last executing test programs:

6m12.275197711s ago: executing program 2 (id=6):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x120)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @empty, 0x7}], 0x1c)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="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"})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

6m8.194152656s ago: executing program 2 (id=7):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x126, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]}, 0x78)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004810)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x8000, 0x8}, {0x40000, 0xfffffffe}]}, 0x14, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x35dc00, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
fchmod(0xffffffffffffffff, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x4d, 0xea1a})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6m4.450018665s ago: executing program 2 (id=11):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, 0x0)
sendto$inet(r0, &(0x7f0000000580)="04", 0x2bc, 0x10008095, 0x0, 0x0)

6m3.178428626s ago: executing program 2 (id=14):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mkdir(0x0, 0x2)
creat(0x0, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="eb4c", 0x2}], 0x1}, 0x4045)
setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4)
recvmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122)
sendmsg$inet(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
unlinkat(r5, &(0x7f00000001c0)='./file0\x00', 0x200)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
ioctl$FICLONE(r1, 0x40049409, r6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)

5m58.657423934s ago: executing program 2 (id=16):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x120)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @empty, 0x7}], 0x1c)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}})
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="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"})
ptrace$peek(0x1, r0, &(0x7f0000000300))
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

5m55.895792155s ago: executing program 2 (id=20):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mount(0x0, 0x0, 0x0, 0x40078, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f00000001c0)='btrfs\x00', 0x1000080, 0x0)

5m40.665334812s ago: executing program 32 (id=20):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mount(0x0, 0x0, 0x0, 0x40078, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f00000001c0)='btrfs\x00', 0x1000080, 0x0)

4m47.860936571s ago: executing program 1 (id=107):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53})
poll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x5ed878fceb9bd0c7}], 0x1, 0xb4e9)

4m47.840338312s ago: executing program 4 (id=109):
syz_emit_ethernet(0x72, &(0x7f0000000100)={@local, @local, @val, {@ipv4}}, 0x0)

4m47.667378733s ago: executing program 4 (id=111):
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000))

4m47.402446987s ago: executing program 4 (id=115):
r0 = socket(0x2, 0x3, 0x0)
r1 = dup(r0)
r2 = dup(r1)
setsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000080)="fd0cc085", 0x4)

4m46.87998212s ago: executing program 1 (id=118):
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000029, 0x23, &(0x7f0000000000)="5ab7", 0x2)

4m46.801966274s ago: executing program 4 (id=119):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="8c97298f30292dad", 0x8)

4m46.57937038s ago: executing program 4 (id=121):
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x3, 0x1, 0xffffffff00000001, 0x2fffffffc})
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000))

4m46.476867079s ago: executing program 1 (id=123):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0xfffffffd, 0x1000, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x890)

4m46.349178422s ago: executing program 4 (id=125):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18)
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$nl_xfrm(r2, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4m45.16103437s ago: executing program 1 (id=127):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40)
sendto$inet(r0, &(0x7f0000000580)="04", 0x2bc, 0x10008095, 0x0, 0x0)

4m44.629663689s ago: executing program 1 (id=130):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000"], 0x110}}, 0x0)

4m42.280480251s ago: executing program 1 (id=132):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004880}, 0x0)
r9 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
close(r9)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, r7, 0x2, 0x0)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0804124, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

4m30.959092628s ago: executing program 33 (id=125):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18)
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$nl_xfrm(r2, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4m26.601325531s ago: executing program 34 (id=132):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004880}, 0x0)
r9 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
close(r9)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, r7, 0x2, 0x0)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0804124, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

11.544589092s ago: executing program 0 (id=406):
r0 = io_uring_setup(0x491, &(0x7f0000000300)={0x0, 0x3a2b, 0x8, 0x2, 0x4000157})
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r1)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="252efbf9237d239cef637799a4b4395f6e18c3245d368b6793267fbe4a68d48eb65fffb77de9db13a417c7a48009c214675c2520a060850dbaf6c631e3d03d5e5cb52b0c913c735ae13d194ea5c192e79f05ac3d7bcff2f05c585d7d2dea1ebea68bbad15a04109d2f", @ANYRESOCT=r3], 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r7, 0x10000201, 0x0, 0x81, 0x3, [<r8=>0x0, 0x0, 0x0, <r9=>0x0], [0x3fd86826], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x4)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

10.1058652s ago: executing program 0 (id=409):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0)

9.033108242s ago: executing program 0 (id=410):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
r0 = openat2$dir(0xffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000))
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
landlock_restrict_self(0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
setuid(0xee01)

5.574468271s ago: executing program 3 (id=411):
r0 = io_uring_setup(0x491, &(0x7f0000000300)={0x0, 0x3a2b, 0x8, 0x2, 0x4000157})
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r1)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r4, 0x10000201, 0x0, 0x81, 0x3, [], [0x3fd86826], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.091167464s ago: executing program 0 (id=412):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0x2, 0x6, 0x401, 0x6, 0x2, 0xfffffffffffffffe, 0x8, 0x100000001, 0xba25, 0x1000, 0x4fe8, 0xfffffffffffffe00, 0x400000004], 0xeeef0000, 0x40080})
ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4})

3.699074618s ago: executing program 3 (id=413):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94)
ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$nl_xfrm(r2, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

3.588499204s ago: executing program 0 (id=414):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x8, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0x10, 0x2, 0x4)
r6 = dup(r2)
write$UHID_INPUT(r6, &(0x7f0000000000)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
name_to_handle_at(r6, &(0x7f0000002140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x600)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000078870470b900000100000000004ff5ca9063b74387d477a09023487413703326f48b84455172b07171f673"], 0x24, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000280)="2c4a2fc0ebf673e79655fa41e9c1cc2bed1fcd4dae44b16de91a9a3382d5fdb45c89be01459053e64062c342ddef71cd90dd253d37e50fe3b8c86c72302aa247ef1d1c200f95ac60dd67b2a81c610d31024fdfde68983d25aa95d52a45c1498e848529c3009b1574171b30dcdbbeb8f5a81d9216609817a394cb8199a055e36003558a6dc5955661fc05c5d07d6fbe5e1a470701eb9085dc7a1c6748042e3a2104940fa6ba2c1f35f3fe7b9c14d92802bdfe6b1eac16d15b9f2c6585cd365c86b40ee66395898da8f807c3628ff65e5357384d77144f912bb70360c811b7911cc85107cba61c296b8e1d427339cb7b", 0xef)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={[&(0x7f0000000040)='\xad$]+zT*)!#&\x00', &(0x7f0000000080)='^{$\x00', &(0x7f00000000c0)='\\^.!\x00']}, &(0x7f0000000240)={[&(0x7f0000000140)='\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='-\x00', &(0x7f0000000200)='-}$\x00']})

3.136322015s ago: executing program 3 (id=415):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x80, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)

2.986975903s ago: executing program 3 (id=416):
r0 = io_uring_setup(0x491, &(0x7f0000000300)={0x0, 0x3a2b, 0x8, 0x2, 0x4000157})
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r1)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="252efbf9237d239cef637799a4b4395f6e18c3245d368b6793267fbe4a68d48eb65fffb77de9db13a417c7a48009c214675c2520a060850dbaf6c631e3d03d5e5cb52b0c913c735ae13d194ea5c192e79f05ac3d7bcff2f05c585d7d2dea1ebea68bbad15a04109d2f", @ANYRESOCT=r3], 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r7, 0x10000201, 0x0, 0x81, 0x3, [<r8=>0x0, 0x0, 0x0, <r9=>0x0], [0x3fd86826], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x4)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

1.63181328s ago: executing program 3 (id=417):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0)

209.161365ms ago: executing program 3 (id=418):
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000400)=0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)

0s ago: executing program 0 (id=419):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x1000, 0x2, 0xbfcffffc}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x2}})
io_uring_enter(r5, 0x47f6, 0xfff5, 0x2, 0x0, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000400)=ANY=[@ANYBLOB="a82000ed0096d9be8cdc103acbd267c1824db7b202c987d14d6b12e292b3eb9a9eb25b84578ac170fd7aeb99d0e9575e53a9245b19fc06da7916bf6514f53635bdf8e9e8e444b141e4063bc00f30ed658718d1b8e80e783cd20565b696335d10803ac0df26bf9dc66f0c7ce2e14774b22599339eeddc31501bf113d6b68d000000", @ANYRES16, @ANYBLOB="010000000000fddbdf25080000000c0099000100000001000000"], 0x20}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f000000043000701fefffffffcdbdf25027c000004004580d6000180eece7a3dcc"], 0xf0}}, 0xc000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts.
[   82.678868][ T5790] cgroup: Unknown subsys name 'net'
[   82.949359][ T5790] cgroup: Unknown subsys name 'cpuset'
[   83.004668][ T5790] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   85.045730][ T5790] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.949337][    T9] cfg80211: failed to load regulatory.db
[   87.515547][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.522274][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.523634][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.527199][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.530801][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.531655][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.532427][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.533124][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.538269][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.539615][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.541452][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.542098][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.543528][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.544573][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.559122][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.562639][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.563312][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.570188][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.572241][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.579134][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.582179][   T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.583633][   T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.587802][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.596528][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.599054][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.636679][ T5806] chnl_net:caif_netlink_parms(): no params data found
[   88.661597][ T5802] chnl_net:caif_netlink_parms(): no params data found
[   88.684427][ T5803] chnl_net:caif_netlink_parms(): no params data found
[   89.015553][ T5805] chnl_net:caif_netlink_parms(): no params data found
[   89.060252][ T5804] chnl_net:caif_netlink_parms(): no params data found
[   89.586107][ T5822] Bluetooth: hci3: command tx timeout
[   89.586265][ T5819] Bluetooth: hci0: command tx timeout
[   89.664278][ T5822] Bluetooth: hci4: command tx timeout
[   89.664286][ T5808] Bluetooth: hci1: command tx timeout
[   89.664592][ T5819] Bluetooth: hci2: command tx timeout
[   89.692826][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.694824][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.695760][ T5806] bridge_slave_0: entered allmulticast mode
[   89.698690][ T5806] bridge_slave_0: entered promiscuous mode
[   89.728550][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.728675][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.728791][ T5802] bridge_slave_0: entered allmulticast mode
[   89.730349][ T5802] bridge_slave_0: entered promiscuous mode
[   89.734697][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.734838][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.735015][ T5803] bridge_slave_0: entered allmulticast mode
[   89.737658][ T5803] bridge_slave_0: entered promiscuous mode
[   89.740605][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.740728][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.740887][ T5806] bridge_slave_1: entered allmulticast mode
[   89.746326][ T5806] bridge_slave_1: entered promiscuous mode
[   89.805668][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.805807][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.805996][ T5802] bridge_slave_1: entered allmulticast mode
[   89.808944][ T5802] bridge_slave_1: entered promiscuous mode
[   89.811553][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.811675][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.811843][ T5803] bridge_slave_1: entered allmulticast mode
[   89.816083][ T5803] bridge_slave_1: entered promiscuous mode
[   90.451786][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.452065][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.452392][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.452589][ T5805] bridge_slave_0: entered allmulticast mode
[   90.485427][ T5805] bridge_slave_0: entered promiscuous mode
[   90.558307][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.568392][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.572800][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.573028][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.573156][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.573316][ T5805] bridge_slave_1: entered allmulticast mode
[   90.577381][ T5805] bridge_slave_1: entered promiscuous mode
[   90.578927][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.579050][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.579207][ T5804] bridge_slave_0: entered allmulticast mode
[   90.582025][ T5804] bridge_slave_0: entered promiscuous mode
[   90.589817][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.593405][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.785418][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.785541][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.785658][ T5804] bridge_slave_1: entered allmulticast mode
[   90.787299][ T5804] bridge_slave_1: entered promiscuous mode
[   91.497261][ T5806] team0: Port device team_slave_0 added
[   91.502095][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.577825][ T5802] team0: Port device team_slave_0 added
[   91.580155][ T5806] team0: Port device team_slave_1 added
[   91.581850][ T5803] team0: Port device team_slave_0 added
[   91.595438][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.600594][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.605164][ T5802] team0: Port device team_slave_1 added
[   91.664542][ T5819] Bluetooth: hci0: command tx timeout
[   91.664561][ T5822] Bluetooth: hci3: command tx timeout
[   91.688462][ T5803] team0: Port device team_slave_1 added
[   91.744237][ T5822] Bluetooth: hci1: command tx timeout
[   91.744256][ T5819] Bluetooth: hci2: command tx timeout
[   91.744284][ T5819] Bluetooth: hci4: command tx timeout
[   91.768730][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.186848][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.186861][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.186876][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.516882][ T5805] team0: Port device team_slave_0 added
[   92.586348][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.586366][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.586393][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.588509][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.588519][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.588533][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.589832][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.589842][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.589855][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.592905][ T5805] team0: Port device team_slave_1 added
[   92.597635][ T5804] team0: Port device team_slave_0 added
[   92.598481][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.598492][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.598515][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.615932][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.615949][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.615972][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.719801][ T5804] team0: Port device team_slave_1 added
[   92.889381][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.889394][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.889409][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.046678][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.046692][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.046707][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.047717][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.047738][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.047752][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.322141][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.322159][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.322185][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.431532][ T5806] hsr_slave_0: entered promiscuous mode
[   93.432897][ T5806] hsr_slave_1: entered promiscuous mode
[   93.552764][ T5802] hsr_slave_0: entered promiscuous mode
[   93.553904][ T5802] hsr_slave_1: entered promiscuous mode
[   93.556020][ T5802] debugfs: 'hsr0' already exists in 'hsr'
[   93.556118][ T5802] Cannot create hsr debugfs directory
[   93.567590][ T5803] hsr_slave_0: entered promiscuous mode
[   93.568901][ T5803] hsr_slave_1: entered promiscuous mode
[   93.570215][ T5803] debugfs: 'hsr0' already exists in 'hsr'
[   93.570238][ T5803] Cannot create hsr debugfs directory
[   93.745612][ T5808] Bluetooth: hci0: command tx timeout
[   93.745714][ T5822] Bluetooth: hci3: command tx timeout
[   93.824512][ T5822] Bluetooth: hci1: command tx timeout
[   93.824554][ T5819] Bluetooth: hci2: command tx timeout
[   93.824637][ T5808] Bluetooth: hci4: command tx timeout
[   94.086446][ T5805] hsr_slave_0: entered promiscuous mode
[   94.087380][ T5805] hsr_slave_1: entered promiscuous mode
[   94.088039][ T5805] debugfs: 'hsr0' already exists in 'hsr'
[   94.088059][ T5805] Cannot create hsr debugfs directory
[   94.272610][ T5804] hsr_slave_0: entered promiscuous mode
[   94.273487][ T5804] hsr_slave_1: entered promiscuous mode
[   94.274805][ T5804] debugfs: 'hsr0' already exists in 'hsr'
[   94.274829][ T5804] Cannot create hsr debugfs directory
[   95.593561][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   95.632856][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   95.669892][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   95.726229][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   95.824426][ T5819] Bluetooth: hci0: command tx timeout
[   95.824470][ T5808] Bluetooth: hci3: command tx timeout
[   95.859917][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   95.882067][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   95.904268][ T5819] Bluetooth: hci2: command tx timeout
[   95.904309][ T5819] Bluetooth: hci1: command tx timeout
[   95.904360][ T5808] Bluetooth: hci4: command tx timeout
[   95.936804][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   95.986514][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.112481][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   96.151481][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   96.196789][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   96.246760][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   96.412593][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.452698][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.485509][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.538250][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.643886][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.693126][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   96.721679][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   96.765912][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   96.805698][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   96.862187][ T5806] 8021q: adding VLAN 0 to HW filter on device team0
[   96.897544][ T1362] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.898721][ T1362] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.942132][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.942239][ T4029] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.981178][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.070268][ T5802] 8021q: adding VLAN 0 to HW filter on device team0
[   97.091205][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.120612][ T1362] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.120808][ T1362] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.166237][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.166850][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.222799][ T5804] 8021q: adding VLAN 0 to HW filter on device team0
[   97.283931][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.291601][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.308441][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.375898][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.376017][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.511512][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.525033][ T5803] 8021q: adding VLAN 0 to HW filter on device team0
[   97.558973][ T1362] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.559132][ T1362] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.606943][ T3980] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.607097][ T3980] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.662070][ T5805] 8021q: adding VLAN 0 to HW filter on device team0
[   97.709199][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.709355][ T4029] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.747709][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.786662][ T3980] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.786820][ T3980] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.130299][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.131243][ T5806] veth0_vlan: entered promiscuous mode
[   98.200118][ T5806] veth1_vlan: entered promiscuous mode
[   98.220170][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.369053][ T5802] veth0_vlan: entered promiscuous mode
[   98.401497][ T5806] veth0_macvtap: entered promiscuous mode
[   98.413091][ T5802] veth1_vlan: entered promiscuous mode
[   98.437259][ T5806] veth1_macvtap: entered promiscuous mode
[   98.505896][ T5804] veth0_vlan: entered promiscuous mode
[   98.547523][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.574729][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.580418][ T5804] veth1_vlan: entered promiscuous mode
[   98.605596][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.647453][ T5802] veth0_macvtap: entered promiscuous mode
[   98.649673][ T3980] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.653911][ T3980] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.682045][ T3980] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.684577][ T3980] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.694843][ T5802] veth1_macvtap: entered promiscuous mode
[   98.713063][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.937263][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.987374][ T5804] veth0_macvtap: entered promiscuous mode
[   99.026361][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.053369][ T5804] veth1_macvtap: entered promiscuous mode
[   99.137646][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.137680][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.168107][ T3989] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.168315][ T5803] veth0_vlan: entered promiscuous mode
[   99.189402][ T3989] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.201317][ T3989] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.221927][ T3989] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.285822][ T5803] veth1_vlan: entered promiscuous mode
[   99.338067][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.358270][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.358291][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.439582][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.512582][ T3462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.519929][ T3462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.524201][ T3462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.528085][ T3462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.633095][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.633116][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.694467][ T5803] veth0_macvtap: entered promiscuous mode
[   99.792867][ T5805] veth0_vlan: entered promiscuous mode
[   99.828787][ T5803] veth1_macvtap: entered promiscuous mode
[   99.913762][ T5805] veth1_vlan: entered promiscuous mode
[  100.128715][ T3980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.128739][ T3980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.304480][ T5925] =======================================================
[  100.304480][ T5925] WARNING: The mand mount option has been deprecated and
[  100.304480][ T5925]          and is ignored by this kernel. Remove the mand
[  100.304480][ T5925]          option from the mount to silence this warning.
[  100.304480][ T5925] =======================================================
[  100.506705][ T5926] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  100.509792][ T5926] overlayfs: overlapping lowerdir path
[  101.306691][ T3980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.306733][ T3980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.318601][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.441680][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.476907][ T4029] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.498620][ T4029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.500559][ T4029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.503552][ T4029] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.562119][ T5805] veth0_macvtap: entered promiscuous mode
[  102.439560][ T5805] veth1_macvtap: entered promiscuous mode
[  102.626849][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.626873][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.963012][ T5934] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  103.439561][ T5934] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  103.441631][ T5934] overlayfs: failed to look up (tracing) for ino (-66)
[  106.434052][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  106.536987][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.560277][ T4004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.560299][ T4004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.610829][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.806021][ T5940] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  108.594072][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  109.164787][ T5951] Bluetooth: MGMT ver 1.23
[  110.169673][ T3462] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.185506][ T1477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.185531][ T1477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.212928][ T3462] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.219763][ T3462] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.246310][ T3462] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.551302][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  110.551353][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  110.551392][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  110.551429][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  110.551467][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  110.551504][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  110.551541][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  110.551579][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  116.408336][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.408359][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.617629][ T5980] 9pnet_virtio: no channels available for device syz
[  116.814939][ T5981] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  116.816096][ T5981] overlayfs: overlapping lowerdir path
[  118.795748][ T5979] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  118.883100][   T37] audit: type=1326 audit(1767701343.983:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5976 comm="syz.3.4" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b56eaf749 code=0x0
[  118.897116][  T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.897138][  T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.053124][ T5983] openvswitch: netlink: IPv4 tun info is not correct
[  119.319531][ T5990] overlayfs: overlapping lowerdir path
[  120.531547][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[  122.313748][ T6008] 9pnet_virtio: no channels available for device syz
[  122.771538][ T6008] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  122.773144][ T6008] overlayfs: overlapping lowerdir path
[  124.217369][    C0] Illegal XDP return value 16128 on prog  (id 6) dev veth0_to_bond, expect packet loss!
[  126.300334][ T6025] Process accounting resumed
[  126.713177][ T6029] 9pnet_virtio: no channels available for device syz
[  129.947262][ T6043] 9pnet_virtio: no channels available for device syz
[  130.715502][ T6043] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  130.716066][ T6043] overlayfs: overlapping lowerdir path
[  133.067451][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  133.067571][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  134.841276][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  134.853090][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  134.862570][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  134.864321][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  134.881752][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  135.213586][ T6070] overlayfs: overlapping lowerdir path
[  136.300286][ T6082] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  136.301285][ T6082] overlayfs: overlapping lowerdir path
[  137.202543][ T5822] Bluetooth: hci5: command tx timeout
[  137.643004][ T6061] chnl_net:caif_netlink_parms(): no params data found
[  139.747832][ T6095] 9pnet_virtio: no channels available for device syz
[  140.777877][ T6095] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  140.777951][ T6095] overlayfs: overlapping lowerdir path
[  141.236465][ T5822] Bluetooth: hci5: command tx timeout
[  143.270601][ T5822] Bluetooth: hci5: command tx timeout
[  145.306316][ T6118] netlink: 'syz.0.46': attribute type 21 has an invalid length.
[  145.306367][ T6118] IPv6: NLM_F_CREATE should be specified when creating new route
[  145.307005][ T6118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.307019][ T6118] IPv6: NLM_F_CREATE should be set when creating new route
[  145.344540][ T5822] Bluetooth: hci5: command tx timeout
[  145.823867][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.854946][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.856459][ T6061] bridge_slave_0: entered allmulticast mode
[  146.130168][ T6061] bridge_slave_0: entered promiscuous mode
[  146.240213][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.240403][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.240659][ T6061] bridge_slave_1: entered allmulticast mode
[  146.272157][ T6061] bridge_slave_1: entered promiscuous mode
[  146.965704][ T6061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.021516][ T6061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.849044][ T6140] overlayfs: overlapping lowerdir path
[  151.916916][ T6149] warning: `syz.1.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  152.891990][ T6061] team0: Port device team_slave_0 added
[  153.281313][ T6061] team0: Port device team_slave_1 added
[  154.760560][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.285429][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.345795][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.345814][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  155.345844][ T6061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.615958][ T6183] 9pnet_virtio: no channels available for device syz
[  156.495641][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.495660][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  156.495684][ T6061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.060754][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.519610][ T6191] process 'syz.3.65' launched '0' with NULL argv: empty string added
[  162.237819][ T6203] Process accounting resumed
[  163.702121][ T6211] openvswitch: netlink: IPv4 tun info is not correct
[  164.887448][ T6190] team0 (unregistering): Port device team_slave_0 removed
[  165.003426][ T6190] team0 (unregistering): Port device team_slave_1 removed
[  166.206268][ T6225] overlayfs: missing 'lowerdir'
[  166.787435][ T6061] hsr_slave_0: entered promiscuous mode
[  166.855775][ T6061] hsr_slave_1: entered promiscuous mode
[  166.858991][ T6061] debugfs: 'hsr0' already exists in 'hsr'
[  166.859028][ T6061] Cannot create hsr debugfs directory
[  169.727304][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.830896][ T6234] syz.4.76 (6234) used greatest stack depth: 17952 bytes left
[  171.067223][ T6249] overlayfs: missing 'workdir'
[  172.753638][ T6261] overlayfs: missing 'lowerdir'
[  174.059494][ T6267] netlink: 'syz.3.78': attribute type 21 has an invalid length.
[  174.059523][ T6267] IPv6: NLM_F_CREATE should be specified when creating new route
[  174.059692][ T6267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.059704][ T6267] IPv6: NLM_F_CREATE should be set when creating new route
[  174.415975][   T13] bridge_slave_1: left allmulticast mode
[  174.416094][   T13] bridge_slave_1: left promiscuous mode
[  174.421610][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.590671][   T13] bridge_slave_0: left allmulticast mode
[  174.590694][   T13] bridge_slave_0: left promiscuous mode
[  174.590865][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.222121][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.317742][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.364173][   T13] bond0 (unregistering): Released all slaves
[  187.828295][   T13] hsr_slave_0: left promiscuous mode
[  187.904482][   T13] hsr_slave_1: left promiscuous mode
[  187.909166][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.909272][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.968443][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.968475][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.162765][   T13] veth1_macvtap: left promiscuous mode
[  188.163040][   T13] veth0_macvtap: left promiscuous mode
[  188.163370][   T13] veth1_vlan: left promiscuous mode
[  188.163718][   T13] veth0_vlan: left promiscuous mode
[  190.199590][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'.
[  190.976699][ T6421] openvswitch: netlink: IPv4 tun info is not correct
[  195.046888][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  195.046970][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  197.403468][ T6442] Process accounting resumed
[  197.621857][ T6445] openvswitch: netlink: IPv4 tun info is not correct
[  197.734827][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  197.761441][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  197.762828][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  197.767892][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  197.778783][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  198.668006][ T6454] Zero length message leads to an empty skb
[  199.535158][ T6457] could not allocate digest TFM handle rmd256-generic
[  199.824105][ T5822] Bluetooth: hci4: command tx timeout
[  200.465289][ T6465] 9pnet_virtio: no channels available for device syz
[  200.682856][ T6465] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  200.684894][ T6465] overlayfs: overlapping lowerdir path
[  201.904159][ T5822] Bluetooth: hci4: command tx timeout
[  202.566730][   T13] team0 (unregistering): Port device team_slave_1 removed
[  203.297808][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.141'.
[  203.365886][   T37] audit: type=1326 audit(1767701428.413:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6468 comm="syz.0.140" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e980bf749 code=0x0
[  204.038758][ T5822] Bluetooth: hci4: command tx timeout
[  204.960917][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  204.974336][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  204.976768][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  204.980548][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  205.010152][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  205.285371][   T13] team0 (unregistering): Port device team_slave_0 removed
[  206.868953][ T5822] Bluetooth: hci4: command tx timeout
[  207.879593][ T5822] Bluetooth: hci6: command tx timeout
[  208.600899][ T5808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  208.609036][ T5808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  208.610301][ T5808] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  208.611710][ T5808] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  208.612985][ T5808] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  210.131544][ T5813] Bluetooth: hci6: command tx timeout
[  211.149176][ T6503] could not allocate digest TFM handle rmd256-generic
[  211.411504][ T5813] Bluetooth: hci7: command tx timeout
[  212.000216][ T5813] Bluetooth: hci3: command 0x0406 tx timeout
[  212.148488][   T61] Bluetooth: hci1: command 0x0406 tx timeout
[  212.148506][ T5820] Bluetooth: hci6: command tx timeout
[  212.148630][ T5813] Bluetooth: hci2: command 0x0406 tx timeout
[  212.148666][ T5822] Bluetooth: hci0: command 0x0406 tx timeout
[  213.377671][ T6432] team0 (unregistering): Port device team_slave_0 removed
[  213.417433][ T6432] team0 (unregistering): Port device team_slave_1 removed
[  213.424139][ T5819] Bluetooth: hci7: command tx timeout
[  214.224084][ T5819] Bluetooth: hci6: command tx timeout
[  214.277582][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.151'.
[  215.531239][ T5819] Bluetooth: hci7: command tx timeout
[  220.759660][ T5819] Bluetooth: hci7: command tx timeout
[  221.744561][ T6533] syz.0.153 (6533): drop_caches: 2
[  226.199123][ T6033] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  228.447142][ T6446] chnl_net:caif_netlink_parms(): no params data found
[  229.156551][ T6494] chnl_net:caif_netlink_parms(): no params data found
[  230.155688][ T6476] chnl_net:caif_netlink_parms(): no params data found
[  234.497372][ T6612] team0 (unregistering): Port device team_slave_0 removed
[  234.595797][ T6612] team0 (unregistering): Port device team_slave_1 removed
[  242.668339][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.670106][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.670375][ T6446] bridge_slave_0: entered allmulticast mode
[  242.686059][ T6446] bridge_slave_0: entered promiscuous mode
[  242.751090][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.751244][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.751490][ T6446] bridge_slave_1: entered allmulticast mode
[  242.793366][ T6446] bridge_slave_1: entered promiscuous mode
[  244.786129][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.786416][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.786631][ T6494] bridge_slave_0: entered allmulticast mode
[  244.928746][ T6494] bridge_slave_0: entered promiscuous mode
[  245.032378][ T6671] 9pnet_virtio: no channels available for device syz
[  248.585740][ T6446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.586248][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.586341][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.586503][ T6494] bridge_slave_1: entered allmulticast mode
[  248.589839][ T6494] bridge_slave_1: entered promiscuous mode
[  248.619173][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.619323][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.619509][ T6476] bridge_slave_0: entered allmulticast mode
[  249.505885][ T6476] bridge_slave_0: entered promiscuous mode
[  249.522189][ T6446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.724174][ T5950] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  249.795628][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.795875][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.796092][ T6476] bridge_slave_1: entered allmulticast mode
[  249.799036][ T6476] bridge_slave_1: entered promiscuous mode
[  249.874177][ T5950] usb 4-1: Using ep0 maxpacket: 32
[  249.882536][ T5950] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  249.882566][ T5950] usb 4-1: config 0 has no interface number 0
[  249.882844][ T5950] usb 4-1: config 0 interface 89 has no altsetting 0
[  249.936214][ T5950] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  249.936244][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.936263][ T5950] usb 4-1: Product: syz
[  249.936278][ T5950] usb 4-1: Manufacturer: syz
[  249.936292][ T5950] usb 4-1: SerialNumber: syz
[  249.988192][ T5950] usb 4-1: config 0 descriptor??
[  251.620762][ T6494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.626544][ T6446] team0: Port device team_slave_0 added
[  251.725530][ T6494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.737712][ T6446] team0: Port device team_slave_1 added
[  251.748549][ T6476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.998524][ T6476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.367624][ T5791] usb 4-1: USB disconnect, device number 2
[  252.830613][ T6695] netlink: 68 bytes leftover after parsing attributes in process `syz.3.185'.
[  253.354978][ T6494] team0: Port device team_slave_0 added
[  253.355982][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.355996][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  253.356025][ T6446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  254.809025][ T6494] team0: Port device team_slave_1 added
[  254.809751][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_1
[  254.809762][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  254.809776][ T6446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  254.811796][ T6476] team0: Port device team_slave_0 added
[  256.035013][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  256.035067][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  256.046589][ T6476] team0: Port device team_slave_1 added
[  257.042425][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.042444][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  257.042472][ T6494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.083445][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  257.103061][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  257.107497][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  257.109946][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  257.110831][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  257.461191][ T6722] netlink: 'syz.3.194': attribute type 21 has an invalid length.
[  257.461286][ T6722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  257.597842][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.597871][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  257.597900][ T6494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.665450][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.665462][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  257.665477][ T6476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.691077][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.691096][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  257.691120][ T6476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.876842][ T6494] hsr_slave_0: entered promiscuous mode
[  258.883506][ T6494] hsr_slave_1: entered promiscuous mode
[  262.129582][ T5808] Bluetooth: hci0: command tx timeout
[  263.853676][ T6476] hsr_slave_0: entered promiscuous mode
[  263.863596][ T6476] hsr_slave_1: entered promiscuous mode
[  263.871468][ T6765] netlink: 'syz.3.202': attribute type 21 has an invalid length.
[  263.871562][ T6765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  263.872095][ T6476] debugfs: 'hsr0' already exists in 'hsr'
[  263.872112][ T6476] Cannot create hsr debugfs directory
[  264.224354][ T5819] Bluetooth: hci0: command tx timeout
[  264.388863][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  264.404567][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  264.409288][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  264.410836][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  264.412625][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  264.919871][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.308586][ T5808] Bluetooth: hci0: command tx timeout
[  266.385916][ T6777] 9pnet_virtio: no channels available for device syz
[  266.528145][ T6778] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  266.528212][ T6778] overlayfs: overlapping lowerdir path
[  266.537929][ T5808] Bluetooth: hci2: command tx timeout
[  268.444397][ T6205] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  268.464040][ T5808] Bluetooth: hci0: command tx timeout
[  268.544098][ T5808] Bluetooth: hci2: command tx timeout
[  268.585730][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.667038][ T6205] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  268.667078][ T6205] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  268.667192][ T6205] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  268.667286][ T6205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.376633][ T6784] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  269.845839][ T6205] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  270.055368][ T6205] usb 1-1: USB disconnect, device number 3
[  270.763327][ T5808] Bluetooth: hci2: command tx timeout
[  271.141691][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.242372][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  271.260040][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  271.278479][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  271.307516][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  271.310768][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  271.661065][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.974100][ T5808] Bluetooth: hci2: command tx timeout
[  273.484241][ T6205] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  273.634119][ T6205] usb 1-1: Using ep0 maxpacket: 32
[  273.636818][ T6205] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  273.636845][ T6205] usb 1-1: config 0 has no interface number 0
[  273.636880][ T6205] usb 1-1: config 0 interface 89 has no altsetting 0
[  273.640471][ T6205] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  273.640500][ T6205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.640520][ T6205] usb 1-1: Product: syz
[  273.640534][ T6205] usb 1-1: Manufacturer: syz
[  273.640549][ T6205] usb 1-1: SerialNumber: syz
[  273.646725][ T5808] Bluetooth: hci4: command tx timeout
[  273.777181][ T6205] usb 1-1: config 0 descriptor??
[  274.435148][ T6719] chnl_net:caif_netlink_parms(): no params data found
[  275.656009][ T6205] usb 1-1: USB disconnect, device number 4
[  276.104467][ T5808] Bluetooth: hci4: command tx timeout
[  276.332287][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.159536][ T6844] overlayfs: missing 'lowerdir'
[  278.046583][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.106186][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.106421][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.106705][ T6719] bridge_slave_0: entered allmulticast mode
[  278.109779][ T6719] bridge_slave_0: entered promiscuous mode
[  278.144034][ T5808] Bluetooth: hci4: command tx timeout
[  278.208007][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.208160][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.208411][ T6719] bridge_slave_1: entered allmulticast mode
[  278.211582][ T6719] bridge_slave_1: entered promiscuous mode
[  280.224667][ T5808] Bluetooth: hci4: command tx timeout
[  280.580033][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.682872][ T6719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.683372][ T6767] chnl_net:caif_netlink_parms(): no params data found
[  282.821998][ T6872] could not allocate digest TFM handle rmd256-generic
[  284.417954][ T6882] overlayfs: missing 'lowerdir'
[  285.598566][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.667607][ T6719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.210248][ T6897] overlayfs: failed to resolve './file0': -2
[  288.107984][ T6719] team0: Port device team_slave_0 added
[  288.154756][ T6796] chnl_net:caif_netlink_parms(): no params data found
[  288.175023][ T6719] team0: Port device team_slave_1 added
[  291.744230][ T6923] could not allocate digest TFM handle rmd256-generic
[  292.516147][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.516160][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.516175][ T6719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.723197][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.723216][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  293.723242][ T6719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.725744][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.725968][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.726201][ T6767] bridge_slave_0: entered allmulticast mode
[  293.729413][ T6767] bridge_slave_0: entered promiscuous mode
[  293.886633][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.886785][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.886998][ T6767] bridge_slave_1: entered allmulticast mode
[  293.891007][ T6767] bridge_slave_1: entered promiscuous mode
[  295.646776][ T6767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.647237][ T6796] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.647394][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.647638][ T6796] bridge_slave_0: entered allmulticast mode
[  295.655245][ T6796] bridge_slave_0: entered promiscuous mode
[  295.766852][ T6767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.767117][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.771201][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.771495][ T6796] bridge_slave_1: entered allmulticast mode
[  295.787216][ T6796] bridge_slave_1: entered promiscuous mode
[  295.823780][ T6719] hsr_slave_0: entered promiscuous mode
[  295.845693][ T6719] hsr_slave_1: entered promiscuous mode
[  295.847991][ T6719] debugfs: 'hsr0' already exists in 'hsr'
[  295.848019][ T6719] Cannot create hsr debugfs directory
[  296.004143][ T5950] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  296.071555][   T13] bridge_slave_1: left allmulticast mode
[  296.071577][   T13] bridge_slave_1: left promiscuous mode
[  296.071814][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.140369][   T13] bridge_slave_0: left allmulticast mode
[  296.140391][   T13] bridge_slave_0: left promiscuous mode
[  296.140558][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.154097][ T5950] usb 4-1: Using ep0 maxpacket: 32
[  296.157880][ T5950] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  296.157907][ T5950] usb 4-1: config 0 has no interface number 0
[  296.157938][ T5950] usb 4-1: config 0 interface 89 has no altsetting 0
[  296.160441][ T5950] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  296.160465][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.160483][ T5950] usb 4-1: Product: syz
[  296.160496][ T5950] usb 4-1: Manufacturer: syz
[  296.160509][ T5950] usb 4-1: SerialNumber: syz
[  296.242837][   T13] bridge_slave_1: left allmulticast mode
[  296.242863][   T13] bridge_slave_1: left promiscuous mode
[  296.243034][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.251749][ T5950] usb 4-1: config 0 descriptor??
[  296.375738][   T13] bridge_slave_0: left allmulticast mode
[  296.375771][   T13] bridge_slave_0: left promiscuous mode
[  296.376052][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.471000][   T13] bridge_slave_1: left allmulticast mode
[  296.471022][   T13] bridge_slave_1: left promiscuous mode
[  296.471216][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.546791][   T13] bridge_slave_0: left allmulticast mode
[  296.546827][   T13] bridge_slave_0: left promiscuous mode
[  296.547162][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.643356][ T6205] usb 4-1: USB disconnect, device number 3
[  298.804914][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  298.944992][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.026975][   T13] bond0 (unregistering): Released all slaves
[  299.273669][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.242'.
[  304.214744][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.295004][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.316815][   T13] bond0 (unregistering): Released all slaves
[  305.847103][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  305.904805][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  305.947369][   T13] bond0 (unregistering): Released all slaves
[  306.297824][ T6767] team0: Port device team_slave_0 added
[  306.303360][ T6796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.965378][ T6767] team0: Port device team_slave_1 added
[  306.968370][ T6796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.404548][ T6999] 9pnet_virtio: no channels available for device syz
[  308.422918][ T6999] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  308.423327][ T6999] overlayfs: overlapping lowerdir path
[  311.930832][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.930852][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  311.930881][ T6767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.934123][ T6796] team0: Port device team_slave_0 added
[  311.967736][ T6796] team0: Port device team_slave_1 added
[  312.901398][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.901416][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  312.901445][ T6767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.390154][ T7011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.256'.
[  315.200806][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.200823][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  315.200846][ T6796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  315.339736][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_1
[  315.339755][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  315.339783][ T6796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.406057][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  317.406147][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  317.492893][ T6767] hsr_slave_0: entered promiscuous mode
[  317.589046][ T6767] hsr_slave_1: entered promiscuous mode
[  317.619175][ T6767] debugfs: 'hsr0' already exists in 'hsr'
[  317.620767][ T6767] Cannot create hsr debugfs directory
[  318.118611][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  318.130374][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  318.138101][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  318.139571][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  318.140725][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  320.647767][ T5819] Bluetooth: hci5: command tx timeout
[  321.911550][ T6796] hsr_slave_0: entered promiscuous mode
[  321.922900][ T6796] hsr_slave_1: entered promiscuous mode
[  321.929703][ T6796] debugfs: 'hsr0' already exists in 'hsr'
[  321.929733][ T6796] Cannot create hsr debugfs directory
[  322.234089][ T5950] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  322.584714][ T7056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.266'.
[  322.626775][ T5950] usb 4-1: Using ep0 maxpacket: 32
[  322.633526][ T5950] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  322.633556][ T5950] usb 4-1: config 0 has no interface number 0
[  322.633594][ T5950] usb 4-1: config 0 interface 89 has no altsetting 0
[  323.027668][ T5819] Bluetooth: hci5: command tx timeout
[  323.362809][   T13] hsr_slave_0: left promiscuous mode
[  323.414066][   T13] hsr_slave_1: left promiscuous mode
[  323.415171][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  323.438174][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.647116][   T13] hsr_slave_0: left promiscuous mode
[  324.788447][   T13] hsr_slave_1: left promiscuous mode
[  324.792950][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.792979][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.863415][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.863459][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  325.104024][ T5819] Bluetooth: hci5: command tx timeout
[  325.191322][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  325.204766][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  325.207093][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  325.209452][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  325.217518][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  325.355541][   T13] hsr_slave_0: left promiscuous mode
[  325.423553][   T13] hsr_slave_1: left promiscuous mode
[  325.439764][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  325.455523][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  325.517841][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.518352][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  325.675982][ T5950] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  325.676004][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.676015][ T5950] usb 4-1: Product: syz
[  325.676024][ T5950] usb 4-1: Manufacturer: syz
[  325.681312][ T5950] usb 4-1: config 0 descriptor??
[  325.737935][ T5950] usb 4-1: can't set config #0, error -71
[  325.804501][ T5950] usb 4-1: USB disconnect, device number 4
[  325.933642][   T13] veth1_macvtap: left promiscuous mode
[  325.933711][   T13] veth0_macvtap: left promiscuous mode
[  325.933877][   T13] veth1_vlan: left promiscuous mode
[  325.958496][   T13] veth0_vlan: left promiscuous mode
[  326.054426][   T13] veth1_macvtap: left promiscuous mode
[  326.054553][   T13] veth0_macvtap: left promiscuous mode
[  326.054861][   T13] veth1_vlan: left promiscuous mode
[  326.055061][   T13] veth0_vlan: left promiscuous mode
[  327.185537][ T5819] Bluetooth: hci5: command tx timeout
[  327.264115][ T5819] Bluetooth: hci0: command tx timeout
[  329.727091][ T5819] Bluetooth: hci0: command tx timeout
[  330.898953][ T7109] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  330.898989][ T7109] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  330.899034][ T7109] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  330.946498][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  330.982462][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  330.993247][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  330.998769][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  331.001134][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  331.124244][   T13] team0 (unregistering): Port device team_slave_1 removed
[  331.484906][ T7115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.275'.
[  331.755011][ T5819] Bluetooth: hci0: command tx timeout
[  331.786305][   T13] team0 (unregistering): Port device team_slave_0 removed
[  333.104156][ T5819] Bluetooth: hci6: command tx timeout
[  333.674154][ T5971] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  333.824259][ T5819] Bluetooth: hci0: command tx timeout
[  333.844065][ T5971] usb 1-1: Using ep0 maxpacket: 32
[  333.846816][ T5971] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  333.846843][ T5971] usb 1-1: config 0 has no interface number 0
[  333.847338][ T5971] usb 1-1: config 0 interface 89 has no altsetting 0
[  333.851179][ T5971] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  333.851210][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.851230][ T5971] usb 1-1: Product: syz
[  333.851245][ T5971] usb 1-1: Manufacturer: syz
[  333.851260][ T5971] usb 1-1: SerialNumber: syz
[  333.860667][ T5971] usb 1-1: config 0 descriptor??
[  335.184231][ T5819] Bluetooth: hci6: command tx timeout
[  336.602466][ T6205] usb 1-1: USB disconnect, device number 5
[  337.266323][ T5819] Bluetooth: hci6: command tx timeout
[  339.636377][ T7149] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  339.636412][ T7149] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  339.636457][ T7149] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  340.590840][ T7153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.284'.
[  340.594202][ T5819] Bluetooth: hci6: command tx timeout
[  346.464689][   T13] team0 (unregistering): Port device team_slave_1 removed
[  346.960242][ T7187] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  346.960276][ T7187] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  346.960321][ T7187] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  348.884164][ T7193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.293'.
[  348.905943][   T13] team0 (unregistering): Port device team_slave_0 removed
[  352.014181][ T5950] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  352.184112][ T5950] usb 4-1: Using ep0 maxpacket: 32
[  352.187006][ T5950] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  352.187036][ T5950] usb 4-1: config 0 has no interface number 0
[  352.187071][ T5950] usb 4-1: config 0 interface 89 has no altsetting 0
[  352.190151][ T5950] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  352.190180][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.190201][ T5950] usb 4-1: Product: syz
[  352.190216][ T5950] usb 4-1: Manufacturer: syz
[  352.190231][ T5950] usb 4-1: SerialNumber: syz
[  352.203661][ T5950] usb 4-1: config 0 descriptor??
[  354.093580][ T5950] usb 4-1: USB disconnect, device number 5
[  355.809028][ T7228] overlayfs: missing 'lowerdir'
[  356.686184][ T7232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.302'.
[  362.474030][ T6010] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  363.364760][ T6010] usb 1-1: Using ep0 maxpacket: 32
[  363.369898][ T6010] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  363.369925][ T6010] usb 1-1: config 0 has no interface number 0
[  363.369960][ T6010] usb 1-1: config 0 interface 89 has no altsetting 0
[  363.411918][ T6010] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  363.411949][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.411967][ T6010] usb 1-1: Product: syz
[  363.411981][ T6010] usb 1-1: Manufacturer: syz
[  363.411994][ T6010] usb 1-1: SerialNumber: syz
[  363.478777][ T6010] usb 1-1: config 0 descriptor??
[  364.307904][ T7268] overlayfs: missing 'lowerdir'
[  365.361124][ T6010] usb 1-1: USB disconnect, device number 6
[  365.636692][ T7273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.311'.
[  366.142435][ T7273] Can't find ip_set type hash:ip,p
[  370.206298][ T7301] overlayfs: missing 'lowerdir'
[  372.825596][ T7314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.321'.
[  379.366012][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  379.366092][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  379.382695][ T5808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  379.416412][ T5808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  379.426042][ T5808] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  379.427240][ T5808] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  379.428096][ T5808] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  379.519211][ T7339] Process accounting resumed
[  381.514232][ T5808] Bluetooth: hci7: command tx timeout
[  382.427177][   T37] audit: type=1326 audit(1767701607.533:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7354 comm="syz.0.330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e980bf749 code=0x0
[  382.868050][ T7356] openvswitch: netlink: IPv4 tun info is not correct
[  383.587398][ T5808] Bluetooth: hci7: command tx timeout
[  385.794127][ T5808] Bluetooth: hci7: command tx timeout
[  387.824735][ T5819] Bluetooth: hci7: command tx timeout
[  388.050642][ T5819] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  388.603842][ T5819] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  388.740315][ T5819] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  388.923615][ T5819] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  388.996643][ T5819] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  389.731212][   T37] audit: type=1326 audit(1767701614.823:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7379 comm="syz.3.333" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b56eaf749 code=0x0
[  390.088610][ T7381] openvswitch: netlink: IPv4 tun info is not correct
[  391.106379][ T5120] Bluetooth: hci2: command 0x0406 tx timeout
[  392.777809][ T7405] overlayfs: missing 'workdir'
[  393.811656][ T5819] Bluetooth: hci8: command tx timeout
[  395.759771][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  395.777572][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  395.779057][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  395.781496][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  395.827115][ T5808] Bluetooth: hci8: command tx timeout
[  395.839714][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  396.064124][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'.
[  397.614686][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.337'.
[  397.966922][ T5819] Bluetooth: hci8: command tx timeout
[  397.967077][ T5808] Bluetooth: hci0: command tx timeout
[  400.206421][ T5819] Bluetooth: hci8: command tx timeout
[  400.206479][ T5808] Bluetooth: hci0: command tx timeout
[  401.322036][ T7460] overlayfs: missing 'workdir'
[  402.224512][ T5808] Bluetooth: hci0: command tx timeout
[  402.384359][ T7338] chnl_net:caif_netlink_parms(): no params data found
[  404.298964][ T7373] chnl_net:caif_netlink_parms(): no params data found
[  404.315202][ T5808] Bluetooth: hci0: command tx timeout
[  406.274608][ T7413] chnl_net:caif_netlink_parms(): no params data found
[  406.280278][ T7338] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.280491][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.280734][ T7338] bridge_slave_0: entered allmulticast mode
[  406.282944][ T7338] bridge_slave_0: entered promiscuous mode
[  407.971344][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.982185][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.982465][ T7338] bridge_slave_1: entered allmulticast mode
[  408.005834][ T7338] bridge_slave_1: entered promiscuous mode
[  411.106094][ T7527] overlayfs: missing 'workdir'
[  412.088696][ T7338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.993359][ T7338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.035923][ T7373] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.036322][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.036590][ T7373] bridge_slave_0: entered allmulticast mode
[  413.040143][ T7373] bridge_slave_0: entered promiscuous mode
[  414.754578][ T7373] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.755157][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.755436][ T7373] bridge_slave_1: entered allmulticast mode
[  414.761352][ T7373] bridge_slave_1: entered promiscuous mode
[  417.159756][ T7338] team0: Port device team_slave_0 added
[  417.520527][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'.
[  417.812208][ T7338] team0: Port device team_slave_1 added
[  419.388508][ T7413] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.389311][ T7413] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.389573][ T7413] bridge_slave_0: entered allmulticast mode
[  419.392676][ T7413] bridge_slave_0: entered promiscuous mode
[  419.591657][ T7373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.724452][ T7413] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.724627][ T7413] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.724903][ T7413] bridge_slave_1: entered allmulticast mode
[  420.728364][ T7413] bridge_slave_1: entered promiscuous mode
[  420.731841][ T7373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.148324][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.148338][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.148354][ T7338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.959083][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.959103][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.959147][ T7338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.066069][ T7373] team0: Port device team_slave_0 added
[  425.076514][ T7413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.827402][ T7595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.367'.
[  426.461763][ T7595] Can't find ip_set type hash:ip,p
[  426.717354][ T7373] team0: Port device team_slave_1 added
[  426.722481][ T7413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.652476][   T13] bridge_slave_1: left allmulticast mode
[  427.652507][   T13] bridge_slave_1: left promiscuous mode
[  427.656379][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.805794][   T13] bridge_slave_0: left allmulticast mode
[  427.805825][   T13] bridge_slave_0: left promiscuous mode
[  427.806198][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.349308][   T13] bridge_slave_1: left allmulticast mode
[  428.349340][   T13] bridge_slave_1: left promiscuous mode
[  428.349617][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.023123][   T13] bridge_slave_0: left allmulticast mode
[  430.023156][   T13] bridge_slave_0: left promiscuous mode
[  430.023434][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.789199][   T13] bridge_slave_1: left allmulticast mode
[  430.789232][   T13] bridge_slave_1: left promiscuous mode
[  430.789502][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.895876][   T13] bridge_slave_0: left allmulticast mode
[  430.895908][   T13] bridge_slave_0: left promiscuous mode
[  430.896188][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.016167][   T13] bridge_slave_1: left allmulticast mode
[  431.016201][   T13] bridge_slave_1: left promiscuous mode
[  431.016489][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.164132][   T13] bridge_slave_0: left allmulticast mode
[  431.164165][   T13] bridge_slave_0: left promiscuous mode
[  431.164459][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.247330][   T13] bridge_slave_1: left allmulticast mode
[  431.247364][   T13] bridge_slave_1: left promiscuous mode
[  431.247649][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.335974][   T13] bridge_slave_0: left allmulticast mode
[  431.336005][   T13] bridge_slave_0: left promiscuous mode
[  431.336297][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.446859][   T13] bridge_slave_1: left allmulticast mode
[  431.446892][   T13] bridge_slave_1: left promiscuous mode
[  431.447166][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.526235][   T13] bridge_slave_0: left allmulticast mode
[  431.526269][   T13] bridge_slave_0: left promiscuous mode
[  431.526615][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.439620][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  432.743407][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  433.038584][   T13] bond0 (unregistering): Released all slaves
[  435.046502][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  435.164971][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  435.248036][   T13] bond0 (unregistering): Released all slaves
[  435.513318][ T7651] overlayfs: missing 'workdir'
[  435.574914][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  437.206175][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  437.267709][   T13] bond0 (unregistering): Released all slaves
[  437.575103][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  437.705448][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  437.912354][   T13] bond0 (unregistering): Released all slaves
[  438.818897][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  438.829770][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  438.832702][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  438.840194][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  438.841472][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  440.535680][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  440.535761][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  440.675379][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  440.805032][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  440.898584][   T13] bond0 (unregistering): Released all slaves
[  440.944048][ T5819] Bluetooth: hci2: command tx timeout
[  441.164734][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  441.225332][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  441.286982][   T13] bond0 (unregistering): Released all slaves
[  441.823483][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.823503][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.823531][ T7373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.857749][ T7413] team0: Port device team_slave_0 added
[  441.868954][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.868972][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.869001][ T7373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.877861][ T7413] team0: Port device team_slave_1 added
[  442.249571][ T7679] overlayfs: missing 'workdir'
[  443.353423][ T5819] Bluetooth: hci2: command tx timeout
[  444.915770][ T7413] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.915789][ T7413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.915819][ T7413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.424386][ T5819] Bluetooth: hci2: command tx timeout
[  445.669051][ T7413] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.669070][ T7413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.669099][ T7413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.615710][ T5819] Bluetooth: hci2: command tx timeout
[  447.788185][ T7413] hsr_slave_0: entered promiscuous mode
[  447.789716][ T7413] hsr_slave_1: entered promiscuous mode
[  447.790673][ T7413] debugfs: 'hsr0' already exists in 'hsr'
[  447.790696][ T7413] Cannot create hsr debugfs directory
[  449.466868][   T13] hsr_slave_0: left promiscuous mode
[  449.535391][   T13] hsr_slave_1: left promiscuous mode
[  449.554257][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.606169][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  449.758743][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  449.766267][   T13] hsr_slave_0: left promiscuous mode
[  449.768622][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  449.770000][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  449.771799][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  449.772777][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  449.824235][   T13] hsr_slave_1: left promiscuous mode
[  449.824967][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.875027][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.014385][   T13] hsr_slave_0: left promiscuous mode
[  450.034310][   T13] hsr_slave_1: left promiscuous mode
[  450.041112][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  450.064968][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.194188][   T13] hsr_slave_0: left promiscuous mode
[  450.215068][   T13] hsr_slave_1: left promiscuous mode
[  450.216209][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  450.264918][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.304040][   T13] hsr_slave_0: left promiscuous mode
[  450.334163][   T13] hsr_slave_1: left promiscuous mode
[  450.334854][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  450.384666][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.425165][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  450.480014][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.261570][ T5808] Bluetooth: hci4: command tx timeout
[  452.444827][   T13] team0 (unregistering): Port device team_slave_1 removed
[  452.615142][   T13] team0 (unregistering): Port device team_slave_0 removed
[  453.216757][ T7720] overlayfs: missing 'lowerdir'
[  453.934976][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  453.955522][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  453.958550][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  453.980054][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  453.981024][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  454.304398][ T5808] Bluetooth: hci4: command tx timeout
[  454.894723][   T13] team0 (unregistering): Port device team_slave_1 removed
[  455.027587][   T13] team0 (unregistering): Port device team_slave_0 removed
[  456.778356][ T5120] Bluetooth: hci4: command tx timeout
[  456.778505][ T5808] Bluetooth: hci5: command tx timeout
[  458.985913][ T5819] Bluetooth: hci4: command tx timeout
[  458.985964][ T5808] Bluetooth: hci5: command tx timeout
[  459.045478][   T13] team0 (unregistering): Port device team_slave_1 removed
[  459.245049][   T13] team0 (unregistering): Port device team_slave_0 removed
[  460.384750][   T13] team0 (unregistering): Port device team_slave_1 removed
[  460.525120][   T13] team0 (unregistering): Port device team_slave_0 removed
[  461.033983][ T5808] Bluetooth: hci5: command tx timeout
[  461.285932][   T13] team0 (unregistering): Port device team_slave_1 removed
[  461.425256][   T13] team0 (unregistering): Port device team_slave_0 removed
[  462.065515][   T13] team0 (unregistering): Port device team_slave_1 removed
[  462.214732][   T13] team0 (unregistering): Port device team_slave_0 removed
[  463.116029][ T5808] Bluetooth: hci5: command tx timeout
[  463.182588][ T7750] overlayfs: missing 'lowerdir'
[  465.894986][ T7661] chnl_net:caif_netlink_parms(): no params data found
[  466.567715][ T7792] syz.0.410 (7792): drop_caches: 2
[  469.689004][ T7704] chnl_net:caif_netlink_parms(): no params data found
[  471.630409][ T7815] overlayfs: missing 'lowerdir'
[  471.702571][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.707601][ T7661] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.707843][ T7661] bridge_slave_0: entered allmulticast mode
[  471.710462][ T7661] bridge_slave_0: entered promiscuous mode
[  471.725359][ T7721] chnl_net:caif_netlink_parms(): no params data found
[  471.797222][ T7661] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.797373][ T7661] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.797604][ T7661] bridge_slave_1: entered allmulticast mode
[  471.800666][ T7661] bridge_slave_1: entered promiscuous mode
[  474.997246][ T7661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.986102][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.986465][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.986714][ T7704] bridge_slave_0: entered allmulticast mode
[  475.989703][ T7704] bridge_slave_0: entered promiscuous mode
[  476.023741][ T7661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  476.044495][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.044666][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.044887][ T7704] bridge_slave_1: entered allmulticast mode
[  476.047867][ T7704] bridge_slave_1: entered promiscuous mode
[  476.372832][ T7846] netlink: zone id is out of range
[  476.374096][ T7846] netlink: del zone limit has 8 unknown bytes
[  477.765616][ T5809] ------------[ cut here ]------------
[  477.765633][ T5809] faux_driver vkms: [drm] vblank wait timed out on crtc 0
[  477.765649][ T5809] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x39a/0x5c0, CPU#1: kworker/1:3/5809
[  477.765689][ T5809] Modules linked in:
[  477.765710][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  477.765732][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  477.765746][ T5809] Workqueue: events drm_fb_helper_damage_work
[  477.765772][ T5809] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0
[  477.765797][ T5809] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba cb f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f
[  477.765815][ T5809] RSP: 0018:ffffc90004d0f860 EFLAGS: 00010246
[  477.765834][ T5809] RAX: 1ffff1102846d200 RBX: ffffffff8ee5b070 RCX: 0000000000000000
[  477.765850][ T5809] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070
[  477.765866][ T5809] RBP: ffffc90004d0f948 R08: 0000000000000000 R09: 0000000000000000
[  477.765880][ T5809] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0
[  477.765895][ T5809] R13: ffff888142369000 R14: 1ffff920009a1f10 R15: ffffffff8b569b80
[  477.765911][ T5809] FS:  0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000
[  477.765928][ T5809] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  477.765943][ T5809] CR2: 00007f675f0948e7 CR3: 000000003b9ae000 CR4: 00000000003526f0
[  477.765973][ T5809] Call Trace:
[  477.765982][ T5809]  <TASK>
[  477.765997][ T5809]  ? __pfx_drm_wait_one_vblank+0x10/0x10
[  477.766020][ T5809]  ? rt_spin_unlock+0x150/0x200
[  477.766050][ T5809]  ? __pfx_autoremove_wake_function+0x10/0x10
[  477.766080][ T5809]  ? rt_spin_unlock+0x161/0x200
[  477.766112][ T5809]  ? drm_vblank_get+0x147/0x260
[  477.766139][ T5809]  drm_client_modeset_wait_for_vblank+0xc5/0xf0
[  477.766176][ T5809]  drm_fb_helper_damage_work+0xc9/0x650
[  477.766204][ T5809]  ? process_scheduled_works+0x9ef/0x1770
[  477.766235][ T5809]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  477.766266][ T5809]  ? process_scheduled_works+0x9ef/0x1770
[  477.766288][ T5809]  ? process_scheduled_works+0x9ef/0x1770
[  477.766314][ T5809]  process_scheduled_works+0xad1/0x1770
[  477.766375][ T5809]  ? __pfx_process_scheduled_works+0x10/0x10
[  477.766397][ T5809]  ? do_raw_spin_lock+0x121/0x290
[  477.766443][ T5809]  worker_thread+0x8a0/0xda0
[  477.766502][ T5809]  kthread+0x711/0x8a0
[  477.766537][ T5809]  ? __pfx_worker_thread+0x10/0x10
[  477.766561][ T5809]  ? __pfx_kthread+0x10/0x10
[  477.766588][ T5809]  ? rt_spin_unlock+0x150/0x200
[  477.766621][ T5809]  ? rt_spin_unlock+0x161/0x200
[  477.766647][ T5809]  ? __pfx_kthread+0x10/0x10
[  477.766680][ T5809]  ret_from_fork+0x510/0xa50
[  477.766706][ T5809]  ? __pfx_ret_from_fork+0x10/0x10
[  477.766726][ T5809]  ? __switch_to+0xc9e/0x1480
[  477.766765][ T5809]  ? __pfx_kthread+0x10/0x10
[  477.766798][ T5809]  ret_from_fork_asm+0x1a/0x30
[  477.766853][ T5809]  </TASK>
[  477.766864][ T5809] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  477.766878][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  477.766901][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  477.766914][ T5809] Workqueue: events drm_fb_helper_damage_work
[  477.766937][ T5809] Call Trace:
[  477.766945][ T5809]  <TASK>
[  477.766963][ T5809]  vpanic+0x1e0/0x670
[  477.766996][ T5809]  panic+0xb9/0xc0
[  477.767026][ T5809]  ? __pfx_panic+0x10/0x10
[  477.767068][ T5809]  ? ret_from_fork_asm+0x1a/0x30
[  477.767107][ T5809]  __warn+0x317/0x4b0
[  477.767134][ T5809]  ? drm_wait_one_vblank+0x39a/0x5c0
[  477.767162][ T5809]  ? drm_wait_one_vblank+0x39a/0x5c0
[  477.767186][ T5809]  __report_bug+0x288/0x500
[  477.767220][ T5809]  ? drm_wait_one_vblank+0x39a/0x5c0
[  477.767251][ T5809]  ? __pfx___report_bug+0x10/0x10
[  477.767310][ T5809]  report_bug_entry+0x19a/0x290
[  477.767343][ T5809]  ? drm_wait_one_vblank+0x587/0x5c0
[  477.767365][ T5809]  ? drm_wait_one_vblank+0x58c/0x5c0
[  477.767387][ T5809]  handle_bug+0xca/0x200
[  477.767414][ T5809]  exc_invalid_op+0x1a/0x50
[  477.767438][ T5809]  asm_exc_invalid_op+0x1a/0x20
[  477.767458][ T5809] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0
[  477.767482][ T5809] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba cb f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f
[  477.767499][ T5809] RSP: 0018:ffffc90004d0f860 EFLAGS: 00010246
[  477.767517][ T5809] RAX: 1ffff1102846d200 RBX: ffffffff8ee5b070 RCX: 0000000000000000
[  477.767531][ T5809] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070
[  477.767547][ T5809] RBP: ffffc90004d0f948 R08: 0000000000000000 R09: 0000000000000000
[  477.767560][ T5809] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0
[  477.767576][ T5809] R13: ffff888142369000 R14: 1ffff920009a1f10 R15: ffffffff8b569b80
[  477.767618][ T5809]  ? __pfx_drm_wait_one_vblank+0x10/0x10
[  477.767639][ T5809]  ? rt_spin_unlock+0x150/0x200
[  477.767667][ T5809]  ? __pfx_autoremove_wake_function+0x10/0x10
[  477.767697][ T5809]  ? rt_spin_unlock+0x161/0x200
[  477.767728][ T5809]  ? drm_vblank_get+0x147/0x260
[  477.767755][ T5809]  drm_client_modeset_wait_for_vblank+0xc5/0xf0
[  477.767792][ T5809]  drm_fb_helper_damage_work+0xc9/0x650
[  477.767821][ T5809]  ? process_scheduled_works+0x9ef/0x1770
[  477.767851][ T5809]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  477.767882][ T5809]  ? process_scheduled_works+0x9ef/0x1770
[  477.767906][ T5809]  ? process_scheduled_works+0x9ef/0x1770
[  477.767934][ T5809]  process_scheduled_works+0xad1/0x1770
[  477.768003][ T5809]  ? __pfx_process_scheduled_works+0x10/0x10
[  477.768025][ T5809]  ? do_raw_spin_lock+0x121/0x290
[  477.768070][ T5809]  worker_thread+0x8a0/0xda0
[  477.768128][ T5809]  kthread+0x711/0x8a0
[  477.768160][ T5809]  ? __pfx_worker_thread+0x10/0x10
[  477.768184][ T5809]  ? __pfx_kthread+0x10/0x10
[  477.768210][ T5809]  ? rt_spin_unlock+0x150/0x200
[  477.768244][ T5809]  ? rt_spin_unlock+0x161/0x200
[  477.768270][ T5809]  ? __pfx_kthread+0x10/0x10
[  477.768302][ T5809]  ret_from_fork+0x510/0xa50
[  477.768329][ T5809]  ? __pfx_ret_from_fork+0x10/0x10
[  477.768350][ T5809]  ? __switch_to+0xc9e/0x1480
[  477.768388][ T5809]  ? __pfx_kthread+0x10/0x10
[  477.768420][ T5809]  ret_from_fork_asm+0x1a/0x30
[  477.768472][ T5809]  </TASK>
[  477.769146][ T5809] Kernel Offset: disabled