d059809c2a6e7e23064760b543188e5c53b6ce89b87b7e93b2e1f16ec2f2866b81242a6c7a48dc517f12fbf9295af259c6c561c71a3cacf07723033e84ff339db3181f254c6c5eb66e859118463ddc5529c0bcf24a32f883a8cccbadf569f97143c9d2a2e905cde74d718995fa3656a1cf80e8ae9dab29cb13aa1a9c4ada13e20ceae01f0c41b7e16d13dec335fb3bfe8011604d4be0faa90637ce674c0e0ce90762f392c7d1e22042f47d61f5facee3a062873f13015e4923712206f032c6213e7a02852a1fafcea855d6e92d2fe764f590e53fbd7d5a90b010cc20e2c03503aa5de2b2f8ec59bab6c678019af935f643cd30003455250950556694e07857ee3d44f5dbf48c439099cc8351488a62c2cf1864124797f2ff591edc2d29206fa5aa4e08d0c62acc3ff64503ca919532e8d7345ff3ff7e496a0d6a79f2a36d1a18bd93b1a457432deb7255a298f84172761e2d731aede5f4214df0c7414b5dfef0c236e64594d01aeccaa03021986a427d73c65fff5ed5d542963167d6ec88d5c9f91543ab3e637717b79648e9fc60416715ccc3d81aee1fa5ead2232d80c69110f102933b6bd13b1d4a4556bc5fd40501dba2ad1fcacfa6ff1048cf48d5703f6e1bec59605cf3d00b51d25ff5483b8ed519d84edab78f99a274c356fdd40d94f0ab9c5177cbc39f708d752b17e6029caf686c0df1fbb322ae67ab976307bb0f767ed9156a57eaa23cb5be2f8338efa6ade703911e4318707e550083b70635b0f4ec847d39793bee004a84bd97cad4883d0c64c164f25da30253c6b8dffc12a7feed5d3e86f2fe969738e5cdc9de7204c7ca1d1b0dbf23b9eb61aa987087562942dfaec9ad895c090a68aea60a69c9aa42a780b09ec10373cddecc1f03241ed5d3919e22da383b274465923a8131eed2ac9f5adc6dd7eb63ee3abac4ddd93ffe047f24e2103469a48e3b7bfa796b6d2bcae1ae04ed6e6464e3da15e34c26594548cbae45961598a6e46099eeb"}]}]}, 0xfd4}, 0x1, 0x0, 0x0, 0x8000}, 0x80010)

4m8.009808899s ago: executing program 9 (id=1506):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000462000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/187, 0xbb, 0x0, &(0x7f0000000400)=""/202, 0xca}, &(0x7f0000000180)=0x40)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000000)=0x400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400002}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)=@in6={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="4a9e6e5f4cbbc8f0b83137a670a04bab357fcb570af2e6a694c12bf301ae6e1ec4758c0361c1b250170c848083febbc5b59ca2d24665682374b8dbdbd10420d24cc37a02aedc01a150fb652b128b5ac70298f1027c2cb835", 0x58}, {&(0x7f00000001c0)="812c138e3e8e3056483903a23b9cf02ae99f26278c5369a07840ade31803b9ef77798a", 0x23}], 0x2, &(0x7f00000009c0)=[{0xe0, 0x118, 0x2, "79f97a4ca10df993867bdca5cf50760f0b1167ce0347359b4289b47833a7247aff4ef6313998a87e455ba9a1e8fa4f92c04d4816ce62bb9f377bd1c9e5c01798d9cb537470bec4d700c67f47aee25316a0ae2f544e9b46c451bcc53c08b4e51473908f87b7d3ab255b9f3f104ad06436b82e0eb8013553cc1921746327cee58128b3ce6b191e6870c8db139ea1bf4dcaeb387fdfa94a006576bb80745cd432fcbc197eb9bdf1decb77718649b044250ce44365047f4e8663da6b2a55bbcd0ca14d2085a6b0326d6e82b8e7873f"}, {0xc0, 0x10f, 0x3, "4986c74da0eb71a2e093e7f7123edf2e719633521dc7f2c7f73c364ef26f98fcf57b72784256c4b2d5df44d8783183f722f539931ed82d215e9f7a1c8d3c124ca0dd6b16001f25175be461f058cb681ac86b89b3597e7528b076d8bc6872ccffc1469293d2995d391093d8d0abf18ffc9c15959164dd3f9a300b67af9f2eb409f0dfa78804afc0a4336f3dbc7411db4d3fdec9dd2f3f0f82d42048bc6b00a9c938eef657f9be51ac35bd85"}], 0x1a0}, 0x80)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
close(0xffffffffffffffff)
pwrite64(r4, &(0x7f0000000140)='}', 0x1, 0x400)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0xe, 0x0, &(0x7f0000000240)="01ba2b58d39e065db21a8652abc1", 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

4m5.549900634s ago: executing program 39 (id=1495):
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0xe6da)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000000))
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000540)={0x8})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000440)=""/139, 0x8b})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = fanotify_init(0x200, 0x0)
fanotify_mark(r3, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0)
unlink(0x0)
dup2(r3, 0xffffffffffffffff)
kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x800000}], 0x0)

4m3.120963441s ago: executing program 9 (id=1508):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$vbi(&(0x7f0000000600), 0x1, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x3)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'})
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000003c0)={0xc, @capture={0x1000, 0x0, {0x9, 0x4}, 0xd, 0x6}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00'})
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESOCT=r0], 0x0)

4m1.805334395s ago: executing program 9 (id=1509):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket(0x2, 0x3, 0x5)
setsockopt$inet_int(r1, 0x0, 0x6, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0xc, @local}, 0x10)
recvfrom$unix(r1, 0x0, 0x14, 0x120, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x17}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x84, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320)

3m54.108202819s ago: executing program 40 (id=1503):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000a0000008510000003000000180000000000000000000000000000009500000000000000184a0000ffffffff000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0xf1, &(0x7f0000000300)=""/241, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001500010000000000000000000a"], 0x48}}, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2401, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
setitimer(0x2, 0x0, 0x0)

3m46.101305451s ago: executing program 41 (id=1509):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket(0x2, 0x3, 0x5)
setsockopt$inet_int(r1, 0x0, 0x6, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0xc, @local}, 0x10)
recvfrom$unix(r1, 0x0, 0x14, 0x120, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x17}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x84, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320)

41.259926929s ago: executing program 4 (id=1830):
r0 = socket(0x200000000000011, 0x2, 0xd)
r1 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x86, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)

41.084904405s ago: executing program 4 (id=1833):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
syz_emit_ethernet(0x172, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6c807dc6013c21b3"], 0x0)

40.89511546s ago: executing program 4 (id=1838):
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={0x0, 0x60}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

40.700638717s ago: executing program 4 (id=1844):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0x0)

40.482202421s ago: executing program 4 (id=1849):
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
mount$bind(&(0x7f0000000100)='\x00', 0x0, 0x0, 0x40000, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_restrict_self(r2, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x21, 0x0)
symlinkat(&(0x7f0000000300)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00')
readlinkat(r1, 0x0, 0x0, 0x0)

40.038148575s ago: executing program 4 (id=1858):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002019})
epoll_wait(r1, &(0x7f0000000340)=[{}], 0x1, 0xfffffffe)

39.752042895s ago: executing program 42 (id=1858):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002019})
epoll_wait(r1, &(0x7f0000000340)=[{}], 0x1, 0xfffffffe)

8.143423855s ago: executing program 3 (id=2161):
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r0, 0x0, 0x4000000a, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

7.922180945s ago: executing program 0 (id=2166):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xb, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet(0x2, 0x801, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
sched_setscheduler(0x0, 0x2, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
fcntl$getownex(r2, 0x10, &(0x7f0000000540))
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(r3, &(0x7f00000004c0)={0x2, 0x4e21, @private=0xa010101}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xe0)
sendmsg$inet(r1, 0x0, 0x800)

7.84359408s ago: executing program 5 (id=2167):
io_setup(0x401, &(0x7f00000001c0)=<r0=>0x0)
io_pgetevents(r0, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0)

7.536915192s ago: executing program 2 (id=2168):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001040)={r0, &(0x7f0000000f40), &(0x7f0000000f80)=""/130}, 0x20)
process_vm_readv(0x0, &(0x7f0000000140), 0x100000000000028b, 0x0, 0x12, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
vmsplice(r2, &(0x7f0000000140), 0x253, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r3=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r3, 0x4)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
setrlimit(0x40000000000008, &(0x7f0000000000))
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r5, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)

6.09483542s ago: executing program 0 (id=2169):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0)

6.094445729s ago: executing program 1 (id=2170):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db)
setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0)

6.094111147s ago: executing program 5 (id=2171):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

6.093843911s ago: executing program 2 (id=2172):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x18ff1)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00')
preadv2(r2, &(0x7f00000001c0)=[{&(0x7f0000002240)=""/148, 0x94}], 0x1, 0xd0d, 0x0, 0x0)
r3 = syz_open_dev$media(0x0, 0x1, 0x8000)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xd2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@srh={0x42, 0x6, 0x4, 0x3, 0x7, 0x78, 0x80, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}, 0x38)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x4041)
r5 = syz_open_procfs(0x0, 0x0)
preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/232, 0xe8}], 0x1, 0x4, 0x5)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4)

6.009286787s ago: executing program 0 (id=2173):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
write(r2, &(0x7f0000000180)="01", 0x1)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

5.961040642s ago: executing program 1 (id=2174):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019bc0)=""/102400, 0x19000)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0xffffffff, 0x1, 0x2, 0x8000, 0x7, 0x4, 0x1, {0x0, @in6={{0xa, 0x4e20, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x6, 0x401, 0x6, 0x3, 0x8}}, &(0x7f0000000780)=0xb0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$mixer(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x84044d1f, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x12c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff6}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcab}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7e85}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc19}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x200040d1}, 0xc1)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000)

5.947132891s ago: executing program 5 (id=2175):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(0xffffffffffffffff, 0x0, 0x4000000)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20040080)

5.292448257s ago: executing program 0 (id=2176):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002c80)={0x28, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff41, 0x6}}}}, [@NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040880}, 0x8000)
r3 = syz_genetlink_get_family_id$ethtool(0x0, r1)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0xf14, r3, 0x302, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x60, 0x5, "d2ef5a938826a591091fa71b98c33bf83ae8bd385ba06dd897f5ff8ff9702a27620fc3ec243d1f1a2aa1a2be726e7174f6d64da97b4d3e052d7806540a6276dc1019b73385f8331e2c8d06ce40e7744300d1eb91c78c2a5f58eeb768"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5d, 0x5, "8b6f6edc9dab2426df1daea8cad5b72d269138582b4adeccf5b4d6b5a4de41375a477c9d1a85e64593ecb86af72ebee3c8ec85842e372a80f5f2153655c2d67a575c75625fc0179704f2a606805813c686598ad4e323f0e2ce"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb, 0x5, "5ab2f234507ae4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_MASK={0xe04, 0x5, "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"}]}]}, 0xf14}, 0x1, 0x0, 0x0, 0x8000}, 0x80010)

5.278336005s ago: executing program 1 (id=2177):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x846)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44050)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.27159402s ago: executing program 5 (id=2178):
ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0)
unshare(0xe000480)
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = syz_clone(0x20002000, &(0x7f0000000240)="c6fad681adf264079347f4fc6ca4e86b1b1be4291169215722bb9ddb054174c637cee40e0355888cc054c14a7aa58e0db4ddb34784374d8b4ec913261f3bfa8683e7f977cdb086a56b8bdee6e6abcba276c5b2a1e9c5c90620c53328a61b0c883f6524ef605cafeb885d20d0e55b9c030ee7cc1e5e9cc5ed709d1b3aa9d051088aac2fd93695869d83169fbc", 0x8c, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000300)="f4befcc638b2dd2858176502030fab990cfcd12372221fe30f7030c5ea9b46af97fe5f9f6b5f18a29b2f5eda85a97a702653f2711450dd9fd4c0de3aa6847b2844bcf94c2d760185aa78f62e678a3dfde0beda7f6839a0eb0ebdbbbf6dac02d7de052cae9a754bb256741c255edd50de5c3731abb1e517153e4e732d6c749d4a8ce3532ef9c25daac99f34933b007084df0a4b9ecddf52828589fe2c3e05ef2a4340eacf7426b7f7fa10e594143d1493f4d9ae1503ad3652c05a1b449a6c4c454a86bcf90bcd1815ca0d4585cc")
sched_setscheduler(r0, 0x6, &(0x7f0000000080)=0x6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000100), 0x4)

5.095664729s ago: executing program 1 (id=2179):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x4, 0x300, 0x5, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18)
socket$inet(0x2, 0x1, 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r5, 0xffffffffffffffff, 0x0)

4.897005883s ago: executing program 3 (id=2180):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r1, 0x65, 0x1, 0x0, 0x0)
bind$can_raw(r1, &(0x7f00000001c0), 0x10)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
iopl(0x3)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f00000003c0)={0x10001, 0x3, 0x4, 0x70000, 0x1, {0x0, 0x2710}, {0x1, 0x0, 0x80, 0xff, 0xf7, 0x80, "aebf3992"}, 0x7, 0x4, {}, 0xfffffffa})
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x6)

4.13430791s ago: executing program 1 (id=2181):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xb, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet(0x2, 0x801, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
sched_setscheduler(0x0, 0x2, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
fcntl$getownex(r1, 0x10, &(0x7f0000000540))
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(r2, &(0x7f00000004c0)={0x2, 0x4e21, @private=0xa010101}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xe0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000580), 0x4)

4.014007s ago: executing program 0 (id=2182):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200040d1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bca)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
get_robust_list(0x0, 0x0, &(0x7f00000037c0))
mq_notify(0xffffffffffffffff, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x45, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dff")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40015)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10)
sendmsg$can_raw(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xff, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x20000080}, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = open(&(0x7f0000000340)='./file1\x00', 0x8040, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000240)='autofs\x00', &(0x7f0000000280)='./file0\x00', r4)
ioctl$TIOCSTI(r5, 0x5412, 0x0)
memfd_create(0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)

3.825069897s ago: executing program 5 (id=2183):
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write(r0, &(0x7f0000000000)='\"', 0xfdef)

3.824744063s ago: executing program 3 (id=2184):
openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
pipe(&(0x7f0000001780))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00')
getdents64(r3, &(0x7f0000000140)=""/53, 0x35)
getdents64(r3, &(0x7f0000001240)=""/4147, 0x1033)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4)
prctl$PR_SET_TSC(0x1a, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071101a00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

3.044775361s ago: executing program 1 (id=2185):
syz_usb_connect(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd1, 0xa8, 0xd3, 0x10, 0x4da, 0x390d, 0x3d96, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc2, 0x0, 0x2, 0xb4, 0x53, 0x4b, 0x0, [], [{{0x9, 0x5, 0xd, 0x2, 0x200, 0x3, 0x7, 0x1}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x9, 0x9, 0x9}}]}}]}}]}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00')
read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020)
syz_io_uring_setup(0x4a57, &(0x7f0000000080)={0x0, 0x95a7, 0x8, 0x1, 0x2dc, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000140))
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3}, 0x6)
write(r1, &(0x7f0000000100)="52000300", 0x4)

1.615503828s ago: executing program 3 (id=2186):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
unshare(0x2040600)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x0, 0x2, 0xee14}, 0x0, 0x0, 0x0, 0x0)
connect$packet(r0, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)

1.437110383s ago: executing program 2 (id=2187):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019bc0)=""/102400, 0x19000)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0xffffffff, 0x1, 0x2, 0x8000, 0x7, 0x4, 0x1, {0x0, @in6={{0xa, 0x4e20, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x6, 0x401, 0x6, 0x3, 0x8}}, &(0x7f0000000780)=0xb0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$mixer(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x84044d1f, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x12c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff6}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcab}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7e85}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc19}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x200040d1}, 0xc1)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000)

1.321813321s ago: executing program 5 (id=2188):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="620ac4ff0000000071103400000000009500000000000000a152f74b4917824cb5c370c795731ae8de7ee279345153b6a40f36b8e3a9479e4f1c63e69074494ae34b8d6da8b7e8702ede650ed8aa259b5736c3af9ffd564f71a127d451c2139d545badd9e129baba584cfb60a633c72fba8559c380d338ee9dab5d1288f41b"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000005f90000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000057030000ffffffff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.268316517s ago: executing program 2 (id=2189):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @remote, 0x6}, 0x1c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000068000100430000000000008000000000000000002400020001"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x100440c0)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

235.329483ms ago: executing program 2 (id=2190):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b80)=ANY=[@ANYBLOB=' \x00\x00J'], 0x20}, 0x1, 0x0, 0x1c00}, 0x0)

180.008574ms ago: executing program 0 (id=2191):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r1 = io_uring_setup(0x5b77, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x400000, 0x137})
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
close_range(r1, r1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r3 = inotify_init1(0x0)
r4 = inotify_add_watch(r3, &(0x7f0000000300)='./file0\x00', 0x85000101)
r5 = dup(r3)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x20000014)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x9, 0x20, 0xfffffffb}, {0xb3a, 0x4, 0x29, 0x401}, {0x8, 0x3, 0x4, 0x8}]})
inotify_rm_watch(r5, r4)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703350000001f030000ef000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r9, 0x40086602, &(0x7f0000000000))
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[], 0xb8}}, 0x4004)
r10 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x1b, 0x3}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x38, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xf6, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
geteuid()
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'})

109.201286ms ago: executing program 3 (id=2192):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, 0x0)

31.865689ms ago: executing program 2 (id=2193):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10)
getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=<r3=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3])
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

0s ago: executing program 3 (id=2194):
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000001dc0)={{0x12, 0x1, 0x200, 0xc4, 0xad, 0x6b, 0x40, 0x856, 0xac30, 0xd21d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x2, 0x0, 0xf7, [{{0x9, 0x4, 0x6c, 0x9, 0x1, 0x96, 0x79, 0x5c, 0x7, [], [{{0x9, 0x5, 0x81, 0x3, 0x3ef, 0x6, 0xe, 0x7}}]}}]}}]}}, 0x0)
syz_usb_disconnect(r0)

kernel console output (not intermixed with test programs):

(slave bond_slave_1): Releasing backup interface
[  722.887114][   T35] bond0 (unregistering): Released all slaves
[  724.316091][T12070] chnl_net:caif_netlink_parms(): no params data found
[  724.347937][T12087] chnl_net:caif_netlink_parms(): no params data found
[  726.021602][    C1] net_ratelimit: 6891 callbacks suppressed
[  726.021621][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.040217][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.053048][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.065837][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.078646][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.091419][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.104197][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.116988][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.129500][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.142296][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  729.962712][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  729.972800][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  729.980772][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  729.998155][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  730.008132][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  730.016458][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  731.031614][    C1] net_ratelimit: 8183 callbacks suppressed
[  731.031635][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.050216][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.062967][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.075707][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.088528][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.101322][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.113828][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.126604][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.139476][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.152157][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  732.101981][ T5842] Bluetooth: hci3: command tx timeout
[  733.809113][ T5136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  733.818729][ T5136] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  733.827068][ T5136] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  733.837756][ T5136] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  733.858075][ T5136] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  733.867457][ T5136] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  734.182089][ T5136] Bluetooth: hci3: command tx timeout
[  735.941814][ T5136] Bluetooth: hci5: command tx timeout
[  736.041631][    C1] net_ratelimit: 8186 callbacks suppressed
[  736.041647][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.059992][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.072865][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.085645][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.098369][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.111106][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.123459][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.136215][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.148570][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.161096][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.261917][ T5136] Bluetooth: hci3: command tx timeout
[  738.023162][ T5136] Bluetooth: hci5: command tx timeout
[  738.341829][ T5136] Bluetooth: hci3: command tx timeout
[  740.101735][ T5136] Bluetooth: hci5: command tx timeout
[  741.021116][   T35] tipc: Left network mode
[  741.052237][    C1] net_ratelimit: 7858 callbacks suppressed
[  741.052254][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.070635][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.083466][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.096256][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.109078][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.121657][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.134372][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.146937][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.159274][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.172029][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.621203][T12093] chnl_net:caif_netlink_parms(): no params data found
[  741.841861][T12087] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.848974][T12087] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.857649][T12087] bridge_slave_0: entered allmulticast mode
[  741.865928][T12087] bridge_slave_0: entered promiscuous mode
[  742.013558][T12070] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.045007][T12070] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.069579][T12070] bridge_slave_0: entered allmulticast mode
[  742.088531][T12070] bridge_slave_0: entered promiscuous mode
[  742.181879][ T5136] Bluetooth: hci5: command tx timeout
[  742.487081][T12087] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.502813][T12087] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.521783][T12087] bridge_slave_1: entered allmulticast mode
[  742.535296][T12087] bridge_slave_1: entered promiscuous mode
[  742.581966][T12070] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.596132][T12070] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.620867][T12070] bridge_slave_1: entered allmulticast mode
[  742.631931][T12070] bridge_slave_1: entered promiscuous mode
[  742.837644][   T35] hsr_slave_0: left promiscuous mode
[  742.850638][   T35] hsr_slave_1: left promiscuous mode
[  742.857611][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  742.865429][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  742.875185][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  742.882934][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  742.926146][   T35] veth0_macvtap: left promiscuous mode
[  742.947232][   T35] veth1_vlan: left promiscuous mode
[  742.956428][   T35] veth0_vlan: left promiscuous mode
[  744.160104][   T35] team0 (unregistering): Port device team_slave_1 removed
[  744.263175][   T35] team0 (unregistering): Port device team_slave_0 removed
[  745.601394][T12087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  745.951055][T12070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  746.033776][T12087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  746.062401][    C1] net_ratelimit: 6179 callbacks suppressed
[  746.062418][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.081096][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.093863][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.106688][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.119496][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.132324][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.145162][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.158008][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.170953][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.183814][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.316590][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  746.330780][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  746.339374][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  746.348052][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  746.355929][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  746.363535][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  746.694970][T12087] team0: Port device team_slave_0 added
[  746.884460][T12087] team0: Port device team_slave_1 added
[  747.015964][T12093] bridge0: port 1(bridge_slave_0) entered blocking state
[  747.030294][T12093] bridge0: port 1(bridge_slave_0) entered disabled state
[  747.040449][T12093] bridge_slave_0: entered allmulticast mode
[  747.056058][T12093] bridge_slave_0: entered promiscuous mode
[  747.080277][T12093] bridge0: port 2(bridge_slave_1) entered blocking state
[  747.101787][T12093] bridge0: port 2(bridge_slave_1) entered disabled state
[  747.112520][T12093] bridge_slave_1: entered allmulticast mode
[  747.133529][T12093] bridge_slave_1: entered promiscuous mode
[  747.396995][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  747.403447][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  747.651237][T12087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  747.669472][T12087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  747.705136][T12087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  747.729527][T12087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  747.748429][T12087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  747.781769][T12087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  747.840268][T12093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  747.951247][T12093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  748.011939][T12112] chnl_net:caif_netlink_parms(): no params data found
[  748.029094][T12108] chnl_net:caif_netlink_parms(): no params data found
[  748.149926][T12093] team0: Port device team_slave_0 added
[  748.245676][T12087] hsr_slave_0: entered promiscuous mode
[  748.260702][T12087] hsr_slave_1: entered promiscuous mode
[  748.267893][T12087] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  748.275954][T12087] Cannot create hsr debugfs directory
[  748.295287][T12093] team0: Port device team_slave_1 added
[  748.421747][ T5136] Bluetooth: hci2: command tx timeout
[  748.635744][T12093] batman_adv: batadv0: Adding interface: batadv_slave_0
[  748.663873][T12093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  748.771032][T12093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  748.850254][T12093] batman_adv: batadv0: Adding interface: batadv_slave_1
[  748.857448][T12093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  748.921787][T12093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  749.346577][T12112] bridge0: port 1(bridge_slave_0) entered blocking state
[  749.354057][T12112] bridge0: port 1(bridge_slave_0) entered disabled state
[  749.361258][T12112] bridge_slave_0: entered allmulticast mode
[  749.368986][T12112] bridge_slave_0: entered promiscuous mode
[  749.457418][T12108] bridge0: port 1(bridge_slave_0) entered blocking state
[  749.470834][T12108] bridge0: port 1(bridge_slave_0) entered disabled state
[  749.493987][T12108] bridge_slave_0: entered allmulticast mode
[  749.513008][T12108] bridge_slave_0: entered promiscuous mode
[  749.581390][T12112] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.591250][T12112] bridge0: port 2(bridge_slave_1) entered disabled state
[  749.605686][T12112] bridge_slave_1: entered allmulticast mode
[  749.626889][T12112] bridge_slave_1: entered promiscuous mode
[  749.718039][T12108] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.732417][T12108] bridge0: port 2(bridge_slave_1) entered disabled state
[  749.750246][T12108] bridge_slave_1: entered allmulticast mode
[  749.760388][T12108] bridge_slave_1: entered promiscuous mode
[  749.914243][T12093] hsr_slave_0: entered promiscuous mode
[  749.920878][T12093] hsr_slave_1: entered promiscuous mode
[  749.933515][T12093] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  749.941153][T12093] Cannot create hsr debugfs directory
[  749.982338][T12112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  750.003417][T12112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  750.105296][T12133] chnl_net:caif_netlink_parms(): no params data found
[  750.198122][   T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  750.220195][   T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.260791][T12108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  750.363522][T12108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  750.487798][   T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  750.502498][ T5136] Bluetooth: hci2: command tx timeout
[  750.520216][   T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.605778][T12112] team0: Port device team_slave_0 added
[  750.626146][T12112] team0: Port device team_slave_1 added
[  750.684057][T12108] team0: Port device team_slave_0 added
[  750.807733][   T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  750.835868][   T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.983379][T12108] team0: Port device team_slave_1 added
[  751.071717][    C1] net_ratelimit: 6329 callbacks suppressed
[  751.071734][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.090169][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.102839][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.115529][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.128144][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.140635][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.154668][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.155650][   T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  751.167312][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.189720][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.191025][   T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  751.202347][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.270962][T12112] batman_adv: batadv0: Adding interface: batadv_slave_0
[  751.291865][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  751.350242][T12112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  751.416185][T12108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  751.423752][T12108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  751.465746][T12108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  751.511865][T12112] batman_adv: batadv0: Adding interface: batadv_slave_1
[  751.525131][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  751.565425][T12112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  751.926041][T12108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  751.943530][T12108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  751.983462][T12108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  752.305150][T12133] bridge0: port 1(bridge_slave_0) entered blocking state
[  752.323205][T12133] bridge0: port 1(bridge_slave_0) entered disabled state
[  752.342268][T12133] bridge_slave_0: entered allmulticast mode
[  752.360081][T12133] bridge_slave_0: entered promiscuous mode
[  752.415500][T12112] hsr_slave_0: entered promiscuous mode
[  752.436103][T12112] hsr_slave_1: entered promiscuous mode
[  752.450618][T12112] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  752.471641][T12112] Cannot create hsr debugfs directory
[  752.591156][ T5136] Bluetooth: hci2: command tx timeout
[  752.639546][T12133] bridge0: port 2(bridge_slave_1) entered blocking state
[  752.647038][T12133] bridge0: port 2(bridge_slave_1) entered disabled state
[  752.655632][T12133] bridge_slave_1: entered allmulticast mode
[  752.663221][T12133] bridge_slave_1: entered promiscuous mode
[  752.846285][T12133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  752.870139][T12108] hsr_slave_0: entered promiscuous mode
[  752.877894][T12108] hsr_slave_1: entered promiscuous mode
[  752.884774][T12108] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  752.893806][T12108] Cannot create hsr debugfs directory
[  752.938311][T12133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  753.016721][   T35] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.168497][   T35] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.203634][T12133] team0: Port device team_slave_0 added
[  753.292228][T12133] team0: Port device team_slave_1 added
[  753.357825][   T35] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.642033][   T35] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.694175][T12133] batman_adv: batadv0: Adding interface: batadv_slave_0
[  753.709981][T12133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  753.750640][T12133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  753.994655][T12133] batman_adv: batadv0: Adding interface: batadv_slave_1
[  754.011809][T12133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  754.068961][T12133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  754.270380][T12133] hsr_slave_0: entered promiscuous mode
[  754.282861][T12133] hsr_slave_1: entered promiscuous mode
[  754.297482][T12133] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  754.311982][T12133] Cannot create hsr debugfs directory
[  754.671887][ T5136] Bluetooth: hci2: command tx timeout
[  754.698090][   T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.817717][T12087] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  754.848834][T12087] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  755.216876][   T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.289602][T12087] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  755.320766][T12087] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  755.418411][   T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.585028][   T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.081826][    C1] net_ratelimit: 6906 callbacks suppressed
[  756.081844][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.100416][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.113313][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.126069][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.138829][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.151636][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.157809][T12087] 8021q: adding VLAN 0 to HW filter on device bond0
[  756.164306][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.183033][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.190467][T12087] 8021q: adding VLAN 0 to HW filter on device team0
[  756.195710][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.214494][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.221174][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state
[  756.233540][ T6340] bridge0: port 1(bridge_slave_0) entered forwarding state
[  756.295533][   T35] bridge_slave_1: left allmulticast mode
[  756.301199][   T35] bridge_slave_1: left promiscuous mode
[  756.320187][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  756.343673][   T35] bridge_slave_0: left allmulticast mode
[  756.349349][   T35] bridge_slave_0: left promiscuous mode
[  756.371923][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.404321][   T35] bridge_slave_1: left allmulticast mode
[  756.409989][   T35] bridge_slave_1: left promiscuous mode
[  756.431871][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  756.460780][   T35] bridge_slave_0: left allmulticast mode
[  756.475979][   T35] bridge_slave_0: left promiscuous mode
[  756.491256][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.515918][   T35] bridge_slave_1: left allmulticast mode
[  756.530256][   T35] bridge_slave_1: left promiscuous mode
[  756.540392][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  756.572049][   T35] bridge_slave_0: left allmulticast mode
[  756.577750][   T35] bridge_slave_0: left promiscuous mode
[  756.609446][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.635196][   T35] vlan2: left promiscuous mode
[  756.639984][   T35] bond0: left promiscuous mode
[  756.651775][   T35] bond_slave_0: left promiscuous mode
[  756.662582][   T35] bond_slave_1: left promiscuous mode
[  756.680088][   T35] bridge0: port 3(vlan2) entered disabled state
[  756.696330][   T35] bridge_slave_1: left allmulticast mode
[  756.708888][   T35] bridge_slave_1: left promiscuous mode
[  756.716659][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  756.754680][   T35] bridge_slave_0: left allmulticast mode
[  756.760343][   T35] bridge_slave_0: left promiscuous mode
[  756.777917][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.803255][   T35] veth0_to_bridge: left allmulticast mode
[  756.822754][   T35] veth0_to_bridge: left promiscuous mode
[  756.828573][   T35] bridge0: port 3(veth0_to_bridge) entered disabled state
[  756.847683][   T35] bridge_slave_1: left allmulticast mode
[  756.859573][   T35] bridge_slave_1: left promiscuous mode
[  756.866918][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  756.880952][   T35] bridge_slave_0: left allmulticast mode
[  756.888404][   T35] bridge_slave_0: left promiscuous mode
[  756.900151][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.924701][   T35] bridge_slave_1: left allmulticast mode
[  756.930334][   T35] bridge_slave_1: left promiscuous mode
[  756.937448][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  756.948795][   T35] bridge_slave_0: left allmulticast mode
[  756.954653][   T35] bridge_slave_0: left promiscuous mode
[  756.960263][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  757.155321][   T35] bond0: left allmulticast mode
[  757.160282][   T35] bond_slave_0: left allmulticast mode
[  757.167618][   T35] bond_slave_1: left allmulticast mode
[  757.823069][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  757.842298][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  757.858936][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  757.874113][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  757.882196][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  757.889928][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  758.634791][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  758.650306][   T35] bond0 (unregistering): Released all slaves
[  758.660581][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  758.677697][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  758.690353][   T35] bond0 (unregistering): Released all slaves
[  758.703397][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  758.713643][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  758.725597][   T35] bond0 (unregistering): Released all slaves
[  758.877520][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  758.893274][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  758.903886][   T35] bond0 (unregistering): Released all slaves
[  758.915131][   T35] bond1 (unregistering): Released all slaves
[  759.059634][   T35] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  759.070019][   T35] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  759.087560][   T35] 
 (unregistering): (slave batadv0): Releasing backup interface
[  759.099699][   T35] 
 (unregistering): Released all slaves
[  759.109593][   T35] bond0 (unregistering): Released all slaves
[  759.241299][   T35] bond0 (unregistering): left promiscuous mode
[  759.247586][   T35] bond_slave_0: left promiscuous mode
[  759.253581][   T35] bond_slave_1: left promiscuous mode
[  759.271613][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  759.282016][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  759.292492][   T35] bond0 (unregistering): Released all slaves
[  759.308685][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state
[  759.315805][ T6340] bridge0: port 2(bridge_slave_1) entered forwarding state
[  759.553077][   T35] tipc: Left network mode
[  759.746009][   T35] IPVS: stopping backup sync thread 10064 ...
[  759.841361][   T35] IPVS: stopping master sync thread 10833 ...
[  759.863666][   T35] IPVS: stopping backup sync thread 10195 ...
[  759.886762][   T35] IPVS: stopping backup sync thread 10105 ...
[  759.890685][T12157] chnl_net:caif_netlink_parms(): no params data found
[  759.943129][ T5136] Bluetooth: hci0: command tx timeout
[  759.978906][T12093] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  759.995222][T12093] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  760.125375][T12093] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  760.135687][T12093] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  760.368829][T12157] bridge0: port 1(bridge_slave_0) entered blocking state
[  760.384457][T12157] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.392048][T12157] bridge_slave_0: entered allmulticast mode
[  760.398985][T12157] bridge_slave_0: entered promiscuous mode
[  760.479526][T12157] bridge0: port 2(bridge_slave_1) entered blocking state
[  760.492525][T12157] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.499627][T12157] bridge_slave_1: entered allmulticast mode
[  760.507483][T12157] bridge_slave_1: entered promiscuous mode
[  760.561293][T12157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  760.585368][T12157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  760.668460][T12157] team0: Port device team_slave_0 added
[  760.676704][T12157] team0: Port device team_slave_1 added
[  760.766318][T12108] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  760.779423][T12093] 8021q: adding VLAN 0 to HW filter on device bond0
[  760.883188][T12157] batman_adv: batadv0: Adding interface: batadv_slave_0
[  760.890143][T12157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  760.916677][T12157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  760.929492][T12157] batman_adv: batadv0: Adding interface: batadv_slave_1
[  760.936785][T12157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  760.963957][T12157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  760.978548][T12108] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  761.066996][T12108] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  761.108732][T12108] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  761.191120][T12157] hsr_slave_0: entered promiscuous mode
[  761.198504][T12157] hsr_slave_1: entered promiscuous mode
[  761.205327][T12157] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  761.213600][T12157] Cannot create hsr debugfs directory
[  761.226213][   T35] hsr_slave_0: left promiscuous mode
[  761.237041][   T35] hsr_slave_1: left promiscuous mode
[  761.244004][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  761.251820][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  761.264720][   T35] hsr_slave_0: left promiscuous mode
[  761.270393][   T35] hsr_slave_1: left promiscuous mode
[  761.276744][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  761.288075][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  761.299393][   T35] hsr_slave_0: left promiscuous mode
[  761.306196][   T35] hsr_slave_1: left promiscuous mode
[  761.312117][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  761.319523][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  761.327311][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  761.335020][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  761.347180][   T35] hsr_slave_0: left promiscuous mode
[  761.353182][   T35] hsr_slave_1: left promiscuous mode
[  761.358779][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  761.366358][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  761.374491][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  761.382164][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  761.389715][   T35] batman_adv: batadv0: Removing interface: macvtap0
[  761.399874][   T35] hsr_slave_0: left promiscuous mode
[  761.408315][   T35] hsr_slave_1: left promiscuous mode
[  761.459128][   T35] veth1_macvtap: left promiscuous mode
[  761.465490][   T35] veth0_macvtap: left promiscuous mode
[  761.471103][   T35] veth1_vlan: left promiscuous mode
[  761.476735][   T35] veth0_vlan: left promiscuous mode
[  761.483560][   T35] veth1_macvtap: left promiscuous mode
[  761.489088][   T35] veth1_vlan: left promiscuous mode
[  761.494526][   T35] veth0_vlan: left promiscuous mode
[  761.500609][   T35] veth1_macvtap: left promiscuous mode
[  761.506257][   T35] veth0_macvtap: left promiscuous mode
[  761.511966][   T35] veth1_vlan: left promiscuous mode
[  761.517215][   T35] veth0_vlan: left promiscuous mode
[  761.945119][   T35] team0 (unregistering): Port device team_slave_1 removed
[  761.986047][   T35] team0 (unregistering): Port device team_slave_0 removed
[  762.031812][ T5136] Bluetooth: hci0: command tx timeout
[  762.256864][   T35] team0 (unregistering): Port device team_slave_1 removed
[  762.285010][   T35] team0 (unregistering): Port device team_slave_0 removed
[  762.783707][   T35] team0 (unregistering): Port device team_slave_1 removed
[  762.833625][   T35] team0 (unregistering): Port device team_slave_0 removed
[  763.633447][   T35] team0 (unregistering): Port device team_slave_1 removed
[  763.681287][   T35] team0 (unregistering): Port device team_slave_0 removed
[  764.101859][ T5136] Bluetooth: hci0: command tx timeout
[  764.509476][   T35] team0 (unregistering): Port device team_slave_1 removed
[  764.558714][   T35] team0 (unregistering): Port device team_slave_0 removed
[  765.215150][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  765.228635][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  765.238455][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  765.249792][T12093] 8021q: adding VLAN 0 to HW filter on device team0
[  765.258885][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  765.271526][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  765.278982][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  765.682185][T12112] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  765.709162][T12108] 8021q: adding VLAN 0 to HW filter on device bond0
[  765.740334][T12112] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  765.758536][T12112] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  765.808981][T12112] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  765.848693][T12108] 8021q: adding VLAN 0 to HW filter on device team0
[  765.921527][T12133] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  765.935132][T12133] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  765.961114][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state
[  765.968250][ T6340] bridge0: port 1(bridge_slave_0) entered forwarding state
[  766.030066][T12133] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  766.044425][T12133] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  766.154650][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state
[  766.161781][ T6340] bridge0: port 2(bridge_slave_1) entered forwarding state
[  766.183692][ T5136] Bluetooth: hci0: command tx timeout
[  766.210066][T12167] chnl_net:caif_netlink_parms(): no params data found
[  766.347301][T12112] 8021q: adding VLAN 0 to HW filter on device bond0
[  766.409248][T12112] 8021q: adding VLAN 0 to HW filter on device team0
[  766.465211][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state
[  766.472342][ T6339] bridge0: port 1(bridge_slave_0) entered forwarding state
[  766.517886][T12167] bridge0: port 1(bridge_slave_0) entered blocking state
[  766.550085][T12167] bridge0: port 1(bridge_slave_0) entered disabled state
[  766.557495][T12167] bridge_slave_0: entered allmulticast mode
[  766.575499][T12167] bridge_slave_0: entered promiscuous mode
[  766.583487][T12167] bridge0: port 2(bridge_slave_1) entered blocking state
[  766.590584][T12167] bridge0: port 2(bridge_slave_1) entered disabled state
[  766.597930][T12167] bridge_slave_1: entered allmulticast mode
[  766.605027][T12167] bridge_slave_1: entered promiscuous mode
[  766.681434][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state
[  766.688577][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  766.778241][T12167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  766.790867][T12167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  766.871181][T12157] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  766.885366][T12167] team0: Port device team_slave_0 added
[  766.905300][T12157] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  766.934107][T12167] team0: Port device team_slave_1 added
[  766.942004][T12157] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  767.011171][T12157] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  767.020547][T12108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  767.030499][T12133] 8021q: adding VLAN 0 to HW filter on device bond0
[  767.043297][T12167] batman_adv: batadv0: Adding interface: batadv_slave_0
[  767.050253][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  767.083796][T12167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  767.130863][T12133] 8021q: adding VLAN 0 to HW filter on device team0
[  767.152294][T12167] batman_adv: batadv0: Adding interface: batadv_slave_1
[  767.159252][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  767.185569][T12167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  767.253075][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state
[  767.260187][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  767.307182][ T5136] Bluetooth: hci1: command tx timeout
[  767.332421][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state
[  767.339543][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state
[  767.370748][T12167] hsr_slave_0: entered promiscuous mode
[  767.386048][T12167] hsr_slave_1: entered promiscuous mode
[  767.496871][T12108] veth0_vlan: entered promiscuous mode
[  767.540923][T12157] 8021q: adding VLAN 0 to HW filter on device bond0
[  767.619689][T12108] veth1_vlan: entered promiscuous mode
[  767.639468][T12157] 8021q: adding VLAN 0 to HW filter on device team0
[  767.688728][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state
[  767.695823][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  767.729887][T12108] veth0_macvtap: entered promiscuous mode
[  767.731078][   T35] IPVS: stop unused estimator thread 0...
[  767.760533][T10444] bridge0: port 2(bridge_slave_1) entered blocking state
[  767.767667][T10444] bridge0: port 2(bridge_slave_1) entered forwarding state
[  767.878884][T12108] veth1_macvtap: entered promiscuous mode
[  767.893488][T12112] 8021q: adding VLAN 0 to HW filter on device batadv0
[  767.966473][T12108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  768.001704][T12108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  768.042501][T12108] batman_adv: batadv0: Interface activated: batadv_slave_0
[  768.114292][T12108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  768.129234][T12108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  768.148822][T12108] batman_adv: batadv0: Interface activated: batadv_slave_1
[  768.234192][T12108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  768.243549][T12108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  768.259300][T12108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  768.277822][T12108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  768.319548][T12133] 8021q: adding VLAN 0 to HW filter on device batadv0
[  768.536458][T12157] 8021q: adding VLAN 0 to HW filter on device batadv0
[  768.559355][   T35] bridge_slave_1: left allmulticast mode
[  768.566675][   T35] bridge_slave_1: left promiscuous mode
[  768.572493][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  768.580392][   T35] bridge_slave_0: left allmulticast mode
[  768.587048][   T35] bridge_slave_0: left promiscuous mode
[  768.592913][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  768.602978][   T35] bridge_slave_1: left allmulticast mode
[  768.608656][   T35] bridge_slave_1: left promiscuous mode
[  768.614448][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  768.624287][   T35] bridge_slave_0: left allmulticast mode
[  768.629933][   T35] bridge_slave_0: left promiscuous mode
[  768.637073][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  769.172260][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  769.182925][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  769.192698][   T35] bond0 (unregistering): Released all slaves
[  769.318562][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  769.328958][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  769.339018][   T35] bond0 (unregistering): Released all slaves
[  769.359480][T12112] veth0_vlan: entered promiscuous mode
[  769.382813][ T5136] Bluetooth: hci1: command tx timeout
[  769.383998][ T6338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  769.397058][ T6338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  769.420011][T12112] veth1_vlan: entered promiscuous mode
[  769.511200][T12133] veth0_vlan: entered promiscuous mode
[  769.562529][ T6339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  769.563296][T12167] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  769.570350][ T6339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  769.592795][T12167] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  769.610401][T12157] veth0_vlan: entered promiscuous mode
[  769.620016][T12167] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  769.629603][T12167] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  769.643036][   T35] hsr_slave_0: left promiscuous mode
[  769.652401][   T35] hsr_slave_1: left promiscuous mode
[  769.659950][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  769.672238][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  769.686942][   T35] hsr_slave_0: left promiscuous mode
[  769.695272][   T35] hsr_slave_1: left promiscuous mode
[  769.700870][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  769.708711][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  769.870151][   T35] team0 (unregistering): Port device team_slave_1 removed
[  769.898154][   T35] team0 (unregistering): Port device team_slave_0 removed
[  770.317104][   T35] team0 (unregistering): Port device team_slave_1 removed
[  770.347379][   T35] team0 (unregistering): Port device team_slave_0 removed
[  770.717322][T12133] veth1_vlan: entered promiscuous mode
[  770.736341][T12157] veth1_vlan: entered promiscuous mode
[  770.816450][T12112] veth0_macvtap: entered promiscuous mode
[  770.873753][T12112] veth1_macvtap: entered promiscuous mode
[  770.921976][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  770.944026][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  770.954440][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  770.965512][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  770.980844][T12112] batman_adv: batadv0: Interface activated: batadv_slave_0
[  771.467808][ T5136] Bluetooth: hci1: command tx timeout
[  771.470842][T12157] veth0_macvtap: entered promiscuous mode
[  771.518018][T12206] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1492'.
[  771.527824][T12206] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1492'.
[  771.537870][T12206] netlink: 81 bytes leftover after parsing attributes in process `syz.1.1492'.
[  771.557476][T12133] veth0_macvtap: entered promiscuous mode
[  771.573861][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  771.584439][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  771.595020][T12112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  771.605704][T12112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  771.622590][T12112] batman_adv: batadv0: Interface activated: batadv_slave_1
[  771.636272][T12133] veth1_macvtap: entered promiscuous mode
[  771.665425][T12157] veth1_macvtap: entered promiscuous mode
[  771.683166][T12112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  771.700035][T12112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  771.709470][T12112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  771.718328][T12112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  771.871004][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  771.892224][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  771.913298][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  771.926257][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  771.936339][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  771.947058][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  771.967896][T12157] batman_adv: batadv0: Interface activated: batadv_slave_0
[  772.525459][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  772.609925][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.622540][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  772.633142][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.643080][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  772.653661][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.685305][T12157] batman_adv: batadv0: Interface activated: batadv_slave_1
[  772.708510][T12157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  772.726684][T12157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  772.736776][T12157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  772.745956][T12157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  772.814966][T12133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  772.841190][T12133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.851677][T12133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  772.862671][T12133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.872839][T12133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  772.883571][T12133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.893718][T12133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  772.908427][T12133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.923039][T12133] batman_adv: batadv0: Interface activated: batadv_slave_0
[  772.959105][T12133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  772.979598][T12133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.990537][T12133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  773.001251][T12133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  773.011418][T12133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  773.022777][T12133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  773.040729][T12133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  773.081650][T12133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  773.092768][T12133] batman_adv: batadv0: Interface activated: batadv_slave_1
[  773.157426][T12133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  773.176489][T12133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  773.207757][T12133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  773.240345][T12133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  773.417484][T12167] 8021q: adding VLAN 0 to HW filter on device bond0
[  773.453351][ T6338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.461192][ T6338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  773.506919][T12167] 8021q: adding VLAN 0 to HW filter on device team0
[  773.542378][ T5842] Bluetooth: hci1: command tx timeout
[  773.579226][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state
[  773.586403][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  773.598138][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.609619][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  773.649691][ T6340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.661431][T10444] bridge0: port 2(bridge_slave_1) entered blocking state
[  773.668566][T10444] bridge0: port 2(bridge_slave_1) entered forwarding state
[  773.681745][ T6340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  773.725675][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.745863][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  773.858782][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.883260][T12167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  773.897698][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  774.570160][T12231] Bluetooth: MGMT ver 1.23
[  774.666124][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  774.892448][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  775.195625][T12223] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  775.439913][T12167] 8021q: adding VLAN 0 to HW filter on device batadv0
[  775.988254][ T5842] Bluetooth: hci1: command 0x0405 tx timeout
[  776.331887][T12230] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  776.386552][T12167] veth0_vlan: entered promiscuous mode
[  776.448366][T12167] veth1_vlan: entered promiscuous mode
[  776.522244][T12230] usb 5-1: Using ep0 maxpacket: 32
[  776.599868][T12230] usb 5-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=75.43
[  776.618594][T12230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.690093][T12230] usb 5-1: Product: syz
[  776.748237][ T5914] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  776.769239][T12230] usb 5-1: Manufacturer: syz
[  776.876194][T12230] usb 5-1: SerialNumber: syz
[  777.156038][ T5914] usb 1-1: Using ep0 maxpacket: 8
[  777.205328][T12167] veth0_macvtap: entered promiscuous mode
[  777.219563][T12167] veth1_macvtap: entered promiscuous mode
[  777.227105][T12230] usb 5-1: config 0 descriptor??
[  777.244999][ T5914] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  777.282917][ T5914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  777.352476][ T5914] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  777.369489][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  777.380419][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  777.398876][ T5914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  777.419394][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  777.426579][ T5914] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  777.442424][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  777.453061][ T5914] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  777.468977][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.487495][T12230] dvb-usb: found a 'Pinnacle PCTV 282e' in warm state.
[  777.508295][ T5914] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22
[  777.545556][T12230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  777.591488][T12230] dvbdev: DVB: registering new adapter (Pinnacle PCTV 282e)
[  777.619913][T12230] usb 5-1: media controller created
[  777.653963][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  777.665199][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  777.675152][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  777.685632][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  777.685946][T12230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  777.695461][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  777.695479][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  777.696620][T12167] batman_adv: batadv0: Interface activated: batadv_slave_0
[  778.722684][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  778.895879][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  779.033425][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  779.098009][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  779.111026][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  779.130283][T12230] DVB: Unable to find symbol dib7000p_attach()
[  779.202426][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  779.211643][T12230] dvb-usb: no frontend was attached by 'Pinnacle PCTV 282e'
[  779.256604][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  779.268261][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  779.298437][T12167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  779.324959][T12167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  779.371877][T12230] rc_core: IR keymap rc-dib0700-rc5 not found
[  779.372387][T12167] batman_adv: batadv0: Interface activated: batadv_slave_1
[  779.417759][T12230] Registered IR keymap rc-empty
[  779.417856][T12167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  779.445184][T12230] dvb-usb: could not initialize remote control.
[  779.478928][T12167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  779.661405][T12230] dvb-usb: Pinnacle PCTV 282e successfully initialized and connected.
[  779.846528][T12167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  779.925284][T12167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  780.105430][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  780.133306][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  780.188945][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  780.207997][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  780.453305][ T5908] usb 1-1: USB disconnect, device number 6
[  781.449324][T12280] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1511'.
[  781.458512][T12280] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1511'.
[  781.468312][T12280] netlink: 81 bytes leftover after parsing attributes in process `syz.3.1511'.
[  781.532582][T12281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1524'.
[  782.070936][T12230] usb 5-1: USB disconnect, device number 6
[  782.690794][    T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  782.703319][   T29] audit: type=1326 audit(1739966307.260:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12289 comm="syz.2.1528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb60b8cde9 code=0x0
[  783.286682][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  783.297977][T12230] dvb-usb: Pinnacle PCTV 282e successfully deinitialized and disconnected.
[  783.313429][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  783.328917][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  783.372233][    T8] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  783.401713][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.479999][    T8] usb 4-1: config 0 descriptor??
[  784.227894][    T8] hid-multitouch 0003:0EEF:72C4.000A: item fetching failed at offset 0/2
[  784.444888][    T8] hid-multitouch 0003:0EEF:72C4.000A: probe with driver hid-multitouch failed with error -22
[  784.458114][    T8] usb 4-1: USB disconnect, device number 3
[  786.474582][T12230] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  786.671743][T12230] usb 1-1: Using ep0 maxpacket: 8
[  786.682308][T12230] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  786.702629][T12230] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  786.751368][T12230] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  787.430906][T12230] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  787.441433][T12230] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  787.456975][T12230] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  787.466136][T12230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.478626][T12230] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22
[  790.057688][ T5908] usb 1-1: USB disconnect, device number 7
[  790.132022][T12230] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  790.204312][T12372] syzkaller0: tun_chr_ioctl cmd 2148553947
[  790.555991][T12230] usb 4-1: Using ep0 maxpacket: 32
[  791.367716][T12230] usb 4-1: config 1 has an invalid interface number: 237 but max is 0
[  791.418245][T12230] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  791.500115][T12230] usb 4-1: config 1 has no interface number 0
[  791.526308][T12230] usb 4-1: config 1 interface 237 altsetting 248 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  791.573208][T12390] ubi: mtd0 is already attached to ubi31
[  791.800352][T12230] usb 4-1: config 1 interface 237 altsetting 248 has a duplicate endpoint with address 0x2, skipping
[  791.828080][T12390] netlink: 'syz.1.1556': attribute type 21 has an invalid length.
[  792.576707][   T29] audit: type=1326 audit(1739966317.150:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12389 comm="syz.1.1556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f663b18cde9 code=0x0
[  792.585206][T12230] usb 4-1: config 1 interface 237 altsetting 248 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  792.731689][T12230] usb 4-1: config 1 interface 237 has no altsetting 0
[  792.781729][T12230] usb 4-1: New USB device found, idVendor=0403, idProduct=e002, bcdDevice=61.4d
[  792.832520][T12230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.872402][T12398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1556'.
[  792.891611][T12230] usb 4-1: Product: syz
[  792.902023][T12398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1556'.
[  792.911303][T12230] usb 4-1: Manufacturer: syz
[  792.930393][T12230] usb 4-1: SerialNumber: syz
[  792.955916][T12230] usb 4-1: can't set config #1, error -71
[  793.020877][T12230] usb 4-1: USB disconnect, device number 4
[  793.227694][T12400] tmpfs: Bad value for 'mpol'
[  793.616299][T12415] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  794.441722][T12230] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  794.639216][T12230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  794.671439][T12230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  794.717554][T12230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  794.758686][T12230] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  794.817692][T12230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.844248][ T5914] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  795.623431][T12432] ubi: mtd0 is already attached to ubi31
[  795.640349][T12432] netlink: 'syz.0.1568': attribute type 21 has an invalid length.
[  795.671188][T12230] usb 4-1: config 0 descriptor??
[  795.706814][   T29] audit: type=1326 audit(1739966320.270:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12431 comm="syz.0.1568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f332d18cde9 code=0x0
[  795.844875][T12435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1568'.
[  795.854892][T12435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1568'.
[  796.517561][T12439] net_ratelimit: 842 callbacks suppressed
[  796.523503][T12439] openvswitch: netlink: Tunnel attr 54 out of range max 16
[  796.724731][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  796.737581][T12230] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd
[  796.751635][ T5914] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  797.153844][T12230] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  797.165671][T12230] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  797.186319][T12230] usb 4-1: USB disconnect, device number 5
[  797.192272][ T5914] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  797.201316][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  797.240215][ T5914] usb 2-1: Product: syz
[  797.246606][ T5914] usb 2-1: Manufacturer: syz
[  797.251219][ T5914] usb 2-1: SerialNumber: syz
[  797.283449][ T5914] usb 2-1: config 0 descriptor??
[  797.592064][ T5914] usb 2-1: USB disconnect, device number 3
[  797.875406][   T29] audit: type=1326 audit(1739966322.450:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12423 comm="syz.1.1566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f663b18cde9 code=0x0
[  799.465845][T12475] fuse: Unknown parameter 'user_id00000000000000000000'
[  800.847259][T12481] fuse: Bad value for 'fd'
[  800.986135][T12482] openvswitch: netlink: Tunnel attr 54 out of range max 16
[  801.231880][T12230] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  801.423203][T12230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  801.445174][T12230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  801.446399][T12499] Bluetooth: MGMT ver 1.23
[  801.478037][T12230] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  801.519740][T12230] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  801.530279][T12230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.548548][T12230] usb 1-1: config 0 descriptor??
[  801.648281][T12507] fuse: Unknown parameter 'user_id00000000000000000000'
[  801.873476][  T976] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  801.982065][T12230] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd
[  802.020281][T12230] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  802.069352][T12230] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  802.091446][  T976] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  803.059119][  T976] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  803.155179][  T976] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  803.164695][T12230] usb 1-1: USB disconnect, device number 8
[  803.672378][  T976] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  803.734171][  T976] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  803.913438][  T976] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  804.291882][  T976] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  804.325892][  T976] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  804.350636][T12523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1598'.
[  804.359719][  T976] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  804.383495][T12523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1598'.
[  804.392971][  T976] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  804.413316][  T976] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  804.441736][  T976] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  804.506536][  T976] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  804.537424][  T976] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  804.576629][  T976] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  804.621852][  T976] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  804.641572][  T976] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  804.676541][  T976] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  804.711156][  T976] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  804.757084][  T976] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  804.799452][  T976] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  804.843209][  T976] usb 5-1: string descriptor 0 read error: -71
[  804.849479][  T976] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  804.877370][  T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.914972][  T976] usb 5-1: can't set config #246, error -71
[  804.950195][  T976] usb 5-1: USB disconnect, device number 7
[  804.985944][T12538] fuse: Unknown parameter 'user_id00000000000000000000'
[  805.054416][T12542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1606'.
[  807.135023][   T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  807.413500][   T25] usb 4-1: Using ep0 maxpacket: 8
[  807.429661][   T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11
[  808.361617][   T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  808.372362][   T25] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  808.384751][   T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  808.467234][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.535571][   T25] usb 4-1: Product: syz
[  808.539958][   T25] usb 4-1: Manufacturer: syz
[  808.580291][   T25] usb 4-1: SerialNumber: syz
[  808.647792][T12584] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1614'.
[  808.660258][T12584] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1614'.
[  808.669772][T12584] netlink: 81 bytes leftover after parsing attributes in process `syz.1.1614'.
[  808.843075][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  808.863722][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  809.209667][   T25] usb 4-1: can't set config #1, error -71
[  809.245016][   T25] usb 4-1: USB disconnect, device number 6
[  809.413253][T12592] netlink: 'syz.4.1617': attribute type 3 has an invalid length.
[  809.421180][T12592] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1617'.
[  809.812845][ T5136] Bluetooth: hci1: unexpected event for opcode 0x0c2d
[  810.221335][T12605] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  810.228154][T12605] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  810.265450][T12605] vhci_hcd vhci_hcd.0: Device attached
[  810.301699][T12607] vhci_hcd: connection closed
[  810.310833][T10444] vhci_hcd: stop threads
[  810.338845][T10444] vhci_hcd: release socket
[  810.349352][T10444] vhci_hcd: disconnect device
[  813.891988][ T5842] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  813.901340][ T5842] Bluetooth: hci1: Injecting HCI hardware error event
[  814.686427][ T5842] Bluetooth: hci1: hardware error 0x00
[  815.547024][   T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  815.813032][   T25] usb 1-1: Using ep0 maxpacket: 8
[  815.833379][   T25] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  815.850390][   T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  815.869569][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11
[  815.891389][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024
[  815.918706][   T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  816.803115][   T25] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  816.821817][ T5842] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  816.911576][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.919598][   T25] usb 1-1: Product: syz
[  816.977566][   T25] usb 1-1: Manufacturer: syz
[  817.002000][   T25] usb 1-1: SerialNumber: syz
[  817.022943][   T25] usb 1-1: config 0 descriptor??
[  817.054740][T12686] dccp_invalid_packet: P.Data Offset(100) too large
[  817.068030][   T25] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input54
[  817.301772][    T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  817.325314][   T29] audit: type=1326 audit(1739966341.900:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12665 comm="syz.0.1636" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f332d18cde9 code=0x0
[  817.381661][ T5842] Bluetooth: hci0: command tx timeout
[  817.507014][    T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  817.530792][    T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  817.550902][    T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  817.563148][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.582025][    T8] usb 4-1: Product: syz
[  817.586336][    T8] usb 4-1: Manufacturer: syz
[  817.591028][    T8] usb 4-1: SerialNumber: syz
[  817.615230][    T8] cdc_mbim 4-1:1.0: MBIM functional descriptor missing
[  817.622744][    T8] cdc_mbim 4-1:1.0: bind() failure
[  818.380270][   T25] usb 1-1: USB disconnect, device number 9
[  818.386180][    C1] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -19
[  818.488957][T12201] usb 4-1: USB disconnect, device number 7
[  822.382468][T12730] No such timeout policy "syz1"
[  824.542840][T12745] vivid-002: =================  START STATUS  =================
[  824.610206][T12745] vivid-002: Radio HW Seek Mode: Bounded
[  824.655799][T12745] vivid-002: Radio Programmable HW Seek: false
[  824.752157][T12745] vivid-002: RDS Rx I/O Mode: Block I/O
[  824.761848][T12745] vivid-002: Generate RBDS Instead of RDS: false
[  824.768227][T12745] vivid-002: RDS Reception: true
[  824.801828][T12745] vivid-002: RDS Program Type: 0 inactive
[  824.808575][T12745] vivid-002: RDS PS Name:  inactive
[  825.286847][T12745] vivid-002: RDS Radio Text:  inactive
[  825.304739][T12745] vivid-002: RDS Traffic Announcement: false inactive
[  825.322136][T12745] vivid-002: RDS Traffic Program: false inactive
[  825.382870][T12745] vivid-002: RDS Music: false inactive
[  825.421698][T12745] vivid-002: ==================  END STATUS  ==================
[  826.612308][    T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  827.601609][    T8] usb 2-1: Using ep0 maxpacket: 8
[  827.623892][    T8] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[  827.641695][    T8] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  827.659613][    T8] usb 2-1: config 135 has no interface number 0
[  827.666283][    T8] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  827.685550][    T8] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  827.715896][    T8] usb 2-1: config 135 interface 230 has no altsetting 0
[  827.735616][    T8] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  827.751627][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.765022][    T8] usb 2-1: Product: syz
[  827.772594][    T8] usb 2-1: Manufacturer: syz
[  827.777223][    T8] usb 2-1: SerialNumber: syz
[  827.782611][T12763] netlink: 'syz.3.1666': attribute type 1 has an invalid length.
[  827.806539][    T8] usb 2-1: Found UVC 0.00 device syz (18ec:3288)
[  827.819140][    T8] usb 2-1: No valid video chain found.
[  827.845952][T12763] 8021q: adding VLAN 0 to HW filter on device bond1
[  827.900785][T12767] bond1: (slave ip6gretap1): making interface the new active one
[  827.920206][T12767] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  827.967150][T12763] vlan2: entered promiscuous mode
[  827.980278][T12763] bond1: entered promiscuous mode
[  827.985459][T12763] ip6gretap1: entered promiscuous mode
[  827.991178][T12763] vlan2: entered allmulticast mode
[  827.996462][T12763] bond1: entered allmulticast mode
[  828.001756][T12763] ip6gretap1: entered allmulticast mode
[  828.019457][T12754] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1663'.
[  828.053685][    T8] usb 2-1: USB disconnect, device number 4
[  830.352065][T12230] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  830.710621][T12230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  830.941594][T12230] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  830.953290][T12230] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  830.963302][T12230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  830.971309][T12230] usb 5-1: Product: syz
[  831.133961][T12230] usb 5-1: Manufacturer: syz
[  831.257888][T12230] usb 5-1: SerialNumber: syz
[  831.564373][T12230] usb 5-1: config 0 descriptor??
[  832.066676][T12806] FAULT_INJECTION: forcing a failure.
[  832.066676][T12806] name failslab, interval 1, probability 0, space 0, times 0
[  832.079425][T12806] CPU: 1 UID: 0 PID: 12806 Comm: syz.0.1678 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0
[  832.079446][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  832.079456][T12806] Call Trace:
[  832.079463][T12806]  <TASK>
[  832.079470][T12806]  dump_stack_lvl+0x241/0x360
[  832.079497][T12806]  ? __pfx_dump_stack_lvl+0x10/0x10
[  832.079515][T12806]  ? __pfx__printk+0x10/0x10
[  832.079541][T12806]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  832.079567][T12806]  ? __pfx___might_resched+0x10/0x10
[  832.079598][T12806]  should_fail_ex+0x40a/0x550
[  832.079625][T12806]  should_failslab+0xac/0x100
[  832.079651][T12806]  kmem_cache_alloc_node_noprof+0x77/0x380
[  832.079675][T12806]  ? __alloc_skb+0x1c3/0x440
[  832.079700][T12806]  __alloc_skb+0x1c3/0x440
[  832.079726][T12806]  ? __pfx___alloc_skb+0x10/0x10
[  832.079746][T12806]  ? __rcu_read_unlock+0xa1/0x110
[  832.079769][T12806]  ? netlink_autobind+0xd6/0x2f0
[  832.079785][T12806]  ? netlink_autobind+0x2b0/0x2f0
[  832.079807][T12806]  netlink_sendmsg+0x634/0xcb0
[  832.079835][T12806]  ? __pfx_netlink_sendmsg+0x10/0x10
[  832.079864][T12806]  ? __pfx_netlink_sendmsg+0x10/0x10
[  832.079879][T12806]  __sock_sendmsg+0x221/0x270
[  832.079901][T12806]  ____sys_sendmsg+0x53a/0x860
[  832.079932][T12806]  ? __pfx_____sys_sendmsg+0x10/0x10
[  832.079954][T12806]  ? __fget_files+0x2a/0x410
[  832.079974][T12806]  ? __fget_files+0x2a/0x410
[  832.079999][T12806]  __sys_sendmsg+0x269/0x350
[  832.080027][T12806]  ? __pfx___sys_sendmsg+0x10/0x10
[  832.080075][T12806]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  832.080124][T12806]  do_syscall_64+0xf3/0x230
[  832.080145][T12806]  ? clear_bhb_loop+0x35/0x90
[  832.080170][T12806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  832.080190][T12806] RIP: 0033:0x7f332d18cde9
[  832.080205][T12806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  832.080219][T12806] RSP: 002b:00007f332e04b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  832.080237][T12806] RAX: ffffffffffffffda RBX: 00007f332d3a6160 RCX: 00007f332d18cde9
[  832.080250][T12806] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003
[  832.080261][T12806] RBP: 00007f332e04b090 R08: 0000000000000000 R09: 0000000000000000
[  832.080272][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  832.080282][T12806] R13: 0000000000000000 R14: 00007f332d3a6160 R15: 00007ffd879433d8
[  832.080309][T12806]  </TASK>
[  833.133562][T12201] usb 5-1: USB disconnect, device number 8
[  833.339194][   T29] audit: type=1326 audit(1739966357.910:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12793 comm="syz.4.1675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4da698cde9 code=0x0
[  834.122391][T12820] dccp_invalid_packet: P.Data Offset(100) too large
[  834.572996][T12182] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  835.047469][T12182] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  835.080000][T12182] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.115463][T12182] usb 1-1: Product: syz
[  835.137987][T12182] usb 1-1: Manufacturer: syz
[  835.145944][T12833] ubi: mtd0 is already attached to ubi31
[  835.152234][T12182] usb 1-1: SerialNumber: syz
[  835.199013][T12833] netlink: 'syz.4.1686': attribute type 21 has an invalid length.
[  835.220186][   T29] audit: type=1326 audit(1739966359.790:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12832 comm="syz.4.1686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4da698cde9 code=0x0
[  835.243028][T12182] usb 1-1: config 0 descriptor??
[  835.333541][T12836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1686'.
[  835.342838][T12836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1686'.
[  835.486231][T12182] usb 1-1: USB disconnect, device number 10
[  839.264082][T12201] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  839.383494][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1695'.
[  839.449155][T12201] usb 1-1: unable to get BOS descriptor or descriptor too short
[  839.487615][T12201] usb 1-1: not running at top speed; connect to a high speed hub
[  839.686041][T12201] usb 1-1: config 2 has an invalid interface number: 131 but max is 0
[  839.721720][T12201] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  839.801681][T12201] usb 1-1: config 2 has no interface number 0
[  839.807802][T12201] usb 1-1: config 2 interface 131 altsetting 8 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  839.850376][T12201] usb 1-1: config 2 interface 131 altsetting 8 endpoint 0x82 has invalid wMaxPacketSize 0
[  839.874126][T12201] usb 1-1: config 2 interface 131 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  839.922471][T12201] usb 1-1: config 2 interface 131 has no altsetting 0
[  840.501708][T12201] usb 1-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=57.30
[  840.537789][T12201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.560363][T12201] usb 1-1: Product: syz
[  840.565931][T12880] ubi: mtd0 is already attached to ubi31
[  840.571992][T12201] usb 1-1: Manufacturer: syz
[  840.576711][T12201] usb 1-1: SerialNumber: syz
[  840.582712][T12880] netlink: 'syz.3.1700': attribute type 21 has an invalid length.
[  840.596741][   T29] audit: type=1326 audit(1739966365.170:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12879 comm="syz.3.1700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb67658cde9 code=0x0
[  840.700259][T12881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1700'.
[  840.710042][T12881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1700'.
[  840.927600][T12201] em28xx 1-1:2.131: New device syz syz @ 12 Mbps (2013:8461, interface 131, class 131)
[  840.952028][T12201] em28xx 1-1:2.131: Device initialization failed.
[  840.961701][T12201] em28xx 1-1:2.131: Device must be connected to a high-speed USB 2.0 port.
[  841.715105][T12201] usb 1-1: USB disconnect, device number 11
[  843.404045][T12902] hsr0: entered promiscuous mode
[  844.483014][T12912] dccp_invalid_packet: P.Data Offset(100) too large
[  844.751680][T12201] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  845.372771][T12201] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  845.391705][T12201] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  845.407007][T12201] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  845.421635][T12201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.429796][T12201] usb 3-1: Product: syz
[  845.434279][T12201] usb 3-1: Manufacturer: syz
[  845.438893][T12201] usb 3-1: SerialNumber: syz
[  845.447858][T12201] usb 3-1: config 0 descriptor??
[  845.689654][ T5938] usb 3-1: USB disconnect, device number 4
[  845.902240][   T29] audit: type=1326 audit(1739966370.470:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.2.1696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb60b8cde9 code=0x0
[  847.420467][T12932] ubi: mtd0 is already attached to ubi31
[  847.450380][T12932] netlink: 'syz.3.1713': attribute type 21 has an invalid length.
[  847.481995][   T29] audit: type=1326 audit(1739966372.060:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12930 comm="syz.3.1713" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb67658cde9 code=0x0
[  848.351648][T12201] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  848.363891][T12944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1713'.
[  848.391671][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1713'.
[  848.512127][T12201] usb 2-1: Using ep0 maxpacket: 8
[  848.535330][T12201] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  848.567138][T12201] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  848.578069][T12201] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  848.598383][T12201] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  848.611907][T12201] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  848.627631][T12201] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  848.637461][T12201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  848.699112][T12201] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22
[  849.313210][T12956] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1719'.
[  849.322516][T12956] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1719'.
[  849.331888][T12956] netlink: 81 bytes leftover after parsing attributes in process `syz.3.1719'.
[  849.967024][T12961] erofs (device loop0): cannot find valid erofs superblock
[  850.881791][T12201] usb 2-1: USB disconnect, device number 5
[  851.486661][T12973] tmpfs: Bad value for 'mpol'
[  852.744338][T12980] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1728'.
[  852.753462][T12980] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1728'.
[  852.762523][T12980] netlink: 81 bytes leftover after parsing attributes in process `syz.1.1728'.
[  852.965554][   T29] audit: type=1326 audit(1739966633.545:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67658cde9 code=0x7ffc0000
[  853.071976][   T29] audit: type=1326 audit(1739966633.565:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb67658cde9 code=0x7ffc0000
[  853.119092][T12994] dccp_invalid_packet: P.Data Offset(100) too large
[  853.133481][T12992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'.
[  853.195678][   T29] audit: type=1326 audit(1739966633.565:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67658cde9 code=0x7ffc0000
[  853.212538][T12996] sctp: [Deprecated]: syz.0.1734 (pid 12996) Use of struct sctp_assoc_value in delayed_ack socket option.
[  853.212538][T12996] Use struct sctp_sack_info instead
[  853.294613][   T29] audit: type=1326 audit(1739966633.585:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67658cde9 code=0x7ffc0000
[  853.374713][   T29] audit: type=1326 audit(1739966633.585:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb67658cde9 code=0x7ffc0000
[  853.542562][   T29] audit: type=1326 audit(1739966633.585:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67658cde9 code=0x7ffc0000
[  853.565364][   T29] audit: type=1326 audit(1739966633.585:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67658cde9 code=0x7ffc0000
[  853.587758][   T29] audit: type=1326 audit(1739966633.595:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb67658cde9 code=0x7ffc0000
[  853.683122][T13004] FAULT_INJECTION: forcing a failure.
[  853.683122][T13004] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  853.696289][T13004] CPU: 0 UID: 0 PID: 13004 Comm: syz.2.1735 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0
[  853.696309][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  853.696319][T13004] Call Trace:
[  853.696326][T13004]  <TASK>
[  853.696333][T13004]  dump_stack_lvl+0x241/0x360
[  853.696357][T13004]  ? __pfx_dump_stack_lvl+0x10/0x10
[  853.696375][T13004]  ? __pfx__printk+0x10/0x10
[  853.696400][T13004]  ? __pfx_lock_release+0x10/0x10
[  853.696437][T13004]  should_fail_ex+0x40a/0x550
[  853.696462][T13004]  _copy_from_iter+0x1df/0x1c40
[  853.696481][T13004]  ? __pfx_preempt_schedule+0x10/0x10
[  853.696500][T13004]  ? __pfx_lock_release+0x10/0x10
[  853.696527][T13004]  ? __virt_addr_valid+0x183/0x530
[  853.696551][T13004]  ? __pfx__copy_from_iter+0x10/0x10
[  853.696568][T13004]  ? __virt_addr_valid+0x449/0x530
[  853.696589][T13004]  ? __virt_addr_valid+0x4e1/0x530
[  853.696613][T13004]  ? __virt_addr_valid+0x45f/0x530
[  853.696635][T13004]  ? __phys_addr_symbol+0x2f/0x70
[  853.696657][T13004]  ? __check_object_size+0x47a/0x730
[  853.696686][T13004]  netlink_sendmsg+0x742/0xcb0
[  853.696715][T13004]  ? __pfx_netlink_sendmsg+0x10/0x10
[  853.696743][T13004]  ? __pfx_netlink_sendmsg+0x10/0x10
[  853.696759][T13004]  __sock_sendmsg+0x221/0x270
[  853.696780][T13004]  ____sys_sendmsg+0x53a/0x860
[  853.696812][T13004]  ? __pfx_____sys_sendmsg+0x10/0x10
[  853.696833][T13004]  ? __fget_files+0x2a/0x410
[  853.696853][T13004]  ? __fget_files+0x2a/0x410
[  853.696878][T13004]  __sys_sendmsg+0x269/0x350
[  853.696899][T13004]  ? finish_task_switch+0x1e5/0x870
[  853.696927][T13004]  ? __pfx___sys_sendmsg+0x10/0x10
[  853.696948][T13004]  ? __schedule+0x18c4/0x4c40
[  853.697003][T13004]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  853.697027][T13004]  ? do_syscall_64+0x100/0x230
[  853.697050][T13004]  ? do_syscall_64+0xb6/0x230
[  853.697072][T13004]  do_syscall_64+0xf3/0x230
[  853.697092][T13004]  ? clear_bhb_loop+0x35/0x90
[  853.697116][T13004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.697137][T13004] RIP: 0033:0x7fbb60b8cde9
[  853.697152][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  853.697165][T13004] RSP: 002b:00007fbb6195e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  853.697184][T13004] RAX: ffffffffffffffda RBX: 00007fbb60da6160 RCX: 00007fbb60b8cde9
[  853.697197][T13004] RDX: 0000000000000000 RSI: 0000400000000400 RDI: 0000000000000007
[  853.697207][T13004] RBP: 00007fbb6195e090 R08: 0000000000000000 R09: 0000000000000000
[  853.697218][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  853.697228][T13004] R13: 0000000000000000 R14: 00007fbb60da6160 R15: 00007ffe6bdffe38
[  853.697253][T13004]  </TASK>
[  854.047226][   T29] audit: type=1326 audit(1739966633.595:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67658cde9 code=0x7ffc0000
[  854.069660][   T29] audit: type=1326 audit(1739966633.645:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb67658cde9 code=0x7ffc0000
[  854.951730][T12201] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  855.122410][T12201] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  855.157385][T12201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  855.203175][T12201] usb 4-1: config 0 descriptor??
[  855.232633][T12201] gspca_main: cpia1-2.14.0 probing 0813:0001
[  855.320839][T13019] overlayfs: statfs failed on './file0'
[  855.492597][    T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  855.691785][    T8] usb 1-1: Using ep0 maxpacket: 8
[  855.705594][T13026] input: syz1 as /devices/virtual/input/input58
[  855.744499][    T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  855.775336][    T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  855.821685][    T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  855.878197][    T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  855.964154][    T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  856.022708][    T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  856.032824][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  856.057969][    T8] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22
[  856.217589][T13030] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1742'.
[  856.227394][T13030] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1742'.
[  856.236929][T13030] netlink: 81 bytes leftover after parsing attributes in process `syz.2.1742'.
[  856.822455][T12201] gspca_cpia1: usb_control_msg 01, error -110
[  856.829749][T12201] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  856.981852][T13020] Bluetooth: hci3: command 0x0406 tx timeout
[  856.990093][T12650] Bluetooth: hci5: command 0x0406 tx timeout
[  857.690568][T13039] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  857.757079][T13039] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  858.023373][T12201] usb 4-1: USB disconnect, device number 8
[  858.360994][T13049] loop6: detected capacity change from 0 to 524287999
[  858.428077][    T8] usb 1-1: USB disconnect, device number 12
[  858.830913][T13050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1748'.
[  860.642525][   T25] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  860.915501][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  860.915614][   T29] audit: type=1326 audit(1739966641.425:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13058 comm="syz.0.1750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f332d18cde9 code=0x0
[  861.407685][   T25] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77
[  861.438959][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.461057][   T25] usb 4-1: Product: syz
[  861.471619][   T25] usb 4-1: Manufacturer: syz
[  861.476236][   T25] usb 4-1: SerialNumber: syz
[  861.502248][   T25] usb 4-1: config 0 descriptor??
[  861.584127][   T25] usb 4-1: USB disconnect, device number 9
[  861.916913][ T5908] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  862.349799][T13074] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1754'.
[  862.359262][T13074] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1754'.
[  862.368777][T13074] netlink: 81 bytes leftover after parsing attributes in process `syz.4.1754'.
[  862.374968][ T5908] usb 1-1: Using ep0 maxpacket: 32
[  862.558240][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  862.702502][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  862.809361][ T5908] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  862.881851][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.902741][ T5908] usb 1-1: config 0 descriptor??
[  862.928077][ T5908] hub 1-1:0.0: USB hub found
[  863.192201][ T5908] hub 1-1:0.0: 1 port detected
[  863.222104][T13079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1757'.
[  864.022107][T13084] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1753'.
[  864.452499][ T5908] hub 1-1:0.0: hub_hub_status failed (err = -32)
[  864.503588][ T5908] hub 1-1:0.0: config failed, can't get hub status (err -32)
[  864.588714][ T5908] usbhid 1-1:0.0: can't add hid device: -32
[  864.602558][ T5908] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  865.296008][   T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  865.661584][   T25] usb 4-1: Using ep0 maxpacket: 8
[  865.668239][   T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  865.690539][   T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  865.712106][   T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  865.722046][T13100] overlayfs: statfs failed on './file0'
[  865.732126][   T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  865.780033][   T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  865.831926][   T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  865.856400][T13102] dccp_invalid_packet: P.Data Offset(100) too large
[  865.863585][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.503339][T12230] usb 1-1: USB disconnect, device number 13
[  866.519780][   T25] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22
[  866.594804][ T3582] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.774968][  T976] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  866.798647][ T3582] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.975601][   T29] audit: type=1326 audit(1739966647.555:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13107 comm="syz.4.1764" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4da698cde9 code=0x0
[  866.996643][    C0] vkms_vblank_simulate: vblank timer overrun
[  867.591153][  T976] usb 2-1: Using ep0 maxpacket: 16
[  867.618102][  T976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  867.663390][  T976] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  867.672567][ T3582] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  868.061626][  T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.137315][  T976] usb 2-1: Product: syz
[  868.175758][  T976] usb 2-1: Manufacturer: syz
[  868.231163][  T976] usb 2-1: SerialNumber: syz
[  868.276750][  T976] usb 2-1: config 0 descriptor??
[  868.278230][ T3582] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  868.288552][  T976] usb 2-1: can't set config #0, error -71
[  868.322975][  T976] usb 2-1: USB disconnect, device number 6
[  869.253921][T12230] usb 4-1: USB disconnect, device number 10
[  869.341820][ T3582] bridge_slave_0: left allmulticast mode
[  869.347532][ T3582] bridge_slave_0: left promiscuous mode
[  869.379109][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state
[  869.463098][T13134] Invalid option length (0) for dns_resolver key
[  870.291108][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  870.298250][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  870.767867][ T3582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  870.789767][ T3582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  870.834973][ T3582] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  870.863397][ T3582] bond0 (unregistering): Released all slaves
[  870.973503][ T3582] fþ²¹¥‰!: left promiscuous mode
[  871.368770][ T3582] IPVS: stopping backup sync thread 9290 ...
[  871.975303][T13151] dccp_invalid_packet: P.Data Offset(100) too large
[  873.051633][ T5136] Bluetooth: hci2: command 0x0406 tx timeout
[  874.667474][ T3582] hsr_slave_0: left promiscuous mode
[  874.740465][ T3582] hsr_slave_1: left promiscuous mode
[  874.850182][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  875.087958][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_0
[  875.271758][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  875.295567][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_1
[  875.828094][ T3582] veth1_macvtap: left promiscuous mode
[  875.870047][ T3582] veth0_macvtap: left promiscuous mode
[  875.889279][ T3582] veth1_vlan: left promiscuous mode
[  875.889420][ T3582] veth0_vlan: left promiscuous mode
[  876.012918][ T5908] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  876.201854][ T5908] usb 1-1: Using ep0 maxpacket: 8
[  876.255163][ T5908] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  877.100044][ T5908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  877.711633][ T5908] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  877.737166][ T5908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  877.764344][ T5908] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  877.813873][ T5908] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  877.944333][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.986205][ T5908] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22
[  878.727840][ T5908] usb 1-1: USB disconnect, device number 14
[  878.919347][T13211] xt_hashlimit: max too large, truncated to 1048576
[  880.734853][ T3582] team0 (unregistering): Port device team_slave_1 removed
[  880.808775][ T3582] team0 (unregistering): Port device team_slave_0 removed
[  881.472000][T13219] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1790'.
[  881.481045][T13219] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1790'.
[  881.491781][T13219] netlink: 81 bytes leftover after parsing attributes in process `syz.3.1790'.
[  881.567780][T13227] dccp_invalid_packet: P.Data Offset(100) too large
[  882.621263][ T5842] Bluetooth: hci0: command 0x0406 tx timeout
[  883.476428][ T3582] IPVS: stop unused estimator thread 0...
[  883.639888][T13247] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  884.113743][ T5136] Bluetooth: hci3: unexpected event for opcode 0x2011
[  885.331874][ T5879] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  885.781815][ T5879] usb 5-1: Using ep0 maxpacket: 8
[  886.598042][ T5879] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  886.655980][ T5879] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  886.757318][ T5879] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  886.848437][ T5879] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  886.896735][ T5879] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  886.979476][ T5879] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  887.001782][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.034124][ T5879] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22
[  888.120858][T13278] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  888.184189][ T5136] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  888.193154][ T5136] Bluetooth: hci3: Injecting HCI hardware error event
[  888.204185][ T5136] Bluetooth: hci3: hardware error 0x00
[  888.810790][ T5879] usb 5-1: USB disconnect, device number 9
[  889.092839][T13320] lo: entered promiscuous mode
[  889.235183][T13325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1828'.
[  889.298619][T13330] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1831'.
[  889.311666][ T5842] Bluetooth: hci0: command 0x0406 tx timeout
[  890.217358][  T976] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  890.341616][ T5136] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  890.394237][  T976] usb 3-1: Using ep0 maxpacket: 16
[  890.416951][  T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  890.452395][  T976] usb 3-1: config 0 has no interfaces?
[  890.479597][  T976] usb 3-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00
[  890.509520][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.547576][ T6338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.559068][  T976] usb 3-1: config 0 descriptor??
[  890.674086][ T6338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.829887][ T6338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  891.066130][ T6338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  891.152285][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  891.164362][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  891.174080][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  891.186695][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  891.195967][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  891.203591][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  891.527763][ T6338] bridge_slave_1: left allmulticast mode
[  891.537858][ T6338] bridge_slave_1: left promiscuous mode
[  891.544252][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.555247][ T6338] bridge_slave_0: left allmulticast mode
[  891.560968][ T6338] bridge_slave_0: left promiscuous mode
[  891.568113][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.706415][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1869'.
[  893.053289][   T25] usb 3-1: USB disconnect, device number 5
[  893.131342][ T6338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  893.204523][ T6338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  893.223770][ T5842] Bluetooth: hci4: command tx timeout
[  893.297921][ T6338] bond0 (unregistering): Released all slaves
[  893.353175][ T6338] bond1 (unregistering): Released all slaves
[  893.621690][   T25] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  893.755730][T13392] chnl_net:caif_netlink_parms(): no params data found
[  893.762376][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'.
[  893.835584][   T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 255, setting to 64
[  893.885401][   T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  893.916969][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.938043][   T25] usb 3-1: Product: syz
[  893.948272][   T25] usb 3-1: Manufacturer: syz
[  893.957464][   T25] usb 3-1: SerialNumber: syz
[  894.191410][T13437] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  894.202275][T13462] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1890'.
[  894.236083][T13462] unsupported nlmsg_type 40
[  894.367083][T13467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1891'.
[  894.376390][T13467] netlink: 'syz.1.1891': attribute type 2 has an invalid length.
[  894.388562][ T6338] hsr_slave_0: left promiscuous mode
[  894.411558][ T6338] hsr_slave_1: left promiscuous mode
[  894.427722][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  894.455179][ T6338] batman_adv: batadv0: Removing interface: batadv_slave_0
[  894.470282][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  894.479894][ T6338] batman_adv: batadv0: Removing interface: batadv_slave_1
[  894.546249][ T6338] veth1_macvtap: left promiscuous mode
[  894.552336][ T6338] veth0_macvtap: left promiscuous mode
[  894.557943][ T6338] veth1_vlan: left promiscuous mode
[  894.563384][ T6338] veth0_vlan: left promiscuous mode
[  894.581648][ T5908] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  894.776469][ T5908] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[  894.786374][ T5908] usb 1-1: config 0 has no interface number 0
[  894.794038][ T5908] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  894.805847][ T5908] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  894.819851][ T5908] usb 1-1: config 0 interface 255 has no altsetting 0
[  894.827001][ T5908] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  894.836683][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.850285][ T5908] usb 1-1: config 0 descriptor??
[  894.860360][ T5908] ums-realtek 1-1:0.255: USB Mass Storage device detected
[  894.868201][T13437] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  895.066098][T12182] usb 1-1: USB disconnect, device number 15
[  895.079136][   T25] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  895.093836][   T25] cdc_ncm 3-1:1.0: dwNtbInMaxSize=9 is too small. Using 2048
[  895.103893][   T25] cdc_ncm 3-1:1.0: setting rx_max = 2048
[  895.180448][ T6338] team0 (unregistering): Port device team_slave_1 removed
[  895.237581][ T6338] team0 (unregistering): Port device team_slave_0 removed
[  895.279760][   T25] cdc_ncm 3-1:1.0: setting tx_max = 184
[  895.311982][ T5842] Bluetooth: hci4: command tx timeout
[  895.697414][T13392] bridge0: port 1(bridge_slave_0) entered blocking state
[  895.705522][T13392] bridge0: port 1(bridge_slave_0) entered disabled state
[  895.717343][T13392] bridge_slave_0: entered allmulticast mode
[  895.733717][T13392] bridge_slave_0: entered promiscuous mode
[  895.746895][T13392] bridge0: port 2(bridge_slave_1) entered blocking state
[  895.754389][T13392] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.763136][T13392] bridge_slave_1: entered allmulticast mode
[  895.770143][T13392] bridge_slave_1: entered promiscuous mode
[  895.818423][   T25] cdc_ncm 3-1:1.0 eth20: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  895.917608][   T25] usb 3-1: USB disconnect, device number 6
[  895.949430][   T25] cdc_ncm 3-1:1.0 eth20: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[  896.043762][T13392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  896.082911][T13392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  896.322981][T13392] team0: Port device team_slave_0 added
[  896.448951][T13392] team0: Port device team_slave_1 added
[  896.569553][T13392] batman_adv: batadv0: Adding interface: batadv_slave_0
[  896.582926][T13392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  896.617322][   T25] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  896.626237][T13392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  896.667786][T13392] batman_adv: batadv0: Adding interface: batadv_slave_1
[  896.696508][T13392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  896.730297][T13392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  896.812745][   T25] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  896.828870][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.849102][   T25] usb 3-1: config 0 descriptor??
[  896.885795][T13392] hsr_slave_0: entered promiscuous mode
[  896.893536][T13392] hsr_slave_1: entered promiscuous mode
[  897.382340][ T5842] Bluetooth: hci4: command tx timeout
[  897.464422][T13392] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  897.491025][T13392] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  897.514888][T13392] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  897.540340][T13392] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  897.594903][T12201] kernel read not supported for file /ppp (pid: 12201 comm: kworker/0:5)
[  897.668586][T13392] 8021q: adding VLAN 0 to HW filter on device bond0
[  897.694393][T13392] 8021q: adding VLAN 0 to HW filter on device team0
[  897.717240][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state
[  897.724374][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  897.765461][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state
[  897.772592][ T6340] bridge0: port 2(bridge_slave_1) entered forwarding state
[  897.799250][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1916'.
[  897.879368][   T25] pegasus 3-1:0.0: probe with driver pegasus failed with error -71
[  897.905602][   T25] usb 3-1: USB disconnect, device number 7
[  898.153968][T13392] 8021q: adding VLAN 0 to HW filter on device batadv0
[  898.583360][T13392] veth0_vlan: entered promiscuous mode
[  898.611519][T13392] veth1_vlan: entered promiscuous mode
[  898.691245][T13392] veth0_macvtap: entered promiscuous mode
[  898.705078][T13392] veth1_macvtap: entered promiscuous mode
[  899.023776][T13576] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1932'.
[  899.054980][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  899.081558][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.091398][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  899.130579][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.157312][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  899.168054][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.179463][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  899.197331][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.208786][T13392] batman_adv: batadv0: Interface activated: batadv_slave_0
[  899.244246][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  899.269006][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.341671][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  899.352881][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.362932][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  899.373565][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.390129][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  899.401012][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.426310][T13392] batman_adv: batadv0: Interface activated: batadv_slave_1
[  899.439031][T13588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1938'.
[  899.466150][ T5842] Bluetooth: hci4: command tx timeout
[  899.520443][T13392] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  899.529529][T13392] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  899.538345][T13392] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  899.547959][T13392] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  900.958841][T13603] IPv6: NLM_F_CREATE should be specified when creating new route
[  900.986418][T13603] IPv6: Can't replace route, no match found
[  901.465163][ T6338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  901.660664][ T6338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  901.810536][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  901.840683][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  901.854106][T13620] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1951'.
[  906.507077][ T5842] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  909.745620][   T29] audit: type=1326 audit(1739966690.325:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13751 comm="syz.0.2000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f332d18cde9 code=0x0
[  910.749728][T13806] netlink: 296 bytes leftover after parsing attributes in process `syz.5.2024'.
[  912.903926][T13870] wireguard0: entered promiscuous mode
[  913.113429][T13870] wireguard0: entered allmulticast mode
[  914.566461][T13923] fuse: Unknown parameter '0xffffffffffffffff'
[  914.653813][   T29] audit: type=1107 audit(1739966695.225:187): pid=13926 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=''
[  914.770959][T13933] CIFS mount error: No usable UNC path provided in device string!
[  914.770959][T13933] 
[  914.794020][T13933] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  914.908999][T13935] xt_CT: No such helper "syz1"
[  915.037233][T13943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2079'.
[  916.070078][T13980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2092'.
[  916.288566][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2093'.
[  917.979519][T14020] input: syz0 as /devices/virtual/input/input65
[  918.429982][T14041] tmpfs: Unknown parameter 'r'
[  918.669807][T14054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2119'.
[  918.709516][T14054] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2119'.
[  918.727301][T12230] IPVS: starting estimator thread 0...
[  918.738544][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  918.809037][T14054] geneve2: entered allmulticast mode
[  918.821806][T14062] IPVS: using max 21 ests per chain, 50400 per kthread
[  919.112252][T14072] wireguard0: entered promiscuous mode
[  919.159191][T14072] wireguard0: entered allmulticast mode
[  920.752842][T14119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  920.767862][T14119] batman_adv: batadv0: Removing interface: batadv_slave_1
[  920.780200][T14119] netlink: 'syz.0.2142': attribute type 3 has an invalid length.
[  920.808401][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2142'.
[  920.818187][T14119] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  928.751612][T12230] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  928.991607][T12230] usb 2-1: Using ep0 maxpacket: 16
[  929.005405][T12230] usb 2-1: config 0 has an invalid interface number: 194 but max is 0
[  929.013843][T12230] usb 2-1: config 0 has no interface number 0
[  929.069291][T12230] usb 2-1: config 0 interface 194 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32
[  929.080886][T12230] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=3d.96
[  929.090040][T12230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  929.116042][T12230] usb 2-1: config 0 descriptor??
[  929.134314][T14233] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  930.191889][T12230] ath6kl: Failed to submit usb control message: -71
[  930.200686][T12230] ath6kl: unable to send the bmi data to the device: -71
[  930.208147][T12230] ath6kl: Unable to send get target info: -71
[  930.231589][T12230] ath6kl: Failed to init ath6kl core: -71
[  930.238001][T12230] ath6kl_usb 2-1:0.194: probe with driver ath6kl_usb failed with error -71
[  930.286497][T12230] usb 2-1: USB disconnect, device number 7
[  930.371139][T14248] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  930.450332][T14248] vimc vimc.0: subdev_call error Scaler
[  930.468871][T14258] overlayfs: statfs failed on './file0'
[  930.469846][T14248] ------------[ cut here ]------------
[  930.480316][T14248] WARNING: CPU: 0 PID: 14248 at drivers/media/v4l2-core/v4l2-subdev.c:460 call_s_stream+0x222/0x280
[  930.491336][T14248] Modules linked in:
[  930.495453][T14248] CPU: 0 UID: 0 PID: 14248 Comm: syz.5.2188 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0
[  930.506778][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  930.517310][T14248] RIP: 0010:call_s_stream+0x222/0x280
[  930.522726][T14248] Code: 31 07 fa 48 8b 7d 00 48 c7 c6 20 7b eb 8c 89 da e8 43 15 0a f9 48 bd 00 00 00 00 00 fc ff df e9 06 ff ff ff e8 2f 78 a2 f9 90 <0f> 0b 90 e9 de fe ff ff 89 e9 80 e1 07 38 c1 0f 8c 09 fe ff ff 48
[  930.542364][T14248] RSP: 0018:ffffc9000cca7980 EFLAGS: 00010283
[  930.548415][T14248] RAX: ffffffff881f4201 RBX: 0000000000000000 RCX: 0000000000080000
[  930.556447][T14248] RDX: ffffc90018577000 RSI: 0000000000008966 RDI: 0000000000008967
[  930.564579][T14248] RBP: 0000000000000000 R08: ffffffff881f4048 R09: 1ffff92001994e94
[  930.572629][T14248] R10: dffffc0000000000 R11: ffffffff881f3fe0 R12: ffff88802ad4b020
[  930.580604][T14248] R13: 0000000000000000 R14: 1ffff110055a9633 R15: 0000000000000000
[  930.588666][T14248] FS:  00007f66f29e46c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  930.597620][T14248] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  930.604248][T14248] CR2: 000055556284b808 CR3: 00000000683e8000 CR4: 00000000003526f0
[  930.612626][T14248] Call Trace:
[  930.615893][T14248]  <TASK>
[  930.618805][T14248]  ? __warn+0x165/0x4d0
[  930.623664][T14248]  ? call_s_stream+0x222/0x280
[  930.628461][T14248]  ? report_bug+0x2b3/0x500
[  930.633022][T14248]  ? call_s_stream+0x222/0x280
[  930.637780][T14248]  ? handle_bug+0x60/0x90
[  930.642131][T14248]  ? exc_invalid_op+0x1a/0x50
[  930.646794][T14248]  ? asm_exc_invalid_op+0x1a/0x20
[  930.651838][T14248]  ? __pfx_call_s_stream+0x10/0x10
[  930.656932][T14248]  ? call_s_stream+0x68/0x280
[  930.661664][T14248]  ? call_s_stream+0x221/0x280
[  930.666416][T14248]  ? call_s_stream+0x222/0x280
[  930.671164][T14248]  ? __pfx_call_s_stream+0x10/0x10
[  930.676314][T14248]  ? __pfx_call_s_stream+0x10/0x10
[  930.681409][T14248]  vimc_streamer_pipeline_terminate+0x219/0x360
[  930.687676][T14248]  vimc_streamer_s_stream+0x69f/0x800
[  930.693062][T14248]  vimc_capture_start_streaming+0x230/0x440
[  930.698940][T14248]  ? __pfx___mutex_lock+0x10/0x10
[  930.704012][T14248]  ? __pfx_vimc_capture_start_streaming+0x10/0x10
[  930.710423][T14248]  vb2_start_streaming+0x129/0x440
[  930.715972][T14248]  vb2_core_streamon+0x2b5/0x4c0
[  930.720900][T14248]  __video_do_ioctl+0xc23/0xdd0
[  930.726072][T14248]  ? __pfx___video_do_ioctl+0x10/0x10
[  930.731434][T14248]  ? smack_log+0x10d/0x5c0
[  930.735874][T14248]  ? __might_fault+0xaa/0x120
[  930.740553][T14248]  video_usercopy+0x903/0x11e0
[  930.745369][T14248]  ? __pfx___video_do_ioctl+0x10/0x10
[  930.750730][T14248]  ? __pfx_video_usercopy+0x10/0x10
[  930.755936][T14248]  ? smack_file_ioctl+0x2a5/0x3b0
[  930.760949][T14248]  ? __fget_files+0x2a/0x410
[  930.765584][T14248]  ? __fget_files+0x2a/0x410
[  930.770158][T14248]  v4l2_ioctl+0x189/0x1e0
[  930.774504][T14248]  ? __pfx_v4l2_ioctl+0x10/0x10
[  930.779344][T14248]  __se_sys_ioctl+0xf5/0x170
[  930.783961][T14248]  do_syscall_64+0xf3/0x230
[  930.788447][T14248]  ? clear_bhb_loop+0x35/0x90
[  930.793150][T14248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  930.799028][T14248] RIP: 0033:0x7f66f1b8cde9
[  930.803482][T14248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  930.823515][T14248] RSP: 002b:00007f66f29e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  930.832299][T14248] RAX: ffffffffffffffda RBX: 00007f66f1da6080 RCX: 00007f66f1b8cde9
[  930.840257][T14248] RDX: 0000400000000000 RSI: 0000000040045612 RDI: 0000000000000005
[  930.848256][T14248] RBP: 00007f66f1c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  930.856236][T14248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  930.864233][T14248] R13: 0000000000000000 R14: 00007f66f1da6080 R15: 00007ffe1e2a6d38
[  930.872223][T14248]  </TASK>
[  930.875257][T14248] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  930.882543][T14248] CPU: 0 UID: 0 PID: 14248 Comm: syz.5.2188 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0
[  930.893291][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  930.903330][T14248] Call Trace:
[  930.906596][T14248]  <TASK>
[  930.909526][T14248]  dump_stack_lvl+0x241/0x360
[  930.914207][T14248]  ? __pfx_dump_stack_lvl+0x10/0x10
[  930.919399][T14248]  ? __pfx__printk+0x10/0x10
[  930.923984][T14248]  ? _printk+0xd5/0x120
[  930.928136][T14248]  ? __init_begin+0x41000/0x41000
[  930.933155][T14248]  ? vscnprintf+0x5d/0x90
[  930.937476][T14248]  panic+0x349/0x880
[  930.941366][T14248]  ? __warn+0x174/0x4d0
[  930.945514][T14248]  ? __pfx_panic+0x10/0x10
[  930.949934][T14248]  __warn+0x344/0x4d0
[  930.953905][T14248]  ? call_s_stream+0x222/0x280
[  930.958661][T14248]  report_bug+0x2b3/0x500
[  930.962978][T14248]  ? call_s_stream+0x222/0x280
[  930.967736][T14248]  handle_bug+0x60/0x90
[  930.971888][T14248]  exc_invalid_op+0x1a/0x50
[  930.976381][T14248]  asm_exc_invalid_op+0x1a/0x20
[  930.981219][T14248] RIP: 0010:call_s_stream+0x222/0x280
[  930.986583][T14248] Code: 31 07 fa 48 8b 7d 00 48 c7 c6 20 7b eb 8c 89 da e8 43 15 0a f9 48 bd 00 00 00 00 00 fc ff df e9 06 ff ff ff e8 2f 78 a2 f9 90 <0f> 0b 90 e9 de fe ff ff 89 e9 80 e1 07 38 c1 0f 8c 09 fe ff ff 48
[  931.006182][T14248] RSP: 0018:ffffc9000cca7980 EFLAGS: 00010283
[  931.012246][T14248] RAX: ffffffff881f4201 RBX: 0000000000000000 RCX: 0000000000080000
[  931.020207][T14248] RDX: ffffc90018577000 RSI: 0000000000008966 RDI: 0000000000008967
[  931.028168][T14248] RBP: 0000000000000000 R08: ffffffff881f4048 R09: 1ffff92001994e94
[  931.036128][T14248] R10: dffffc0000000000 R11: ffffffff881f3fe0 R12: ffff88802ad4b020
[  931.044088][T14248] R13: 0000000000000000 R14: 1ffff110055a9633 R15: 0000000000000000
[  931.052051][T14248]  ? __pfx_call_s_stream+0x10/0x10
[  931.057157][T14248]  ? call_s_stream+0x68/0x280
[  931.061822][T14248]  ? call_s_stream+0x221/0x280
[  931.066578][T14248]  ? __pfx_call_s_stream+0x10/0x10
[  931.071679][T14248]  ? __pfx_call_s_stream+0x10/0x10
[  931.076778][T14248]  vimc_streamer_pipeline_terminate+0x219/0x360
[  931.083013][T14248]  vimc_streamer_s_stream+0x69f/0x800
[  931.088381][T14248]  vimc_capture_start_streaming+0x230/0x440
[  931.094266][T14248]  ? __pfx___mutex_lock+0x10/0x10
[  931.099283][T14248]  ? __pfx_vimc_capture_start_streaming+0x10/0x10
[  931.105686][T14248]  vb2_start_streaming+0x129/0x440
[  931.110790][T14248]  vb2_core_streamon+0x2b5/0x4c0
[  931.115718][T14248]  __video_do_ioctl+0xc23/0xdd0
[  931.120585][T14248]  ? __pfx___video_do_ioctl+0x10/0x10
[  931.125960][T14248]  ? smack_log+0x10d/0x5c0
[  931.130367][T14248]  ? __might_fault+0xaa/0x120
[  931.135039][T14248]  video_usercopy+0x903/0x11e0
[  931.139802][T14248]  ? __pfx___video_do_ioctl+0x10/0x10
[  931.145180][T14248]  ? __pfx_video_usercopy+0x10/0x10
[  931.150380][T14248]  ? smack_file_ioctl+0x2a5/0x3b0
[  931.155404][T14248]  ? __fget_files+0x2a/0x410
[  931.159983][T14248]  ? __fget_files+0x2a/0x410
[  931.164560][T14248]  v4l2_ioctl+0x189/0x1e0
[  931.168882][T14248]  ? __pfx_v4l2_ioctl+0x10/0x10
[  931.173730][T14248]  __se_sys_ioctl+0xf5/0x170
[  931.178313][T14248]  do_syscall_64+0xf3/0x230
[  931.182805][T14248]  ? clear_bhb_loop+0x35/0x90
[  931.187477][T14248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.193362][T14248] RIP: 0033:0x7f66f1b8cde9
[  931.197765][T14248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  931.217360][T14248] RSP: 002b:00007f66f29e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  931.225766][T14248] RAX: ffffffffffffffda RBX: 00007f66f1da6080 RCX: 00007f66f1b8cde9
[  931.233732][T14248] RDX: 0000400000000000 RSI: 0000000040045612 RDI: 0000000000000005
[  931.241692][T14248] RBP: 00007f66f1c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  931.249653][T14248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  931.257613][T14248] R13: 0000000000000000 R14: 00007f66f1da6080 R15: 00007ffe1e2a6d38
[  931.265597][T14248]  </TASK>
[  931.268848][T14248] Kernel Offset: disabled
[  931.273232][T14248] Rebooting in 86400 seconds..