last executing test programs:

28m1.30576124s ago: executing program 32 (id=6):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x40001)
read$dsp(r4, &(0x7f0000000000)=""/40, 0x28)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000a40)={0x0, 0x400, 0x30}, &(0x7f0000000a80)=0x18)
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r5, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)

19m56.751335s ago: executing program 33 (id=692):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000e040d23c0ce472c8584a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x40001)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x0, @private0}]}, &(0x7f0000000000)=0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000a40)={0x0, 0x400, 0x30}, &(0x7f0000000a80)=0x18)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000)

17m45.492776502s ago: executing program 34 (id=895):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000e040d23c0ce472c8584a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x0, @private0}]}, &(0x7f0000000000)=0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000a40)={0x0, 0x400, 0x30}, &(0x7f0000000a80)=0x18)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000)

16m36.466385714s ago: executing program 35 (id=1007):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000100)=0x40001)
read$dsp(r4, &(0x7f0000000000)=""/40, 0x28)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000a40)={0x0, 0x400, 0x30}, &(0x7f0000000a80)=0x18)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)

15m17.287001556s ago: executing program 36 (id=1115):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000d40)={'wlan0\x00', <r5=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r3, 0xc31, 0x0, 0x1, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4021}, 0x0)

13m35.47574961s ago: executing program 4 (id=1281):
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
userfaultfd(0x801)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000067b000/0x2000)=nil], 0x0, &(0x7f0000000180), 0x2)

13m33.822545738s ago: executing program 4 (id=1282):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240080c3}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
cachestat(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x84, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8040080}, 0x4000000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x28380, 0x0)

13m32.617277901s ago: executing program 4 (id=1284):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'})
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x4080)

13m31.750348857s ago: executing program 4 (id=1286):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='wbt_timer\x00', r1, 0x0, 0xfffffffffffffff5}, 0x18)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x6ccc, 0x2}}, './file0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20400, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)

13m30.723094979s ago: executing program 4 (id=1287):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='wbt_timer\x00', r1, 0x0, 0xfffffffffffffff5}, 0x18)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x6ccc, 0x2}}, './file0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100)
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20400, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r8, 0x5111)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

13m29.437149488s ago: executing program 4 (id=1288):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000100)=0x40001)
read$dsp(r3, &(0x7f0000000000)=""/40, 0x28)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000a40)={0x0, 0x400, 0x30}, &(0x7f0000000a80)=0x18)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)

13m13.969109842s ago: executing program 37 (id=1288):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000100)=0x40001)
read$dsp(r3, &(0x7f0000000000)=""/40, 0x28)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000a40)={0x0, 0x400, 0x30}, &(0x7f0000000a80)=0x18)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)

12m58.618810757s ago: executing program 0 (id=1328):
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, 0x0})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, 0x0, &(0x7f0000000280))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020)
getsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4)
timer_create(0x3, 0x0, &(0x7f0000006bc0))
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0xfa, {0x9, 0x21, 0xa8, 0x5, 0x1, {0x22, 0xba5}}, {{{0x9, 0x5, 0x81, 0x3, 0x38f, 0x80, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2, 0x5, 0x21, 0x10, 0x8}, 0xc, 0x0, 0x2, [{0xc4, &(0x7f00000000c0)=@string={0xc4, 0x3, "b8f60d793b565c9f8732e474924a403a4d0ce320e9ef6205d110ec3a27d5613e61700a49ec6b462d1a1a57f86b7de1e4edf9e49abb46fbf3339a247d5785326247c5461c631b544662c86ab1f88cf851ae2f02df3cafaf3800bcdfcb6e6dd62df11bec97ffbd05805c076556d953db550da2bdbf82b8305a2f97bb794fdc44d6f10c32c14c0e4766d1ae64b7584f4ddd1b895ba89b9e0e25e6f8bffd0b634963243b17f56378c9625acc1991a006c66766d1ab00ab0b74d1941a4e8ce6d8ae158130"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x861}}]})

12m55.005076886s ago: executing program 0 (id=1333):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
userfaultfd(0x80001)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
gettid()
r1 = socket(0x15, 0x3, 0x0)
recvmsg$can_raw(r1, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003f40), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="50e2d0e8f7c79f56fe316075d1848c2846a50934836763ae403f35dbe8580de2c59113798cdc8a74dc21020f4e97e9ac22768c9b7d9aca64aa97212a1826646b4a19ebd05d3e7cbae0f91b621e6ac8e60d7d39df4febd1a8e2a737845dccfdbecde934165ded16e411da023b9fba7840a8e50b7f909cc9d51522dc4ac3075e975b35681f8d16915a3d248396f134273ff13a72f082839bd3021d4f0a5550671bb7d267d74dc8a800f3f7e8be6daea4379e76bc978e801fbd9d83544776580baa62d6156cc3aaec4b79a8ecc46317f48f62ff039722c87db0cd54d937de47619f530c29622e55176b5dfbbd084521a28e89488f57a6d3c19c2df39243d73425d52f0a42cc4a01e39f3c24ecd0e22d696d59320e4ee7d111d3abac17ebfc8aa6bb910c8d1d92efe391d372130bfccdec653e41694e86c79164f36b1ac9fc2812a7944f8b08f6780b102f71f4dc7232c83d20a4aa83db3e540a063f7f13360b6435b755f4af598016caf933a76bf2f2897b04a1efe5793b62c87532ba7fc740372ea2918a0dca", 0x185}], 0x1}, 0x44080)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

12m47.766299721s ago: executing program 0 (id=1346):
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='v7\x00', 0x0, 0x0)
execve(0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@redirect_dir_nofollow}, {@nfs_export_on}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
write(r3, &(0x7f0000000340)="18000000010003", 0x7)

12m46.450273082s ago: executing program 0 (id=1348):
openat$ppp(0xffffffffffffff9c, 0x0, 0x20101, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'})
sendmsg$nl_route(r4, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')

12m44.586541592s ago: executing program 0 (id=1349):
openat$ppp(0xffffffffffffff9c, 0x0, 0x20101, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'})
sendmsg$nl_route(r4, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')

12m43.333065519s ago: executing program 0 (id=1350):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400000000"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r6, @ANYBLOB="01"], 0x20}}, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x4c, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0)

12m27.120855444s ago: executing program 38 (id=1350):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400000000"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r6, @ANYBLOB="01"], 0x20}}, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x4c, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0)

10m28.843498144s ago: executing program 1 (id=1529):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000040)={0x6000000, 0x2}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$inet_dccp_int(r0, 0x21, 0xb, &(0x7f0000000100)=0x1000, 0x4)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_clone(0x4008d800, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x149a02, 0x0)
write$binfmt_script(r4, 0x0, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x948, 0x738, 0x738, 0xf0, 0x438, 0x738, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9a8)
r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x6, 0x0, 0xa45, 'syz0\x00'}, 0x2, 0x2, 0x8, 0x0, 0x0, 0xff, 'syz1\x00', 0x0})

10m27.605266802s ago: executing program 1 (id=1533):
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x104, 0x800001, 0x1, 0x9, 0x1})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000040)=0xd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe(0x0)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0)
iopl(0x3)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000001980)=""/236, &(0x7f0000000080)=0x18)

10m23.113368578s ago: executing program 8 (id=1540):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c)
syz_emit_ethernet(0x5a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "979d40", 0x20, 0x6, 0x1, @loopback, @private1, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x1, 0x8, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x101, 0x0, 0x1, 0x4e20, 0x4e22}, 0x4, 0x1}}}}}}}}, 0x0)

10m21.779377507s ago: executing program 8 (id=1541):
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)

10m21.728352914s ago: executing program 1 (id=1543):
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='v7\x00', 0x0, 0x0)
execve(0x0, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
utimensat(r4, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340)="18000000010003", 0x7)

10m20.110196578s ago: executing program 8 (id=1546):
syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x20200)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4)

10m17.659550498s ago: executing program 1 (id=1548):
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8005}, 0x20000000)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10m15.998528563s ago: executing program 1 (id=1553):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="00000102000001", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10m15.924162421s ago: executing program 8 (id=1554):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe79, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4000005)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = dup(0xffffffffffffffff)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0])
chdir(&(0x7f0000000080)='./file1\x00')
setpgid(0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x8000, 0x0)
sendmsg$802154_dgram(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x41}, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, 0x0)
close_range(r0, r1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

10m13.769135479s ago: executing program 8 (id=1556):
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)

10m12.258183622s ago: executing program 8 (id=1558):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@delqdisc={0x2c, 0x25, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe0}, {0x2, 0x3}, {0xfff1, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240080c3}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
cachestat(r2, &(0x7f0000000040), &(0x7f0000000080), 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x84, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8040080}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'})
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x28380, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x7)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x85)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00')
preadv(r4, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0)
r5 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa)
r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8)
read(r6, &(0x7f0000000740)=""/384, 0x200008c0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000008a0900fe0000200180000000000000008f3c6c3915471090de0f6b87c40911d846831f38ae81172f28a5c9d3888f5631eed29275c8819d633bd9cea35fcf232a220979d65a0dc3223ecdbb57b104d5d6b2a7110253cf1bae89989816b2cf2791360c132c418d5f4c8093ee05d1af7ebbd312baf7ac11d50e4a15e9f25b137077353d98ef864e4745b8c057"])
fchmod(r5, 0x184)
openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)

10m10.365775475s ago: executing program 1 (id=1562):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000d40)={'wlan0\x00', <r5=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r3, 0xc31, 0x0, 0x1, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4021}, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x561000, 0x0)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x200013, 0x0)

9m56.30085142s ago: executing program 39 (id=1558):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@delqdisc={0x2c, 0x25, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe0}, {0x2, 0x3}, {0xfff1, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240080c3}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
cachestat(r2, &(0x7f0000000040), &(0x7f0000000080), 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x84, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8040080}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'})
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x28380, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x7)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x85)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00')
preadv(r4, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0)
r5 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa)
r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8)
read(r6, &(0x7f0000000740)=""/384, 0x200008c0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000008a0900fe0000200180000000000000008f3c6c3915471090de0f6b87c40911d846831f38ae81172f28a5c9d3888f5631eed29275c8819d633bd9cea35fcf232a220979d65a0dc3223ecdbb57b104d5d6b2a7110253cf1bae89989816b2cf2791360c132c418d5f4c8093ee05d1af7ebbd312baf7ac11d50e4a15e9f25b137077353d98ef864e4745b8c057"])
fchmod(r5, 0x184)
openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)

9m54.316781115s ago: executing program 40 (id=1562):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000d40)={'wlan0\x00', <r5=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r3, 0xc31, 0x0, 0x1, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4021}, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x561000, 0x0)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x200013, 0x0)

5m42.910402455s ago: executing program 9 (id=1928):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0)

5m41.584524961s ago: executing program 9 (id=1932):
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
rt_sigqueueinfo(0x0, 0x7, 0x0)
io_setup(0x6, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_int(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4)
pipe2(0x0, 0x84080)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x8012, 0xffffffffffffffff, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@ipv6_delrule={0x1c, 0x21, 0x400, 0x70bd2c, 0x25dfdbff, {0xa, 0x10, 0x14, 0x4, 0xb8, 0x0, 0x0, 0x7, 0x10017}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044091}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000000101040000000000000000020000002400018014000180080001000400000108000200000000000c00028005000100000000002c0002800c00028005000100000000001400018008000100e000000108000200ac1e0001060003400400000008000740000000004c00108008000340000001330800024000"], 0xb8}}, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000000)={0x6, 0xc1, 0x62f})

5m39.217686858s ago: executing program 9 (id=1935):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4c)

5m36.12141302s ago: executing program 9 (id=1939):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000600)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/../file0/../file0/../file0\x00')

5m34.344809526s ago: executing program 9 (id=1942):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000240)={0x1, 0xfffe, "be4108"})

5m29.453981957s ago: executing program 9 (id=1953):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x108, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'wlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="f000000010001304000000000000000864010100000000000000000000000000e0000001000000000000000000000000000000004e23080000000000730000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB="00000000000000000000ffffac1414bb0000000032000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000ffffffffffffffff0700000000000000080000000000000000000000000000000000000000000000c800000000000000cc000000000000000000000000000000f600000000000001000011ff0000000000000000020000010c"], 0xf0}}, 0x4c8f4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200)=0x5, 0xfffffe97)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8)

5m27.541122583s ago: executing program 41 (id=1953):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x108, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'wlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="f000000010001304000000000000000864010100000000000000000000000000e0000001000000000000000000000000000000004e23080000000000730000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB="00000000000000000000ffffac1414bb0000000032000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000ffffffffffffffff0700000000000000080000000000000000000000000000000000000000000000c800000000000000cc000000000000000000000000000000f600000000000001000011ff0000000000000000020000010c"], 0xf0}}, 0x4c8f4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200)=0x5, 0xfffffe97)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8)

22.296683524s ago: executing program 3 (id=2582):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe)
getpeername$inet(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
clock_gettime(0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)

19.175536645s ago: executing program 3 (id=2592):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$isdn(0x22, 0x2, 0x26)
bind$isdn(r3, &(0x7f0000000040)={0x22, 0x8c, 0x0, 0x1}, 0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000091f000/0x3000)=nil, 0x3000, &(0x7f0000000000)='-(\x1b\x00')

18.046358046s ago: executing program 3 (id=2597):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0)

13.397708894s ago: executing program 3 (id=2609):
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = syz_open_dev$sndctrl(&(0x7f0000000900), 0x1ff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000940)=0x9)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000007919b800000000009500000000000000d6762f6b2a15a3db1441adb5d265008156c465cfcd478000bd98e6ddf65f1f94b3296bece65b8ffe194ef52c3341d3d7bb66c34943ef9183910aa834e34c8526a69be2cfbfa653b512ccd0c67f5ce81eed6c209642"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

12.581118487s ago: executing program 3 (id=2612):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)

12.565343603s ago: executing program 6 (id=2613):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r3, 0x3a, 0xd1, &(0x7f0000000040)=0x20f, 0x4)
openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000}, 0x4c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa0}}, 0x14b6deac033214c2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0xa8, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

10.78647055s ago: executing program 6 (id=2618):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x18642, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
mknod(0x0, 0xc000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x5)
setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000000)=0x8, 0x4)
connect$caif(r2, &(0x7f00000000c0)=@rfm={0x25, 0x8, "4820c7523b7dbf3a546294abe1d36a3b"}, 0x18)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10)

8.022535648s ago: executing program 6 (id=2625):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000)
recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000340)=0x8)

7.140719476s ago: executing program 2 (id=2626):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0x7, 0x2, 0x0, 0xb, 0xd, "5f730000a9003f00"})
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, 0x0)

6.866354558s ago: executing program 5 (id=2627):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x7}, 0xe)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

6.725393117s ago: executing program 2 (id=2629):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r3, 0x3a, 0xd1, &(0x7f0000000040)=0x20f, 0x4)
openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000}, 0x4c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa0}}, 0x14b6deac033214c2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0xa8, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

5.660905363s ago: executing program 5 (id=2630):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x7f, 0x0, 0x3231564e, 0x0, 0x4, [{0x0, 0xf}, {0x20010}, {0xfffffffd, 0x3}, {}, {}, {}, {0x0, 0x800}], 0xf, 0x0, 0x1}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x10d, &(0x7f0000000440)={0x0, 0x0, 0x4, 0x0, 0x9e}, &(0x7f0000000340), &(0x7f0000000280))
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000680)={&(0x7f00000004c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000500)="41a2116f73987af18ba5a180fffb899b23e70ebbca213a04dad987cdb1a8d5805e7650e3ec369508eb985fd122d8e102c692896966e75009c0569bd1b59726540b3ff9e5a603c85651cf770240ce869e144555f92827707b54c056e5b852b46e7081987b5be707a29d67f801c92b60bd4f58c6904ba08baea775b103e7dce7e26a8a0f5d63a13863c80d850a776caa1e6eff1f60e4bdc9e9824a613ae48842ace7543f", 0xa3}, {&(0x7f00000005c0)="447c08cfbf9bb52de0bd45ec0e31faa2662c5668c7e6a8f2503c22927bf31bd2ac6c274ed6eb52fda943799b35b8de712fc16a1a90dc994f6a11aa483a815517f562784c21cd6e09e43874b03e67d28d94b1301af328f3a33bcb3c91a6", 0x5d}], 0x2, 0x0, 0x0, 0x30004010}, 0x4000000)

5.609893204s ago: executing program 7 (id=2631):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x8, 0x8}, {0x0, 0x400, 0x7b4, 0x4}}}}, 0x15)
syz_open_dev$dri(0x0, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000300)=0x20)
sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67e", 0x1a}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001)
recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0)

5.505188849s ago: executing program 6 (id=2632):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1)
sendto$packet(r1, &(0x7f0000000440), 0x0, 0x8800, 0x0, 0x0)

5.403419266s ago: executing program 2 (id=2633):
r0 = fanotify_init(0x0, 0x1)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x641, 0x4800003a, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
writev(r2, 0x0, 0x0)

5.378512892s ago: executing program 5 (id=2634):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r3 = socket(0xa, 0x6, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
readv(r4, 0x0, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000200001302"], 0x0, 0x40, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)

5.272873662s ago: executing program 7 (id=2635):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00')
read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020)

5.196609436s ago: executing program 2 (id=2636):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

4.172859914s ago: executing program 5 (id=2637):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000000a193bea6308449"], 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40)

3.546393673s ago: executing program 7 (id=2638):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000500)="465f659814e6e27af2836fdb36f9c97f", 0x10}, {&(0x7f0000001580)="4bbb23e522f61a9470fa5a5b5cb8fbe14a32aff67114f7dd020883fa69078f50bc465b115b5484716249f76419e33972bcbc17870b763a2c0dea1b0644eb318828158e6b30b516f8f4a9049df4f7115477aeca0eab7761840d", 0x59}, {0x0}], 0x3, 0x0, 0x0, 0x4004091}, 0x2004c841)

3.545596121s ago: executing program 6 (id=2639):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, 0x0)
ioctl$TIOCL_BLANKSCREEN(r2, 0x4b67, &(0x7f0000000000))
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10)

2.909800214s ago: executing program 7 (id=2640):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x7}, 0xe)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

2.619603155s ago: executing program 5 (id=2641):
socket(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e9f}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x13, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0xa4}}, 0x0)

2.53157643s ago: executing program 7 (id=2642):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000)
recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000340)=0x8)

1.305437205s ago: executing program 2 (id=2643):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000b80)=ANY=[@ANYBLOB])
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
connect$ax25(r3, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @default]}, 0x48)

1.232207204s ago: executing program 5 (id=2644):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.138546221s ago: executing program 6 (id=2645):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r3, &(0x7f0000000780)={0x2a, 0x1, 0xfffffffe}, 0xc)

1.125894672s ago: executing program 7 (id=2646):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48)
listen(r1, 0x1ad72f7)

1.104354947s ago: executing program 3 (id=2647):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r3 = socket(0xa, 0x6, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
readv(r4, 0x0, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000200001302"], 0x0, 0x40, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)

0s ago: executing program 2 (id=2648):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000001640)={0x2020}, 0x2020)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0x0, "f682756c98cc948c"})
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="772174c1ed978e7ddda9ef53856c5ecf3dcd14fd0056ea5fdadfdb03803ad920ba04bc0109ad307b3d38c51f3698f6ef56690cb7dc764fb8f9413f3ea211c88f7399cc12083cc71a663c401c064d0a2700c49ecb1b16fb4adb174aa5faace9b2e6792f1474b0a7bdb55b5825ce61481ab8ddc8319c65a832d1b69cda07bf", 0x7e}, {&(0x7f0000000080)}, {&(0x7f0000000100)}], 0x3)

kernel console output (not intermixed with test programs):

 nbd3: rw=0, sector=1, nr_sectors = 1 limit=0
[ 1347.802211][T15048] VFS: unable to read V7 FS superblock on device nbd3.
[ 1347.809326][T15048] VFS: could not find a valid V7 on nbd3.
[ 1347.909395][ T6025] bridge_slave_0: left allmulticast mode
[ 1347.919649][T11276] usb 6-1: Using ep0 maxpacket: 16
[ 1347.936568][T11276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1347.946094][ T6025] bridge_slave_0: left promiscuous mode
[ 1347.988505][T11276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1347.998655][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1348.038654][T11276] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1348.068530][T11276] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1348.082212][T11276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1348.099513][T11276] usb 6-1: config 0 descriptor??
[ 1348.671669][T11971] Bluetooth: hci1: command tx timeout
[ 1349.387694][T11276] HID 045e:07da: Invalid code 65791 type 1
[ 1349.406516][T11276] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0010/input/input35
[ 1349.429095][T11276] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[ 1350.732646][ T6025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1350.749649][T11971] Bluetooth: hci1: command tx timeout
[ 1350.765807][ T6025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1350.828930][ T6025] bond0 (unregistering): Released all slaves
[ 1350.977802][T14987] team0: Port device team_slave_0 added
[ 1351.021655][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1751'.
[ 1351.094544][T11276] usb 6-1: USB disconnect, device number 10
[ 1351.610219][ T6025] hsr_slave_0: left promiscuous mode
[ 1352.701274][ T6025] hsr_slave_1: left promiscuous mode
[ 1352.730840][ T6025] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1352.789764][ T6025] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1352.818921][T11971] Bluetooth: hci1: command tx timeout
[ 1355.902081][ T6025] team0 (unregistering): Port device team_slave_1 removed
[ 1356.043185][ T6025] team0 (unregistering): Port device team_slave_0 removed
[ 1356.064700][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1761'.
[ 1356.777765][T14987] team0: Port device team_slave_1 added
[ 1356.821271][T15025] chnl_net:caif_netlink_parms(): no params data found
[ 1357.055512][T14987] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1357.074965][T14987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1357.116318][T14987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1357.183526][T14987] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1357.273210][T14987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1357.316472][T14987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1357.959152][T15106] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[ 1358.937158][T14987] hsr_slave_0: entered promiscuous mode
[ 1358.959481][T14987] hsr_slave_1: entered promiscuous mode
[ 1359.429766][T15025] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1359.465605][T15025] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1359.502429][T15025] bridge_slave_0: entered allmulticast mode
[ 1360.281729][T15025] bridge_slave_0: entered promiscuous mode
[ 1360.294148][T15025] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1360.301872][T15025] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1360.309560][T15025] bridge_slave_1: entered allmulticast mode
[ 1360.317312][T15025] bridge_slave_1: entered promiscuous mode
[ 1360.503813][T15025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1360.564007][T15025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1360.574450][T13181] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1360.710132][T15025] team0: Port device team_slave_0 added
[ 1360.747876][T13181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1360.781207][T15025] team0: Port device team_slave_1 added
[ 1360.802975][T13181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1360.824645][T13181] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1360.850517][T13181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1360.890647][T13181] usb 4-1: config 0 descriptor??
[ 1361.126959][T15124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1361.159525][T15124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1362.049653][T15134] Falling back ldisc for ttyS3.
[ 1362.206959][T13181] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0
[ 1362.218102][T15025] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1362.225545][T13181] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0
[ 1362.232833][T15025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1363.212052][T13181] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0
[ 1363.227645][T13181] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0
[ 1363.242645][T13181] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0
[ 1363.255482][T15025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1363.887174][T13181] lenovo 0003:17EF:6047.0011: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0
[ 1364.023304][T15025] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1364.035292][T15025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1364.091182][T15025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1365.675430][T13181] lenovo 0003:17EF:6047.0011: Failed to switch middle button: -71
[ 1365.814196][T13181] lenovo 0003:17EF:6047.0011: Fn-lock setting failed: -71
[ 1366.063906][T13181] lenovo 0003:17EF:6047.0011: Sensitivity setting failed: -71
[ 1366.462437][T13181] usb 4-1: USB disconnect, device number 2
[ 1366.479490][T15025] hsr_slave_0: entered promiscuous mode
[ 1366.490020][T15025] hsr_slave_1: entered promiscuous mode
[ 1366.510135][T15025] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1366.558611][T15025] Cannot create hsr debugfs directory
[ 1367.863010][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1367.871360][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1369.688491][T13181] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[ 1370.120674][T13181] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1370.148760][ T6025] bridge_slave_1: left allmulticast mode
[ 1370.914841][T13181] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1370.947556][ T6025] bridge_slave_1: left promiscuous mode
[ 1370.960361][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1370.969282][T13181] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1371.018218][ T6025] bridge_slave_0: left allmulticast mode
[ 1371.025631][ T6025] bridge_slave_0: left promiscuous mode
[ 1371.047927][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1376.045250][T13181] usb 4-1: string descriptor 0 read error: -32
[ 1376.088577][T13181] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1376.997195][T13181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1377.019902][T13181] usb 4-1: can't set config #1, error -32
[ 1378.491766][ T5886] usb 4-1: USB disconnect, device number 3
[ 1379.838210][ T6025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1379.936068][ T6025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1379.947423][ T6025] bond0 (unregistering): Released all slaves
[ 1380.153315][ T6025] hsr_slave_0: left promiscuous mode
[ 1380.197669][ T6025] hsr_slave_1: left promiscuous mode
[ 1380.245373][ T6025] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1380.279608][ T6025] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1380.757892][T15229] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1385.241833][ T6025] team0 (unregistering): Port device team_slave_1 removed
[ 1385.351932][ T6025] team0 (unregistering): Port device team_slave_0 removed
[ 1391.035683][   T93] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1391.518512][   T93] usb 10-1: Using ep0 maxpacket: 16
[ 1391.556813][T14987] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1391.579478][   T93] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1391.599857][T14987] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1391.635686][   T93] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1391.678194][   T93] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1391.736123][   T93] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1391.781996][T14987] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1391.794333][   T93] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1391.839275][   T93] usb 10-1: config 0 descriptor??
[ 1391.910961][T14987] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1392.003623][T15270] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 1392.075336][T15025] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1392.136504][T15025] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1392.160706][T15025] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1392.201987][T15025] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1392.742876][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1796'.
[ 1393.132172][   T93] HID 045e:07da: Invalid code 65791 type 1
[ 1393.158005][   T93] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0012/input/input36
[ 1393.303109][   T93] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[ 1393.336621][   T93] usb 10-1: USB disconnect, device number 8
[ 1393.707621][T14987] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1394.207716][T14987] 8021q: adding VLAN 0 to HW filter on device team0
[ 1394.331940][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1394.339148][ T6025] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1394.589336][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1394.596812][ T6025] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1395.092344][T15025] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1395.298697][T15025] 8021q: adding VLAN 0 to HW filter on device team0
[ 1395.380502][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1395.387750][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1395.474851][T15299] 9pnet_virtio: no channels available for device syz
[ 1395.805078][ T6638] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1395.812325][ T6638] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1395.898491][T10368] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[ 1396.395268][T10368] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1396.414160][T10368] usb 6-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1396.678446][T10368] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1396.716801][T10368] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1396.770101][T10368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1396.882290][T10368] usb 6-1: Product: syz
[ 1396.887138][T10368] usb 6-1: Manufacturer: syz
[ 1396.918882][T10368] usb 6-1: SerialNumber: syz
[ 1396.968007][T15303] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1397.441965][T15025] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1398.906525][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1398.918703][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1398.928801][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1398.950195][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1398.962459][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1398.970050][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1399.627944][T15025] veth0_vlan: entered promiscuous mode
[ 1399.682159][T15025] veth1_vlan: entered promiscuous mode
[ 1399.809783][T10368] usb 6-1: USB disconnect, device number 11
[ 1401.061922][ T5837] Bluetooth: hci3: command tx timeout
[ 1403.368397][ T5837] Bluetooth: hci3: command tx timeout
[ 1403.775754][T15345] chnl_net:caif_netlink_parms(): no params data found
[ 1403.934022][ T6638] bridge_slave_1: left allmulticast mode
[ 1404.918767][ T6638] bridge_slave_1: left promiscuous mode
[ 1404.924826][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1405.153112][ T6638] bridge_slave_0: left allmulticast mode
[ 1405.198481][ T6638] bridge_slave_0: left promiscuous mode
[ 1405.215392][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1405.278817][T15399] Invalid ELF header magic: != ELF
[ 1405.338165][T11971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1405.353441][T11971] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1405.365331][T11971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1405.376260][T11971] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1405.384112][T11971] Bluetooth: hci3: command tx timeout
[ 1405.432208][T11971] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1405.441064][T11971] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1407.076411][T15421] xt_bpf: check failed: parse error
[ 1407.799699][T11971] Bluetooth: hci3: command tx timeout
[ 1407.808792][T11971] Bluetooth: hci4: command tx timeout
[ 1409.307581][T15432] syz.3.1820: attempt to access beyond end of device
[ 1409.307581][T15432] nbd3: rw=0, sector=6, nr_sectors = 2 limit=0
[ 1409.353125][T15432] ADFS-fs (nbd3): error: unable to read block 3, try 0
[ 1409.499624][ T6638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1409.515088][ T6638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1409.526434][ T6638] bond0 (unregistering): Released all slaves
[ 1409.715469][ T6638] hsr_slave_0: left promiscuous mode
[ 1409.731410][ T6638] hsr_slave_1: left promiscuous mode
[ 1409.737486][ T6638] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1409.793753][ T6638] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1410.088855][T15435] Can't find a SQUASHFS superblock on nullb0
[ 1410.112748][T15435] IPVS: length: 1336071902 != 24
[ 1410.119434][T14087] Bluetooth: hci4: command tx timeout
[ 1410.624043][ T6638] team0 (unregistering): Port device team_slave_1 removed
[ 1410.916789][ T6638] team0 (unregistering): Port device team_slave_0 removed
[ 1412.202498][T14087] Bluetooth: hci4: command tx timeout
[ 1413.495909][T15345] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1413.558456][T15345] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1413.566442][T15345] bridge_slave_0: entered allmulticast mode
[ 1413.619481][T15345] bridge_slave_0: entered promiscuous mode
[ 1413.688838][T15345] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1413.696388][T15345] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1413.761654][T15345] bridge_slave_1: entered allmulticast mode
[ 1413.774125][T15345] bridge_slave_1: entered promiscuous mode
[ 1414.309038][T14087] Bluetooth: hci4: command tx timeout
[ 1415.706152][T15345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1415.775104][T15345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1417.704179][T15345] team0: Port device team_slave_0 added
[ 1417.841429][T15345] team0: Port device team_slave_1 added
[ 1418.025399][T15345] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1418.038381][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1418.149056][ T9792] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1418.216322][T15345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1418.355060][ T9792] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1418.406911][ T9792] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1418.425293][ T9792] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1418.665034][ T9792] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1418.724116][ T9792] usb 10-1: config 0 descriptor??
[ 1418.748627][T15345] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1418.779009][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1418.823743][T15345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1418.841110][T15505] pim6reg: entered allmulticast mode
[ 1418.848073][T15507] macvlan0: entered allmulticast mode
[ 1418.856997][T15507] veth1_vlan: entered allmulticast mode
[ 1418.894015][T15396] chnl_net:caif_netlink_parms(): no params data found
[ 1418.931744][T15509] veth1_vlan: left allmulticast mode
[ 1419.035256][T15493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1419.098850][T15493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1419.167218][T15509] macvlan0 (unregistering): left allmulticast mode
[ 1420.297110][ T9792] lenovo 0003:17EF:6047.0013: unknown main item tag 0x0
[ 1420.341002][ T9792] lenovo 0003:17EF:6047.0013: unknown main item tag 0x0
[ 1420.368458][ T9792] lenovo 0003:17EF:6047.0013: unknown main item tag 0x0
[ 1420.390786][ T9792] lenovo 0003:17EF:6047.0013: unknown main item tag 0x0
[ 1420.399181][ T9792] lenovo 0003:17EF:6047.0013: unknown main item tag 0x0
[ 1420.428492][ T9792] lenovo 0003:17EF:6047.0013: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.9-1/input0
[ 1421.744774][ T9792] lenovo 0003:17EF:6047.0013: Failed to switch middle button: -71
[ 1421.756930][ T9792] lenovo 0003:17EF:6047.0013: Fn-lock setting failed: -71
[ 1421.778126][T15345] hsr_slave_0: entered promiscuous mode
[ 1421.785573][ T9792] lenovo 0003:17EF:6047.0013: Sensitivity setting failed: -71
[ 1421.826493][ T9792] usb 10-1: USB disconnect, device number 9
[ 1421.839397][T15345] hsr_slave_1: entered promiscuous mode
[ 1422.728591][T15396] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1422.779447][T15396] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1422.789700][T15396] bridge_slave_0: entered allmulticast mode
[ 1422.799885][T15396] bridge_slave_0: entered promiscuous mode
[ 1422.810868][T15396] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1422.818221][T15396] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1422.827594][T15396] bridge_slave_1: entered allmulticast mode
[ 1422.835559][T15396] bridge_slave_1: entered promiscuous mode
[ 1423.857513][T15560] Invalid source name
[ 1423.861791][T15560] UBIFS error (pid: 15560): cannot open "./file0", error -22
[ 1424.750020][ T6003] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1424.773334][ T6003] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1425.248048][T15396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1425.290142][T15396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1425.326461][ T6638] bridge_slave_1: left allmulticast mode
[ 1425.338525][ T6638] bridge_slave_1: left promiscuous mode
[ 1425.348745][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1425.397244][ T6638] bridge_slave_0: left allmulticast mode
[ 1425.415547][ T6638] bridge_slave_0: left promiscuous mode
[ 1425.435270][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1426.770129][T14087] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1429.019551][ T6638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1429.053822][ T6638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1429.117194][ T6638] bond0 (unregistering): Released all slaves
[ 1429.360429][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1429.367503][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1429.649008][T15396] team0: Port device team_slave_0 added
[ 1430.505693][ T6638] hsr_slave_0: left promiscuous mode
[ 1430.526511][ T6638] hsr_slave_1: left promiscuous mode
[ 1430.546182][ T6638] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1430.567926][ T6638] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1430.612259][ T6638] veth1_vlan: left promiscuous mode
[ 1430.617719][ T6638] veth0_vlan: left promiscuous mode
[ 1430.624265][T15635] syz.9.1851: attempt to access beyond end of device
[ 1430.624265][T15635] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1431.248502][T11276] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1431.410735][T11276] usb 10-1: Using ep0 maxpacket: 16
[ 1431.570548][T11276] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1431.582479][T11276] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1431.592770][T11276] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1431.625222][T11276] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1431.651465][T11276] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1431.662691][T11276] usb 10-1: config 0 descriptor??
[ 1432.117205][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.156041][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.191762][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.205356][ T6638] team0 (unregistering): Port device team_slave_1 removed
[ 1432.206499][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.228483][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.235815][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.252412][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.261350][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.269296][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.285465][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.303693][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.324026][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.339826][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.355254][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.368175][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.376094][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.405409][T11276] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[ 1432.425409][T11276] microsoft 0003:045E:07DA.0014: No inputs registered, leaving
[ 1432.440157][T11276] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[ 1432.457524][T11276] microsoft 0003:045E:07DA.0014: no inputs found
[ 1432.465293][T11276] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway
[ 1432.465431][ T6638] team0 (unregistering): Port device team_slave_0 removed
[ 1432.500023][T11276] usb 10-1: USB disconnect, device number 10
[ 1433.941405][T15699] process 'syz.9.1860' launched './file1' with NULL argv: empty string added
[ 1436.421818][T15396] team0: Port device team_slave_1 added
[ 1436.705116][T15396] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1436.754843][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1437.789391][T15396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1439.367991][T15396] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1439.453623][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1439.525468][T15396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1439.971814][T15762] ieee802154 phy0 wpan0: encryption failed: -22
[ 1440.953831][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'.
[ 1441.304294][T15396] hsr_slave_0: entered promiscuous mode
[ 1441.608688][T15396] hsr_slave_1: entered promiscuous mode
[ 1441.689215][T15396] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1441.696989][T15396] Cannot create hsr debugfs directory
[ 1444.000683][T15345] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1444.169693][T15788] program syz.9.1876 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1444.179465][T15345] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1444.720136][T15345] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1444.921446][T15345] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1446.025619][T15345] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1447.013516][T15345] 8021q: adding VLAN 0 to HW filter on device team0
[ 1447.113999][ T7554] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1447.121268][ T7554] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1447.147577][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1447.155013][ T7554] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1447.200976][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'.
[ 1447.969339][T15396] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1448.024562][T15396] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1448.083253][T15396] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1448.165323][T15396] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1450.278118][T15396] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1450.466998][T15396] 8021q: adding VLAN 0 to HW filter on device team0
[ 1450.616259][T15833] [U] W!T�͗�}ݩ�S�L^�=��
[ 1451.025737][ T6638] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1451.033711][ T6638] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1451.318853][ T6638] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1451.327578][ T6638] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1451.401250][T15828] [U] '
[ 1451.626858][T15345] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1451.841205][T15345] veth0_vlan: entered promiscuous mode
[ 1451.890675][T15345] veth1_vlan: entered promiscuous mode
[ 1452.095067][T15345] veth0_macvtap: entered promiscuous mode
[ 1452.161682][T15345] veth1_macvtap: entered promiscuous mode
[ 1453.338422][T15854] syz.5.1895 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1454.517905][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1455.293006][T15862] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1455.437861][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1455.449457][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1455.478987][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1455.534456][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1455.558487][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1455.581160][T15345] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1455.641633][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1455.708354][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1455.760094][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1455.833138][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1455.852352][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1455.874138][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1455.881532][T15872] capability: warning: `syz.5.1902' uses 32-bit capabilities (legacy support in use)
[ 1455.892757][T15345] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1456.841954][T15396] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1456.907159][T15345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1456.945228][T15345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1457.141858][T15875] qnx4: no qnx4 filesystem (no root dir).
[ 1457.346375][T15345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1457.648437][T15345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1459.527532][T15396] veth0_vlan: entered promiscuous mode
[ 1459.600829][T15396] veth1_vlan: entered promiscuous mode
[ 1459.685100][T15396] veth0_macvtap: entered promiscuous mode
[ 1459.709095][T14087] Bluetooth: hci0: ACL packet for unknown connection handle 200
[ 1459.847471][T11971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1459.906156][T11971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1459.918187][T11971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1459.949340][T11971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1459.970804][T11971] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1459.980965][T11971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1460.031218][T15396] veth1_macvtap: entered promiscuous mode
[ 1460.121233][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1460.136029][T15914] sg_write: data in/out 1048540/17 bytes for SCSI command 0x0-- guessing data in;
[ 1460.136029][T15914]    program syz.3.1911 not setting count and/or reply_len properly
[ 1460.178466][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1460.196091][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1460.223107][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1460.244844][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1460.257176][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1460.275209][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1460.287959][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1460.302193][T15396] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1460.313543][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1460.325669][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1460.340662][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1460.353293][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1460.364084][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1460.376525][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1461.111230][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1461.148754][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1461.594092][T15396] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1462.043942][T11971] Bluetooth: hci1: command tx timeout
[ 1462.652093][   T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1464.436729][T11971] Bluetooth: hci1: command tx timeout
[ 1464.939273][T14087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1465.887292][T14087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1466.041344][T14087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1466.051741][T14087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1466.063685][T14087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1466.072826][T14087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1466.567248][T11971] Bluetooth: hci1: command tx timeout
[ 1467.325111][   T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1467.590549][   T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1467.652694][T15960] lo speed is unknown, defaulting to 1000
[ 1467.722756][T15960] lo speed is unknown, defaulting to 1000
[ 1467.804079][T15960] lo speed is unknown, defaulting to 1000
[ 1467.879514][T15960] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1467.912976][T15960] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1468.180850][T11971] Bluetooth: hci3: command tx timeout
[ 1468.257428][   T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1468.818412][T11971] Bluetooth: hci1: command tx timeout
[ 1468.910930][T15960] lo speed is unknown, defaulting to 1000
[ 1468.954189][T15960] lo speed is unknown, defaulting to 1000
[ 1469.046869][T15960] lo speed is unknown, defaulting to 1000
[ 1469.165112][T15960] lo speed is unknown, defaulting to 1000
[ 1469.204893][T15909] chnl_net:caif_netlink_parms(): no params data found
[ 1469.231551][T15960] lo speed is unknown, defaulting to 1000
[ 1469.444927][T15960] lo speed is unknown, defaulting to 1000
[ 1469.555535][T15960] lo speed is unknown, defaulting to 1000
[ 1469.567677][T15979] capability: warning: `syz.5.1929' uses deprecated v2 capabilities in a way that may be insecure
[ 1470.261187][T11971] Bluetooth: hci3: command tx timeout
[ 1472.432408][T11971] Bluetooth: hci3: command tx timeout
[ 1472.516228][T15995] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1932'.
[ 1472.750511][T15941] chnl_net:caif_netlink_parms(): no params data found
[ 1472.801603][   T82] bridge_slave_1: left allmulticast mode
[ 1472.841563][   T82] bridge_slave_1: left promiscuous mode
[ 1472.862961][   T82] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1472.886775][   T82] bridge_slave_0: left allmulticast mode
[ 1472.902123][   T82] bridge_slave_0: left promiscuous mode
[ 1472.918611][   T82] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1474.504331][T11971] Bluetooth: hci3: command tx timeout
[ 1475.743507][   T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1475.779384][   T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1475.820020][   T82] bond0 (unregistering): Released all slaves
[ 1475.893197][T15909] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1475.918430][T15909] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1475.925962][T15909] bridge_slave_0: entered allmulticast mode
[ 1475.985759][T15909] bridge_slave_0: entered promiscuous mode
[ 1476.223146][T15909] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1476.308778][T15909] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1476.367949][T15909] bridge_slave_1: entered allmulticast mode
[ 1476.435168][T15909] bridge_slave_1: entered promiscuous mode
[ 1477.850234][T16028] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1477.939417][   T82] hsr_slave_0: left promiscuous mode
[ 1477.966683][   T82] hsr_slave_1: left promiscuous mode
[ 1477.981497][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1477.990906][   T82] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1478.018817][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1478.027686][   T82] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1478.268559][   T82] veth1_macvtap: left promiscuous mode
[ 1478.274862][   T82] veth0_macvtap: left promiscuous mode
[ 1478.283841][   T82] veth1_vlan: left promiscuous mode
[ 1478.293157][   T82] veth0_vlan: left promiscuous mode
[ 1479.721256][T16041] sctp: [Deprecated]: syz.3.1946 (pid 16041) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1479.721256][T16041] Use struct sctp_sack_info instead
[ 1479.823166][T16043] trusted_key: syz.3.1947 sent an empty control message without MSG_MORE.
[ 1480.236953][   T82] team0 (unregistering): Port device team_slave_1 removed
[ 1480.326270][   T82] team0 (unregistering): Port device team_slave_0 removed
[ 1481.748909][T16054] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1949'.
[ 1482.274410][T15909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1482.370945][T15909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1482.643750][T15909] team0: Port device team_slave_0 added
[ 1482.659172][T15941] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1482.667753][T15941] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1482.686610][T15941] bridge_slave_0: entered allmulticast mode
[ 1482.709367][T15941] bridge_slave_0: entered promiscuous mode
[ 1482.923458][T15941] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1482.992927][T15941] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1483.081181][T15941] bridge_slave_1: entered allmulticast mode
[ 1483.273089][T15941] bridge_slave_1: entered promiscuous mode
[ 1483.933882][T15909] team0: Port device team_slave_1 added
[ 1484.182692][T15941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1484.239662][T15941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1484.279476][T15909] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1484.287329][T15909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1484.357061][T15909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1484.436619][T15909] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1484.443981][T15909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1484.514270][T15909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1484.627707][T15941] team0: Port device team_slave_0 added
[ 1484.666890][T15941] team0: Port device team_slave_1 added
[ 1484.680803][T16076] sctp: [Deprecated]: syz.3.1955 (pid 16076) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1484.680803][T16076] Use struct sctp_sack_info instead
[ 1484.950401][T15909] hsr_slave_0: entered promiscuous mode
[ 1484.961702][T15909] hsr_slave_1: entered promiscuous mode
[ 1484.972234][T15941] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1484.980712][T15941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1485.017867][T16082] program syz.5.1957 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1485.068438][T15941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1485.263916][T16090] Invalid logical block size (1)
[ 1485.306368][   T82] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1485.480010][T15941] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1485.509802][T14087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1485.541878][T14087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1485.554807][T14087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1485.563608][T14087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1485.571566][T14087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1485.579470][T14087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1485.608675][T15941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1485.710079][T15941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1485.831865][   T82] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1486.025235][   T82] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1486.111024][T16096] lo speed is unknown, defaulting to 1000
[ 1486.232544][   T82] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1486.497467][T15941] hsr_slave_0: entered promiscuous mode
[ 1486.883704][T15941] hsr_slave_1: entered promiscuous mode
[ 1486.915992][T15941] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1486.936830][T15941] Cannot create hsr debugfs directory
[ 1487.622497][T14087] Bluetooth: hci2: command tx timeout
[ 1489.698374][T14087] Bluetooth: hci2: command tx timeout
[ 1491.056139][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1491.056261][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1491.633064][T16096] chnl_net:caif_netlink_parms(): no params data found
[ 1491.798791][T14087] Bluetooth: hci2: command tx timeout
[ 1492.658623][ T5877] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[ 1492.862368][ T5877] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1492.886434][ T5877] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1492.942144][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1492.977338][T16096] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1492.985173][ T5877] usb 6-1: Product: syz
[ 1493.003797][ T5877] usb 6-1: Manufacturer: syz
[ 1493.018872][T16096] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1493.027841][ T5877] usb 6-1: SerialNumber: syz
[ 1493.047128][T16096] bridge_slave_0: entered allmulticast mode
[ 1493.121399][T16187] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1493.839162][T16096] bridge_slave_0: entered promiscuous mode
[ 1493.845865][ T5877] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 1493.858757][T14087] Bluetooth: hci2: command tx timeout
[ 1493.870084][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1974'.
[ 1493.881787][T16096] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1493.918773][T16096] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1493.928053][T16096] bridge_slave_1: entered allmulticast mode
[ 1493.977266][T16096] bridge_slave_1: entered promiscuous mode
[ 1494.122708][T16096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1494.204463][T16096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1494.358110][T16096] team0: Port device team_slave_0 added
[ 1494.416669][T16096] team0: Port device team_slave_1 added
[ 1494.499758][   T82] bridge_slave_1: left allmulticast mode
[ 1494.506053][   T82] bridge_slave_1: left promiscuous mode
[ 1494.520703][   T82] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1494.580085][   T82] bridge_slave_0: left allmulticast mode
[ 1494.601383][   T82] bridge_slave_0: left promiscuous mode
[ 1494.635830][T16199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1494.666722][T16199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1494.859249][   T82] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1494.918330][   T82] bridge_slave_1: left allmulticast mode
[ 1494.924169][   T82] bridge_slave_1: left promiscuous mode
[ 1494.931606][   T82] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1494.942999][   T82] bridge_slave_0: left allmulticast mode
[ 1494.951546][   T82] bridge_slave_0: left promiscuous mode
[ 1494.967747][   T82] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1495.777902][T11103] usb 6-1: USB disconnect, device number 12
[ 1495.876319][T16160] usblp0: removed
[ 1499.080639][   T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1499.104508][   T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1499.127374][   T82] bond0 (unregistering): Released all slaves
[ 1499.157923][   T82] bond1 (unregistering): Released all slaves
[ 1499.573003][   T82] bond2 (unregistering): Released all slaves
[ 1499.599511][   T82] bond3 (unregistering): Released all slaves
[ 1499.625792][   T82] bond4 (unregistering): Released all slaves
[ 1499.665474][   T82] bond5 (unregistering): Released all slaves
[ 1499.687793][   T82] bond6 (unregistering): Released all slaves
[ 1500.331787][   T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1500.667142][   T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1500.712291][   T82] bond0 (unregistering): Released all slaves
[ 1500.863746][T16225] bridge0: port 3(erspan0) entered blocking state
[ 1500.889301][T16225] bridge0: port 3(erspan0) entered disabled state
[ 1500.897993][T16225] erspan0: entered allmulticast mode
[ 1500.907240][T16225] erspan0: entered promiscuous mode
[ 1500.925893][T16225] bridge0: port 3(erspan0) entered blocking state
[ 1500.933347][T16225] bridge0: port 3(erspan0) entered forwarding state
[ 1500.972195][   T82] IPVS: stopping master sync thread 14661 ...
[ 1500.979791][T16302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1501.051163][T16096] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1501.059311][T16096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1501.118508][T16096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1501.427826][T16318] sctp: [Deprecated]: syz.5.1989 (pid 16318) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1501.427826][T16318] Use struct sctp_sack_info instead
[ 1502.114277][T16096] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1502.144955][T16096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1502.192351][T16096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1502.460793][T16096] hsr_slave_0: entered promiscuous mode
[ 1502.473457][T16096] hsr_slave_1: entered promiscuous mode
[ 1502.489314][T16096] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1502.507892][T16096] Cannot create hsr debugfs directory
[ 1502.924055][T15909] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1503.466805][T15909] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1503.483963][T15909] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1504.601166][   T82] hsr_slave_0: left promiscuous mode
[ 1504.607271][   T82] hsr_slave_1: left promiscuous mode
[ 1504.624795][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1504.677061][   T82] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1504.698863][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1504.706345][   T82] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1504.917375][   T82] hsr_slave_0: left promiscuous mode
[ 1504.923937][   T82] hsr_slave_1: left promiscuous mode
[ 1504.940835][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1504.991301][T16365] sctp: [Deprecated]: syz.5.1997 (pid 16365) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1504.991301][T16365] Use struct sctp_sack_info instead
[ 1505.081441][   T82] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1505.544405][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1505.574768][   T82] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1505.801454][   T82] veth1_macvtap: left promiscuous mode
[ 1506.043261][   T82] veth0_macvtap: left promiscuous mode
[ 1506.188956][   T82] veth1_vlan: left promiscuous mode
[ 1506.194695][   T82] veth0_vlan: left promiscuous mode
[ 1506.349248][   T82] veth1_macvtap: left promiscuous mode
[ 1506.354857][   T82] veth0_macvtap: left promiscuous mode
[ 1506.387562][   T82] veth1_vlan: left promiscuous mode
[ 1506.393075][   T82] veth0_vlan: left promiscuous mode
[ 1508.438522][T11103] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1508.499889][T16411] sctp: [Deprecated]: syz.5.2007 (pid 16411) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1508.499889][T16411] Use struct sctp_sack_info instead
[ 1509.369504][T11103] usb 4-1: Using ep0 maxpacket: 8
[ 1509.386970][T11103] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1509.399171][T11103] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1509.421240][T11103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1509.441168][T11103] usb 4-1: config 0 descriptor??
[ 1509.786372][   T82] team0 (unregistering): Port device team_slave_1 removed
[ 1509.906932][   T82] team0 (unregistering): Port device team_slave_0 removed
[ 1510.024629][T11103] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1511.317556][ T9620] usb 4-1: USB disconnect, device number 4
[ 1511.502589][T16484] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1512.277415][T16484] Falling back ldisc for ttyprintk.
[ 1513.797849][   T82] team0 (unregistering): Port device team_slave_1 removed
[ 1513.981928][   T82] team0 (unregistering): Port device team_slave_0 removed
[ 1516.092394][T15909] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1516.193003][T15941] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1516.374224][T15941] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1516.576965][T15941] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1516.662990][T15941] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1519.173016][T15941] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1519.542859][T15941] 8021q: adding VLAN 0 to HW filter on device team0
[ 1519.570126][T12477] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1519.577422][T12477] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1520.675105][T11971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1520.686045][T11971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1520.705981][T11971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1520.715521][T11971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1520.726715][T11971] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1520.734139][T11971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1520.757419][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1520.764622][ T6025] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1520.930013][T16595] lo speed is unknown, defaulting to 1000
[ 1521.156953][T15941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1521.551663][T16096] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1521.595113][T16096] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1521.703805][T16096] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1521.734164][T16096] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1522.206536][T16595] chnl_net:caif_netlink_parms(): no params data found
[ 1522.430815][T16595] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1522.446022][T16595] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1522.461897][T16595] bridge_slave_0: entered allmulticast mode
[ 1522.480460][T16595] bridge_slave_0: entered promiscuous mode
[ 1522.504532][   T82] bridge_slave_1: left allmulticast mode
[ 1522.523056][   T82] bridge_slave_1: left promiscuous mode
[ 1522.558611][   T82] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1522.602989][   T82] bridge_slave_0: left allmulticast mode
[ 1522.626184][   T82] bridge_slave_0: left promiscuous mode
[ 1522.638771][   T82] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1522.818605][T14087] Bluetooth: hci1: command tx timeout
[ 1523.968452][T11971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1523.981010][T11971] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1523.989766][T11971] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1523.997662][T11971] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1524.005789][T11971] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1524.018373][T11971] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1524.030923][   T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1524.068466][   T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1524.088383][   T82] bond0 (unregistering): Released all slaves
[ 1524.176084][T16595] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1524.185588][T16595] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1524.196613][T16595] bridge_slave_1: entered allmulticast mode
[ 1524.213877][T16595] bridge_slave_1: entered promiscuous mode
[ 1524.252087][   T82] hsr_slave_0: left promiscuous mode
[ 1524.258111][   T82] hsr_slave_1: left promiscuous mode
[ 1524.274497][   T82] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1524.293114][   T82] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1524.557313][   T82] team0 (unregistering): Port device team_slave_1 removed
[ 1524.604867][   T82] team0 (unregistering): Port device team_slave_0 removed
[ 1524.952512][T14087] Bluetooth: hci1: command tx timeout
[ 1525.783548][T16669] lo speed is unknown, defaulting to 1000
[ 1525.897425][T16096] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1525.933068][T16595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1526.055650][T16595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1526.102683][T14087] Bluetooth: hci3: command tx timeout
[ 1526.314845][T16096] 8021q: adding VLAN 0 to HW filter on device team0
[ 1526.346679][T16595] team0: Port device team_slave_0 added
[ 1526.409926][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1526.417097][ T6015] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1526.479736][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1526.486963][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1527.374479][T14087] Bluetooth: hci1: command tx timeout
[ 1527.639586][T16595] team0: Port device team_slave_1 added
[ 1528.034851][T16595] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1528.048383][T16595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1528.098969][T16595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1528.152382][T16595] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1528.172612][T16595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1528.201364][T14087] Bluetooth: hci3: command tx timeout
[ 1528.229048][T16595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1528.386146][T16595] hsr_slave_0: entered promiscuous mode
[ 1528.392990][T16595] hsr_slave_1: entered promiscuous mode
[ 1528.597081][T16669] chnl_net:caif_netlink_parms(): no params data found
[ 1529.187358][T16669] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1529.197401][T16669] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1529.208715][T16669] bridge_slave_0: entered allmulticast mode
[ 1529.215908][T16669] bridge_slave_0: entered promiscuous mode
[ 1529.371596][T16669] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1529.388447][T16669] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1529.395756][T16669] bridge_slave_1: entered allmulticast mode
[ 1529.414400][T16669] bridge_slave_1: entered promiscuous mode
[ 1529.458632][T14087] Bluetooth: hci1: command tx timeout
[ 1529.524212][T16669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1529.554660][T16669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1529.618179][T16669] team0: Port device team_slave_0 added
[ 1529.636165][T16669] team0: Port device team_slave_1 added
[ 1529.686149][T16669] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1529.695938][T16669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1529.760379][T16669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1529.791145][T16669] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1530.259985][T14087] Bluetooth: hci3: command tx timeout
[ 1530.718685][T16669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1530.745124][T16669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1530.949472][T16096] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1531.251667][T16669] hsr_slave_0: entered promiscuous mode
[ 1531.258114][T16669] hsr_slave_1: entered promiscuous mode
[ 1531.285581][T16669] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1531.318603][T16669] Cannot create hsr debugfs directory
[ 1531.673563][T16790] dummy0: entered promiscuous mode
[ 1531.722100][T16790] dummy0: entered allmulticast mode
[ 1532.338747][T14087] Bluetooth: hci3: command tx timeout
[ 1532.470734][   T82] bridge_slave_1: left allmulticast mode
[ 1532.476673][   T82] bridge_slave_1: left promiscuous mode
[ 1533.324893][   T82] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1533.360110][   T82] bridge_slave_0: left allmulticast mode
[ 1533.365821][   T82] bridge_slave_0: left promiscuous mode
[ 1533.378156][   T82] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1534.803490][   T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1534.828998][   T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1534.846589][   T82] bond0 (unregistering): Released all slaves
[ 1535.119802][T16831] netlink: 'syz.5.2063': attribute type 10 has an invalid length.
[ 1535.128132][T16831] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2063'.
[ 1535.151868][T16831] bridge0: port 4(batadv0) entered blocking state
[ 1535.162382][T16831] bridge0: port 4(batadv0) entered disabled state
[ 1535.172654][T16831] batadv0: entered allmulticast mode
[ 1535.212553][T16831] batadv0: entered promiscuous mode
[ 1535.220662][T16831] bridge0: port 4(batadv0) entered blocking state
[ 1535.227394][T16831] bridge0: port 4(batadv0) entered forwarding state
[ 1535.635240][T16595] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1536.277668][ T6015] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1536.287477][ T6015] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1536.317137][T16595] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1536.465137][   T82] hsr_slave_0: left promiscuous mode
[ 1536.494504][   T82] hsr_slave_1: left promiscuous mode
[ 1536.512452][   T82] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1536.536934][   T82] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1539.387081][   T82] team0 (unregistering): Port device team_slave_1 removed
[ 1539.495513][   T82] team0 (unregistering): Port device team_slave_0 removed
[ 1541.129658][T16595] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1541.161189][T16595] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1541.318064][T16096] veth0_vlan: entered promiscuous mode
[ 1541.410182][T16096] veth1_vlan: entered promiscuous mode
[ 1541.514007][T16096] veth0_macvtap: entered promiscuous mode
[ 1541.555355][T16096] veth1_macvtap: entered promiscuous mode
[ 1541.696498][T16096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1541.710363][T16096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1541.720991][T16096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1541.732081][T16096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1541.873407][T16096] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1542.740375][T16096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1542.768378][T16096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1542.791744][T16096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1542.810766][T16096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1542.824126][T16096] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1542.843718][T16595] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1542.896598][T16096] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1542.924522][T16096] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1542.950584][T16096] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1542.964623][T16096] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1542.994027][T16669] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1543.013916][T16595] 8021q: adding VLAN 0 to HW filter on device team0
[ 1543.059588][T16669] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1543.103067][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1543.110273][ T6018] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1543.133779][T16669] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1543.343713][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1543.350927][ T7554] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1544.206142][T16669] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1544.316478][   T29] audit: type=1326 audit(1739938939.394:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.5.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1544.339697][   T29] audit: type=1326 audit(1739938939.394:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.5.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1544.361791][   T29] audit: type=1326 audit(1739938939.424:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.5.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1544.422938][   T29] audit: type=1326 audit(1739938939.424:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.5.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1544.489637][   T29] audit: type=1326 audit(1739938939.424:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.5.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1544.510904][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1544.528847][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1544.569885][   T29] audit: type=1326 audit(1739938939.444:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.5.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1544.750225][   T29] audit: type=1326 audit(1739938939.464:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.5.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1544.772406][   T29] audit: type=1326 audit(1739938939.464:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.5.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fedb7383da7 code=0x7ffc0000
[ 1544.795779][   T29] audit: type=1326 audit(1739938939.464:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.5.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedb7328fb9 code=0x7ffc0000
[ 1544.837584][ T6003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1544.959894][ T6003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1544.985310][   T29] audit: type=1326 audit(1739938939.464:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16924 comm="syz.5.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fedb7383da7 code=0x7ffc0000
[ 1545.776717][T16669] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1545.864915][T16945] sctp: [Deprecated]: syz.3.2088 (pid 16945) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1545.864915][T16945] Use struct sctp_sack_info instead
[ 1545.932359][T16669] 8021q: adding VLAN 0 to HW filter on device team0
[ 1545.953294][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1545.960531][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1545.993524][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1546.000769][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1546.370055][T16595] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1546.625022][T11971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1546.637578][T11971] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1546.640561][T16595] veth0_vlan: entered promiscuous mode
[ 1546.661155][T11971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1546.688163][T11971] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1546.704319][T11971] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1546.720950][T11971] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1547.117705][T16595] veth1_vlan: entered promiscuous mode
[ 1547.898802][ T6015] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1548.143506][ T6015] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1548.254812][T16669] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1548.942238][T14087] Bluetooth: hci4: command tx timeout
[ 1549.020414][T16964] lo speed is unknown, defaulting to 1000
[ 1549.166638][ T6015] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1549.820384][T16595] veth0_macvtap: entered promiscuous mode
[ 1549.922020][T16595] veth1_macvtap: entered promiscuous mode
[ 1550.036857][ T6015] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1550.110339][T16595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1550.153782][T16595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1550.174056][T16595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1550.194819][T16595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1550.208505][T16595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1550.238555][T16595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1550.250018][T16595] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1550.275483][T16595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1550.318298][T16595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1550.339875][T16595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1550.356938][T16595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1550.377182][T16595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1550.408787][T16595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1550.424266][T11971] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1550.467398][T16595] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1550.666083][T16595] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.675129][T16595] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.698482][T16595] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.707384][T16595] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.949043][T17034] gfs2: not a GFS2 filesystem
[ 1550.984711][T11971] Bluetooth: hci4: command tx timeout
[ 1551.562320][T16669] veth0_vlan: entered promiscuous mode
[ 1551.609188][T16964] chnl_net:caif_netlink_parms(): no params data found
[ 1552.252920][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1552.252976][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1552.326376][T16669] veth1_vlan: entered promiscuous mode
[ 1552.397743][ T6015] bridge_slave_1: left allmulticast mode
[ 1552.397774][ T6015] bridge_slave_1: left promiscuous mode
[ 1552.398101][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1552.406418][ T6015] bridge_slave_0: left allmulticast mode
[ 1552.406446][ T6015] bridge_slave_0: left promiscuous mode
[ 1552.406607][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1553.298521][T11971] Bluetooth: hci4: command tx timeout
[ 1555.390979][T11971] Bluetooth: hci4: command tx timeout
[ 1555.750576][ T6018] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1556.403859][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1556.422930][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1556.441398][ T6015] bond0 (unregistering): Released all slaves
[ 1556.521265][T17065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2106'.
[ 1556.548647][T17065] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2106'.
[ 1556.581845][T17065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2106'.
[ 1556.607726][T17065] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2106'.
[ 1556.620355][T17065] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2106'.
[ 1557.026837][T16964] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1557.036182][T16964] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1557.045126][T16964] bridge_slave_0: entered allmulticast mode
[ 1557.056693][T16964] bridge_slave_0: entered promiscuous mode
[ 1557.066556][ T6003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1557.778443][T14087] Bluetooth: hci2: command 0x1003 tx timeout
[ 1557.784944][T11971] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1557.833754][ T6003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1558.005599][T16964] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1558.031649][T16964] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1558.040482][T16964] bridge_slave_1: entered allmulticast mode
[ 1558.047902][T16964] bridge_slave_1: entered promiscuous mode
[ 1558.211976][T16964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1558.231015][T16964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1558.286326][T16669] veth0_macvtap: entered promiscuous mode
[ 1558.316598][T16964] team0: Port device team_slave_0 added
[ 1558.333049][ T7554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1558.355308][T16669] veth1_macvtap: entered promiscuous mode
[ 1558.386021][ T7554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1558.417463][T16964] team0: Port device team_slave_1 added
[ 1558.610872][ T6015] hsr_slave_0: left promiscuous mode
[ 1558.639167][ T6015] hsr_slave_1: left promiscuous mode
[ 1558.670298][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1558.704093][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1558.741783][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1558.777393][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1558.923101][ T6015] veth1_macvtap: left promiscuous mode
[ 1558.928863][ T6015] veth0_macvtap: left promiscuous mode
[ 1558.934602][ T6015] veth1_vlan: left promiscuous mode
[ 1558.942169][ T6015] veth0_vlan: left promiscuous mode
[ 1561.698255][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2115'.
[ 1563.157491][ T6015] team0 (unregistering): Port device team_slave_1 removed
[ 1563.207083][ T6015] team0 (unregistering): Port device team_slave_0 removed
[ 1564.654401][T16964] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1564.661717][T16964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1564.691641][T16964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1564.748572][T17169] 9pnet_virtio: no channels available for device syz
[ 1564.771389][T17169] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[ 1565.021028][T16669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1565.046569][T16669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1565.085945][T16669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1565.101398][T16669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1565.113269][T16669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1565.130221][T16669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1565.147062][T16669] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1565.175509][T16669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1565.226827][T16669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1565.264326][T16669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1565.307045][T16669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1565.335548][T16669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1565.355415][T16669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1565.376737][T16669] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1565.434539][T16964] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1565.465517][T16964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1565.532616][T16964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1566.825477][T16964] hsr_slave_0: entered promiscuous mode
[ 1566.890898][T16964] hsr_slave_1: entered promiscuous mode
[ 1566.943839][T16964] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1567.020547][T16964] Cannot create hsr debugfs directory
[ 1567.059317][T16669] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1567.092765][T16669] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1567.143132][T16669] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1567.186020][T16669] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1568.118533][T17204] warning: `syz.2.2127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1568.325719][ T6025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1568.352527][ T6025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1568.465299][ T6638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1568.483660][ T6638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1570.772923][T17233] sp0: Synchronizing with TNC
[ 1572.098426][T11971] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1572.105071][T14087] Bluetooth: hci2: command 0x1003 tx timeout
[ 1572.290270][T16964] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1572.319639][T16964] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1572.414792][T16964] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1572.560358][T16964] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1574.203295][T16964] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1574.284840][T16964] 8021q: adding VLAN 0 to HW filter on device team0
[ 1574.997960][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1575.005163][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1575.096428][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1575.103600][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1576.142232][T17278] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1577.324668][T17289] [U] W!T�͗�}ݩ�S�L^�=��
[ 1577.338893][T17287] [U] '
[ 1580.558063][T16964] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1582.608192][   T29] kauditd_printk_skb: 32 callbacks suppressed
[ 1582.626135][   T29] audit: type=1107 audit(1739938977.184:47): pid=17329 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P'
[ 1582.973741][T17355] [U] W!T�͗�}ݩ�S�L^�=��
[ 1582.980055][T17353] [U] '
[ 1583.218992][ T6638] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1583.852059][T16964] veth0_vlan: entered promiscuous mode
[ 1583.865717][T16964] veth1_vlan: entered promiscuous mode
[ 1584.122606][T16964] veth0_macvtap: entered promiscuous mode
[ 1584.132526][T16964] veth1_macvtap: entered promiscuous mode
[ 1584.149489][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1584.160187][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1584.182451][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1584.202433][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1584.212639][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1585.139296][T14087] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1585.168313][T11971] Bluetooth: hci2: command 0x1003 tx timeout
[ 1585.189819][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1585.325116][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1585.368667][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1585.628085][T16964] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1585.820425][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1585.875083][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1585.917961][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1585.958646][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1586.049199][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1587.000930][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1587.060724][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1587.188117][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1587.363657][T16964] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1587.393666][T16964] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1588.334097][T16964] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1588.461862][T16964] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1588.498969][T16964] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1589.657305][ T6638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1589.759376][T17416] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2172'.
[ 1590.562716][ T6638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1590.750399][T17416] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1590.759542][T17416] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1590.768366][T17416] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1590.777096][T17416] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1590.787281][T17416] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2172'.
[ 1590.988495][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1590.996369][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1593.676780][T17441] netlink: 'syz.6.1954': attribute type 10 has an invalid length.
[ 1593.699543][T17441] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1593.714342][T17441] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1594.870227][T17445] netlink: 'syz.3.2178': attribute type 1 has an invalid length.
[ 1594.878796][T17445] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2178'.
[ 1599.443960][T17484] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2188'.
[ 1601.778762][T17499] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[ 1604.365381][T17516] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1607.126740][T17546] xt_hashlimit: max too large, truncated to 1048576
[ 1607.140787][T17546] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1609.734984][T17561] overlayfs: failed to resolve './file1': -2
[ 1610.511099][T17564] siw: device registration error -23
[ 1613.343190][T17592] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2214'.
[ 1613.438663][T17595] netlink: 380 bytes leftover after parsing attributes in process `syz.7.2213'.
[ 1613.622580][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1613.629706][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1619.066627][   T29] audit: type=1107 audit(1739939014.144:48): pid=17639 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P'
[ 1621.080794][T17663] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd2": -EINTR
[ 1623.535169][T17691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2235'.
[ 1623.627583][T17691] syz_tun: entered promiscuous mode
[ 1623.660240][T17691] syz_tun: left promiscuous mode
[ 1625.007036][ T9620] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1625.168502][ T9620] usb 6-1: device descriptor read/64, error -71
[ 1626.138286][ T9620] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1626.298584][ T9620] usb 6-1: device descriptor read/64, error -71
[ 1627.109492][ T9620] usb usb6-port1: attempt power cycle
[ 1636.864426][T17798] ieee802154 phy0 wpan0: encryption failed: -22
[ 1644.266417][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2274'.
[ 1646.426478][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[ 1646.434157][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[ 1649.327187][   T29] audit: type=1326 audit(1739939044.374:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17893 comm="syz.6.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1649.790463][   T29] audit: type=1326 audit(1739939044.384:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17893 comm="syz.6.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1650.422559][   T29] audit: type=1326 audit(1739939044.384:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17893 comm="syz.6.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1650.446123][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2286'.
[ 1650.488135][T17905] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2287'.
[ 1650.525443][   T29] audit: type=1326 audit(1739939044.384:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17893 comm="syz.6.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1650.625730][   T29] audit: type=1326 audit(1739939044.384:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17893 comm="syz.6.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1650.709853][   T29] audit: type=1326 audit(1739939044.384:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17893 comm="syz.6.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1650.769056][   T29] audit: type=1326 audit(1739939044.384:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17893 comm="syz.6.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1650.792505][   T29] audit: type=1326 audit(1739939044.384:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17893 comm="syz.6.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1650.815807][   T29] audit: type=1326 audit(1739939044.384:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17893 comm="syz.6.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1650.873847][   T29] audit: type=1326 audit(1739939044.384:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17893 comm="syz.6.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1654.964838][   T29] kauditd_printk_skb: 19 callbacks suppressed
[ 1654.964889][   T29] audit: type=1326 audit(1739939049.894:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17947 comm="syz.3.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1655.506920][   T29] audit: type=1326 audit(1739939049.894:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17947 comm="syz.3.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1656.715840][   T29] audit: type=1326 audit(1739939049.924:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17947 comm="syz.3.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1656.788527][   T29] audit: type=1326 audit(1739939049.924:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17947 comm="syz.3.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1656.810363][   T29] audit: type=1326 audit(1739939049.924:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17947 comm="syz.3.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1656.877803][   T29] audit: type=1326 audit(1739939049.924:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17947 comm="syz.3.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1657.048855][T17971] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2305'.
[ 1657.120430][   T29] audit: type=1326 audit(1739939049.924:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17947 comm="syz.3.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1657.181882][   T29] audit: type=1326 audit(1739939049.924:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17947 comm="syz.3.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1658.157430][   T29] audit: type=1326 audit(1739939049.924:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17947 comm="syz.3.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1658.157479][   T29] audit: type=1326 audit(1739939049.924:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17947 comm="syz.3.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1658.876124][T11971] Bluetooth: hci2: Entering manufacturer mode failed (-110)
[ 1663.069722][   T29] kauditd_printk_skb: 19 callbacks suppressed
[ 1663.069752][   T29] audit: type=1326 audit(1739939057.474:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17999 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1663.110600][   T29] audit: type=1326 audit(1739939057.474:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17999 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1663.132809][   T29] audit: type=1326 audit(1739939057.484:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17999 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1663.154280][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1663.160662][   T29] audit: type=1326 audit(1739939057.484:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17999 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1663.198399][   T29] audit: type=1326 audit(1739939057.484:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17999 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1663.219980][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1663.286461][   T29] audit: type=1326 audit(1739939057.484:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17999 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1663.378493][   T29] audit: type=1326 audit(1739939057.484:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17999 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1663.415515][   T29] audit: type=1326 audit(1739939057.484:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17999 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1663.437173][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1663.558436][   T29] audit: type=1326 audit(1739939057.484:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17999 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1663.628361][   T29] audit: type=1326 audit(1739939057.484:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17999 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1669.147292][   T29] kauditd_printk_skb: 19 callbacks suppressed
[ 1669.147342][   T29] audit: type=1326 audit(1739939064.194:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.6.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1669.688970][   T29] audit: type=1326 audit(1739939064.194:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.6.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1669.925752][   T29] audit: type=1326 audit(1739939064.204:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.6.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1670.100614][   T29] audit: type=1326 audit(1739939064.204:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.6.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1670.122217][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1670.338300][   T29] audit: type=1326 audit(1739939064.204:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.6.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1670.679153][   T29] audit: type=1326 audit(1739939064.204:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.6.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1670.705540][   T29] audit: type=1326 audit(1739939064.204:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.6.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1670.894514][   T29] audit: type=1326 audit(1739939064.204:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.6.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1670.916768][   T29] audit: type=1326 audit(1739939064.204:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.6.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1670.938325][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1670.945207][   T29] audit: type=1326 audit(1739939064.204:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18070 comm="syz.6.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75ad8cde9 code=0x7ffc0000
[ 1672.658544][T12182] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1672.892713][T12182] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1672.931826][T12182] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1673.097432][T12182] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1673.097487][T12182] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1673.115351][T12182] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1673.115386][T12182] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1673.115408][T12182] usb 7-1: Product: syz
[ 1673.115428][T12182] usb 7-1: Manufacturer: syz
[ 1673.120328][T12182] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1673.988677][T12182] usb 7-1: USB disconnect, device number 5
[ 1675.064250][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1675.075798][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1675.590002][   T29] kauditd_printk_skb: 19 callbacks suppressed
[ 1675.590038][   T29] audit: type=1326 audit(1739939070.224:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18119 comm="syz.3.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1675.988440][   T29] audit: type=1326 audit(1739939070.234:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18119 comm="syz.3.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1676.096514][   T29] audit: type=1326 audit(1739939070.244:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18119 comm="syz.3.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1676.120455][   T29] audit: type=1326 audit(1739939070.244:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18119 comm="syz.3.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1676.167574][   T29] audit: type=1326 audit(1739939070.264:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18119 comm="syz.3.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1676.218395][   T29] audit: type=1326 audit(1739939070.264:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18119 comm="syz.3.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1676.281342][   T29] audit: type=1326 audit(1739939070.264:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18119 comm="syz.3.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1676.339996][   T29] audit: type=1326 audit(1739939070.304:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18119 comm="syz.3.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1676.369368][   T29] audit: type=1326 audit(1739939070.304:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18119 comm="syz.3.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1676.398513][   T29] audit: type=1326 audit(1739939070.304:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18119 comm="syz.3.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1676.574867][T14087] Bluetooth: hci4: link tx timeout
[ 1676.583990][T14087] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.608266][T11971] Bluetooth: hci4: link tx timeout
[ 1676.613906][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.627893][T11971] Bluetooth: hci4: link tx timeout
[ 1676.636166][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.647315][T11971] Bluetooth: hci4: link tx timeout
[ 1676.663901][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.678438][T11971] Bluetooth: hci4: link tx timeout
[ 1676.684342][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.692968][T11971] Bluetooth: hci4: link tx timeout
[ 1676.698834][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.709619][T11971] Bluetooth: hci4: link tx timeout
[ 1676.714883][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.726839][T11971] Bluetooth: hci4: link tx timeout
[ 1676.732403][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.742794][T11971] Bluetooth: hci4: link tx timeout
[ 1676.748279][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.757500][T11971] Bluetooth: hci4: link tx timeout
[ 1676.762957][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.773710][T11971] Bluetooth: hci4: link tx timeout
[ 1676.779316][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.789704][T11971] Bluetooth: hci4: link tx timeout
[ 1676.794993][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.804979][T11971] Bluetooth: hci4: link tx timeout
[ 1676.810792][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.826499][T11971] Bluetooth: hci4: link tx timeout
[ 1676.832113][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.852221][T11971] Bluetooth: hci4: link tx timeout
[ 1676.857525][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.871924][T11971] Bluetooth: hci4: link tx timeout
[ 1676.877530][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1676.887674][T11971] Bluetooth: hci4: link tx timeout
[ 1676.893105][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1677.061508][T11971] Bluetooth: hci4: link tx timeout
[ 1677.066795][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1677.076061][T11971] Bluetooth: hci4: link tx timeout
[ 1677.081782][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1677.094644][T11971] Bluetooth: hci4: link tx timeout
[ 1677.100085][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1677.110619][T11971] Bluetooth: hci4: link tx timeout
[ 1677.115879][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1677.130534][T11971] Bluetooth: hci4: link tx timeout
[ 1677.135801][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1677.212590][T11971] Bluetooth: hci4: link tx timeout
[ 1677.217986][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1677.232430][T11971] Bluetooth: hci4: link tx timeout
[ 1677.237914][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1677.258018][T11971] Bluetooth: hci4: link tx timeout
[ 1677.264079][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1677.274598][T11971] Bluetooth: hci4: link tx timeout
[ 1677.287393][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1677.295643][T11971] Bluetooth: hci4: link tx timeout
[ 1677.301199][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1677.310787][T11971] Bluetooth: hci4: link tx timeout
[ 1677.316027][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1677.337662][T11971] Bluetooth: hci4: link tx timeout
[ 1677.343008][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1677.369519][T11971] Bluetooth: hci4: link tx timeout
[ 1677.374793][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1677.530365][T11971] Bluetooth: hci4: link tx timeout
[ 1677.535592][T11971] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1678.663470][T17874] Bluetooth: hci4: command 0x0406 tx timeout
[ 1680.138527][T14087] Bluetooth: hci2: command 0x1003 tx timeout
[ 1680.543171][T11971] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1682.802624][   T29] kauditd_printk_skb: 20 callbacks suppressed
[ 1682.802682][   T29] audit: type=1326 audit(1739939077.654:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18185 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1682.802882][   T29] audit: type=1326 audit(1739939077.654:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18185 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1682.803339][   T29] audit: type=1326 audit(1739939077.664:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18185 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1682.803533][   T29] audit: type=1326 audit(1739939077.664:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18185 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1682.803800][   T29] audit: type=1326 audit(1739939077.664:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18185 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1682.804009][   T29] audit: type=1326 audit(1739939077.674:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18185 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1682.804430][   T29] audit: type=1326 audit(1739939077.674:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18185 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1682.804661][   T29] audit: type=1326 audit(1739939077.674:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18185 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1682.804884][   T29] audit: type=1326 audit(1739939077.674:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18185 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1682.805045][   T29] audit: type=1326 audit(1739939077.684:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18185 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1686.740064][T18250] 9pnet_virtio: no channels available for device syz
[ 1688.775416][T18268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2373'.
[ 1693.007406][T18299] 9pnet_virtio: no channels available for device syz
[ 1696.535483][T18328] trusted_key: encrypted_key: insufficient parameters specified
[ 1699.021384][   T29] kauditd_printk_skb: 17 callbacks suppressed
[ 1699.021406][   T29] audit: type=1326 audit(1739939093.314:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18345 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1699.290270][   T29] audit: type=1326 audit(1739939093.314:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18345 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1699.472233][   T29] audit: type=1326 audit(1739939093.314:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18345 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1699.622611][   T29] audit: type=1326 audit(1739939093.314:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18345 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1700.699692][   T29] audit: type=1326 audit(1739939093.314:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18345 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1700.742185][   T29] audit: type=1326 audit(1739939093.314:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18345 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1700.819821][   T29] audit: type=1326 audit(1739939093.314:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18345 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1700.889737][   T29] audit: type=1326 audit(1739939093.314:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18345 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1700.958423][   T29] audit: type=1326 audit(1739939093.314:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18345 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1701.036796][   T29] audit: type=1326 audit(1739939093.324:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18345 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1703.134749][T18390] 9pnet_virtio: no channels available for device syz
[ 1704.998432][   T29] kauditd_printk_skb: 16 callbacks suppressed
[ 1704.998453][   T29] audit: type=1326 audit(1739939099.194:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18408 comm="syz.5.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1705.268319][   T29] audit: type=1326 audit(1739939099.204:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18408 comm="syz.5.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1705.324399][T10368] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1705.368348][   T29] audit: type=1326 audit(1739939099.204:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18408 comm="syz.5.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1705.619726][   T29] audit: type=1326 audit(1739939099.204:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18408 comm="syz.5.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1705.668269][T10368] usb 7-1: Using ep0 maxpacket: 8
[ 1705.673473][   T29] audit: type=1326 audit(1739939099.204:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18408 comm="syz.5.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1705.726239][T10368] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1705.735654][T10368] usb 7-1: config 0 has no interface number 0
[ 1706.527335][   T29] audit: type=1326 audit(1739939099.204:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18408 comm="syz.5.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1706.574548][T10368] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1706.675056][T10368] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1706.675915][T10368] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1706.797120][T10368] usb 7-1: config 0 descriptor??
[ 1706.880861][   T29] audit: type=1326 audit(1739939099.204:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18408 comm="syz.5.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1706.881269][   T29] audit: type=1326 audit(1739939099.204:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18408 comm="syz.5.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1706.881606][   T29] audit: type=1326 audit(1739939099.204:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18408 comm="syz.5.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1706.882480][   T29] audit: type=1326 audit(1739939099.204:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18408 comm="syz.5.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1707.465622][T10368] usb 7-1: can't set config #0, error -71
[ 1707.466857][T10368] usb 7-1: USB disconnect, device number 6
[ 1708.431099][T18428] tty tty32: ldisc open failed (-12), clearing slot 31
[ 1714.601606][   T29] kauditd_printk_skb: 42 callbacks suppressed
[ 1714.601661][   T29] audit: type=1326 audit(1739939109.684:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1715.433100][   T29] audit: type=1326 audit(1739939109.714:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1715.494153][   T29] audit: type=1326 audit(1739939109.714:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1715.568277][   T29] audit: type=1326 audit(1739939109.714:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1716.142544][   T29] audit: type=1326 audit(1739939109.714:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1716.335171][   T29] audit: type=1326 audit(1739939109.724:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18500 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fedb738cde9 code=0x7ffc0000
[ 1720.991887][   T29] audit: type=1326 audit(1739939115.164:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18549 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1721.118241][   T29] audit: type=1326 audit(1739939115.164:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18549 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1721.244598][   T29] audit: type=1326 audit(1739939115.174:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18549 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1723.023337][T18577] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2441'.
[ 1727.913252][   T29] audit: type=1326 audit(1739939122.134:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18607 comm="syz.3.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1728.427631][T18612] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[ 1728.541900][   T29] audit: type=1326 audit(1739939122.134:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18607 comm="syz.3.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1728.564934][   T29] audit: type=1326 audit(1739939122.134:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18607 comm="syz.3.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1728.587003][   T29] audit: type=1326 audit(1739939122.134:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18607 comm="syz.3.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1728.674551][   T29] audit: type=1326 audit(1739939122.134:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18607 comm="syz.3.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1728.755224][   T29] audit: type=1326 audit(1739939122.144:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18607 comm="syz.3.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1728.835422][   T29] audit: type=1326 audit(1739939122.144:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18607 comm="syz.3.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1729.070498][   T29] audit: type=1326 audit(1739939122.144:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18607 comm="syz.3.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1729.116391][   T29] audit: type=1326 audit(1739939122.144:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18607 comm="syz.3.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1729.238337][T18622] netlink: 'syz.5.2456': attribute type 3 has an invalid length.
[ 1729.648275][   T29] audit: type=1326 audit(1739939122.144:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18607 comm="syz.3.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ed8cde9 code=0x7ffc0000
[ 1734.690182][T15223] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1735.026215][T15223] usb 8-1: Using ep0 maxpacket: 32
[ 1735.050312][T15223] usb 8-1: config 0 has an invalid interface number: 246 but max is 0
[ 1735.063601][T15223] usb 8-1: config 0 has no interface number 0
[ 1735.071169][T15223] usb 8-1: config 0 interface 246 has no altsetting 0
[ 1735.087043][T15223] usb 8-1: New USB device found, idVendor=0bb4, idProduct=0a95, bcdDevice=9a.4f
[ 1735.118240][T15223] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1735.132237][T15223] usb 8-1: Product: syz
[ 1735.136470][T15223] usb 8-1: Manufacturer: syz
[ 1735.166630][T15223] usb 8-1: SerialNumber: syz
[ 1735.177409][T15223] usb 8-1: config 0 descriptor??
[ 1735.193100][T15223] ipaq 8-1:0.246: PocketPC PDA converter detected
[ 1735.213909][T15223] usb 8-1: active config #0 != 1 ??
[ 1735.508601][T13181] usb 8-1: USB disconnect, device number 2
[ 1736.506868][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1736.516212][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1737.099384][T18690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2476'.
[ 1737.109240][T18690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1737.117578][T18690] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1737.363205][T18690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1737.371545][T18690] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1737.476626][T18690] bridge0: port 4(batadv0) entered disabled state
[ 1737.614219][T18690] batadv0 (unregistering): left allmulticast mode
[ 1737.623055][T18690] batadv0 (unregistering): left promiscuous mode
[ 1737.630738][T18690] bridge0: port 4(batadv0) entered disabled state
[ 1749.769536][ T6018] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1751.887020][T14087] Bluetooth: hci2: command 0x1003 tx timeout
[ 1751.888644][T11971] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1753.216604][T18794] netlink: 'syz.7.2507': attribute type 12 has an invalid length.
[ 1759.588553][ T3471] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1761.548551][T11971] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1767.859369][ T1140] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1769.799135][T14087] Bluetooth: hci2: command 0x1003 tx timeout
[ 1769.810100][T11971] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1772.522251][T18907] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2538'.
[ 1772.533921][T18907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1772.544182][T18907] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1772.842142][T18907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1772.850774][T18907] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1773.167585][T18907] bond0: (slave batadv0): Releasing backup interface
[ 1775.499546][ T6018] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1777.538628][T11971] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1780.360816][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2558'.
[ 1780.398452][T18959] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1780.427796][T18959] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1780.445544][T18959] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1780.464820][T18959] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1782.715137][T18965] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1782.780809][T18965] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1783.378941][T14087] Bluetooth: hci5: command 0x0406 tx timeout
[ 1784.167908][T18965] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1785.318018][T18965] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1785.332515][T18991] tty tty1: ldisc open failed (-12), clearing slot 0
[ 1785.367265][T18965] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1785.391832][T18965] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1785.477413][T14087] Bluetooth: hci5: command 0x0406 tx timeout
[ 1785.500319][T18965] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1785.522059][T18965] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1785.879152][T14087] Bluetooth: hci0: command 0x0405 tx timeout
[ 1786.077718][T18965] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1786.107060][T18965] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1787.378448][T14087] Bluetooth: hci1: command 0x0406 tx timeout
[ 1787.592027][T14087] Bluetooth: hci3: command 0x0406 tx timeout
[ 1787.798310][T13181] IPVS: starting estimator thread 0...
[ 1787.888399][T19022] IPVS: using max 19 ests per chain, 45600 per kthread
[ 1787.949470][T11971] Bluetooth: hci0: command 0x0405 tx timeout
[ 1788.098257][T11971] Bluetooth: hci4: command 0x0406 tx timeout
[ 1789.461564][T11971] Bluetooth: hci1: command 0x0406 tx timeout
[ 1789.619082][T11971] Bluetooth: hci3: command 0x0406 tx timeout
[ 1790.179007][T11971] Bluetooth: hci4: command 0x0406 tx timeout
[ 1790.258739][ T6638] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1790.693895][ T1140] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1792.259726][T14087] Bluetooth: hci4: command 0x0406 tx timeout
[ 1792.738347][T14087] Bluetooth: hci2: command 0x1003 tx timeout
[ 1792.747628][T11971] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1793.473227][T19085] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2595'.
[ 1793.777860][ T5895] IPVS: starting estimator thread 0...
[ 1793.878289][T19091] IPVS: using max 21 ests per chain, 50400 per kthread
[ 1793.890863][T19073] delete_channel: no stack
[ 1794.738664][T11276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1795.300807][T19110] 9pnet_virtio: no channels available for device syz
[ 1795.318009][T19110] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[ 1796.018555][ T6003] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1797.800557][   T29] kauditd_printk_skb: 16 callbacks suppressed
[ 1797.800577][   T29] audit: type=1800 audit(1739939192.884:335): pid=19134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2605" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[ 1797.950869][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1797.957443][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1797.985637][T19137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2606'.
[ 1800.797479][T19166] 9pnet_virtio: no channels available for device syz
[ 1800.814556][T19166] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[ 1801.150802][ T6638] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1801.639366][T19181] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2617'.
[ 1801.649645][T19181] unsupported nlmsg_type 40
[ 1804.456027][T11276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1804.467926][ T9620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1806.397170][T19211] 9pnet_virtio: no channels available for device syz
[ 1806.405584][T19211] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[ 1806.509707][T14087] Bluetooth: hci3: ACL packet for unknown connection handle 201
[ 1807.087398][ T3471] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1810.817177][T19253] 9pnet_virtio: no channels available for device 127.0.0.1
[ 1810.826637][T19253] ax25_connect(): syz.2.2643 uses autobind, please contact jreuter@yaina.de
[ 1811.555336][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1812.032072][T10368] IPVS: starting estimator thread 0...
[ 1812.043356][T11971]  non-paged memory
[ 1812.045117][ T3471] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1812.049917][T11971] list_del corruption, ffff88807b021800->next is LIST_POISON1 (dead000000000100)
[ 1812.070916][T11971] ------------[ cut here ]------------
[ 1812.076568][T11971] kernel BUG at lib/list_debug.c:58!
[ 1812.083284][T11971] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[ 1812.090295][T11971] CPU: 0 UID: 0 PID: 11971 Comm: kworker/u9:1 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0
[ 1812.101450][T11971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1812.111753][T11971] Workqueue: hci4 hci_conn_timeout
[ 1812.117008][T11971] RIP: 0010:__list_del_entry_valid_or_report+0x10f/0x190
[ 1812.124660][T11971] Code: c0 1c 80 8c 4c 89 fe e8 8f b7 32 fc 90 0f 0b 48 89 df e8 f4 a1 10 fd 48 c7 c7 20 1d 80 8c 4c 89 fe 48 89 da e8 72 b7 32 fc 90 <0f> 0b 48 89 df e8 d7 a1 10 fd 48 c7 c7 80 1d 80 8c 4c 89 fe 48 89
[ 1812.144933][T11971] RSP: 0018:ffffc9000bd2fa28 EFLAGS: 00010246
[ 1812.151342][T11971] RAX: 000000000000004e RBX: dead000000000100 RCX: 221112dfa4b95800
[ 1812.159886][T11971] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 1812.168072][T11971] RBP: ffff88807b021820 R08: ffffffff81a1102c R09: fffffbfff1d3a614
[ 1812.180166][T11971] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: dead000000000122
[ 1812.189139][T11971] R13: dffffc0000000000 R14: dead000000000100 R15: ffff88807b021800
[ 1812.197588][T11971] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 1812.206910][T11971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1812.213800][T11971] CR2: 000000110c3c5978 CR3: 000000002a31e000 CR4: 00000000003526f0
[ 1812.222311][T11971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1812.230338][T11971] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1812.239579][T11971] Call Trace:
[ 1812.242971][T11971]  <TASK>
[ 1812.245913][T11971]  ? __die_body+0x5f/0xb0
[ 1812.251306][T11971]  ? die+0x9e/0xc0
[ 1812.255069][T11971]  ? do_trap+0x15a/0x3a0
[ 1812.259357][T11971]  ? __list_del_entry_valid_or_report+0x10f/0x190
[ 1812.265803][T11971]  ? do_error_trap+0x1dc/0x2c0
[ 1812.270579][T11971]  ? __list_del_entry_valid_or_report+0x10f/0x190
[ 1812.277627][T11971]  ? __pfx_do_error_trap+0x10/0x10
[ 1812.282765][T11971]  ? report_bug+0x3e8/0x500
[ 1812.287335][T11971]  ? handle_invalid_op+0x34/0x40
[ 1812.292555][T11971]  ? __list_del_entry_valid_or_report+0x10f/0x190
[ 1812.301182][T11971]  ? exc_invalid_op+0x38/0x50
[ 1812.307389][T11971]  ? asm_exc_invalid_op+0x1a/0x20
[ 1812.312454][T11971]  ? __wake_up_klogd+0xcc/0x110
[ 1812.317329][T11971]  ? __list_del_entry_valid_or_report+0x10f/0x190
[ 1812.323787][T11971]  ? __list_del_entry_valid_or_report+0x10e/0x190
[ 1812.330258][T11971]  hci_cmd_sync_dequeue_once+0x262/0x360
[ 1812.335928][T11971]  hci_cancel_connect_sync+0xc3/0x120
[ 1812.341347][T11971]  hci_abort_conn+0x194/0x330
[ 1812.346062][T11971]  ? process_scheduled_works+0x9c6/0x18e0
[ 1812.351810][T11971]  ? process_scheduled_works+0x9c6/0x18e0
[ 1812.357563][T11971]  process_scheduled_works+0xabe/0x18e0
[ 1812.363133][T11971]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1812.369142][T11971]  ? assign_work+0x364/0x3d0
[ 1812.373766][T11971]  worker_thread+0x870/0xd30
[ 1812.378480][T11971]  ? __kthread_parkme+0x169/0x1d0
[ 1812.383705][T11971]  ? __pfx_worker_thread+0x10/0x10
[ 1812.389347][T11971]  kthread+0x7a9/0x920
[ 1812.394166][T11971]  ? __pfx_kthread+0x10/0x10
[ 1812.398914][T11971]  ? __pfx_worker_thread+0x10/0x10
[ 1812.404154][T11971]  ? __pfx_kthread+0x10/0x10
[ 1812.408961][T11971]  ? __pfx_kthread+0x10/0x10
[ 1812.413588][T11971]  ? __pfx_kthread+0x10/0x10
[ 1812.418205][T11971]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1812.423422][T11971]  ? lockdep_hardirqs_on+0x99/0x150
[ 1812.428643][T11971]  ? __pfx_kthread+0x10/0x10
[ 1812.433259][T11971]  ret_from_fork+0x4b/0x80
[ 1812.437688][T11971]  ? __pfx_kthread+0x10/0x10
[ 1812.442313][T11971]  ret_from_fork_asm+0x1a/0x30
[ 1812.447097][T11971]  </TASK>
[ 1812.450122][T11971] Modules linked in:
[ 1812.454530][T11971] ---[ end trace 0000000000000000 ]---
[ 1812.718490][T11971] RIP: 0010:__list_del_entry_valid_or_report+0x10f/0x190
[ 1812.725632][T11971] Code: c0 1c 80 8c 4c 89 fe e8 8f b7 32 fc 90 0f 0b 48 89 df e8 f4 a1 10 fd 48 c7 c7 20 1d 80 8c 4c 89 fe 48 89 da e8 72 b7 32 fc 90 <0f> 0b 48 89 df e8 d7 a1 10 fd 48 c7 c7 80 1d 80 8c 4c 89 fe 48 89
[ 1812.748185][T11971] RSP: 0018:ffffc9000bd2fa28 EFLAGS: 00010246
[ 1812.754326][T11971] RAX: 000000000000004e RBX: dead000000000100 RCX: 221112dfa4b95800
[ 1812.762422][T11971] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 1812.770508][T11971] RBP: ffff88807b021820 R08: ffffffff81a1102c R09: fffffbfff1d3a614
[ 1812.778576][T11971] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: dead000000000122
[ 1812.786585][T11971] R13: dffffc0000000000 R14: dead000000000100 R15: ffff88807b021800
[ 1812.794666][T11971] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 1812.803980][T11971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1812.810643][T11971] CR2: 00007f050ec6430a CR3: 00000000302d2000 CR4: 00000000003526f0
[ 1812.818869][T11971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1812.826902][T11971] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1812.835322][T11971] Kernel panic - not syncing: Fatal exception
[ 1812.841712][T11971] Kernel Offset: disabled
[ 1812.846043][T11971] Rebooting in 86400 seconds..