last executing test programs:

18m27.756918867s ago: executing program 3 (id=30):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x4000000000000002, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000001c0)={0x400000fe, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000800004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r5, 0x0, 0x0, 0x700)
listen(r4, 0x2)
getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

18m24.569713621s ago: executing program 3 (id=34):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x2, 0x801, 0x0)
io_uring_setup(0x7884, 0x0)
syz_open_dev$sndpcmp(0x0, 0x1, 0x203)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', 0x0})
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x3, 0xddffffff})
r3 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
close(r4)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x9, 0x3a, '&+', 0x3a, '[$', 0x3a, './file0', 0x3a, [0x46]}, 0x2c)
truncate(&(0x7f0000000240)='./file0\x00', 0x1)

18m21.74682815s ago: executing program 3 (id=37):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_open_dev$sg(0x0, 0x0, 0x40042)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0)
mkdir(0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
socket$kcm(0x21, 0x2, 0xa)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x160, 0x194, 0x194, 0x160, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x0, 0x22}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258)

18m20.201440344s ago: executing program 3 (id=39):
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='squashfs\x00', 0x1a0c000, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
r2 = userfaultfd(0x801)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r5=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x3}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
ioctl$UFFDIO_CONTINUE(r2, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x1, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x9, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x1, 0xffffffd9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x0, 0x7, 0x3, 0x9, 0x7fffffff, 0x42, 0x2], [0x2, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x40008, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x5, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x9, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x8, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x10003, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x7, 0x2, 0x10080, 0x5, 0x3, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

18m15.583545139s ago: executing program 3 (id=46):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000})
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000})
io_uring_setup(0x14897, &(0x7f0000000340)={0x0, 0xfcd3, 0x8000, 0x40001, 0xfffffffe})
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001200050100000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20040810)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
syz_emit_ethernet(0x4c, &(0x7f00000003c0)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "410100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @opaque="df813361e608f3ac2455e3fa4f11"}}}}}}, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

18m11.505962263s ago: executing program 3 (id=51):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x600440c0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x24000040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
readv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/218, 0xda}], 0x1)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota')

17m55.579384786s ago: executing program 32 (id=51):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x600440c0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x24000040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
readv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/218, 0xda}], 0x1)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota')

17m20.833104374s ago: executing program 2 (id=116):
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000006c0))

17m16.505766337s ago: executing program 2 (id=122):
memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;|\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xf)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4000800, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_open_dev$usbmon(&(0x7f0000000180), 0x7fffffff, 0x80001)
io_setup(0x6, &(0x7f0000001380)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
r7 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r7, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ftruncate(r7, 0x0)

17m15.069324402s ago: executing program 2 (id=125):
r0 = getpid()
ptrace$setsig(0x4203, r0, 0x8, &(0x7f0000000300)={0x27, 0x1, 0x6})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000107, &(0x7f0000000a80)=ANY=[@ANYBLOB="8091364f484133035d2f8d212c106396598f9d3ec1807ff6e5eef30840c141ca865967862bfbecd3b2cd13773ec5159df0387045cb4361ed6aa54653e421af33f51024b11571ed7b12fb33405f139cc6a3d74e158027fba5230807838291d4093bcd11d962d5f1d2271a8bcd729b53c8dc3b60ae044ba02e093948c4d6cf5fc2d348b1807067bd76ce9944507062dec89097d3b5edfc5c73aa93ce9719abe18205b1e4b16b57f417cfa047c7ef390d7737a645bd49e97a66280c240941b167a782093072685bb2f4d441c442892e199200e4311127f1"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_procfs(r0, &(0x7f0000000040)='net/fib_triestat\x00')
ioctl$TIOCSETD(r2, 0x5423, 0x0)
readv(r2, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000000080)=""/191, 0xbf}, {&(0x7f0000000380)=""/144, 0x90}, {0x0}, {&(0x7f0000000580)=""/96, 0x60}], 0x5)
lseek(r2, 0x2, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
prlimit64(r0, 0xd, &(0x7f0000000240)={0xa, 0xfcbd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x1, 0x0)

17m10.299333592s ago: executing program 2 (id=131):
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
dup(0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r4 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x1000})
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r6 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0x1)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_io_uring_setup(0x4fae, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0)
ioctl$UI_GET_VERSION(r8, 0x8004552d, &(0x7f0000000540))
r9 = fcntl$dupfd(r5, 0x406, r0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9})
close_range(r1, 0xffffffffffffffff, 0x0)

17m8.087925606s ago: executing program 2 (id=133):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x801)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x9c, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0x2}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x10], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x31}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="e1af822f"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)

17m6.901819081s ago: executing program 2 (id=136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x6, 0x2, [0x341, 0xf]}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000a40)=""/65, 0x41}, {0x0}], 0x2, 0x6, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(r6, 0x0, 0x4a012)
lseek(0xffffffffffffffff, 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x15)
ioctl$TCSETS(r3, 0xc0384707, &(0x7f0000000040)={0x8, 0x0, 0x8, 0x5, 0xd, "ed510362472f580080000000000100"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
setitimer(0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

16m51.714749385s ago: executing program 33 (id=136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x6, 0x2, [0x341, 0xf]}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000a40)=""/65, 0x41}, {0x0}], 0x2, 0x6, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(r6, 0x0, 0x4a012)
lseek(0xffffffffffffffff, 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x15)
ioctl$TCSETS(r3, 0xc0384707, &(0x7f0000000040)={0x8, 0x0, 0x8, 0x5, 0xd, "ed510362472f580080000000000100"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
setitimer(0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

10m50.271558357s ago: executing program 5 (id=809):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5c})

10m49.893656598s ago: executing program 5 (id=811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf256c00000008000300", @ANYRES32=r3, @ANYBLOB="08009f0003000000080026"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)

10m49.472312722s ago: executing program 5 (id=814):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000c00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511", 0x8}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33)

10m48.969922704s ago: executing program 5 (id=819):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x1, 0x8010000000000084)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

10m48.078991343s ago: executing program 5 (id=824):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001a80)={0x20002008})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x30000000})

10m47.275888666s ago: executing program 5 (id=834):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, 0x0)

10m46.727500812s ago: executing program 34 (id=834):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, 0x0)

9m16.945721468s ago: executing program 1 (id=1163):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000007"])
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @remote, 0x3}, 0x18)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0xd, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m16.295319558s ago: executing program 1 (id=1167):
r0 = socket$inet(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000180))
setsockopt$rose(r5, 0x104, 0x1, 0x0, 0x0)
ioctl$SIOCRSSL2CALL(r5, 0x89e2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000)

9m13.983356767s ago: executing program 1 (id=1173):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2})
fcntl$lock(r3, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@private2}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)

9m12.808054952s ago: executing program 1 (id=1176):
mkdir(&(0x7f00000000c0)='./file1\x00', 0x154)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00')

9m12.325330876s ago: executing program 1 (id=1179):
ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xa, 0xb130, 0x9f, 0xc, 0x0, 0x200, 0xc}, 0x9c)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
syz_emit_ethernet(0x7e, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x48, 0x2f, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x5, 0x401]}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x12)
mkdir(&(0x7f0000000140)='./file0\x00', 0x12)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x10040, 0x0)

9m10.008274618s ago: executing program 1 (id=1185):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)

9m9.64950176s ago: executing program 35 (id=1185):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)

7m19.275600415s ago: executing program 4 (id=921):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
sendto$inet(r1, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)

6m33.983096635s ago: executing program 4 (id=921):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
sendto$inet(r1, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)

5m42.269280126s ago: executing program 4 (id=921):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
sendto$inet(r1, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)

1m2.099539257s ago: executing program 4 (id=921):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
sendto$inet(r1, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)

38.127510943s ago: executing program 4 (id=921):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
sendto$inet(r1, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)

23.487922079s ago: executing program 6 (id=2239):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xe1, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000740)=""/14, 0xfef9)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r8}, 0x10)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xe)
gettid()
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
mmap$IORING_OFF_SQES(&(0x7f0000b05000/0x1000)=nil, 0x1000, 0x1000008, 0x10, r5, 0x10000000)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}})

22.332808858s ago: executing program 6 (id=2242):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)={0x0, 0x7, 0x1b, "7fcc8a51dac2499871778434e9eecd6ae9d6ba2826ad836f63fbcc"}, 0x23)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xb, 0xf, 0x9, '\x00', 0x5})

21.948060484s ago: executing program 6 (id=2245):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

21.686367772s ago: executing program 6 (id=2248):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40)

21.489899128s ago: executing program 6 (id=2251):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f00000006c0)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x4}, 0x0, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x3}})
ioctl$EVIOCGMASK(r1, 0x5b04, 0x0)

21.092296879s ago: executing program 6 (id=2254):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3ffffffffffffffd, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0xffff, 0x0, 0x0, [<r5=>0x0], [0x7, 0x0, 0x0, 0x67], [0x0, 0x0, 0xb, 0xfffffffc], [0x6, 0x4, 0x4, 0xffffffffffff7fff]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r5, 0x80000})

9.679042145s ago: executing program 0 (id=2283):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000080)="0fae85e0006466dada0f0119b869008ed02bd50fc75d6267670f3a0f50b37d66b80500000066b9e45dfd6e0f01d9660f205d0fc76d8d", 0x36}], 0x1, 0x79, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

9.388799326s ago: executing program 0 (id=2284):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"], 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000", @ANYBLOB="0000000000000000b702000014000800b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8ab9, 0x4, 0x4, 0x1cd, 0x7, 0xf, 0x120000, 0x847, 0x0, 0x2, 0x8000000000000000, 0x2, 0x0, 0x101, 0x6, 0x1], 0x8000000, 0x181200})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x1, 0x8, '\x00', 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.132265798s ago: executing program 0 (id=2285):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, 0x0)
fcntl$lock(r5, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@private2}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)

9.122134512s ago: executing program 7 (id=2286):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b)
sendfile(r2, r0, 0x0, 0x4000000053d2)

8.757177506s ago: executing program 7 (id=2287):
syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000003, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_open_dev$vim2m(&(0x7f0000000000), 0x73851bc5, 0x2)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0xffffffff})

8.750715282s ago: executing program 4 (id=921):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
sendto$inet(r1, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)

7.987236089s ago: executing program 8 (id=2288):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x6b, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300), 0x800, r0}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

7.953159811s ago: executing program 0 (id=2289):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='tcp_probe\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7)

5.644591623s ago: executing program 0 (id=2290):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

5.644340366s ago: executing program 8 (id=2291):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private, 0x0, 0x0, 'lc\x00'}, 0x2c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '+f'}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0)

5.643528088s ago: executing program 7 (id=2292):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c270", 0xdd}, {&(0x7f0000001600)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5", 0xf4}], 0x2}}], 0x1, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0)

5.449117217s ago: executing program 7 (id=2293):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

4.468362528s ago: executing program 8 (id=2294):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x119966ec, 0x69cf39a9dadd5612, 0x7}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}], [], 0x6b}})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f000001b700)={0x2020}, 0x2020)

4.236064936s ago: executing program 7 (id=2295):
ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
fcntl$getownex(r2, 0x10, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xa, 0xb130, 0x9f, 0xc, 0x0, 0x200, 0xc}, 0x9c)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
syz_emit_ethernet(0x7e, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x48, 0x2f, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x5, 0x401]}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12)
mkdir(&(0x7f0000000140)='./file0\x00', 0x12)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x10040, 0x0)

4.078807994s ago: executing program 8 (id=2296):
ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
fcntl$getownex(r2, 0x10, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000841, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xa, 0xb130, 0x9f, 0xc, 0x0, 0x200, 0xc}, 0x9c)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
syz_emit_ethernet(0x7e, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x48, 0x2f, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x5, 0x401]}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12)
mkdir(&(0x7f0000000140)='./file0\x00', 0x12)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x10040, 0x0)

3.1253099s ago: executing program 7 (id=2297):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f000001a4c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x420, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, 0x0)

1.916035466s ago: executing program 8 (id=2298):
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x61, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000d26a871dba07e83f34c6e27805b682"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0xd0}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00')
preadv(r1, &(0x7f00000006c0)=[{0x0}], 0x1, 0xfff, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff)
add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000400)="577f2f2031df941a722903822507c7b1874e292ca445893fdefab65558aa76156da9b27c0375c23b4ec1f03174cd16f09957a881553f5a3c854d2540ff35ce188a86f2189525abafeb781a7fa398c6b3a21ebe4372adc92c85a383381888b4a4728206bc5c82d6af8d002819680bedb63b8dad261b3ddfd23023177fd29b5afa800eee8ef690b896c91e7d371ce549", 0x8f, 0x0)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
chdir(&(0x7f0000000540)='./cgroup\x00')
setresuid(0x0, 0xee01, 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)

107.199192ms ago: executing program 0 (id=2299):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2})
fcntl$lock(r5, 0x6, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@private2}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)

0s ago: executing program 8 (id=2300):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00')
r2 = fanotify_init(0x0, 0x0)
readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0x18}], 0x1)
fanotify_mark(r2, 0x1, 0x40001019, r1, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

nterface: batadv_slave_0
[  731.358565][ T5921] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  731.367447][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_1
[  731.568669][ T5130] Bluetooth: hci3: command tx timeout
[  731.669188][ T5921] veth1_macvtap: left promiscuous mode
[  731.678711][ T5921] veth0_macvtap: left promiscuous mode
[  731.696594][ T5921] veth1_vlan: left promiscuous mode
[  731.703005][ T5921] veth0_vlan: left promiscuous mode
[  732.433629][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1322'.
[  733.600145][ T5830] Bluetooth: hci3: command tx timeout
[  734.440639][ T5830] Bluetooth: hci0: command 0x0406 tx timeout
[  734.818127][ T5921] team0 (unregistering): Port device team_slave_1 removed
[  734.928620][ T5921] team0 (unregistering): Port device team_slave_0 removed
[  735.695544][ T5130] Bluetooth: hci3: command tx timeout
[  736.082251][T11433] dvmrp8: entered allmulticast mode
[  736.088089][T11433] dvmrp8: left allmulticast mode
[  736.137505][T11440] dvmrp8: entered allmulticast mode
[  736.145425][T11437] dvmrp8: left allmulticast mode
[  736.375669][T11371] chnl_net:caif_netlink_parms(): no params data found
[  737.780124][ T5130] Bluetooth: hci3: command tx timeout
[  738.858224][T11464] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5)
[  738.865244][T11464] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  738.961629][T11464] vhci_hcd vhci_hcd.0: Device attached
[  739.125222][T11466] vhci_hcd: connection closed
[  739.129553][   T82] vhci_hcd: stop threads
[  739.175607][   T82] vhci_hcd: release socket
[  739.190088][ T5883] usb 47-1: new low-speed USB device number 2 using vhci_hcd
[  739.218989][   T82] vhci_hcd: disconnect device
[  739.260044][ T5813] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  739.493440][ T5813] usb 9-1: Using ep0 maxpacket: 16
[  739.514971][ T5813] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  739.525351][ T5813] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  739.541778][ T5813] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  739.552621][ T5813] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.561035][ T5813] usb 9-1: Product: syz
[  739.565429][ T5813] usb 9-1: Manufacturer: syz
[  739.570264][ T5813] usb 9-1: SerialNumber: syz
[  742.221014][T11371] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.260610][T11371] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.290729][T11371] bridge_slave_0: entered allmulticast mode
[  742.298604][T11371] bridge_slave_0: entered promiscuous mode
[  742.305725][ T5813] usb 9-1: 0:2 : does not exist
[  742.330650][ T5813] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  742.352371][T11371] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.390888][T11371] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.398315][T11371] bridge_slave_1: entered allmulticast mode
[  742.455773][ T5813] usb 9-1: USB disconnect, device number 2
[  742.470447][T11371] bridge_slave_1: entered promiscuous mode
[  742.524287][T11480] dvmrp8: entered allmulticast mode
[  742.535949][T11480] dvmrp8: left allmulticast mode
[  742.706360][T11371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  742.874685][T11371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  743.153870][T11371] team0: Port device team_slave_0 added
[  743.201116][T11371] team0: Port device team_slave_1 added
[  743.498208][T11371] batman_adv: batadv0: Adding interface: batadv_slave_0
[  743.529326][T11371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  743.633219][T11371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  743.648176][T11371] batman_adv: batadv0: Adding interface: batadv_slave_1
[  743.656290][T11371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  743.692027][T11371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  744.700123][T11371] hsr_slave_0: entered promiscuous mode
[  744.707093][T11371] hsr_slave_1: entered promiscuous mode
[  744.763406][ T5883] vhci_hcd: vhci_device speed not set
[  744.816291][T11371] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  744.853065][T11371] Cannot create hsr debugfs directory
[  746.695629][T11371] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  746.724668][T11371] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  746.752733][T11371] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  746.809840][T11371] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  747.159083][T11371] 8021q: adding VLAN 0 to HW filter on device bond0
[  747.236131][T11371] 8021q: adding VLAN 0 to HW filter on device team0
[  747.281743][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  747.289127][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  747.354648][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  747.361886][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  747.443930][ T5813] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  748.272355][T11544] dvmrp8: entered allmulticast mode
[  748.320918][ T5813] usb 1-1: Using ep0 maxpacket: 16
[  749.313077][T11544] dvmrp8: left allmulticast mode
[  749.356327][ T5813] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  749.386246][ T5813] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  749.534336][ T5813] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  749.544432][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.552693][ T5813] usb 1-1: Product: syz
[  749.557055][ T5813] usb 1-1: Manufacturer: syz
[  749.565919][ T5813] usb 1-1: SerialNumber: syz
[  750.590713][T11371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  751.756520][ T5130] Bluetooth: hci1: unexpected event for opcode 0x2029
[  751.896741][ T5130] block nbd8: Receive control failed (result -107)
[  751.952803][ T5813] usb 1-1: 0:2 : does not exist
[  751.960812][T11575] nbd8: detected capacity change from 0 to 12
[  751.983269][ T5813] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  752.006493][T11575] block nbd8: Dead connection, failed to find a fallback
[  752.044563][T11575] block nbd8: shutting down sockets
[  752.052819][ T5813] usb 1-1: USB disconnect, device number 27
[  752.066038][T11575] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  752.099546][T11575] buffer_io_error: 7 callbacks suppressed
[  752.099582][T11575] Buffer I/O error on dev nbd8, logical block 0, async page read
[  752.161515][T11575] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  752.260945][T11583] program syz.6.1361 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  752.280345][T11575] Buffer I/O error on dev nbd8, logical block 0, async page read
[  752.397739][T11575] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  752.662195][T11575] Buffer I/O error on dev nbd8, logical block 0, async page read
[  752.733729][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  752.741595][T11575] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  752.794826][T11575] Buffer I/O error on dev nbd8, logical block 0, async page read
[  752.816422][T11575] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  752.853576][T11575] Buffer I/O error on dev nbd8, logical block 0, async page read
[  752.874327][T11575] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  752.885856][T11575] Buffer I/O error on dev nbd8, logical block 0, async page read
[  752.892949][T11371] veth0_vlan: entered promiscuous mode
[  752.910319][T11575] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  752.925315][T11575] Buffer I/O error on dev nbd8, logical block 0, async page read
[  752.935917][T11575] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  753.007686][T11371] veth1_vlan: entered promiscuous mode
[  753.014146][T11575] Buffer I/O error on dev nbd8, logical block 0, async page read
[  753.038140][T11575] ldm_validate_partition_table(): Disk read failed.
[  753.053436][T11575] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  753.080053][T11575] Buffer I/O error on dev nbd8, logical block 0, async page read
[  753.101806][T11575] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  753.112719][T11371] veth0_macvtap: entered promiscuous mode
[  753.117669][T11575] Buffer I/O error on dev nbd8, logical block 0, async page read
[  753.134206][T11575] Dev nbd8: unable to read RDB block 0
[  753.142968][T11575]  nbd8: unable to read partition table
[  753.148840][T11575] nbd8: partition table beyond EOD, truncated
[  753.167933][T11575] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  753.414021][T11371] veth1_macvtap: entered promiscuous mode
[  753.421276][T11575] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=5, location=5
[  754.190676][T11575] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=4, location=4
[  754.430466][T11575] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=3, location=3
[  754.445875][T11371] batman_adv: batadv0: Interface activated: batadv_slave_0
[  754.796058][T11575] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  754.808923][T11575] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  754.819220][T11575] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=2, location=2
[  754.830516][T11575] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=1, location=1
[  754.840086][T11575] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=0, location=0
[  754.850535][T11575] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  754.861394][T11575] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  754.871533][T11575] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=0, location=0
[  754.881981][T11575] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  754.915086][T11596] dvmrp8: entered allmulticast mode
[  754.938215][T11371] batman_adv: batadv0: Interface activated: batadv_slave_1
[  754.941127][T11575] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1)
[  754.953404][T11590] dvmrp8: left allmulticast mode
[  755.003353][T11371] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  755.019560][T11371] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  755.030401][T11371] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  755.099964][T11371] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  755.320122][ T5875] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  755.530600][ T5875] usb 7-1: Using ep0 maxpacket: 32
[  755.672010][ T5875] usb 7-1: unable to get BOS descriptor or descriptor too short
[  755.765706][ T5130] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  755.777435][ T5875] usb 7-1: config 7 has an invalid interface number: 187 but max is 0
[  755.787642][ T5130] Bluetooth: hci1: Injecting HCI hardware error event
[  755.798697][ T5830] Bluetooth: hci1: hardware error 0x00
[  755.939332][ T5875] usb 7-1: config 7 has no interface number 0
[  756.022488][ T5875] usb 7-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947
[  756.117264][ T5875] usb 7-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16
[  756.184274][ T5875] usb 7-1: config 7 interface 187 has no altsetting 0
[  756.209817][ T5875] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  756.219092][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.257663][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  756.278111][ T5875] usb 7-1: Product: syz
[  756.311587][ T5875] usb 7-1: Manufacturer: syz
[  756.316304][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  756.347743][ T5875] usb 7-1: SerialNumber: syz
[  756.393709][T11601] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  756.421078][T11601] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  756.464344][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  757.100314][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  757.219245][T11615] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  757.436080][ T5875] usb 7-1: Cannot retrieve CPort count: 0
[  757.442709][ T5875] usb 7-1: Cannot retrieve CPort count: -5
[  757.448576][ T5875] es2_ap_driver 7-1:7.187: probe with driver es2_ap_driver failed with error -5
[  757.554507][ T5948] usb 7-1: USB disconnect, device number 15
[  758.390222][ T5830] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  759.925255][ T6059] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.110648][ T5948] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  760.249609][ T6059] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.285961][T11649] dvmrp8: entered allmulticast mode
[  760.583827][ T5948] usb 1-1: config 0 has an invalid interface number: 219 but max is 0
[  760.586499][ T6059] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.594150][ T5948] usb 1-1: config 0 has no interface number 0
[  760.620270][ T5948] usb 1-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=56.19
[  760.629738][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.647184][ T5948] usb 1-1: Product: syz
[  760.651568][ T5948] usb 1-1: Manufacturer: syz
[  760.656252][ T5948] usb 1-1: SerialNumber: syz
[  760.664323][ T5948] usb 1-1: config 0 descriptor??
[  760.665969][T11644] dvmrp8: left allmulticast mode
[  760.674587][ T5948] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state.
[  760.674651][ T5948] dvb-usb: bulk message failed: -22 (2/0)
[  760.690438][ T5948] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  760.699673][ T5948] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353))
[  760.710344][ T5948] usb 1-1: media controller created
[  760.717794][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  760.748484][ T6059] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.796565][ T5948] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)...
[  760.814740][ T5948] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  760.940136][ T5948] rc_core: IR keymap rc-dtt200u not found
[  760.951532][ T6059] bridge_slave_1: left allmulticast mode
[  760.957246][ T6059] bridge_slave_1: left promiscuous mode
[  760.962720][ T5948] Registered IR keymap rc-empty
[  760.963495][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.969657][ T5948] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  761.022852][ T5948] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input18
[  761.051539][ T6059] bridge_slave_0: left allmulticast mode
[  761.065328][ T5948] dvb-usb: schedule remote query interval to 300 msecs.
[  761.083042][ T6059] bridge_slave_0: left promiscuous mode
[  761.083904][ T5948] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected.
[  761.088896][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state
[  761.143940][ T5948] usb 1-1: USB disconnect, device number 28
[  762.231863][ T5948] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected.
[  763.010683][  T975] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  763.165156][  T975] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  763.432558][  T975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.734056][  T975] usb 9-1: config 0 descriptor??
[  763.803429][  T975] cp210x 9-1:0.0: cp210x converter detected
[  763.971037][T11666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  764.009623][T11676] kvm: pic: non byte write
[  764.035306][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  764.054548][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  764.071328][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  764.082965][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  764.107673][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  764.118765][T11666] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  764.409609][  T975] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  764.442649][  T975] usb 9-1: cp210x converter now attached to ttyUSB0
[  764.475316][T11681] kvm: pic: single mode not supported
[  764.475336][T11681] kvm: pic: level sensitive irq not supported
[  764.481844][T11681] kvm: pic: level sensitive irq not supported
[  764.491820][T11681] kvm: pic: single mode not supported
[  764.497975][T11681] kvm: pic: level sensitive irq not supported
[  764.504130][T11681] kvm: pic: single mode not supported
[  764.507318][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  764.510797][T11681] kvm: pic: level sensitive irq not supported
[  764.535683][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  764.555192][ T6059] bond0 (unregistering): Released all slaves
[  764.660301][ T5883] usb 9-1: USB disconnect, device number 3
[  764.690834][ T5883] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  764.738604][ T5883] cp210x 9-1:0.0: device disconnected
[  765.067507][ T6059] hsr_slave_0: left promiscuous mode
[  765.085968][ T6059] hsr_slave_1: left promiscuous mode
[  765.100816][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  765.181648][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0
[  765.193568][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  765.203268][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1
[  765.291667][ T6059] veth1_macvtap: left promiscuous mode
[  765.325962][ T6059] veth0_macvtap: left promiscuous mode
[  765.351860][ T6059] veth1_vlan: left promiscuous mode
[  765.366057][ T6059] veth0_vlan: left promiscuous mode
[  766.245154][ T5130] Bluetooth: hci3: command tx timeout
[  767.780329][  T975] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  767.951028][  T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  767.963779][  T975] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  767.973472][  T975] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  767.983202][  T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.366668][ T5130] Bluetooth: hci3: command tx timeout
[  768.369011][  T975] usb 1-1: config 0 descriptor??
[  768.553713][  T975] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  768.568472][  T975] dvb-usb: bulk message failed: -22 (3/0)
[  768.579834][  T975] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  768.593418][  T975] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  768.610178][  T975] usb 1-1: media controller created
[  768.637411][  T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  768.698818][  T975] dvb-usb: bulk message failed: -22 (6/0)
[  768.740600][  T975] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  768.756019][T11695] dibusb: i2c wr: len=61 is too big!
[  768.756019][T11695] 
[  768.786293][  T975] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19
[  768.819218][  T975] dvb-usb: schedule remote query interval to 150 msecs.
[  768.827369][  T975] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  768.850610][  T975] usb 1-1: USB disconnect, device number 29
[  768.949636][T11710] SET target dimension over the limit!
[  769.391466][  T975] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  769.750901][ T6059] team0 (unregistering): Port device team_slave_1 removed
[  769.911814][ T6059] team0 (unregistering): Port device team_slave_0 removed
[  770.400248][ T5130] Bluetooth: hci3: command tx timeout
[  770.622793][T11701] dvmrp8: entered allmulticast mode
[  770.628307][T11701] dvmrp8: left allmulticast mode
[  770.675328][T11715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  771.045366][T11722] overlayfs: failed to get index nlink (file1/file0, err=-61)
[  771.313928][T11677] chnl_net:caif_netlink_parms(): no params data found
[  772.322583][  T975] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  772.480402][ T5130] Bluetooth: hci3: command tx timeout
[  772.702558][T11677] bridge0: port 1(bridge_slave_0) entered blocking state
[  772.729469][  T975] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  772.804311][T11677] bridge0: port 1(bridge_slave_0) entered disabled state
[  772.992687][T11677] bridge_slave_0: entered allmulticast mode
[  773.362884][  T975] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  773.376080][T11677] bridge_slave_0: entered promiscuous mode
[  773.392063][  T975] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  773.411899][T11677] bridge0: port 2(bridge_slave_1) entered blocking state
[  773.429286][  T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  773.438883][T11677] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.448542][  T975] usb 7-1: SerialNumber: syz
[  773.454873][T11677] bridge_slave_1: entered allmulticast mode
[  773.484323][T11677] bridge_slave_1: entered promiscuous mode
[  773.512781][T11745] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  773.530294][T11745] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  773.539392][T11745] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  773.563371][T11745] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  773.651374][T11745] geneve2: entered promiscuous mode
[  773.656836][T11745] geneve2: entered allmulticast mode
[  773.744428][  T975] usb 7-1: 0:2 : does not exist
[  773.770061][  T975] usb 7-1: unit 5: unexpected type 0x0c
[  773.829799][  T975] usb 7-1: USB disconnect, device number 16
[  773.865727][T11677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  773.899258][T11677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  774.252054][T11677] team0: Port device team_slave_0 added
[  774.317241][T11677] team0: Port device team_slave_1 added
[  775.426443][   T30] audit: type=1326 audit(1747487646.178:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz.6.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa445f8e969 code=0x7ffc0000
[  775.474424][   T30] audit: type=1326 audit(1747487646.178:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz.6.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa445f8e969 code=0x7ffc0000
[  775.505265][   T30] audit: type=1326 audit(1747487646.188:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz.6.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa445f8e969 code=0x7ffc0000
[  775.535865][T11773] dvmrp8: entered allmulticast mode
[  775.541509][T11773] dvmrp8: left allmulticast mode
[  775.564698][   T30] audit: type=1326 audit(1747487646.188:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz.6.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa445f8e969 code=0x7ffc0000
[  775.609700][   T30] audit: type=1326 audit(1747487646.188:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11771 comm="syz.6.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa445f8e969 code=0x7ffc0000
[  775.704738][T11677] batman_adv: batadv0: Adding interface: batadv_slave_0
[  775.715347][T11677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  775.741314][    C1] vkms_vblank_simulate: vblank timer overrun
[  775.753592][T11677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  775.768583][T11677] batman_adv: batadv0: Adding interface: batadv_slave_1
[  775.848738][T11677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  775.875540][T11677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  775.991610][T11784] syzkaller0: entered promiscuous mode
[  775.998587][T11784] syzkaller0: entered allmulticast mode
[  776.012572][T11677] hsr_slave_0: entered promiscuous mode
[  776.019607][T11677] hsr_slave_1: entered promiscuous mode
[  776.032953][T11677] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  776.048036][T11677] Cannot create hsr debugfs directory
[  777.173318][ T5907] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  777.529045][ T5907] usb 9-1: Using ep0 maxpacket: 8
[  777.578430][ T5907] usb 9-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  777.588027][ T5907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.596159][ T5907] usb 9-1: Product: syz
[  777.608936][ T5907] usb 9-1: Manufacturer: syz
[  777.620335][ T5907] usb 9-1: SerialNumber: syz
[  777.644475][ T5907] usb 9-1: config 0 descriptor??
[  778.057731][ T5907] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  779.096177][ T5907] gspca_sunplus: reg_w_riv err -71
[  779.101583][ T5907] sunplus 9-1:0.0: probe with driver sunplus failed with error -71
[  779.111721][ T5907] usb 9-1: USB disconnect, device number 4
[  782.435558][T11677] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  782.480451][T11677] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  782.506326][T11677] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  782.538299][T11677] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  782.782856][T11677] 8021q: adding VLAN 0 to HW filter on device bond0
[  783.005193][T11677] 8021q: adding VLAN 0 to HW filter on device team0
[  783.677429][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state
[  783.684823][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  784.323685][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state
[  784.330935][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state
[  784.548066][ T5830] Bluetooth: hci4: command tx timeout
[  784.634880][T11852] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095
[  785.539268][T11864] syzkaller0: entered promiscuous mode
[  785.628078][T11864] syzkaller0: entered allmulticast mode
[  785.674706][T11868] dvmrp8: entered allmulticast mode
[  785.680670][T11868] dvmrp8: left allmulticast mode
[  789.573826][    T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  789.730061][    T9] usb 9-1: Using ep0 maxpacket: 16
[  789.746558][    T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  789.758846][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  789.788551][    T9] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  789.814313][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.826008][    T9] usb 9-1: Product: syz
[  789.835816][    T9] usb 9-1: Manufacturer: syz
[  789.843495][    T9] usb 9-1: SerialNumber: syz
[  789.858166][    T9] usb 9-1: config 0 descriptor??
[  789.868274][    T9] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  789.877893][    T9] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class)
[  790.498338][    T9] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  790.506045][    T9] em28xx 9-1:0.0: Config register raw data: 0xfffffffb
[  791.243040][T11677] 8021q: adding VLAN 0 to HW filter on device batadv0
[  791.349650][    T9] em28xx 9-1:0.0: Unknown AC97 audio processor detected!
[  791.364652][    T9] em28xx 9-1:0.0: couldn't setup AC97 register 2
[  791.372394][    T9] em28xx 9-1:0.0: couldn't setup AC97 register 4
[  792.176442][T11923] dvmrp8: entered allmulticast mode
[  792.218266][    T9] em28xx 9-1:0.0: couldn't setup AC97 register 6
[  792.239824][    T9] em28xx 9-1:0.0: couldn't setup AC97 register 54
[  792.253158][    T9] em28xx 9-1:0.0: couldn't setup AC97 register 56
[  792.274872][    T9] usb 9-1: USB disconnect, device number 5
[  792.352662][T11914] dvmrp8: left allmulticast mode
[  792.545350][T11677] veth0_vlan: entered promiscuous mode
[  792.578143][T11677] veth1_vlan: entered promiscuous mode
[  792.638574][T11677] veth0_macvtap: entered promiscuous mode
[  792.654654][T11677] veth1_macvtap: entered promiscuous mode
[  793.136237][T11933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  793.220478][T11677] batman_adv: batadv0: Interface activated: batadv_slave_0
[  793.238411][T11677] batman_adv: batadv0: Interface activated: batadv_slave_1
[  793.293645][T11677] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  793.339318][T11677] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  793.364854][T11677] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  793.374310][T11677] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  793.485006][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.515727][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  793.576643][ T6059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.590056][ T6059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  794.657413][T11677] syz-executor (11677) used greatest stack depth: 20312 bytes left
[  794.937694][ T5926] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.132626][ T5926] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.160593][ T5906] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  795.326606][ T5906] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  795.337899][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  795.345958][ T5926] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.363711][ T5906] usb 7-1: Product: syz
[  795.368039][ T5906] usb 7-1: Manufacturer: syz
[  795.372882][ T5906] usb 7-1: SerialNumber: syz
[  795.420051][ T5926] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.561386][ T5926] bridge_slave_1: left allmulticast mode
[  795.567337][ T5926] bridge_slave_1: left promiscuous mode
[  795.573326][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.583604][ T5926] bridge_slave_0: left allmulticast mode
[  795.588402][ T5906] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  795.589307][ T5926] bridge_slave_0: left promiscuous mode
[  795.608829][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.802210][ T5948] usb 7-1: USB disconnect, device number 17
[  795.813295][ T5948] usblp0: removed
[  800.955784][ T5926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  800.957061][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  800.975541][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  800.985263][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  800.995672][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  801.004720][ T5926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  801.016360][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  801.028160][ T5926] bond0 (unregistering): Released all slaves
[  801.252419][T11988] netlink: 'syz.8.1464': attribute type 2 has an invalid length.
[  801.903363][ T5926] hsr_slave_0: left promiscuous mode
[  801.916935][ T5926] hsr_slave_1: left promiscuous mode
[  801.935572][ T5926] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  801.955234][ T5926] batman_adv: batadv0: Removing interface: batadv_slave_0
[  801.990912][ T5926] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  801.998384][ T5926] batman_adv: batadv0: Removing interface: batadv_slave_1
[  802.049787][ T5926] veth1_macvtap: left promiscuous mode
[  802.060066][ T5926] veth0_macvtap: left promiscuous mode
[  802.065945][ T5926] veth1_vlan: left promiscuous mode
[  802.071916][ T5926] veth0_vlan: left promiscuous mode
[  803.219761][ T5130] Bluetooth: hci3: command tx timeout
[  804.735676][ T5906] IPVS: starting estimator thread 0...
[  804.837338][T12019] IPVS: using max 29 ests per chain, 69600 per kthread
[  805.280957][ T5130] Bluetooth: hci3: command tx timeout
[  805.585003][ T5926] team0 (unregistering): Port device team_slave_1 removed
[  805.656140][ T5926] team0 (unregistering): Port device team_slave_0 removed
[  806.819550][T11985] chnl_net:caif_netlink_parms(): no params data found
[  807.361688][ T5130] Bluetooth: hci3: command tx timeout
[  807.591119][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1484'.
[  808.608749][T11985] bridge0: port 1(bridge_slave_0) entered blocking state
[  808.621490][T11985] bridge0: port 1(bridge_slave_0) entered disabled state
[  808.628995][T11985] bridge_slave_0: entered allmulticast mode
[  808.751727][T11985] bridge_slave_0: entered promiscuous mode
[  808.768979][T11985] bridge0: port 2(bridge_slave_1) entered blocking state
[  808.776492][T11985] bridge0: port 2(bridge_slave_1) entered disabled state
[  808.787634][T11985] bridge_slave_1: entered allmulticast mode
[  808.852852][T11985] bridge_slave_1: entered promiscuous mode
[  808.964725][T12059] netlink: 'syz.7.1491': attribute type 11 has an invalid length.
[  808.986155][T11985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  809.065458][T11985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  809.243951][T11985] team0: Port device team_slave_0 added
[  809.275746][T11985] team0: Port device team_slave_1 added
[  809.421898][T11985] batman_adv: batadv0: Adding interface: batadv_slave_0
[  809.439976][ T5830] Bluetooth: hci3: command tx timeout
[  809.445795][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  809.473051][T11985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  809.487492][T11985] batman_adv: batadv0: Adding interface: batadv_slave_1
[  809.494889][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  810.058434][T11985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  810.565875][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1493'.
[  811.125006][ T5830] Bluetooth: hci2: command 0x0406 tx timeout
[  811.238615][T11985] hsr_slave_0: entered promiscuous mode
[  811.266847][T11985] hsr_slave_1: entered promiscuous mode
[  811.302259][T11985] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  811.388953][T11985] Cannot create hsr debugfs directory
[  812.602059][T12073] syz.6.1495 (12073): drop_caches: 2
[  814.165563][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  819.178068][T11985] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  819.196580][T11985] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  819.223978][T11985] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  819.297062][T11985] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  819.342640][T12130] lo speed is unknown, defaulting to 1000
[  819.348598][T12130] lo speed is unknown, defaulting to 1000
[  819.355642][T12130] lo speed is unknown, defaulting to 1000
[  819.359940][ T5813] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[  819.377928][T12130] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  819.417683][T12130] lo speed is unknown, defaulting to 1000
[  819.425998][T12130] lo speed is unknown, defaulting to 1000
[  819.436744][T12130] lo speed is unknown, defaulting to 1000
[  819.444822][T12130] lo speed is unknown, defaulting to 1000
[  819.453035][T12130] lo speed is unknown, defaulting to 1000
[  820.102136][ T5813] usb 7-1: unable to read config index 0 descriptor/start: -71
[  820.296387][ T5813] usb 7-1: can't read configurations, error -71
[  820.690850][T11985] 8021q: adding VLAN 0 to HW filter on device bond0
[  820.763614][T11985] 8021q: adding VLAN 0 to HW filter on device team0
[  820.813154][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state
[  820.820430][ T5926] bridge0: port 1(bridge_slave_0) entered forwarding state
[  820.868159][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state
[  820.875442][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  821.949266][T12151] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  822.839661][T11985] 8021q: adding VLAN 0 to HW filter on device batadv0
[  828.178790][T11985] veth0_vlan: entered promiscuous mode
[  828.912823][T11985] veth1_vlan: entered promiscuous mode
[  828.946405][T11985] veth0_macvtap: entered promiscuous mode
[  828.958443][T11985] veth1_macvtap: entered promiscuous mode
[  828.983427][T11985] batman_adv: batadv0: Interface activated: batadv_slave_0
[  829.075659][T11985] batman_adv: batadv0: Interface activated: batadv_slave_1
[  830.008630][T12206] dvmrp8: entered allmulticast mode
[  830.049397][T11985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  830.119708][T11985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  830.143671][T11985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  830.163584][T11985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  830.197337][T12202] dvmrp8: left allmulticast mode
[  833.364187][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  833.373661][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  835.217010][ T6059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  835.232484][ T6059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  839.328941][T12265] dvmrp8: entered allmulticast mode
[  839.452076][T12257] dvmrp8: left allmulticast mode
[  841.808184][ T1101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.880782][T12274] dvmrp8: entered allmulticast mode
[  841.886481][T12271] dvmrp8: left allmulticast mode
[  842.074682][ T1101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.226012][ T1101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.382979][ T1101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.614945][ T1101] bridge_slave_1: left allmulticast mode
[  842.620846][ T1101] bridge_slave_1: left promiscuous mode
[  842.626656][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state
[  842.637963][ T1101] bridge_slave_0: left allmulticast mode
[  842.644211][ T1101] bridge_slave_0: left promiscuous mode
[  842.650121][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state
[  844.076905][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  844.103861][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  844.135805][ T1101] bond0 (unregistering): Released all slaves
[  844.330234][T12297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  844.347623][T12297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  844.357956][T12297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  844.371383][T12297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  844.531452][T12297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  845.558022][T12295] lo speed is unknown, defaulting to 1000
[  845.694826][T12304] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1553'.
[  846.348525][ T1101] hsr_slave_0: left promiscuous mode
[  846.400095][ T1101] hsr_slave_1: left promiscuous mode
[  846.406464][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  846.417935][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0
[  846.453850][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  846.470282][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1
[  846.559278][ T1101] veth1_macvtap: left promiscuous mode
[  846.579790][ T1101] veth0_macvtap: left promiscuous mode
[  846.593468][ T1101] veth1_vlan: left promiscuous mode
[  846.598976][ T1101] veth0_vlan: left promiscuous mode
[  846.674744][T12312] overlayfs: failed to clone upperpath
[  846.800081][T12297] Bluetooth: hci3: command tx timeout
[  848.212396][T12330] binder: BINDER_SET_CONTEXT_MGR already set
[  848.218803][T12330] binder: 12329:12330 ioctl 4018620d 2000000000c0 returned -16
[  848.881396][T12297] Bluetooth: hci3: command tx timeout
[  849.541592][ T1101] team0 (unregistering): Port device team_slave_1 removed
[  849.717524][ T1101] team0 (unregistering): Port device team_slave_0 removed
[  850.960093][T12297] Bluetooth: hci3: command tx timeout
[  852.186999][T12355] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1567'.
[  852.839261][T12328] dvmrp8: entered allmulticast mode
[  852.855576][T12328] dvmrp8: left allmulticast mode
[  853.040215][T12297] Bluetooth: hci3: command tx timeout
[  854.678581][T12295] chnl_net:caif_netlink_parms(): no params data found
[  857.390097][T12386] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1573'.
[  860.541706][T12295] bridge0: port 1(bridge_slave_0) entered blocking state
[  860.553250][T12295] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.760410][T12295] bridge_slave_0: entered allmulticast mode
[  861.608363][T12295] bridge_slave_0: entered promiscuous mode
[  861.755745][T12295] bridge0: port 2(bridge_slave_1) entered blocking state
[  861.763375][T12295] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.780442][T12295] bridge_slave_1: entered allmulticast mode
[  861.788576][T12295] bridge_slave_1: entered promiscuous mode
[  863.539185][T12295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  863.693593][T12295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  863.908131][T12295] team0: Port device team_slave_0 added
[  864.118547][T12295] team0: Port device team_slave_1 added
[  865.591013][T12295] batman_adv: batadv0: Adding interface: batadv_slave_0
[  866.358125][T12295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  866.384278][    C1] vkms_vblank_simulate: vblank timer overrun
[  866.391494][T12295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  866.437134][T12295] batman_adv: batadv0: Adding interface: batadv_slave_1
[  866.477162][T12295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  866.503334][    C1] vkms_vblank_simulate: vblank timer overrun
[  866.540202][T12295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  869.383096][T12295] hsr_slave_0: entered promiscuous mode
[  869.399496][T12295] hsr_slave_1: entered promiscuous mode
[  869.406240][T12295] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  869.420326][T12295] Cannot create hsr debugfs directory
[  871.729763][T12485] bio_check_eod: 14 callbacks suppressed
[  871.735672][T12485] syz.6.1594: attempt to access beyond end of device
[  871.735672][T12485] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0
[  875.362860][T12500] overlay: Unknown parameter '/'
[  875.751067][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  875.804759][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1602'.
[  876.106110][T12295] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  876.128660][T12295] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  876.515759][T12295] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  876.575503][T12295] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  876.740188][ T9056] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  876.825626][T12295] 8021q: adding VLAN 0 to HW filter on device bond0
[  876.878863][T12295] 8021q: adding VLAN 0 to HW filter on device team0
[  877.115145][T12295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  877.281183][T12295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  878.063840][ T9056] usb 7-1: config 0 has no interfaces?
[  878.345340][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.353047][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state
[  878.366996][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.374408][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state
[  878.425083][ T9056] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  878.457008][ T9056] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.488119][ T9056] usb 7-1: Product: syz
[  878.500945][ T9056] usb 7-1: Manufacturer: syz
[  878.514050][ T9056] usb 7-1: SerialNumber: syz
[  878.556547][ T9056] usb 7-1: config 0 descriptor??
[  879.223520][T12537] dvmrp8: entered allmulticast mode
[  879.347083][T12518] dvmrp8: left allmulticast mode
[  879.744488][   T48] usb 7-1: USB disconnect, device number 20
[  879.752144][T12295] 8021q: adding VLAN 0 to HW filter on device batadv0
[  880.268290][   T48] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  880.530077][   T48] usb 7-1: Using ep0 maxpacket: 8
[  880.745762][   T48] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  880.876602][   T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.980069][   T48] usb 7-1: Product: syz
[  880.984332][   T48] usb 7-1: Manufacturer: syz
[  880.988983][   T48] usb 7-1: SerialNumber: syz
[  881.092181][   T48] usb 7-1: config 0 descriptor??
[  881.125806][   T48] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244)
[  881.803837][T12560] netlink: 'syz.7.1613': attribute type 1 has an invalid length.
[  881.811802][T12560] netlink: 216 bytes leftover after parsing attributes in process `syz.7.1613'.
[  882.069181][T12295] veth0_vlan: entered promiscuous mode
[  882.158273][T12295] veth1_vlan: entered promiscuous mode
[  882.300485][   T48] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -32
[  882.317097][   T48] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  883.746170][T12295] veth0_macvtap: entered promiscuous mode
[  883.756142][ T5906] usb 7-1: USB disconnect, device number 21
[  883.762952][T12295] veth1_macvtap: entered promiscuous mode
[  883.968554][T12295] batman_adv: batadv0: Interface activated: batadv_slave_0
[  883.981682][T12295] batman_adv: batadv0: Interface activated: batadv_slave_1
[  883.993779][T12295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  884.002768][T12295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  884.025417][T12295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  884.060168][T12295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  886.262897][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  886.288084][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  886.972864][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.179679][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  893.343990][T11979] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.402367][T12635] dvmrp8: entered allmulticast mode
[  893.420695][T12635] dvmrp8: left allmulticast mode
[  893.587843][T11979] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.724728][T11979] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.796657][T11979] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.959368][T11979] bridge_slave_1: left allmulticast mode
[  893.967955][T11979] bridge_slave_1: left promiscuous mode
[  893.976266][T11979] bridge0: port 2(bridge_slave_1) entered disabled state
[  893.987727][T11979] bridge_slave_0: left allmulticast mode
[  893.995228][T11979] bridge_slave_0: left promiscuous mode
[  894.002043][T11979] bridge0: port 1(bridge_slave_0) entered disabled state
[  896.687949][T11979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  896.758111][T11979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  896.819577][T11979] bond0 (unregistering): Released all slaves
[  899.363633][T12642] bond0: (slave team0): Releasing backup interface
[  900.539904][T12642] team0: left promiscuous mode
[  900.545489][T12642] team0: left allmulticast mode
[  900.599959][T12642] team_slave_0: left allmulticast mode
[  900.605605][T12642] team_slave_1: left allmulticast mode
[  900.619466][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  900.643895][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  900.653230][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  900.661083][T12642] team_slave_0: left promiscuous mode
[  900.666956][T12642] team_slave_1: left promiscuous mode
[  900.692660][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  900.710686][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  900.764731][T12642] bridge_slave_0: left allmulticast mode
[  900.989741][T12642] bridge_slave_0: left promiscuous mode
[  901.023445][T12642] bridge0: port 1(bridge_slave_0) entered disabled state
[  901.296520][T12642] bridge_slave_1: left allmulticast mode
[  901.313077][T12642] bridge_slave_1: left promiscuous mode
[  902.114249][T12642] bridge0: port 2(bridge_slave_1) entered disabled state
[  902.171215][T12642] bond0: (slave bond_slave_0): Releasing backup interface
[  902.330910][T12642] bond_slave_0: left allmulticast mode
[  902.336749][T12642] bond_slave_0: left promiscuous mode
[  902.419365][T12642] bond0: (slave bond_slave_1): Releasing backup interface
[  902.443287][T12642] bond_slave_1: left allmulticast mode
[  902.449545][T12642] bond_slave_1: left promiscuous mode
[  902.560115][T12642] team0: Port device team_slave_0 removed
[  902.618761][T12642] team0: Port device team_slave_1 removed
[  902.685287][T12642] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  902.728983][T12642] batman_adv: batadv0: Removing interface: batadv_slave_0
[  902.766027][T12642] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  902.782888][T12642] batman_adv: batadv0: Removing interface: batadv_slave_1
[  902.800212][ T5130] Bluetooth: hci3: command tx timeout
[  904.901730][ T5130] Bluetooth: hci3: command tx timeout
[  906.974636][ T5130] Bluetooth: hci3: command tx timeout
[  907.051273][T12674] lo speed is unknown, defaulting to 1000
[  907.321636][T12717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1649'.
[  908.039036][T12718] Bluetooth: MGMT ver 1.23
[  909.517746][T12297] Bluetooth: hci3: command tx timeout
[  910.289345][T11979] hsr_slave_0: left promiscuous mode
[  910.313387][T11979] hsr_slave_1: left promiscuous mode
[  910.341556][T11979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  910.351651][T11979] batman_adv: batadv0: Removing interface: batadv_slave_0
[  910.591681][T11979] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  910.610200][T11979] batman_adv: batadv0: Removing interface: batadv_slave_1
[  912.306162][T12753] Invalid source name
[  912.978991][T11979] veth1_macvtap: left promiscuous mode
[  913.969996][T11979] veth0_macvtap: left promiscuous mode
[  913.986887][T11979] veth1_vlan: left promiscuous mode
[  914.016196][T11979] veth0_vlan: left promiscuous mode
[  917.749304][T12780] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1665'.
[  919.085475][T11979] team0 (unregistering): Port device team_slave_1 removed
[  919.158949][T11979] team0 (unregistering): Port device team_slave_0 removed
[  925.061024][T12674] chnl_net:caif_netlink_parms(): no params data found
[  926.484184][T12822] macvtap1: entered promiscuous mode
[  926.489574][T12822] vlan0: entered promiscuous mode
[  926.495121][T12822] macvtap1: entered allmulticast mode
[  926.500595][T12822] vlan0: entered allmulticast mode
[  926.505732][T12822] veth0_vlan: entered allmulticast mode
[  926.526848][T12822] vlan0: left allmulticast mode
[  926.531836][T12822] veth0_vlan: left allmulticast mode
[  926.537279][T12822] vlan0: left promiscuous mode
[  926.827443][T12831] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  928.254307][T12674] bridge0: port 1(bridge_slave_0) entered blocking state
[  928.929231][T12674] bridge0: port 1(bridge_slave_0) entered disabled state
[  928.970583][T12674] bridge_slave_0: entered allmulticast mode
[  929.114162][T12674] bridge_slave_0: entered promiscuous mode
[  929.421448][T12674] bridge0: port 2(bridge_slave_1) entered blocking state
[  929.696424][T12674] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.726884][T12674] bridge_slave_1: entered allmulticast mode
[  930.050700][T12847] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[  931.041211][T12674] bridge_slave_1: entered promiscuous mode
[  931.372078][T12674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  931.397483][T12674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  933.537987][T12674] team0: Port device team_slave_0 added
[  934.257083][T12674] team0: Port device team_slave_1 added
[  934.421117][T12871] dvmrp8: entered allmulticast mode
[  935.083707][T12674] batman_adv: batadv0: Adding interface: batadv_slave_0
[  935.097612][T12674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  935.150061][T12674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  935.181717][T12857] dvmrp8: left allmulticast mode
[  935.348734][T12674] batman_adv: batadv0: Adding interface: batadv_slave_1
[  935.357013][T12674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  935.454993][T12674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  936.833249][T12674] hsr_slave_0: entered promiscuous mode
[  937.026570][T12674] hsr_slave_1: entered promiscuous mode
[  937.060957][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  937.942220][T12899] Lens B: =================  START STATUS  =================
[  937.952092][T12899] Lens B: Focus, Absolute: 0
[  937.960441][T12899] Lens B: ==================  END STATUS  ==================
[  938.074498][T12674] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  938.170941][T12674] Cannot create hsr debugfs directory
[  939.413920][T12915] syz.8.1699: attempt to access beyond end of device
[  939.413920][T12915] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0
[  939.430197][T12915] hfsplus: unable to find HFS+ superblock
[  939.462607][T12915] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  939.480939][T12915] cramfs: wrong magic
[  940.990510][   T30] audit: type=1326 audit(1747487811.888:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12917 comm="syz.8.1702" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f858ab8e969 code=0x0
[  944.170045][ T5130] Bluetooth: hci0: unexpected event for opcode 0x0c23
[  949.058690][T12674] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  949.124562][T12674] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  950.106372][T12674] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  950.135579][T12674] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  953.276678][T12674] 8021q: adding VLAN 0 to HW filter on device bond0
[  953.416136][T12674] 8021q: adding VLAN 0 to HW filter on device team0
[  954.784061][ T8205] bridge0: port 1(bridge_slave_0) entered blocking state
[  954.792933][ T8205] bridge0: port 1(bridge_slave_0) entered forwarding state
[  955.298570][ T8205] bridge0: port 2(bridge_slave_1) entered blocking state
[  955.306056][ T8205] bridge0: port 2(bridge_slave_1) entered forwarding state
[  958.312565][   T13] Bluetooth: hci3: Frame reassembly failed (-84)
[  959.060212][T13037] ubi31: detaching mtd0
[  960.219080][T13037] ubi31: mtd0 is detached
[  960.410455][ T5130] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  961.041432][    C1] vkms_vblank_simulate: vblank timer overrun
[  961.044703][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  961.071902][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  961.090964][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  961.116294][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  961.137584][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  962.143640][T13047] lo speed is unknown, defaulting to 1000
[  964.057277][T12297] Bluetooth: hci3: command tx timeout
[  965.866682][T13077] tipc: Started in network mode
[  965.872453][T13077] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  965.881632][T13077] tipc: Enabled bearer <eth:team0>, priority 0
[  966.134671][T12297] Bluetooth: hci3: command tx timeout
[  967.224536][ T5906] tipc: Node number set to 11578026
[  968.274279][T12297] Bluetooth: hci3: command tx timeout
[  970.320538][T12297] Bluetooth: hci3: command tx timeout
[  973.572359][T13047] chnl_net:caif_netlink_parms(): no params data found
[  973.833994][T13121] xt_socket: unknown flags 0x8
[  973.887608][ T6060] bridge_slave_1: left allmulticast mode
[  973.908048][ T6060] bridge_slave_1: left promiscuous mode
[  973.952693][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state
[  973.997287][ T6060] bridge_slave_0: left allmulticast mode
[  974.021617][ T6060] bridge_slave_0: left promiscuous mode
[  974.033545][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.316943][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  978.334500][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  978.346775][ T6060] bond0 (unregistering): Released all slaves
[  978.504833][T13148] lo speed is unknown, defaulting to 1000
[  981.622323][T13047] bridge0: port 1(bridge_slave_0) entered blocking state
[  981.644185][T13047] bridge0: port 1(bridge_slave_0) entered disabled state
[  982.594080][T13047] bridge_slave_0: entered allmulticast mode
[  982.653939][T13047] bridge_slave_0: entered promiscuous mode
[  982.907169][T13175] tipc: Resetting bearer <eth:team0>
[  982.919887][T13175] bridge_slave_0: left allmulticast mode
[  982.926870][T13175] bridge_slave_0: left promiscuous mode
[  982.933851][T13175] bridge0: port 1(bridge_slave_0) entered disabled state
[  983.339283][T13175] bond0: (slave bridge_slave_1): Releasing backup interface
[  983.495753][T13175] bond0: (slave bond_slave_0): Releasing backup interface
[  983.598798][T13175] bond0: (slave bond_slave_1): Releasing backup interface
[  983.861802][T13175] team0: Port device team_slave_0 removed
[  983.886437][T13175] team0: Port device team_slave_1 removed
[  983.894232][T13175] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  983.902738][T13175] batman_adv: batadv0: Removing interface: batadv_slave_0
[  983.914711][T13175] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  983.922860][T13175] batman_adv: batadv0: Removing interface: batadv_slave_1
[  984.094813][ T6060] hsr_slave_0: left promiscuous mode
[  984.124182][T13183] syz.6.1761 (13183): /proc/13183/oom_adj is deprecated, please use /proc/13183/oom_score_adj instead.
[  984.154127][ T6060] hsr_slave_1: left promiscuous mode
[  984.166023][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0
[  984.244085][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1
[  985.009342][ T6060] team0 (unregistering): Port device team_slave_1 removed
[  985.091027][ T6060] team0 (unregistering): Port device team_slave_0 removed
[  986.002470][T13047] bridge0: port 2(bridge_slave_1) entered blocking state
[  986.012931][T13047] bridge0: port 2(bridge_slave_1) entered disabled state
[  986.030370][T13047] bridge_slave_1: entered allmulticast mode
[  986.040437][T13047] bridge_slave_1: entered promiscuous mode
[  986.124218][ T5813] lo speed is unknown, defaulting to 1000
[  986.636414][T13047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  988.378260][T13047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  989.611662][T13047] team0: Port device team_slave_0 added
[  989.649562][T13047] team0: Port device team_slave_1 added
[  990.760853][T13047] batman_adv: batadv0: Adding interface: batadv_slave_0
[  990.795800][T13047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  990.878550][T13047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  990.918258][T13047] batman_adv: batadv0: Adding interface: batadv_slave_1
[  991.106566][T13047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  991.150003][T13047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  993.862166][T13047] hsr_slave_0: entered promiscuous mode
[  993.869539][T13047] hsr_slave_1: entered promiscuous mode
[  993.882856][T13047] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  993.892341][T13047] Cannot create hsr debugfs directory
[  994.331432][T13226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1774'.
[  994.414751][T13226] IPv6: NLM_F_REPLACE set, but no existing node found!
[  994.501642][T13228] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1775'.
[  995.587426][T13047] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  995.696559][T13047] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  995.769130][T13047] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  995.871904][T13047] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  997.968467][T13047] 8021q: adding VLAN 0 to HW filter on device bond0
[  998.486827][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  998.994384][T13047] 8021q: adding VLAN 0 to HW filter on device team0
[  999.020801][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state
[  999.028656][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state
[  999.381984][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state
[  999.389457][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state
[  999.731130][T13260] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21
[ 1007.398287][T13047] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1007.808489][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1793'.
[ 1007.824941][T13303] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1793'.
[ 1016.493015][T13047] veth0_vlan: entered promiscuous mode
[ 1016.608485][T13047] veth1_vlan: entered promiscuous mode
[ 1020.688068][ T5130] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1020.706997][ T5130] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1020.716832][ T5130] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1020.737203][ T5130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1020.753689][ T5130] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1023.122532][ T5130] Bluetooth: hci5: command tx timeout
[ 1023.580522][T13375] lo speed is unknown, defaulting to 1000
[ 1025.646413][ T5130] Bluetooth: hci5: command tx timeout
[ 1026.776819][T13415] random: crng reseeded on system resumption
[ 1027.397331][T13424] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1819'.
[ 1027.909236][ T5130] Bluetooth: hci5: command tx timeout
[ 1027.931508][T13422] sctp: failed to load transform for md5: -2
[ 1029.804044][T13429] lo speed is unknown, defaulting to 1000
[ 1029.813877][T13429] lo speed is unknown, defaulting to 1000
[ 1029.820688][T13429] lo speed is unknown, defaulting to 1000
[ 1029.988046][T13429] infiniband s
z1: set active
[ 1029.993124][T13429] infiniband s
z1: added lo
[ 1030.000539][T13429] s
z1: rxe_create_cq: returned err = -12
[ 1030.006714][T13429] infiniband s
z1: Couldn't create ib_mad CQ
[ 1030.013303][T13429] infiniband s
z1: Couldn't open port 1
[ 1030.052740][    T9] lo speed is unknown, defaulting to 1000
[ 1030.074416][T13429] RDS/IB: s
z1: added
[ 1030.079076][T13429] smc: adding ib device s
z1 with port count 1
[ 1030.085687][T13429] smc:    ib device s
z1 port 1 has pnetid 
[ 1030.095700][T13429] lo speed is unknown, defaulting to 1000
[ 1030.100050][ T5130] Bluetooth: hci5: command tx timeout
[ 1030.282252][T13429] lo speed is unknown, defaulting to 1000
[ 1030.455810][T13429] lo speed is unknown, defaulting to 1000
[ 1030.634127][T13429] lo speed is unknown, defaulting to 1000
[ 1030.813275][T13429] lo speed is unknown, defaulting to 1000
[ 1030.994724][T13429] lo speed is unknown, defaulting to 1000
[ 1031.010418][  T975] lo speed is unknown, defaulting to 1000
[ 1035.590215][T13453] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[ 1035.600587][T13453] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[ 1035.615666][T13375] chnl_net:caif_netlink_parms(): no params data found
[ 1036.245573][T13461] input: syz1 as /devices/virtual/input/input22
[ 1040.354925][T13375] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1040.377223][T13375] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1040.469856][T13375] bridge_slave_0: entered allmulticast mode
[ 1040.510436][T13375] bridge_slave_0: entered promiscuous mode
[ 1041.844039][ T1162] bridge_slave_1: left allmulticast mode
[ 1041.986205][ T1162] bridge_slave_1: left promiscuous mode
[ 1042.244085][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1042.735033][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1834'.
[ 1043.366373][ T1162] bridge_slave_0: left allmulticast mode
[ 1043.390172][ T1162] bridge_slave_0: left promiscuous mode
[ 1043.396212][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1043.906150][T13498] netlink: 'syz.0.1837': attribute type 1 has an invalid length.
[ 1046.524534][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1046.608492][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1046.672277][ T1162] bond0 (unregistering): Released all slaves
[ 1046.716547][T13375] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1046.726027][T13375] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1046.735050][T13375] bridge_slave_1: entered allmulticast mode
[ 1046.746492][T13375] bridge_slave_1: entered promiscuous mode
[ 1046.912705][T13498] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1046.960767][T13509] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1839'.
[ 1047.476535][T13375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1047.524151][T13375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1052.329367][ T5877] IPVS: starting estimator thread 0...
[ 1052.499932][T13548] IPVS: using max 21 ests per chain, 50400 per kthread
[ 1052.799333][T13554] openvswitch: netlink: IP tunnel attribute has 44 unknown bytes.
[ 1053.333564][ T1162] hsr_slave_0: left promiscuous mode
[ 1053.374200][ T1162] hsr_slave_1: left promiscuous mode
[ 1054.207509][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1054.217214][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1054.249713][ T1162] veth1_vlan: left promiscuous mode
[ 1054.256658][ T1162] veth0_vlan: left promiscuous mode
[ 1054.271001][   T30] audit: type=1107 audit(1747487925.168:163): pid=13556 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 1057.992336][ T1162] team0 (unregistering): Port device team_slave_1 removed
[ 1058.091901][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1058.489131][ T1162] team0 (unregistering): Port device team_slave_0 removed
[ 1059.942852][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1060.576171][T13375] team0: Port device team_slave_0 added
[ 1060.716376][T13375] team0: Port device team_slave_1 added
[ 1062.632590][T13375] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1062.653097][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1062.758172][T13375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1062.781528][T13603] pimreg: entered allmulticast mode
[ 1062.911093][T13375] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1062.919543][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1062.959235][T13375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1064.295232][T13375] hsr_slave_0: entered promiscuous mode
[ 1064.322230][T13375] hsr_slave_1: entered promiscuous mode
[ 1064.349515][T13375] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1064.366561][T13375] Cannot create hsr debugfs directory
[ 1064.430780][T13616] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1064.437842][T13616] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1064.478295][T13616] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1064.485306][T13616] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1065.117728][T13616] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1065.124477][T13616] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1065.191451][T13616] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1065.198897][T13616] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1065.668059][T13639] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1067.525529][T13375] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1067.575639][T13375] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1067.845054][T13375] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1067.939242][T13655] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[ 1068.985785][T13375] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1071.683657][T13375] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1071.719528][T13375] 8021q: adding VLAN 0 to HW filter on device team0
[ 1071.795413][T11979] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1071.804207][T11979] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1071.876575][T11979] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1071.884161][T11979] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1072.603140][T13677] /dev/nullb0: Can't lookup blockdev
[ 1074.107326][T13686] 9pnet_virtio: no channels available for device syz
[ 1076.341372][T13375] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1080.765382][ T5921] bridge_slave_1: left allmulticast mode
[ 1081.094203][ T5921] bridge_slave_1: left promiscuous mode
[ 1081.101851][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1081.116159][ T5921] bridge_slave_0: left allmulticast mode
[ 1082.099049][ T5921] bridge_slave_0: left promiscuous mode
[ 1082.116416][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1082.219498][T13727] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[ 1083.399555][T12297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1083.421336][T12297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1083.431129][T12297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1083.456522][T12297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1083.468169][T12297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1083.580290][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1893'.
[ 1083.658460][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1083.678274][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1083.689961][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1083.698621][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1083.707443][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1085.341561][T13750] 9pnet_fd: Insufficient options for proto=fd
[ 1085.737373][T13751] cgroup: fork rejected by pids controller in /syz8
[ 1085.844137][ T5921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1085.850101][ T5130] Bluetooth: hci3: command tx timeout
[ 1085.869330][ T5921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1085.881677][ T5921] bond0 (unregistering): Released all slaves
[ 1085.912646][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1893'.
[ 1086.110469][T13730] lo speed is unknown, defaulting to 1000
[ 1086.148725][T13788] netlink: 'syz.0.1896': attribute type 4 has an invalid length.
[ 1086.217555][T13181] lo speed is unknown, defaulting to 1000
[ 1086.224875][T13181] syz0: Port: 1 Link DOWN
[ 1086.232903][T13730] lo speed is unknown, defaulting to 1000
[ 1087.987032][ T5130] Bluetooth: hci3: command tx timeout
[ 1090.034489][ T5130] Bluetooth: hci3: command tx timeout
[ 1092.107377][T12297] Bluetooth: hci3: command tx timeout
[ 1095.144082][T13823] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 1095.338729][T13823] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 1099.429390][ T5921] hsr_slave_0: left promiscuous mode
[ 1099.643900][ T5921] hsr_slave_1: left promiscuous mode
[ 1099.864317][T13848] 9pnet_fd: Insufficient options for proto=fd
[ 1100.420135][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1100.678627][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1100.720831][T13838] overlayfs: missing 'lowerdir'
[ 1104.328404][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1915'.
[ 1106.585427][T13868] ALSA: mixer_oss: invalid OSS volume '`d#ètü&{W¯k¬ïsÓd:»ýEB|£åÃÓ'
[ 1108.303214][T13895] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1919'.
[ 1108.998463][ T5921] team0 (unregistering): Port device team_slave_1 removed
[ 1109.864776][ T5921] team0 (unregistering): Port device team_slave_0 removed
[ 1110.715017][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1920'.
[ 1112.771975][T13913] batadv1: entered promiscuous mode
[ 1113.547415][ T1162] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[ 1113.617627][T13730] chnl_net:caif_netlink_parms(): no params data found
[ 1115.620690][T13933] CIFS mount error: No usable UNC path provided in device string!
[ 1115.620690][T13933] 
[ 1115.631398][T13933] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1116.873782][T13926] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1925'.
[ 1116.886665][T13730] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1116.935469][T13730] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1116.950330][T13730] bridge_slave_0: entered allmulticast mode
[ 1116.959589][T13730] bridge_slave_0: entered promiscuous mode
[ 1116.993328][T13730] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1117.009335][T13730] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1117.029063][T13730] bridge_slave_1: entered allmulticast mode
[ 1117.047933][T13730] bridge_slave_1: entered promiscuous mode
[ 1118.557950][T13730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1118.763584][T13730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1121.369077][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.405355][T13730] team0: Port device team_slave_0 added
[ 1121.464743][T13730] team0: Port device team_slave_1 added
[ 1122.477727][ T9056] libceph: connect (1)[c::]:6789 error -101
[ 1122.509590][ T9056] libceph: mon0 (1)[c::]:6789 connect error
[ 1122.522020][T13965] ceph: No mds server is up or the cluster is laggy
[ 1122.808827][T13730] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1122.830070][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1122.861523][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1122.871501][T13730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1122.910180][T13730] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1122.921011][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1122.949772][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1123.054025][T13975] binfmt_misc: register: failed to install interpreter file ./file0
[ 1123.228381][T13730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1124.439997][ T5130] Bluetooth: hci3: command 0x0405 tx timeout
[ 1124.913873][T13730] hsr_slave_0: entered promiscuous mode
[ 1124.966296][T13730] hsr_slave_1: entered promiscuous mode
[ 1125.026792][T13730] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1125.100026][T13730] Cannot create hsr debugfs directory
[ 1129.545136][T14014] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1941'.
[ 1132.079989][ T5877] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1132.280148][T14014] sctp: failed to load transform for md5: -2
[ 1133.369843][ T5877] usb 9-1: Using ep0 maxpacket: 32
[ 1133.379446][ T5877] usb 9-1: config 0 has an invalid interface number: 232 but max is 0
[ 1133.391813][ T5877] usb 9-1: config 0 has no interface number 0
[ 1133.398132][ T5877] usb 9-1: New USB device found, idVendor=046d, idProduct=0897, bcdDevice=b8.98
[ 1133.483166][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1133.571932][ T5877] usb 9-1: config 0 descriptor??
[ 1133.697050][ T5877] usb 9-1: can't set config #0, error -71
[ 1133.704954][ T5877] usb 9-1: USB disconnect, device number 6
[ 1134.488716][T14039] netlink: 'syz.8.1950': attribute type 12 has an invalid length.
[ 1134.567924][T14043] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1135.894281][T14039] netlink: 'syz.8.1950': attribute type 29 has an invalid length.
[ 1135.930849][T14039] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1950'.
[ 1135.941947][T14039] netlink: 59 bytes leftover after parsing attributes in process `syz.8.1950'.
[ 1136.393734][T13730] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1136.488234][T13730] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1136.562295][T13730] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1136.689217][T13730] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1138.340864][T14071] trusted_key: encrypted_key: insufficient parameters specified
[ 1138.792217][T14070] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1959'.
[ 1139.226548][T13730] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1139.307557][T13730] 8021q: adding VLAN 0 to HW filter on device team0
[ 1139.386317][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1139.394249][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1139.451744][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1139.459299][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1142.490387][   T35] bridge_slave_1: left allmulticast mode
[ 1142.496249][   T35] bridge_slave_1: left promiscuous mode
[ 1142.534405][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1142.577077][   T35] bridge_slave_0: left allmulticast mode
[ 1142.614107][   T35] bridge_slave_0: left promiscuous mode
[ 1142.645683][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1142.876116][T14114] netlink: 'syz.0.1970': attribute type 4 has an invalid length.
[ 1142.888158][T14114] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1970'.
[ 1144.360557][T14121] xt_l2tp: unknown flags: 17
[ 1144.541208][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1144.556719][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1144.577808][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1144.593153][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1144.606228][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1146.210949][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1146.224028][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1146.235789][   T35] bond0 (unregistering): Released all slaves
[ 1146.461881][T14123] lo speed is unknown, defaulting to 1000
[ 1146.470327][T14123] lo speed is unknown, defaulting to 1000
[ 1146.721909][ T5130] Bluetooth: hci3: command tx timeout
[ 1148.206502][T14154] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1983'.
[ 1148.807767][ T5130] Bluetooth: hci3: command tx timeout
[ 1149.017966][   T30] audit: type=1800 audit(1747488019.758:164): pid=14159 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1986" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=52788 res=0 errno=0
[ 1149.252179][T14162] bond0: option all_slaves_active: invalid value (7)
[ 1149.620173][T14167] netlink: 'syz.7.1989': attribute type 10 has an invalid length.
[ 1150.134506][T14167] syz_tun: entered promiscuous mode
[ 1150.218470][T14167] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1150.462960][   T35] hsr_slave_0: left promiscuous mode
[ 1150.560684][   T35] hsr_slave_1: left promiscuous mode
[ 1150.567054][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1150.623908][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1150.872660][T14181] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1150.879928][ T5130] Bluetooth: hci3: command tx timeout
[ 1151.556912][T14183] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1994'.
[ 1152.960125][ T5130] Bluetooth: hci3: command tx timeout
[ 1153.685939][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1154.163489][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1155.515491][T14123] chnl_net:caif_netlink_parms(): no params data found
[ 1159.124296][T14123] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1159.154673][T14123] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1159.190513][T14123] bridge_slave_0: entered allmulticast mode
[ 1159.236475][T14236] No such timeout policy "syz0"
[ 1159.243357][T14123] bridge_slave_0: entered promiscuous mode
[ 1159.406402][T14123] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1159.450103][T14123] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1159.478534][T14123] bridge_slave_1: entered allmulticast mode
[ 1159.544419][T14123] bridge_slave_1: entered promiscuous mode
[ 1159.835675][T14123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1159.863401][T14123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1159.952808][T14247] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2013'.
[ 1159.977151][T14247] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2013'.
[ 1160.088814][T14123] team0: Port device team_slave_0 added
[ 1160.114670][T14123] team0: Port device team_slave_1 added
[ 1160.199900][    T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1160.360015][    T9] usb 7-1: Using ep0 maxpacket: 32
[ 1160.398047][    T9] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1160.431499][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1160.455801][    T9] usb 7-1: Product: syz
[ 1160.487401][    T9] usb 7-1: Manufacturer: syz
[ 1160.491473][T14123] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1160.498799][    T9] usb 7-1: SerialNumber: syz
[ 1160.506742][T14123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1160.508373][    T9] usb 7-1: config 0 descriptor??
[ 1160.535019][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1160.563752][T14261] block nbd7: NBD_DISCONNECT
[ 1160.573475][T14123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1160.578765][    T9] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1160.609116][T14123] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1160.633435][T14123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1160.676235][T14123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1160.777765][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'.
[ 1160.844641][T14123] hsr_slave_0: entered promiscuous mode
[ 1160.855623][T14123] hsr_slave_1: entered promiscuous mode
[ 1160.862920][T14123] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1160.871444][T14123] Cannot create hsr debugfs directory
[ 1160.907729][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'.
[ 1160.933771][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'.
[ 1160.977988][    T9] gspca_stk1135: reg_w 0x0 err -71
[ 1160.990621][    T9] gspca_stk1135: serial bus timeout: status=0x00
[ 1161.007456][    T9] gspca_stk1135: Sensor write failed
[ 1161.014563][    T9] gspca_stk1135: serial bus timeout: status=0x00
[ 1161.026727][    T9] gspca_stk1135: Sensor write failed
[ 1161.036405][    T9] gspca_stk1135: serial bus timeout: status=0x00
[ 1161.141968][    T9] gspca_stk1135: Sensor read failed
[ 1161.164679][    T9] gspca_stk1135: serial bus timeout: status=0x00
[ 1161.185615][    T9] gspca_stk1135: Sensor read failed
[ 1161.202659][    T9] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1161.231313][    T9] gspca_stk1135: serial bus timeout: status=0x00
[ 1161.238109][    T9] gspca_stk1135: Sensor read failed
[ 1161.246673][    T9] gspca_stk1135: serial bus timeout: status=0x00
[ 1161.255649][    T9] gspca_stk1135: Sensor read failed
[ 1161.267151][    T9] gspca_stk1135: serial bus timeout: status=0x00
[ 1161.276513][    T9] gspca_stk1135: Sensor write failed
[ 1161.287552][    T9] gspca_stk1135: serial bus timeout: status=0x00
[ 1161.296305][    T9] gspca_stk1135: Sensor write failed
[ 1161.305260][    T9] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71
[ 1161.350059][    T9] usb 7-1: USB disconnect, device number 22
[ 1161.699506][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2028'.
[ 1161.741342][T14282] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2029'.
[ 1163.431473][T14123] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1164.002333][T14123] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1164.118772][T14123] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1164.200832][T14123] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1164.467377][T14123] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1164.546558][T14123] 8021q: adding VLAN 0 to HW filter on device team0
[ 1164.585199][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1164.592497][ T6060] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1164.650923][T14322] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2045'.
[ 1164.674475][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1164.682033][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1165.125649][T14328] cgroup: fork rejected by pids controller in /syz6
[ 1165.650358][T14123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1165.661187][T14123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1166.103477][T14457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2052'.
[ 1166.555760][T14123] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1170.036137][T14123] veth0_vlan: entered promiscuous mode
[ 1170.077710][T14123] veth1_vlan: entered promiscuous mode
[ 1170.100182][ T9056] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1170.168489][T14123] veth0_macvtap: entered promiscuous mode
[ 1170.189253][T14123] veth1_macvtap: entered promiscuous mode
[ 1170.225982][T14123] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1170.252097][T14123] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1170.260133][ T9056] usb 7-1: Using ep0 maxpacket: 16
[ 1170.272978][ T9056] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[ 1170.307082][ T9056] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1170.317905][T14123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1170.332127][ T9056] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1170.343115][T14123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1170.352343][ T9056] usb 7-1: Product: syz
[ 1170.356626][ T9056] usb 7-1: Manufacturer: syz
[ 1170.362210][T14123] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1170.371218][ T9056] usb 7-1: SerialNumber: syz
[ 1170.378366][T14123] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1170.603902][ T9056] cdc_ncm 7-1:1.0: bind() failure
[ 1170.625097][ T9056] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[ 1170.650393][ T9056] cdc_ncm 7-1:1.1: bind() failure
[ 1170.677981][ T9056] usb 7-1: USB disconnect, device number 23
[ 1170.751720][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1170.759661][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1170.760214][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1170.777238][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1172.122691][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1172.261735][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1172.527418][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1172.602817][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1172.734195][   T13] bridge_slave_1: left allmulticast mode
[ 1172.740265][   T13] bridge_slave_1: left promiscuous mode
[ 1172.746324][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1172.756822][   T13] bridge_slave_0: left allmulticast mode
[ 1172.763814][   T13] bridge_slave_0: left promiscuous mode
[ 1172.769605][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1173.336084][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1173.351819][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1173.365879][   T13] bond0 (unregistering): Released all slaves
[ 1173.814597][   T13] hsr_slave_0: left promiscuous mode
[ 1173.823054][   T13] hsr_slave_1: left promiscuous mode
[ 1173.829109][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1173.836639][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1173.846433][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1173.855074][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1173.879205][   T13] veth1_macvtap: left promiscuous mode
[ 1173.885139][   T13] veth0_macvtap: left promiscuous mode
[ 1173.891036][   T13] veth1_vlan: left promiscuous mode
[ 1173.896519][   T13] veth0_vlan: left promiscuous mode
[ 1174.003667][T14564] serio: Serial port ptm0
[ 1175.359304][T12297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1175.372880][T12297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1175.395277][T12297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1175.406196][T12297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1175.416117][T12297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1176.039596][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1176.115228][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1176.979582][T14586] lo speed is unknown, defaulting to 1000
[ 1177.092034][T14586] lo speed is unknown, defaulting to 1000
[ 1177.459852][ T5883] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[ 1177.520063][T12297] Bluetooth: hci3: command tx timeout
[ 1177.662449][ T5883] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1177.686458][ T5883] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1177.716940][ T5883] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1177.761208][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1177.968896][T14586] chnl_net:caif_netlink_parms(): no params data found
[ 1178.360809][ T5883] aiptek 9-1:17.0: Aiptek using 400 ms programming speed
[ 1178.875712][ T5883] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input23
[ 1179.114136][ T5883] input: failed to attach handler kbd to device input23, error: -5
[ 1179.317619][ T5883] usb 9-1: USB disconnect, device number 7
[ 1179.515018][T14586] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1179.600166][T12297] Bluetooth: hci3: command tx timeout
[ 1179.610591][T14586] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1179.618218][T14586] bridge_slave_0: entered allmulticast mode
[ 1179.635806][T14586] bridge_slave_0: entered promiscuous mode
[ 1179.652044][T14586] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1179.660810][T14586] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1179.670311][T14586] bridge_slave_1: entered allmulticast mode
[ 1179.679167][T14586] bridge_slave_1: entered promiscuous mode
[ 1179.805785][T14649] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2121'.
[ 1179.823111][T14586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1179.854210][T14586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1180.075171][T14586] team0: Port device team_slave_0 added
[ 1180.112162][T14586] team0: Port device team_slave_1 added
[ 1180.119859][ T9056] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1180.307603][ T9056] usb 9-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55
[ 1180.341356][T14586] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1180.348909][ T9056] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1180.370089][T14586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1180.420350][ T9056] usb 9-1: Product: syz
[ 1180.424678][ T9056] usb 9-1: Manufacturer: syz
[ 1180.429393][ T9056] usb 9-1: SerialNumber: syz
[ 1180.474531][ T9056] usb 9-1: config 0 descriptor??
[ 1180.508553][T14586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1180.527674][ T9056] gspca_main: sonixb-2.14.0 probing 0c45:608f
[ 1181.516620][ T9056] sonixb 9-1:0.0: Error reading register 00: -110
[ 1181.552239][T14586] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1181.771896][T12297] Bluetooth: hci3: command tx timeout
[ 1181.800198][T14586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1181.856369][T14586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1182.440186][T14586] hsr_slave_0: entered promiscuous mode
[ 1182.574375][T14586] hsr_slave_1: entered promiscuous mode
[ 1182.670601][T14586] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1182.733367][T14586] Cannot create hsr debugfs directory
[ 1182.985492][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1183.654158][T14697] CIFS mount error: No usable UNC path provided in device string!
[ 1183.654158][T14697] 
[ 1183.665195][T14697] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1183.880695][T12297] Bluetooth: hci3: command tx timeout
[ 1184.608123][ T5877] usb 9-1: USB disconnect, device number 8
[ 1184.978816][T14714] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2145'.
[ 1185.455190][T14717] cgroup: fork rejected by pids controller in /syz7
[ 1185.502926][T14712] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2144'.
[ 1190.386982][T14586] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1190.401677][T14586] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1190.422626][T14586] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1190.437498][T14586] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1190.604295][T16424] loop6: detected capacity change from 0 to 100
[ 1190.644334][T14586] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1190.706633][T14586] 8021q: adding VLAN 0 to HW filter on device team0
[ 1190.754050][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1190.761388][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1190.813045][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1190.821287][ T5921] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1191.145218][T16434] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2163'.
[ 1191.564466][T16442] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2164'.
[ 1191.678353][T16442] netlink: 'syz.7.2164': attribute type 8 has an invalid length.
[ 1191.866445][T16431] IPVS: Scheduler module ip_vs_sip not found
[ 1192.489364][T14586] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1192.786909][T16459] lo speed is unknown, defaulting to 1000
[ 1192.828715][T16459] lo speed is unknown, defaulting to 1000
[ 1193.340796][T16477] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2177'.
[ 1194.778365][T14586] veth0_vlan: entered promiscuous mode
[ 1194.817460][T14586] veth1_vlan: entered promiscuous mode
[ 1194.908674][T14586] veth0_macvtap: entered promiscuous mode
[ 1194.938562][T14586] veth1_macvtap: entered promiscuous mode
[ 1194.988501][T14586] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1195.035530][T14586] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1195.067495][T14586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1195.079092][T14586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1195.095206][T14586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1195.104488][  T975] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1195.118621][T14586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1195.270285][  T975] usb 7-1: Using ep0 maxpacket: 8
[ 1195.305510][  T975] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B
[ 1195.329893][  T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1195.364099][  T975] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1195.388652][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1195.390277][  T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.410260][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1195.425952][  T975] usb 7-1: config 0 descriptor??
[ 1195.484311][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1195.513988][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1195.661990][  T975] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1195.864516][  T975] usb 7-1: USB disconnect, device number 24
[ 1196.056580][ T1162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.249604][ T1162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.355327][T15898] syz.8.2147 (15898): drop_caches: 1
[ 1196.392259][ T1162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.519042][ T1162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.745584][ T1162] bridge_slave_1: left allmulticast mode
[ 1196.751777][ T1162] bridge_slave_1: left promiscuous mode
[ 1196.758480][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1196.771100][ T1162] bridge_slave_0: left allmulticast mode
[ 1196.776814][ T1162] bridge_slave_0: left promiscuous mode
[ 1196.782822][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1197.323708][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1197.336915][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1197.347939][ T1162] bond0 (unregistering): Released all slaves
[ 1197.772718][ T1162] hsr_slave_0: left promiscuous mode
[ 1197.779008][ T1162] hsr_slave_1: left promiscuous mode
[ 1197.788345][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1197.796305][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1197.812883][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1197.825319][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1197.855167][ T1162] veth1_macvtap: left promiscuous mode
[ 1197.861498][ T1162] veth0_macvtap: left promiscuous mode
[ 1197.867294][ T1162] veth1_vlan: left promiscuous mode
[ 1197.878066][ T1162] veth0_vlan: left promiscuous mode
[ 1198.285749][T16637] nbd7: detected capacity change from 0 to 4294967296
[ 1198.330012][T16635] block nbd7: shutting down sockets
[ 1198.572642][T16618] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1198.763922][T16618] usb 9-1: config 0 has an invalid interface number: 255 but max is 0
[ 1198.779824][T16618] usb 9-1: config 0 has no interface number 0
[ 1198.800092][T16618] usb 9-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1198.838140][T16618] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1198.889830][T16618] usb 9-1: config 0 interface 255 has no altsetting 0
[ 1198.907396][T16618] usb 9-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1198.929238][T16618] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1198.977989][T16618] usb 9-1: config 0 descriptor??
[ 1199.003221][T16618] ums-realtek 9-1:0.255: USB Mass Storage device detected
[ 1199.181891][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1199.195658][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1199.208142][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1199.220380][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1199.221790][    T9] usb 9-1: USB disconnect, device number 9
[ 1199.247432][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1200.670070][ T1162] team0 (unregistering): Port device team_slave_1 removed
[ 1200.726677][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2199'.
[ 1200.759607][ T1162] team0 (unregistering): Port device team_slave_0 removed
[ 1201.279970][T12297] Bluetooth: hci3: command tx timeout
[ 1201.536341][T16655] lo speed is unknown, defaulting to 1000
[ 1201.599413][T16655] lo speed is unknown, defaulting to 1000
[ 1202.072762][ T5883] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1202.268150][ T5883] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1202.281346][ T5883] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1202.314992][ T5883] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1202.364170][ T5883] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1202.375430][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1202.387689][ T5883] usb 9-1: config 0 descriptor??
[ 1203.025813][ T5883] plantronics 0003:047F:FFFF.0008: unbalanced delimiter at end of report description
[ 1203.039938][ T5883] plantronics 0003:047F:FFFF.0008: parse failed
[ 1203.047726][ T5883] plantronics 0003:047F:FFFF.0008: probe with driver plantronics failed with error -22
[ 1203.412739][T12297] Bluetooth: hci3: command tx timeout
[ 1203.697997][T16655] chnl_net:caif_netlink_parms(): no params data found
[ 1203.811553][ T5883] usb 9-1: USB disconnect, device number 10
[ 1204.356168][T16708] IPv6: Can't replace route, no match found
[ 1204.633832][T16655] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1204.721277][T16655] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1204.797893][T16655] bridge_slave_0: entered allmulticast mode
[ 1205.039118][T16655] bridge_slave_0: entered promiscuous mode
[ 1205.200048][T16655] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1205.296145][T16655] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1205.367640][T16655] bridge_slave_1: entered allmulticast mode
[ 1205.440035][T12297] Bluetooth: hci3: command tx timeout
[ 1205.451976][T16655] bridge_slave_1: entered promiscuous mode
[ 1205.577832][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2220'.
[ 1205.625977][T16655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1205.665770][T16655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1205.710207][    T9] usb 7-1: new low-speed USB device number 25 using dummy_hcd
[ 1205.892228][    T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[ 1205.920459][    T9] usb 7-1: config 0 has no interface number 0
[ 1205.937684][    T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1205.952213][T16655] team0: Port device team_slave_0 added
[ 1205.987706][T16655] team0: Port device team_slave_1 added
[ 1205.994029][    T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1206.073926][    T9] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1206.113778][    T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1207.076184][    T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1207.087789][    T9] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1207.109800][    T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1207.453511][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1207.455240][T16655] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1207.480884][    T9] usb 7-1: config 0 descriptor??
[ 1207.490951][T16723] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1207.500626][T16655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1207.521950][T12297] Bluetooth: hci3: command tx timeout
[ 1207.528066][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1207.539087][T16655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1207.558833][T16723] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1207.561212][T16655] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1207.577597][T16655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1207.619046][T16655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1207.631531][    T9] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1208.627057][ T5883] usb 7-1: USB disconnect, device number 25
[ 1208.657629][ T5883] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[ 1208.708182][T16655] hsr_slave_0: entered promiscuous mode
[ 1208.724981][T16655] hsr_slave_1: entered promiscuous mode
[ 1208.735153][T16655] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1208.786407][T16655] Cannot create hsr debugfs directory
[ 1209.862624][   T30] audit: type=1326 audit(1747488080.778:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16786 comm="syz.8.2238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f858ab8e969 code=0x0
[ 1211.736205][T16655] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1211.756246][T16655] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1211.774251][T16655] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1211.789614][T16655] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1212.042765][T16655] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1212.074768][T16655] 8021q: adding VLAN 0 to HW filter on device team0
[ 1212.105485][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1212.112882][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1212.198123][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1212.205449][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1213.032814][ T1162] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1213.222754][ T1162] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1213.287125][T16655] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1213.409786][ T5877] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1213.426679][ T1162] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1213.599253][ T1162] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1213.599850][ T5877] usb 9-1: Using ep0 maxpacket: 8
[ 1213.651787][ T5877] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1213.669799][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1213.677919][ T5877] usb 9-1: Product: syz
[ 1213.699854][ T5877] usb 9-1: Manufacturer: syz
[ 1213.704552][ T5877] usb 9-1: SerialNumber: syz
[ 1213.722782][ T5877] usb 9-1: config 0 descriptor??
[ 1213.967275][ T5877] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1214.445735][ T5877] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1214.484527][ T5877] usb 9-1: USB disconnect, device number 11
[ 1214.556412][ T5130] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1214.567954][ T5130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1214.578419][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1214.597168][ T5130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1214.616619][ T5130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1215.392908][ T1162] bond0 (unregistering): left allmulticast mode
[ 1215.400555][ T1162] bond0 (unregistering): left promiscuous mode
[ 1215.434789][ T1162] bond0 (unregistering): Released all slaves
[ 1215.553301][T16841] lo speed is unknown, defaulting to 1000
[ 1215.562096][ T1162] IPVS: stopping backup sync thread 9961 ...
[ 1215.594250][T16841] lo speed is unknown, defaulting to 1000
[ 1215.671437][T16655] veth0_vlan: entered promiscuous mode
[ 1215.708537][T16655] veth1_vlan: entered promiscuous mode
[ 1216.092452][T16655] veth0_macvtap: entered promiscuous mode
[ 1216.134082][T16655] veth1_macvtap: entered promiscuous mode
[ 1216.366288][T16655] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1216.505931][T16655] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1216.531540][ T1162] hsr_slave_0: left promiscuous mode
[ 1216.537918][ T1162] hsr_slave_1: left promiscuous mode
[ 1216.561520][ T1162] veth1_macvtap: left promiscuous mode
[ 1216.569141][ T1162] veth0_macvtap: left promiscuous mode
[ 1216.575979][ T1162] veth1_vlan: left promiscuous mode
[ 1216.581694][ T1162] veth0_vlan: left promiscuous mode
[ 1216.660846][    T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1216.720154][ T5130] Bluetooth: hci1: command tx timeout
[ 1216.847538][    T9] usb 9-1: Using ep0 maxpacket: 32
[ 1216.855364][    T9] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1216.872726][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1216.890656][    T9] usb 9-1: config 0 descriptor??
[ 1216.902139][    T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1217.327242][T16866] cgroup: fork rejected by pids controller in /syz0
[ 1218.534447][    T9] gspca_vc032x: reg_w err -71
[ 1218.539313][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.549478][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.554977][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.569447][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.577213][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.582770][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.588201][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.598114][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.603669][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.609238][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.614809][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.620493][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.625960][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.641604][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.647307][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.669880][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.676982][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.691835][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1218.697396][    T9] gspca_vc032x: Unknown sensor...
[ 1218.706950][    T9] vc032x 9-1:0.0: probe with driver vc032x failed with error -22
[ 1218.717621][    T9] usb 9-1: USB disconnect, device number 12
[ 1218.801347][ T5130] Bluetooth: hci1: command tx timeout
[ 1218.831657][   T30] audit: type=1800 audit(1747488089.748:166): pid=17190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.2266" name="file1" dev="overlay" ino=1847 res=0 errno=0
[ 1218.875875][   T82] smc: removing ib device s
z1
[ 1218.956851][T16655] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1218.959744][  T975] lo speed is unknown, defaulting to 1000
[ 1218.990019][T16655] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1218.998870][T16655] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1219.007399][  T975] s
z1: Port: 1 Link DOWN
[ 1219.034752][T16655] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1219.049601][T16865] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2265'.
[ 1220.743294][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1220.804255][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1220.879901][ T5130] Bluetooth: hci1: command tx timeout
[ 1220.936104][T16841] chnl_net:caif_netlink_parms(): no params data found
[ 1222.014536][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1222.093930][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1222.132094][T17223] overlayfs: failed to clone upperpath
[ 1222.743814][T16841] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1222.755704][T16841] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1222.782473][T16841] bridge_slave_0: entered allmulticast mode
[ 1222.886449][T16841] bridge_slave_0: entered promiscuous mode
[ 1223.035308][ T5130] Bluetooth: hci1: command tx timeout
[ 1223.054441][T16841] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1223.096446][T16841] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1223.141321][T16841] bridge_slave_1: entered allmulticast mode
[ 1223.303648][T16841] bridge_slave_1: entered promiscuous mode
[ 1225.038193][T16841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1225.079083][T16841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1225.946919][T16841] team0: Port device team_slave_0 added
[ 1226.006651][T16841] team0: Port device team_slave_1 added
[ 1226.221013][T17265] vivid-000: disconnect
[ 1226.238393][T16841] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1226.277786][T16841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1226.356330][T16841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1226.408699][T16841] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1226.431008][T16841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1226.507575][T16841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1226.681625][T16841] hsr_slave_0: entered promiscuous mode
[ 1226.688985][T16841] hsr_slave_1: entered promiscuous mode
[ 1226.695968][T16841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1226.707547][T16841] Cannot create hsr debugfs directory
[ 1226.720428][T17259] vivid-000: reconnect
[ 1226.774077][ T1162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1226.906338][ T1162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1227.033006][ T1162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1227.136192][ T1162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1227.298064][ T1162] bridge_slave_1: left allmulticast mode
[ 1227.304056][ T1162] bridge_slave_1: left promiscuous mode
[ 1227.310078][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1227.321719][ T1162] bridge_slave_0: left allmulticast mode
[ 1227.327593][ T1162] bridge_slave_0: left promiscuous mode
[ 1227.333813][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1227.890650][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1228.025373][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1228.037418][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1228.048022][ T1162] bond0 (unregistering): Released all slaves
[ 1228.455142][T16841] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1228.484116][T16841] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1228.752082][ T1162] hsr_slave_0: left promiscuous mode
[ 1228.769969][ T1162] hsr_slave_1: left promiscuous mode
[ 1228.777124][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1228.789911][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1229.523038][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1229.565709][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1229.817746][ T1162] veth1_macvtap: left promiscuous mode
[ 1229.848638][ T1162] veth0_macvtap: left promiscuous mode
[ 1229.874706][ T1162] veth1_vlan: left promiscuous mode
[ 1229.894835][ T1162] veth0_vlan: left promiscuous mode
[ 1230.324603][T12297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1230.342814][T12297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1230.356728][T12297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1230.444344][T12297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1230.461054][T12297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1232.563962][T12297] Bluetooth: hci3: command tx timeout
[ 1232.929921][ T1162] team0 (unregistering): Port device team_slave_1 removed
[ 1233.004660][ T1162] team0 (unregistering): Port device team_slave_0 removed
[ 1233.754654][T16841] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1233.794750][T16841] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1233.797075][ T1162] ref_tracker: ipvlan1@ffff88805f7e8610 has 1/1 users at
[ 1233.797075][ T1162]      inetdev_init+0x211/0x500
[ 1233.797075][ T1162]      inetdev_event+0x301/0x15b0
[ 1233.797075][ T1162]      notifier_call_chain+0x1b6/0x3e0
[ 1233.797075][ T1162]      register_netdevice+0x1608/0x1af0
[ 1233.797075][ T1162]      ipvlan_link_new+0x407/0xa90
[ 1233.797075][ T1162]      rtnl_newlink_create+0x305/0xaf0
[ 1233.797075][ T1162]      rtnl_newlink+0x16d6/0x1c70
[ 1233.797075][ T1162]      rtnetlink_rcv_msg+0x7cf/0xb70
[ 1233.797075][ T1162]      netlink_rcv_skb+0x219/0x490
[ 1233.797075][ T1162]      netlink_unicast+0x75b/0x8d0
[ 1233.797075][ T1162]      netlink_sendmsg+0x805/0xb30
[ 1233.797075][ T1162]      __sock_sendmsg+0x219/0x270
[ 1233.797075][ T1162]      __sys_sendto+0x3bd/0x520
[ 1233.797075][ T1162]      __x64_sys_sendto+0xde/0x100
[ 1233.797075][ T1162]      do_syscall_64+0xf6/0x210
[ 1233.797075][ T1162]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1233.797075][ T1162] 
[ 1233.893984][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1234.037911][ T1162] ------------[ cut here ]------------
[ 1234.045159][ T1162] WARNING: CPU: 1 PID: 1162 at lib/ref_tracker.c:179 ref_tracker_dir_exit+0x3d0/0x510
[ 1234.055599][ T1162] Modules linked in:
[ 1234.061283][ T1162] CPU: 1 UID: 0 PID: 1162 Comm: kworker/u8:8 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) 
[ 1234.073671][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1234.084148][ T1162] Workqueue: netns cleanup_net
[ 1234.089166][ T1162] RIP: 0010:ref_tracker_dir_exit+0x3d0/0x510
[ 1234.095862][ T1162] Code: 2a d9 fc 48 89 df 48 8b 74 24 10 e8 1a 33 6b 06 eb 1b e8 63 2a d9 fc 48 8b 5c 24 18 48 89 df 48 8b 74 24 10 e8 01 33 6b 06 90 <0f> 0b 90 4c 8d 73 44 4c 89 f7 be 04 00 00 00 e8 5c 00 39 fd 4c 89
[ 1234.116023][ T1162] RSP: 0018:ffffc90003bef738 EFLAGS: 00010246
[ 1234.122350][ T1162] RAX: fd368e19c87b2200 RBX: ffff88805f7e8610 RCX: 0000000000000000
[ 1234.130529][ T1162] RDX: 0000000000000007 RSI: ffffffff8d73a84c RDI: 00000000ffffffff
[ 1234.139508][ T1162] RBP: ffff88805f7e8660 R08: ffffffff8f7e0677 R09: 1ffffffff1efc0ce
[ 1234.148636][ T1162] R10: dffffc0000000000 R11: fffffbfff1efc0cf R12: ffff8880276d8180
[ 1234.156828][ T1162] R13: ffff88805f7e8660 R14: dffffc0000000000 R15: 1ffff11004edb030
[ 1234.165154][ T1162] FS:  0000000000000000(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000
[ 1234.174455][ T1162] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1234.181679][ T1162] CR2: 000055558855d808 CR3: 00000000686d8000 CR4: 00000000003526f0
[ 1234.189913][ T1162] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1234.198068][ T1162] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1234.206193][ T1162] Call Trace:
[ 1234.209581][ T1162]  <TASK>
[ 1234.212628][ T1162]  free_netdev+0x46a/0x700
[ 1234.217126][ T1162]  netdev_run_todo+0xd0c/0xea0
[ 1234.222026][ T1162]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1234.227410][ T1162]  ? unregister_netdevice_queue+0x1b3/0x380
[ 1234.233433][ T1162]  ? batadv_meshif_destroy_netlink+0x1dd/0x270
[ 1234.240605][ T1162]  default_device_exit_batch+0x81e/0x890
[ 1234.246312][ T1162]  ? __pfx___might_resched+0x10/0x10
[ 1234.252520][ T1162]  ? __pfx_default_device_exit_batch+0x10/0x10
[ 1234.258786][ T1162]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[ 1234.264355][ T1162]  ? __pfx_default_device_exit_batch+0x10/0x10
[ 1234.270691][ T1162]  cleanup_net+0x7a9/0xbd0
[ 1234.275207][ T1162]  ? __pfx_cleanup_net+0x10/0x10
[ 1234.280352][ T1162]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1234.285638][ T1162]  ? process_scheduled_works+0x9ec/0x17a0
[ 1234.291775][ T1162]  ? process_scheduled_works+0x9ec/0x17a0
[ 1234.297626][ T1162]  process_scheduled_works+0xadb/0x17a0
[ 1234.303608][ T1162]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1234.309919][ T1162]  worker_thread+0x8a0/0xda0
[ 1234.314711][ T1162]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1234.320917][T17289] lo speed is unknown, defaulting to 1000
[ 1234.321273][ T1162]  ? __kthread_parkme+0x7b/0x200
[ 1234.332311][ T1162]  kthread+0x70e/0x8a0
[ 1234.336624][ T1162]  ? __pfx_worker_thread+0x10/0x10
[ 1234.342715][ T1162]  ? __pfx_kthread+0x10/0x10
[ 1234.347382][ T1162]  ? __pfx_kthread+0x10/0x10
[ 1234.353066][ T1162]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1234.358592][ T1162]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1234.364300][ T1162]  ? __pfx_kthread+0x10/0x10
[ 1234.368956][ T1162]  ret_from_fork+0x4b/0x80
[ 1234.373765][ T1162]  ? __pfx_kthread+0x10/0x10
[ 1234.378570][ T1162]  ret_from_fork_asm+0x1a/0x30
[ 1234.383759][ T1162]  </TASK>
[ 1234.386938][ T1162] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1234.394295][ T1162] CPU: 1 UID: 0 PID: 1162 Comm: kworker/u8:8 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) 
[ 1234.406602][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1234.416812][ T1162] Workqueue: netns cleanup_net
[ 1234.421897][ T1162] Call Trace:
[ 1234.425237][ T1162]  <TASK>
[ 1234.428226][ T1162]  dump_stack_lvl+0x99/0x250
[ 1234.432903][ T1162]  ? __asan_memcpy+0x40/0x70
[ 1234.437646][ T1162]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1234.442929][ T1162]  ? __pfx__printk+0x10/0x10
[ 1234.447606][ T1162]  panic+0x2db/0x790
[ 1234.451581][ T1162]  ? __pfx_panic+0x10/0x10
[ 1234.456277][ T1162]  ? __warn+0x303/0x4b0
[ 1234.460700][ T1162]  __warn+0x31b/0x4b0
[ 1234.464830][ T1162]  ? ref_tracker_dir_exit+0x3d0/0x510
[ 1234.470279][ T1162]  ? ref_tracker_dir_exit+0x3d0/0x510
[ 1234.475899][ T1162]  report_bug+0x2be/0x4f0
[ 1234.480306][ T1162]  ? ref_tracker_dir_exit+0x3d0/0x510
[ 1234.485740][ T1162]  ? ref_tracker_dir_exit+0x3d0/0x510
[ 1234.491174][ T1162]  ? ref_tracker_dir_exit+0x3d2/0x510
[ 1234.496607][ T1162]  handle_bug+0x84/0x160
[ 1234.500933][ T1162]  exc_invalid_op+0x1a/0x50
[ 1234.505540][ T1162]  asm_exc_invalid_op+0x1a/0x20
[ 1234.510470][ T1162] RIP: 0010:ref_tracker_dir_exit+0x3d0/0x510
[ 1234.516713][ T1162] Code: 2a d9 fc 48 89 df 48 8b 74 24 10 e8 1a 33 6b 06 eb 1b e8 63 2a d9 fc 48 8b 5c 24 18 48 89 df 48 8b 74 24 10 e8 01 33 6b 06 90 <0f> 0b 90 4c 8d 73 44 4c 89 f7 be 04 00 00 00 e8 5c 00 39 fd 4c 89
[ 1234.536687][ T1162] RSP: 0018:ffffc90003bef738 EFLAGS: 00010246
[ 1234.542836][ T1162] RAX: fd368e19c87b2200 RBX: ffff88805f7e8610 RCX: 0000000000000000
[ 1234.550896][ T1162] RDX: 0000000000000007 RSI: ffffffff8d73a84c RDI: 00000000ffffffff
[ 1234.559036][ T1162] RBP: ffff88805f7e8660 R08: ffffffff8f7e0677 R09: 1ffffffff1efc0ce
[ 1234.567072][ T1162] R10: dffffc0000000000 R11: fffffbfff1efc0cf R12: ffff8880276d8180
[ 1234.575191][ T1162] R13: ffff88805f7e8660 R14: dffffc0000000000 R15: 1ffff11004edb030
[ 1234.583268][ T1162]  ? ref_tracker_dir_exit+0x3cf/0x510
[ 1234.588710][ T1162]  free_netdev+0x46a/0x700
[ 1234.593201][ T1162]  netdev_run_todo+0xd0c/0xea0
[ 1234.598035][ T1162]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1234.603422][ T1162]  ? unregister_netdevice_queue+0x1b3/0x380
[ 1234.609394][ T1162]  ? batadv_meshif_destroy_netlink+0x1dd/0x270
[ 1234.615617][ T1162]  default_device_exit_batch+0x81e/0x890
[ 1234.621317][ T1162]  ? __pfx___might_resched+0x10/0x10
[ 1234.626750][ T1162]  ? __pfx_default_device_exit_batch+0x10/0x10
[ 1234.632971][ T1162]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[ 1234.638945][ T1162]  ? __pfx_default_device_exit_batch+0x10/0x10
[ 1234.645711][ T1162]  cleanup_net+0x7a9/0xbd0
[ 1234.650210][ T1162]  ? __pfx_cleanup_net+0x10/0x10
[ 1234.655217][ T1162]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1234.660640][ T1162]  ? process_scheduled_works+0x9ec/0x17a0
[ 1234.666433][ T1162]  ? process_scheduled_works+0x9ec/0x17a0
[ 1234.672236][ T1162]  process_scheduled_works+0xadb/0x17a0
[ 1234.677945][ T1162]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1234.684029][ T1162]  worker_thread+0x8a0/0xda0
[ 1234.688692][ T1162]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1234.695227][ T1162]  ? __kthread_parkme+0x7b/0x200
[ 1234.700276][ T1162]  kthread+0x70e/0x8a0
[ 1234.704510][ T1162]  ? __pfx_worker_thread+0x10/0x10
[ 1234.709846][ T1162]  ? __pfx_kthread+0x10/0x10
[ 1234.714505][ T1162]  ? __pfx_kthread+0x10/0x10
[ 1234.719155][ T1162]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1234.724422][ T1162]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1234.729802][ T1162]  ? __pfx_kthread+0x10/0x10
[ 1234.734456][ T1162]  ret_from_fork+0x4b/0x80
[ 1234.739013][ T1162]  ? __pfx_kthread+0x10/0x10
[ 1234.743660][ T1162]  ret_from_fork_asm+0x1a/0x30
[ 1234.748592][ T1162]  </TASK>
[ 1234.751978][ T1162] Kernel Offset: disabled
[ 1234.756324][ T1162] Rebooting in 86400 seconds..